$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: zZ4mBpCwShkLh5EtLUA4FqRzLrqLsFrNF4x4NilNm5w= Subject key identifier: 4A:58:89:7F:16:85:C7:DC:E9:0A:48:32:4D:3E:9F:09:DA:2A:84:2F Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 34F491E00A5C4B6C81706CC14A42EB0DA3F040D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: BF Signing time: Tue 22 Sep 2026 17:53:41 +0000 Manifest this update: Tue 22 Sep 2026 17:48:41 +0000 Manifest next update: Wed 23 Sep 2026 20:56:41 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: m4jTcb8+2ZEXjvdbStlre9EdILEobAOk+P4twd32pqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 20:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f4:91:e0:0a:5c:4b:6c:81:70:6c:c1:4a:42:eb:0d:a3:f0:40:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Sep 22 17:48:41 2026 GMT Not After : Sep 23 20:56:41 2026 GMT Subject: CN=4A58897F1685C7DCE90A48324D3E9F09DA2A842F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:40:96:b4:a2:12:e2:b5:8c:f1:3b:03:4a: 31:59:4c:36:4b:20:d2:11:9f:7c:42:a9:93:29:08: 2b:6b:e5:cb:9d:2a:8e:13:b3:fb:c3:19:bb:42:38: 41:f8:ea:04:33:b8:73:fc:46:4b:46:c1:15:8f:18: fe:d1:02:a5:bf:8c:fd:de:6a:9b:01:cf:2f:d2:eb: e7:77:e1:7d:14:01:b5:56:54:ef:25:df:2e:8d:f7: ca:49:c8:47:e6:78:78:c7:92:74:0a:22:63:b9:f5: f4:f6:1d:ae:e2:12:2d:6a:af:d1:83:c0:69:04:0a: f4:4b:14:63:6c:49:ea:8b:b6:d8:68:0c:8f:c2:06: d8:44:84:6c:1c:cd:95:b8:bc:47:d1:e4:53:5d:61: af:e4:78:21:d1:19:7d:c4:8a:db:f8:37:d1:aa:f4: 6a:8e:3f:e7:b3:b8:05:bc:6f:d8:4d:50:68:5b:52: fd:86:0c:57:3b:4e:ab:4c:da:92:db:ba:67:a7:15: 72:1d:78:6c:17:ad:e2:22:c6:d9:78:3c:29:1b:fa: 1c:ad:5e:fb:12:8f:e6:c1:5d:0c:2a:74:7f:9a:1a: 88:cf:3a:cf:70:0b:9d:7f:32:70:93:9f:d1:07:75: 67:8d:e0:17:6e:c8:69:39:6a:0b:6b:eb:7e:f1:ba: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:89:7F:16:85:C7:DC:E9:0A:48:32:4D:3E:9F:09:DA:2A:84:2F X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d7:60:82:f8:3e:60:ce:58:50:27:d5:74:f3:8b:34:32:84: 11:ff:bf:38:b3:a7:bf:6e:98:28:ac:8d:b6:3d:47:8d:c1:a8: 75:62:f8:a5:d2:f2:db:0d:29:c6:ad:40:cc:10:75:e6:1e:ce: 46:2c:6c:20:4c:28:ce:7a:0c:13:da:09:59:e4:2a:cc:11:f2: 41:c4:a8:4b:f1:da:78:04:04:80:5d:09:66:f5:29:2b:31:df: 1b:7b:5e:84:4b:a8:1e:67:56:cc:34:8d:27:b7:0f:08:f3:31: 1f:b6:ac:c3:06:31:1d:11:f5:d3:7d:15:46:21:09:42:38:f0: 7b:9f:f1:0a:2c:83:c6:8e:6f:53:5b:2c:ec:8d:76:f0:3b:84: ae:15:5b:5d:a1:27:ac:13:09:29:e8:fa:9d:a5:ff:f5:1e:40: dd:37:a9:b1:33:90:26:80:5a:aa:8d:4f:cf:fd:21:3f:66:18: 94:ae:18:cf:d4:d8:51:d2:3c:87:fa:b8:1a:be:10:c6:68:24: 8c:b5:0e:5b:15:01:1f:a0:a1:6c:7d:52:ea:d8:f1:a2:73:80: 7a:d4:50:16:6c:95:3f:57:30:b4:f0:c8:18:1e:8e:e1:c1:4e: e9:d9:f7:c9:72:fb:56:a5:13:01:e3:f1:36:d5:00:a5:12:31: 8c:dd:a0:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPSR4ApcS2yBcGzBSkLrDaPwQNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA5MjIxNzQ4NDFaFw0yNjA5MjMyMDU2NDFaMDMxMTAvBgNV BAMTKDRBNTg4OTdGMTY4NUM3RENFOTBBNDgzMjREM0U5RjA5REEyQTg0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwkCWtKIS4rWM8TsDSjFZTDZL INIRn3xCqZMpCCtr5cudKo4Ts/vDGbtCOEH46gQzuHP8RktGwRWPGP7RAqW/jP3e apsBzy/S6+d34X0UAbVWVO8l3y6N98pJyEfmeHjHknQKImO59fT2Ha7iEi1qr9GD wGkECvRLFGNsSeqLtthoDI/CBthEhGwczZW4vEfR5FNdYa/keCHRGX3Eitv4N9Gq 9GqOP+ezuAW8b9hNUGhbUv2GDFc7TqtM2pLbumenFXIdeGwXreIixtl4PCkb+hyt XvsSj+bBXQwqdH+aGojPOs9wC51/MnCTn9EHdWeN4BduyGk5agtr637xur3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSliJfxaFx9zpCkgyTT6fCdoqhC8wHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHXYIL4PmDOWFAn1XTzizQyhBH/vzizp79u mCisjbY9R43BqHVi+KXS8tsNKcatQMwQdeYezkYsbCBMKM56DBPaCVnkKswR8kHE qEvx2ngEBIBdCWb1KSsx3xt7XoRLqB5nVsw0jSe3DwjzMR+2rMMGMR0R9dN9FUYh CUI48Huf8Qosg8aOb1NbLOyNdvA7hK4VW12hJ6wTCSno+p2l//UeQN03qbEzkCaA WqqNT8/9IT9mGJSuGM/U2FHSPIf6uBq+EMZoJIy1DlsVAR+goWx9UurY8aJzgHrU UBZslT9XMLTwyBgejuHBTunZ98ly+1alEwHj8TbVAKUSMYzdoLs= -----END CERTIFICATE-----Generated at Wed Sep 23 09:31:08 2026 by rpki-client