$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft File: 13605A136F0092B1019BDEF64A0199270705BFA5.mft (raw, json) Hash identifier: 2mukRpNkiZRW+KcgmgTwGFuNNSgTb2BH7lfFJgDEXl0= Subject key identifier: 16:42:46:D1:D8:04:5F:B8:68:FC:1A:56:D1:D1:51:49:C7:6B:27:D0 Authority key identifier: 13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 Certificate issuer: /CN=13605A136F0092B1019BDEF64A0199270705BFA5 Certificate serial: 4C35D06293EF483448B8E1395B2EECC7A7BC46A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft Manifest number: D6 Signing time: Sat 10 Oct 2026 09:59:18 +0000 Manifest this update: Sat 10 Oct 2026 09:54:18 +0000 Manifest next update: Sun 11 Oct 2026 12:59:18 +0000 Files and hashes: 1: 13605A136F0092B1019BDEF64A0199270705BFA5.crl (hash: KV0duHV5uINQFgF3+DTTkGsf5IW9NyhJTVivprjKiic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:35:d0:62:93:ef:48:34:48:b8:e1:39:5b:2e:ec:c7:a7:bc:46:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13605A136F0092B1019BDEF64A0199270705BFA5 Validity Not Before: Oct 10 09:54:18 2026 GMT Not After : Oct 11 12:59:18 2026 GMT Subject: CN=164246D1D8045FB868FC1A56D1D15149C76B27D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:f7:5c:ef:28:97:11:6b:2f:0b:75:e5:2d: 6d:57:0a:80:01:e5:40:49:c4:5f:f2:c4:6a:3d:c8: 26:ee:f2:32:3e:2f:0f:64:5d:a4:b0:4b:6b:26:b7: 78:84:d0:6d:37:4a:52:bb:e9:19:2f:d1:f6:e9:87: c6:77:18:c6:fd:86:60:cb:d9:26:86:46:f6:eb:48: 19:2f:c9:0e:63:bc:61:c9:ab:95:3c:fb:22:56:53: 81:a6:04:f4:ce:db:46:48:24:86:b9:81:f2:65:19: d6:01:35:c2:d0:92:96:3c:58:d2:e0:66:18:bd:19: e1:47:f1:5b:0f:c0:0b:59:35:ac:c1:78:ed:3c:0f: ed:73:64:cd:55:67:6f:88:95:de:69:c3:41:df:46: 33:6e:cd:67:51:1e:d2:f1:8a:70:d8:05:de:b2:88: a0:2f:0a:fe:3c:fa:ac:c9:60:97:94:fe:bb:d0:9f: 36:c9:c8:ad:9b:df:b5:9a:83:e4:da:1c:ea:66:37: 44:d6:74:b2:58:b2:75:f4:5e:a8:69:e6:6c:3e:12: a9:29:b9:4d:e0:b0:2c:cc:5c:62:5d:49:87:a1:06: cd:f0:0e:28:8f:49:b9:30:60:60:da:19:38:28:52: d2:b0:66:e1:a0:b0:41:81:90:13:91:b0:60:6f:2e: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:46:D1:D8:04:5F:B8:68:FC:1A:56:D1:D1:51:49:C7:6B:27:D0 X509v3 Authority Key Identifier: keyid:13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ca:68:60:2c:a4:63:59:79:b0:a9:16:2d:d0:cb:ab:af:0d: 6d:ff:0b:85:73:5b:c8:72:0a:76:54:3a:60:61:3d:04:e0:08: 00:a4:2d:d1:06:06:6e:01:af:23:40:4f:8a:9e:30:f0:f8:aa: 5a:1e:2c:13:ea:7e:91:6b:43:d7:3f:8c:fb:13:36:83:9a:0a: 87:36:a3:1e:14:90:7d:79:e0:ef:d8:76:e2:1a:3b:3e:52:ee: 7c:60:b9:de:c5:88:e4:ad:31:1f:6a:03:0f:c1:b6:9d:9c:da: 24:db:91:8c:59:02:ff:8c:b8:7f:9e:10:c2:01:8f:58:26:d0: 2a:06:b2:35:6a:c5:7f:01:35:fc:25:fc:5f:74:fd:5b:47:ba: 95:f4:f4:f7:9c:8d:d9:e1:cb:17:a0:1c:14:c8:20:e7:6b:30: 83:b3:5d:8d:e7:f5:04:23:8b:95:8f:76:1f:73:e3:01:94:6f: 5e:fd:45:a2:40:56:54:0a:10:47:fc:dd:c5:51:40:a6:84:8f: 2b:c2:eb:7f:ab:42:a6:95:d5:0c:4b:5d:ec:30:45:a9:00:8c: e9:11:f1:73:d6:5f:f8:27:72:fc:84:62:af:67:06:f6:24:c9: 71:c8:d4:c7:75:d4:cb:1f:46:8b:6c:c5:a6:0a:54:d8:71:83: 6f:c6:2a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDXQYpPvSDRIuOE5Wy7sx6e8RqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5Mjcw NzA1QkZBNTAeFw0yNjEwMTAwOTU0MThaFw0yNjEwMTExMjU5MThaMDMxMTAvBgNV BAMTKDE2NDI0NkQxRDgwNDVGQjg2OEZDMUE1NkQxRDE1MTQ5Qzc2QjI3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgI/dc7yiXEWsvC3XlLW1XCoAB 5UBJxF/yxGo9yCbu8jI+Lw9kXaSwS2smt3iE0G03SlK76Rkv0fbph8Z3GMb9hmDL 2SaGRvbrSBkvyQ5jvGHJq5U8+yJWU4GmBPTO20ZIJIa5gfJlGdYBNcLQkpY8WNLg Zhi9GeFH8VsPwAtZNazBeO08D+1zZM1VZ2+Ild5pw0HfRjNuzWdRHtLxinDYBd6y iKAvCv48+qzJYJeU/rvQnzbJyK2b37Wag+TaHOpmN0TWdLJYsnX0Xqhp5mw+Eqkp uU3gsCzMXGJdSYehBs3wDiiPSbkwYGDaGTgoUtKwZuGgsEGBkBORsGBvLg4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkJG0dgEX7ho/BpW0dFRScdrJ9AwHwYDVR0j BBgwFoAUE2BaE28AkrEBm972SgGZJwcFv6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyNjc4MjUtNTFhZi00NTZkLWI0NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2 RjAwOTJCMTAxOUJERUY2NEEwMTk5MjcwNzA1QkZBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzYwNUExMzZGMDA5MkIxMDE5QkRFRjY0QTAxOTkyNzA3MDVC RkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5 MjcwNzA1QkZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/KaGAspGNZebCpFi3Qy6uvDW3/C4VzW8hy CnZUOmBhPQTgCACkLdEGBm4BryNAT4qeMPD4qloeLBPqfpFrQ9c/jPsTNoOaCoc2 ox4UkH154O/YduIaOz5S7nxgud7FiOStMR9qAw/Btp2c2iTbkYxZAv+MuH+eEMIB j1gm0CoGsjVqxX8BNfwl/F90/VtHupX09PecjdnhyxegHBTIIOdrMIOzXY3n9QQj i5WPdh9z4wGUb179RaJAVlQKEEf83cVRQKaEjyvC63+rQqaV1QxLXewwRakAjOkR 8XPWX/gncvyEYq9nBvYkyXHI1Md11MsfRotsxaYKVNhxg2/GKpk= -----END CERTIFICATE-----Generated at Sat Oct 10 14:08:21 2026 by rpki-client