$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: 6fYZViGrx69jsLa59NRY0FZKD1T3k2oKgorjrubufC0= Subject key identifier: D3:90:85:C6:9D:CC:33:4A:B0:D5:52:80:01:7B:02:79:3A:6F:0D:D8 Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 1DB354FD9AD20E3EFE6D35ED6DBC3296193EF7D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: BE Signing time: Tue 22 Sep 2026 05:13:04 +0000 Manifest this update: Tue 22 Sep 2026 05:08:04 +0000 Manifest next update: Wed 23 Sep 2026 09:09:04 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: NrW5FMO9Ey25/Txvl9sjr2B6frDtiPh4mbhr68Xn9h4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b3:54:fd:9a:d2:0e:3e:fe:6d:35:ed:6d:bc:32:96:19:3e:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Sep 22 05:08:04 2026 GMT Not After : Sep 23 09:09:04 2026 GMT Subject: CN=D39085C69DCC334AB0D55280017B02793A6F0DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:26:bf:db:50:58:bf:d2:c7:d9:71:49:ba: d1:7f:91:25:be:87:fb:a0:41:fa:a7:0a:13:1d:20: 54:5e:86:95:ce:a1:56:a3:38:24:c8:1c:03:16:19: 02:b7:1c:ab:ea:76:03:9a:67:f8:54:c8:a2:80:09: 1e:ac:9f:73:18:4f:e4:76:fe:c5:33:c4:7b:7f:0f: b9:80:2e:df:27:67:94:24:65:73:1f:47:f6:36:a8: 68:b3:2a:3b:18:fb:85:07:d2:6d:0d:86:04:cd:36: 4b:08:01:16:2c:38:79:28:45:49:42:a1:46:5f:a7: 19:dc:73:73:f8:84:ac:38:24:c6:df:2d:e9:67:95: 01:76:d1:b6:b8:c9:19:02:e2:10:1f:76:07:e1:5f: 0e:58:26:38:ad:c4:8e:f7:35:8d:d2:1b:30:56:d7: 25:3a:b1:b5:26:b3:18:58:bb:06:0b:24:93:4f:8b: 95:5a:af:ef:c3:1a:7b:bb:d1:32:b2:68:15:66:60: 53:87:8f:72:35:2e:90:70:87:05:b8:ed:a8:d2:c8: 75:e2:17:22:1a:a7:c1:df:b4:1a:ae:18:28:28:fc: 95:7a:58:4e:42:bc:a9:31:de:94:05:71:d3:58:62: 9a:a8:e6:21:3a:b4:f6:8f:20:40:4b:1f:7b:4d:7d: 97:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:85:C6:9D:CC:33:4A:B0:D5:52:80:01:7B:02:79:3A:6F:0D:D8 X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:57:97:38:1e:ee:12:fa:a5:0b:9c:70:89:2c:6d:c9:62:6d: be:81:27:69:4a:ba:3f:f8:21:c4:bf:79:a6:90:b5:dc:61:03: 38:77:fd:95:00:4b:f0:8e:5c:bb:da:a0:b1:cd:99:5c:59:c2: 36:13:9c:f3:ac:47:2c:0b:95:c5:91:59:3b:10:f9:98:d1:9b: c8:a9:e9:44:00:95:de:f3:3a:51:c5:1b:cb:47:f5:f7:30:10: c3:1c:68:f9:21:00:3d:c6:b2:cf:40:92:06:8d:6e:41:0a:59: be:5b:15:4a:f8:ab:70:02:d0:03:c0:02:6c:14:1c:7d:ea:1d: dc:aa:8c:a1:9e:f1:76:68:b2:bb:ec:c8:25:99:14:d8:2c:11: 1f:13:d3:06:86:19:92:7c:2e:74:be:fd:71:bc:50:45:84:c0: ab:f1:f7:23:19:98:aa:61:45:ea:2d:86:3b:44:d2:53:23:8c: 13:93:c6:6b:2d:45:7d:8e:7a:91:94:7e:4d:85:31:48:58:d9: bb:2f:72:c6:10:b6:6b:44:5b:e5:17:3d:cc:ac:89:d2:dd:65: a6:08:c7:41:84:88:1f:f0:8d:fe:da:21:a7:fb:30:f5:32:92: e2:0c:69:29:1c:aa:0e:de:4a:d1:f9:ab:4d:ca:de:56:90:f5: 96:d4:96:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbNU/ZrSDj7+bTXtbbwylhk+99AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA5MjIwNTA4MDRaFw0yNjA5MjMwOTA5MDRaMDMxMTAvBgNV BAMTKEQzOTA4NUM2OURDQzMzNEFCMEQ1NTI4MDAxN0IwMjc5M0E2RjBERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zCa/21BYv9LH2XFJutF/kSW+ h/ugQfqnChMdIFRehpXOoVajOCTIHAMWGQK3HKvqdgOaZ/hUyKKACR6sn3MYT+R2 /sUzxHt/D7mALt8nZ5QkZXMfR/Y2qGizKjsY+4UH0m0NhgTNNksIARYsOHkoRUlC oUZfpxncc3P4hKw4JMbfLelnlQF20ba4yRkC4hAfdgfhXw5YJjitxI73NY3SGzBW 1yU6sbUmsxhYuwYLJJNPi5Var+/DGnu70TKyaBVmYFOHj3I1LpBwhwW47ajSyHXi FyIap8HftBquGCgo/JV6WE5CvKkx3pQFcdNYYpqo5iE6tPaPIEBLH3tNfZd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05CFxp3MM0qw1VKAAXsCeTpvDdgwHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1Xlzge7hL6pQuccIksbclibb6BJ2lKuj/4 IcS/eaaQtdxhAzh3/ZUAS/COXLvaoLHNmVxZwjYTnPOsRywLlcWRWTsQ+ZjRm8ip 6UQAld7zOlHFG8tH9fcwEMMcaPkhAD3Gss9AkgaNbkEKWb5bFUr4q3AC0APAAmwU HH3qHdyqjKGe8XZosrvsyCWZFNgsER8T0waGGZJ8LnS+/XG8UEWEwKvx9yMZmKph ReothjtE0lMjjBOTxmstRX2OepGUfk2FMUhY2bsvcsYQtmtEW+UXPcysidLdZaYI x0GEiB/wjf7aIaf7MPUykuIMaSkcqg7eStH5q03K3laQ9ZbUlnU= -----END CERTIFICATE-----Generated at Tue Sep 22 20:11:47 2026 by rpki-client