$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft File: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft (raw, json) Hash identifier: Ot2Wgl8rNkQEfIC4sn6yyYqtgQZm6JX0UbZsplM+ojg= Subject key identifier: 45:E8:17:16:5A:9E:8B:80:CC:C6:08:1F:BD:BF:05:A7:D5:F9:F0:A9 Authority key identifier: 11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 Certificate issuer: /CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Certificate serial: 3AD8FB4D95139B9B859EB545AC5F11A8DAD1A02E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 01:32:00 +0000 Manifest this update: Sat 26 Sep 2026 01:27:00 +0000 Manifest next update: Sun 27 Sep 2026 01:55:00 +0000 Files and hashes: 1: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl (hash: uOR1FuxoYZlTftPU9aWuhiEyQveePjAWkem3ddDBzcg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d8:fb:4d:95:13:9b:9b:85:9e:b5:45:ac:5f:11:a8:da:d1:a0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Validity Not Before: Sep 26 01:27:00 2026 GMT Not After : Sep 27 01:55:00 2026 GMT Subject: CN=45E817165A9E8B80CCC6081FBDBF05A7D5F9F0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:9c:d4:75:c5:d6:17:31:e5:49:3c:b8:34: 82:d4:8f:7a:2e:53:e3:b1:f6:17:16:62:9e:2f:2c: 14:35:ea:7b:58:6b:2a:99:93:d4:4b:da:c3:20:f5: e6:4c:f2:34:52:0a:b0:0d:55:0f:9e:bb:8c:08:08: c8:4f:c7:a2:6d:19:aa:20:80:89:09:60:57:1f:7b: 5b:f0:be:23:62:f6:ff:53:21:c2:dc:ff:ef:43:ed: a1:54:8d:a7:3c:24:8a:71:c7:ae:29:43:82:1b:a6: 30:d3:e1:f8:f3:40:2d:43:30:2b:cc:e9:ae:b1:a8: bd:fd:93:5c:e5:69:3f:c3:b4:8f:2d:e2:76:56:e7: 9c:27:df:72:9c:81:77:29:0a:c9:de:8b:9c:9f:55: 94:4b:fb:cc:09:5d:37:a2:4b:3e:8c:b0:4e:d1:20: a6:89:4d:38:e9:71:99:14:58:8f:8b:8c:71:d4:39: 2f:d6:de:31:68:b0:ae:3a:8c:39:c5:f6:52:18:b8: 72:0c:e9:98:d8:d9:33:1c:de:b7:68:e7:aa:48:90: a9:e8:0a:b1:66:4a:55:f4:5b:ab:b2:10:bf:fd:0c: 1d:ca:f7:4a:55:9d:96:8b:9d:94:46:45:75:62:ce: d8:4a:ad:87:d1:2c:a5:8a:ad:f5:b8:80:ac:81:28: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E8:17:16:5A:9E:8B:80:CC:C6:08:1F:BD:BF:05:A7:D5:F9:F0:A9 X509v3 Authority Key Identifier: keyid:11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7c:42:47:2b:a3:33:8d:0a:97:dd:74:5a:ac:55:c4:cd:1e: f9:b7:01:e9:59:c0:97:13:4c:59:47:43:db:e1:bc:d1:94:21: 9f:2c:95:27:5a:52:59:67:12:9d:8c:6b:90:16:60:2f:4e:46: 01:64:7a:cb:a3:ed:7d:3a:e8:c2:7f:60:49:6c:9a:39:da:73: 79:3f:e7:90:d8:33:f9:92:64:95:6e:9f:67:d4:c8:a7:8e:84: 62:25:d1:8b:ea:b7:3e:a2:07:16:52:1a:79:a0:59:71:c5:0f: bc:79:52:48:54:b0:b7:7b:c1:61:1a:74:4c:f0:47:05:6d:80: 72:56:46:ac:fc:26:b4:11:24:cb:5d:5f:12:38:53:6e:d9:80: fa:ae:df:5e:c8:d2:0b:d7:bf:91:de:30:c4:f2:f0:98:06:1d: 3e:fc:84:3f:0b:b7:84:8c:66:81:70:3b:16:e5:b0:06:12:67: ca:bc:7c:b7:5a:9a:06:5e:5d:52:f2:2c:da:a2:1a:4f:93:8f: ac:ec:7d:5c:2b:9c:ab:76:5b:fd:ae:2d:e0:89:bf:9a:d2:ec: 66:4b:a6:34:22:dd:87:33:72:4c:b3:2a:54:d2:ff:81:72:4a: 41:0f:fb:32:8f:c7:31:94:d6:38:42:0f:99:f1:7d:9d:fa:63: d4:ce:48:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtj7TZUTm5uFnrVFrF8RqNrRoC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIw QjNCRUQwMzAeFw0yNjA5MjYwMTI3MDBaFw0yNjA5MjcwMTU1MDBaMDMxMTAvBgNV BAMTKDQ1RTgxNzE2NUE5RThCODBDQ0M2MDgxRkJEQkYwNUE3RDVGOUYwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQpzUdcXWFzHlSTy4NILUj3ou U+Ox9hcWYp4vLBQ16ntYayqZk9RL2sMg9eZM8jRSCrANVQ+eu4wICMhPx6JtGaog gIkJYFcfe1vwviNi9v9TIcLc/+9D7aFUjac8JIpxx64pQ4IbpjDT4fjzQC1DMCvM 6a6xqL39k1zlaT/DtI8t4nZW55wn33KcgXcpCsnei5yfVZRL+8wJXTeiSz6MsE7R IKaJTTjpcZkUWI+LjHHUOS/W3jFosK46jDnF9lIYuHIM6ZjY2TMc3rdo56pIkKno CrFmSlX0W6uyEL/9DB3K90pVnZaLnZRGRXVizthKrYfRLKWKrfW4gKyBKAwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURegXFlqei4DMxggfvb8Fp9X58KkwHwYDVR0j BBgwFoAUERZ2Awgqpo7HRYqq1h78Wws77QMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3NjVmMDYtYjRjOS00N2MxLWFkOWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMw ODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIwQjNCRUQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTE2NzYwMzA4MkFBNjhFQzc0NThBQUFENjFFRkM1QjBCM0JF RDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZD NUIwQjNCRUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI98QkcrozONCpfddFqsVcTNHvm3AelZwJcT TFlHQ9vhvNGUIZ8slSdaUllnEp2Ma5AWYC9ORgFkesuj7X066MJ/YElsmjnac3k/ 55DYM/mSZJVun2fUyKeOhGIl0Yvqtz6iBxZSGnmgWXHFD7x5UkhUsLd7wWEadEzw RwVtgHJWRqz8JrQRJMtdXxI4U27ZgPqu317I0gvXv5HeMMTy8JgGHT78hD8Lt4SM ZoFwOxblsAYSZ8q8fLdamgZeXVLyLNqiGk+Tj6zsfVwrnKt2W/2uLeCJv5rS7GZL pjQi3YczckyzKlTS/4FySkEP+zKPxzGU1jhCD5nxfZ36Y9TOSIg= -----END CERTIFICATE-----Generated at Sat Sep 26 10:57:58 2026 by rpki-client