$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json) Hash identifier: yHpVmW8mVyV6792IyoI+s6KbN4CanW66fT8Ic73pxr8= Subject key identifier: 02:AF:7D:C0:09:70:EB:FE:0B:E8:EC:09:A9:23:9C:45:C3:07:9A:DD Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Certificate serial: 4047E39E7C3590D739742110CB59CFF0C34C34B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 18:49:47 +0000 Manifest this update: Tue 22 Sep 2026 18:44:47 +0000 Manifest next update: Wed 23 Sep 2026 19:10:47 +0000 Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: FuvhqWMI4gFqjxZMkmCaswaZUWsRiPR50nwSR3wOXkA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 19:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:e3:9e:7c:35:90:d7:39:74:21:10:cb:59:cf:f0:c3:4c:34:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Validity Not Before: Sep 22 18:44:47 2026 GMT Not After : Sep 23 19:10:47 2026 GMT Subject: CN=02AF7DC00970EBFE0BE8EC09A9239C45C3079ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:e2:03:7d:ca:ab:75:48:49:90:79:3e:0b: 93:76:9d:3d:da:00:ac:b8:f4:41:c6:56:b0:b6:34: 0e:bd:f2:8d:d2:1b:97:fa:be:50:a3:fe:ab:e2:2b: 8e:50:24:d8:bd:df:f7:6e:51:61:db:01:22:14:1e: f7:f9:60:b8:09:73:43:78:c4:a3:c0:e9:57:19:f3: b2:4f:c2:6d:fb:f2:2d:97:b0:3f:65:0a:89:5b:31: 43:0f:b4:5a:34:ee:76:a7:30:40:da:e6:a3:50:16: 0a:e0:3c:71:ec:c5:74:c6:64:cd:6a:2c:ba:5f:04: 9f:58:8f:9b:18:1d:fc:20:e2:d6:9f:9b:f3:93:6c: f0:9c:0d:b9:3d:cb:67:36:04:31:fa:5a:d7:71:a3: 1f:69:0c:25:8c:1c:7f:c5:b7:f4:99:89:92:92:ce: 8d:cb:d0:44:16:d9:a0:8c:e3:45:36:d6:5b:bd:97: 55:e0:21:ce:9d:29:17:e2:cf:b6:83:ee:d6:3f:9b: a8:66:8c:40:d7:d6:1d:e2:bc:38:99:09:e8:ba:d5: 41:41:a0:ff:d0:ef:3c:2e:d7:3a:7c:8c:3c:8a:ed: ff:7c:70:c8:df:16:91:c8:2c:14:47:cf:a8:f4:90: 88:08:6e:28:a3:65:50:ee:ea:92:3a:65:b3:c1:58: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:7D:C0:09:70:EB:FE:0B:E8:EC:09:A9:23:9C:45:C3:07:9A:DD X509v3 Authority Key Identifier: keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:86:7b:78:ed:04:3e:e6:c3:08:55:53:1b:bf:de:61:f9:db: 86:8d:63:88:5c:e3:ed:46:74:fe:38:92:a1:da:31:89:99:9f: a3:a6:4f:65:36:e5:b0:45:18:f5:8a:e4:ab:77:31:bd:41:c2: c1:55:4d:00:ed:4d:57:39:ce:80:2a:7b:e6:11:b0:25:cc:a1: fd:df:b2:7e:18:79:b1:57:41:3d:fd:92:74:86:af:d1:bd:f6: de:d1:08:a0:e6:6e:a6:55:87:de:d4:cf:e5:fd:38:99:6c:f7: b4:cd:18:4d:1e:14:37:ed:72:29:00:92:4e:60:f9:4b:74:29: fe:42:3a:30:c8:6a:ef:b0:2a:9d:d3:79:1d:84:83:50:3f:d7: 5e:4e:14:8c:92:f5:41:ab:8f:db:e2:e9:b6:c1:03:e3:69:ec: b2:f9:02:47:3f:12:84:79:d7:4a:79:4a:7a:6b:0c:44:11:dc: e6:83:20:94:1c:c3:97:ea:83:31:e4:55:44:2a:37:a2:09:52: 82:49:9e:2f:88:5e:51:7d:fa:b4:6d:7d:58:b4:92:d5:73:a3: 9a:2e:51:fb:6b:19:52:e1:38:03:e3:75:fa:bc:89:c3:b4:0f: 8d:2f:c5:99:c6:bc:e6:20:50:36:cd:28:10:10:0f:8a:f8:1d: d5:fd:7d:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEfjnnw1kNc5dCEQy1nP8MNMNLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBB NjkwN0JENDAeFw0yNjA5MjIxODQ0NDdaFw0yNjA5MjMxOTEwNDdaMDMxMTAvBgNV BAMTKDAyQUY3REMwMDk3MEVCRkUwQkU4RUMwOUE5MjM5QzQ1QzMwNzlBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4eIDfcqrdUhJkHk+C5N2nT3a AKy49EHGVrC2NA698o3SG5f6vlCj/qviK45QJNi93/duUWHbASIUHvf5YLgJc0N4 xKPA6VcZ87JPwm378i2XsD9lColbMUMPtFo07nanMEDa5qNQFgrgPHHsxXTGZM1q LLpfBJ9Yj5sYHfwg4tafm/OTbPCcDbk9y2c2BDH6Wtdxox9pDCWMHH/Ft/SZiZKS zo3L0EQW2aCM40U21lu9l1XgIc6dKRfiz7aD7tY/m6hmjEDX1h3ivDiZCei61UFB oP/Q7zwu1zp8jDyK7f98cMjfFpHILBRHz6j0kIgIbiijZVDu6pI6ZbPBWOqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAq99wAlw6/4L6OwJqSOcRcMHmt0wHwYDVR0j BBgwFoAUWDYJgH5LqA0LVMmcMzt1kKaQe9QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjMjJjMmUtYWNhNy00MmYyLTliOGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3 RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBBNjkwN0JENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODM2MDk4MDdFNEJBODBEMEI1NEM5OUMzMzNCNzU5MEE2OTA3 QkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1 OTBBNjkwN0JENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuGe3jtBD7mwwhVUxu/3mH524aNY4hc4+1G dP44kqHaMYmZn6OmT2U25bBFGPWK5Kt3Mb1BwsFVTQDtTVc5zoAqe+YRsCXMof3f sn4YebFXQT39knSGr9G99t7RCKDmbqZVh97Uz+X9OJls97TNGE0eFDftcikAkk5g +Ut0Kf5COjDIau+wKp3TeR2Eg1A/115OFIyS9UGrj9vi6bbBA+Np7LL5Akc/EoR5 10p5SnprDEQR3OaDIJQcw5fqgzHkVUQqN6IJUoJJni+IXlF9+rRtfVi0ktVzo5ou UftrGVLhOAPjdfq8icO0D40vxZnGvOYgUDbNKBAQD4r4HdX9fb4= -----END CERTIFICATE-----Generated at Wed Sep 23 09:47:58 2026 by rpki-client