$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.mft File: 93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.mft (raw, json) Hash identifier: Ey7oqXLsrPcA/TVhVrXul/t3AyhzlrXNixF27gxwVzk= Subject key identifier: 86:19:19:2C:5D:67:D4:E0:6D:61:35:2E:3C:3A:8B:2C:43:73:4F:CC Authority key identifier: 93:A9:AE:70:AB:FA:A1:9F:DB:F9:2C:8C:F7:1C:53:07:9F:EF:43:38 Certificate issuer: /CN=93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338 Certificate serial: 5C9721E10C742E878DD81B2E885D6E786CA7E02D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:16:31 +0000 Manifest this update: Mon 21 Sep 2026 12:11:31 +0000 Manifest next update: Tue 22 Sep 2026 16:00:31 +0000 Files and hashes: 1: 93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.crl (hash: MQdIyPTV/M9HrAf/xGHAAfXGjeL8gkQZM0iB5kH3/04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.crl rsync://rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:97:21:e1:0c:74:2e:87:8d:d8:1b:2e:88:5d:6e:78:6c:a7:e0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338 Validity Not Before: Sep 21 12:11:31 2026 GMT Not After : Sep 22 16:00:31 2026 GMT Subject: CN=8619192C5D67D4E06D61352E3C3A8B2C43734FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:8d:22:15:21:27:72:bf:42:72:89:c6:7e: 3a:0a:0d:fe:f5:99:4d:06:2f:04:e2:a4:56:a9:9b: ac:4a:f3:78:51:cb:fd:b6:d7:34:d3:d8:33:51:15: 85:25:50:35:4e:84:cb:1c:18:71:c6:c0:86:b1:73: 96:07:2a:35:41:e8:a0:70:93:41:81:b8:8e:0c:02: 59:59:14:ef:3e:9e:7f:af:82:62:0c:1d:7e:51:2a: d9:bf:0d:80:dc:73:24:9c:7f:48:39:31:dc:35:1f: 26:ac:e5:cb:e2:fc:12:07:c3:f8:88:2a:8d:59:ab: 70:53:16:d9:cd:60:cb:78:14:5d:26:63:c0:78:24: df:b6:14:0f:5d:f3:8f:12:20:68:1d:f1:65:6b:a5: f7:eb:8b:fc:b4:c8:68:cc:ca:19:bb:50:29:44:b7: 9f:b4:28:3d:ef:e0:c5:93:75:e2:cf:90:65:ce:21: d6:e0:51:e0:61:6b:17:47:c7:3c:bc:2b:e9:58:30: 35:23:9b:e1:f5:39:3a:76:13:21:6f:09:54:d6:1d: 0b:f2:09:70:2a:5e:88:75:26:aa:2d:29:00:8a:dd: 03:8e:33:34:c3:79:89:5a:dc:fd:6d:fd:0a:b4:fb: fb:cf:c9:31:ea:39:c6:fb:aa:be:e4:07:4b:fe:75: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:19:2C:5D:67:D4:E0:6D:61:35:2E:3C:3A:8B:2C:43:73:4F:CC X509v3 Authority Key Identifier: keyid:93:A9:AE:70:AB:FA:A1:9F:DB:F9:2C:8C:F7:1C:53:07:9F:EF:43:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/93A9AE70ABFAA19FDBF92C8CF71C53079FEF4338.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7d:83:0f:9b:fb:52:c6:e1:2c:95:e5:02:97:0b:d1:80:e7: 43:b2:38:63:7d:84:4c:93:22:03:41:30:22:c8:c8:bd:1d:26: 22:e5:37:72:5d:9a:b4:e5:90:e9:0e:a0:e8:83:3a:b0:5c:e8: 52:c6:52:e7:a7:2e:c0:e0:ab:5f:58:60:b0:cd:8e:59:a3:f5: 34:36:12:74:ff:97:ca:03:7f:26:88:b8:d1:ae:54:f3:db:7c: 11:e2:19:2c:54:76:4d:fc:7e:17:82:fc:e2:92:f6:64:ed:5d: 9c:95:14:a7:b3:67:ac:38:25:a9:95:d0:c7:ea:b3:76:c3:08: 06:31:b4:fa:6b:12:33:41:6c:48:35:5d:6d:a3:63:c6:6a:6b: 0b:b4:43:07:fe:e7:9e:83:52:50:41:39:63:fd:d9:ed:ff:a3: 6a:c1:43:fe:91:fa:ca:0e:fe:09:0f:52:2c:3c:18:f9:4c:5f: 2c:4f:3c:b4:33:20:fe:ec:05:33:31:33:1d:24:3f:05:41:7c: cd:56:f3:22:f5:ee:d7:54:e8:9b:10:d4:db:18:dd:e1:60:a5: c5:88:f8:60:14:a0:eb:a4:9a:7e:a4:1d:36:3c:b8:cf:67:1d: a5:03:88:e2:71:d2:75:1b:b0:d2:cc:77:4f:57:8a:47:c8:2c: b9:dd:13:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJch4Qx0LoeN2BsuiF1ueGyn4C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNBOUFFNzBBQkZBQTE5RkRCRjkyQzhDRjcxQzUzMDc5 RkVGNDMzODAeFw0yNjA5MjExMjExMzFaFw0yNjA5MjIxNjAwMzFaMDMxMTAvBgNV BAMTKDg2MTkxOTJDNUQ2N0Q0RTA2RDYxMzUyRTNDM0E4QjJDNDM3MzRGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNaY0iFSEncr9CconGfjoKDf71 mU0GLwTipFapm6xK83hRy/221zTT2DNRFYUlUDVOhMscGHHGwIaxc5YHKjVB6KBw k0GBuI4MAllZFO8+nn+vgmIMHX5RKtm/DYDccyScf0g5Mdw1Hyas5cvi/BIHw/iI Ko1Zq3BTFtnNYMt4FF0mY8B4JN+2FA9d848SIGgd8WVrpffri/y0yGjMyhm7UClE t5+0KD3v4MWTdeLPkGXOIdbgUeBhaxdHxzy8K+lYMDUjm+H1OTp2EyFvCVTWHQvy CXAqXoh1JqotKQCK3QOOMzTDeYla3P1t/Qq0+/vPyTHqOcb7qr7kB0v+dR8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhhkZLF1n1OBtYTUuPDqLLENzT8wwHwYDVR0j BBgwFoAUk6mucKv6oZ/b+SyM9xxTB5/vQzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTEzNGJiNDgtOGE2NS00MjhiLTk0ZjEtOTk1YWVkNzJlY2I1LzAvOTNBOUFFNzBB QkZBQTE5RkRCRjkyQzhDRjcxQzUzMDc5RkVGNDMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85M0E5QUU3MEFCRkFBMTlGREJGOTJDOENGNzFDNTMwNzlGRUY0 MzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvOTNBOUFFNzBBQkZBQTE5RkRCRjkyQzhDRjcxQzUz MDc5RkVGNDMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd9gw+b+1LG4SyV5QKXC9GA50OyOGN9hEyT IgNBMCLIyL0dJiLlN3JdmrTlkOkOoOiDOrBc6FLGUuenLsDgq19YYLDNjlmj9TQ2 EnT/l8oDfyaIuNGuVPPbfBHiGSxUdk38fheC/OKS9mTtXZyVFKezZ6w4JamV0Mfq s3bDCAYxtPprEjNBbEg1XW2jY8Zqawu0Qwf+556DUlBBOWP92e3/o2rBQ/6R+soO /gkPUiw8GPlMXyxPPLQzIP7sBTMxMx0kPwVBfM1W8yL17tdU6JsQ1NsY3eFgpcWI +GAUoOukmn6kHTY8uM9nHaUDiOJx0nUbsNLMd09XikfILLndE8s= -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:21 2026 by rpki-client