$ rpki-client -vvvf rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft File: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft (raw, json) Hash identifier: RdxvrUZBbKJiXJQ2YuiGB56s2vnBHckIqqvDXWY2R9A= Subject key identifier: 7E:5A:65:77:0C:8A:88:47:BE:5C:8F:43:86:BD:AA:CB:DC:B6:94:2A Authority key identifier: 1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F Certificate issuer: /CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Certificate serial: 58ED3AB28E4C080BE1CD0A10C892D5EFA17DB6E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:32:54 +0000 Manifest this update: Wed 23 Sep 2026 13:27:54 +0000 Manifest next update: Thu 24 Sep 2026 14:38:54 +0000 Files and hashes: 1: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl (hash: bp0fydfXB0fFVOik+5G9hE0TBv56Ii3QTT4Uyj8hM9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ed:3a:b2:8e:4c:08:0b:e1:cd:0a:10:c8:92:d5:ef:a1:7d:b6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Validity Not Before: Sep 23 13:27:54 2026 GMT Not After : Sep 24 14:38:54 2026 GMT Subject: CN=7E5A65770C8A8847BE5C8F4386BDAACBDCB6942A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:ce:43:6d:3e:0b:f7:17:b3:0c:5f:ea:7c: 57:16:c6:45:85:f1:8b:1b:75:e3:82:02:01:b9:e5: b3:97:bf:9f:b0:0c:78:11:f9:08:33:07:d2:82:b0: b4:2b:74:b0:71:83:29:0b:5b:d6:63:e6:c6:83:79: 27:b4:e8:c4:ca:c2:d0:c7:3c:84:6c:d3:aa:2e:dd: 2f:31:ea:36:c9:7d:9f:6a:14:71:bd:dc:c1:70:87: 22:c6:94:97:e8:d5:1b:5d:83:5e:98:64:1e:a6:0d: 48:e1:64:3a:12:89:b9:8d:7a:33:b8:11:98:62:2f: 6a:07:a2:f7:d3:0c:92:59:c6:a0:97:79:e4:68:9c: 66:7f:43:d1:a5:75:ff:a0:0a:33:e3:89:fa:f0:3a: 50:35:17:a3:11:2f:8b:7e:2a:b1:2f:c1:45:35:2b: 6e:e3:35:9f:bd:3f:ad:e3:71:dd:47:63:4d:37:51: 0e:c6:ac:d4:27:ea:cf:e7:4e:d2:ff:83:85:fe:02: f1:01:5e:b8:05:64:8c:39:ea:43:c9:8b:c4:8b:1d: cd:35:3b:14:b5:16:a6:e5:d7:b7:8c:63:a3:bb:13: 55:d7:08:cf:37:2c:1d:b0:6f:00:29:eb:49:f7:13: b6:82:ff:48:45:29:c4:53:d7:b1:2c:1b:49:cd:c9: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5A:65:77:0C:8A:88:47:BE:5C:8F:43:86:BD:AA:CB:DC:B6:94:2A X509v3 Authority Key Identifier: keyid:1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:65:04:74:10:03:62:21:f1:9f:e2:3a:02:be:22:e7:6d:67: 10:6c:10:6b:e6:3d:75:48:3e:1b:c3:3e:8f:f9:4a:a1:8b:48: 82:9c:89:00:4d:11:a7:43:19:d4:f0:6c:06:fc:1e:a6:22:dd: 7b:db:2e:a5:4b:de:21:52:51:36:c1:c9:18:9c:b5:56:53:f9: 3d:03:b2:65:14:a6:a2:b8:83:7e:d8:6e:4e:6f:ae:9e:6c:d2: 0e:95:67:58:f5:2f:ea:e0:bd:98:cb:ed:29:6a:12:c5:c4:a7: fb:e7:37:30:67:11:32:57:3e:ab:b8:89:38:fd:b0:8e:4a:ca: a5:0b:56:5c:46:b4:ee:fa:30:bb:a7:e4:38:2a:11:ae:8e:f3: 3d:97:e7:41:c5:4d:1f:86:46:81:02:2d:e4:ff:91:46:dc:0d: 3f:52:8e:7f:3b:22:fc:50:9b:a7:f0:c4:55:db:2b:c1:61:9c: e5:3b:74:ef:e5:b7:6d:a4:14:e2:53:4b:bb:9d:b4:34:07:24: 32:df:93:20:2e:ec:45:aa:b9:69:30:09:78:4a:be:61:46:da: 6c:05:5f:2a:c6:98:14:87:4f:4d:b4:2e:54:5d:e2:01:ff:94: ac:cc:60:0e:1f:02:65:dd:e2:ee:97:06:ff:f9:b2:a7:12:20: 11:b4:ef:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO06so5MCAvhzQoQyJLV76F9tucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5 QjNCRDI3RjAeFw0yNjA5MjMxMzI3NTRaFw0yNjA5MjQxNDM4NTRaMDMxMTAvBgNV BAMTKDdFNUE2NTc3MEM4QTg4NDdCRTVDOEY0Mzg2QkRBQUNCRENCNjk0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVSs5DbT4L9xezDF/qfFcWxkWF 8YsbdeOCAgG55bOXv5+wDHgR+QgzB9KCsLQrdLBxgykLW9Zj5saDeSe06MTKwtDH PIRs06ou3S8x6jbJfZ9qFHG93MFwhyLGlJfo1Rtdg16YZB6mDUjhZDoSibmNejO4 EZhiL2oHovfTDJJZxqCXeeRonGZ/Q9Gldf+gCjPjifrwOlA1F6MRL4t+KrEvwUU1 K27jNZ+9P63jcd1HY003UQ7GrNQn6s/nTtL/g4X+AvEBXrgFZIw56kPJi8SLHc01 OxS1Fqbl17eMY6O7E1XXCM83LB2wbwAp60n3E7aC/0hFKcRT17EsG0nNyW7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUflpldwyKiEe+XI9Dhr2qy9y2lCowHwYDVR0j BBgwFoAUHu5vmUtKaIv2WpomqbjJC5s70n8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3ZWEwZTYtNDNlYS00MzFlLWEwMTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0 QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5QjNCRDI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVFNkY5OTRCNEE2ODhCRjY1QTlBMjZBOUI4QzkwQjlCM0JE MjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5 MEI5QjNCRDI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFlBHQQA2Ih8Z/iOgK+IudtZxBsEGvmPXVI PhvDPo/5SqGLSIKciQBNEadDGdTwbAb8HqYi3XvbLqVL3iFSUTbByRictVZT+T0D smUUpqK4g37Ybk5vrp5s0g6VZ1j1L+rgvZjL7SlqEsXEp/vnNzBnETJXPqu4iTj9 sI5KyqULVlxGtO76MLun5DgqEa6O8z2X50HFTR+GRoECLeT/kUbcDT9Sjn87IvxQ m6fwxFXbK8FhnOU7dO/lt22kFOJTS7udtDQHJDLfkyAu7EWquWkwCXhKvmFG2mwF XyrGmBSHT020LlRd4gH/lKzMYA4fAmXd4u6XBv/5sqcSIBG07+o= -----END CERTIFICATE-----Generated at Thu Sep 24 02:48:02 2026 by rpki-client