$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft File: 0565770E1E5C778DB06AD63B009F91D2D34746C1.mft (raw, json) Hash identifier: 8ebbtNXekkb9ZXK/Fel7iY+HEzl4fY8myO5i3QybGws= Subject key identifier: AB:6D:EF:14:94:7B:19:3E:4E:89:5D:51:DE:28:F9:03:92:DA:B8:C3 Authority key identifier: 05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1 Certificate issuer: /CN=0565770E1E5C778DB06AD63B009F91D2D34746C1 Certificate serial: 3E2BB19349D095D07BE57AEF0BE68BAC1C5C9C9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft Manifest number: BC Signing time: Sun 20 Sep 2026 01:49:22 +0000 Manifest this update: Sun 20 Sep 2026 01:44:22 +0000 Manifest next update: Mon 21 Sep 2026 02:11:22 +0000 Files and hashes: 1: 0565770E1E5C778DB06AD63B009F91D2D34746C1.crl (hash: OihvbyWLRPERnG2bK3CVFH29FTgOTw6s9EHIg29ZGYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 02:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2b:b1:93:49:d0:95:d0:7b:e5:7a:ef:0b:e6:8b:ac:1c:5c:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0565770E1E5C778DB06AD63B009F91D2D34746C1 Validity Not Before: Sep 20 01:44:22 2026 GMT Not After : Sep 21 02:11:22 2026 GMT Subject: CN=AB6DEF14947B193E4E895D51DE28F90392DAB8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:ea:1f:2e:63:b2:2c:42:22:fa:65:7b:32: 09:eb:59:ec:45:d6:b9:c0:11:0f:05:c8:38:5c:a1: 88:f4:a3:eb:b8:67:da:fb:82:0a:c0:15:c7:56:a1: 5a:bb:98:8c:a7:2b:39:35:b4:43:de:cd:dd:aa:3f: 70:cc:4e:d3:0c:9d:c8:48:5f:86:af:07:59:a8:77: 8b:86:d9:a4:88:0b:eb:01:bc:1a:56:75:fc:23:a3: 85:80:1e:88:93:78:ce:60:e0:bb:21:8c:36:3e:47: f0:5c:d3:18:a7:c8:57:59:ba:74:c6:6a:2a:6e:bd: 17:79:b1:49:ef:0f:f6:2f:33:64:91:c2:17:8e:52: 5f:9f:2e:22:89:19:6d:13:e3:84:52:59:5c:0e:53: 40:ef:65:53:e2:e6:3e:a6:1d:26:e0:aa:f6:e9:2a: a3:5e:8d:c0:30:cd:37:73:80:61:32:94:12:42:96: a8:25:aa:56:9c:b8:b3:c1:2d:5d:10:20:0c:9b:54: 91:a7:b5:42:00:c1:57:f5:bb:09:6c:c2:bb:65:a2: 77:6c:75:06:5e:41:68:90:39:96:a7:a3:a1:b8:1b: 35:da:80:47:30:95:23:58:68:c7:00:fa:c3:4c:9e: cc:59:d8:fd:88:b7:42:a4:c2:c8:48:5d:7b:02:bc: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:EF:14:94:7B:19:3E:4E:89:5D:51:DE:28:F9:03:92:DA:B8:C3 X509v3 Authority Key Identifier: keyid:05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4f:35:6e:4f:48:af:e8:5e:de:cd:5a:26:e2:37:0e:44:7c: d0:16:37:ad:af:48:fe:68:b8:e0:64:0e:30:92:3b:15:9a:6d: 63:19:76:98:2b:de:9b:75:f1:d8:21:c0:a9:9f:47:9c:20:bd: 12:2c:90:b7:8e:41:ff:7b:2f:5e:53:ad:a0:61:51:e5:9e:05: f6:ad:10:10:64:08:53:2b:78:bc:88:dd:4e:65:64:d7:c9:6c: de:34:7a:7a:90:c6:5a:73:35:7c:95:8f:31:2a:fb:59:1c:3f: 41:98:22:40:fd:47:8c:96:5b:ab:ba:ab:93:4d:20:94:f5:1a: 4b:8d:85:b6:bf:43:91:f2:e6:fa:f6:c2:da:e3:de:c8:d4:fe: 99:be:55:b3:79:98:14:de:1e:4c:14:6a:d1:24:23:a8:77:9d: db:16:22:34:3a:0a:5d:36:ad:20:ce:2c:51:27:1e:bd:9e:d1: 05:7f:07:45:08:a1:88:8b:27:9c:22:1e:75:3e:7b:55:77:41: 20:20:c1:23:61:83:5a:67:79:c0:fc:32:0d:7c:ea:fe:f0:5e: 6a:f6:24:2e:1c:d2:39:6f:f2:eb:03:a2:e3:7f:23:4c:0c:46: e4:ef:d0:18:5f:ea:6b:57:59:55:6f:c7:b2:16:ea:91:1f:80: 4e:a9:36:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiuxk0nQldB75XrvC+aLrBxcnJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NTc3MEUxRTVDNzc4REIwNkFENjNCMDA5RjkxRDJE MzQ3NDZDMTAeFw0yNjA5MjAwMTQ0MjJaFw0yNjA5MjEwMjExMjJaMDMxMTAvBgNV BAMTKEFCNkRFRjE0OTQ3QjE5M0U0RTg5NUQ1MURFMjhGOTAzOTJEQUI4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabOofLmOyLEIi+mV7MgnrWexF 1rnAEQ8FyDhcoYj0o+u4Z9r7ggrAFcdWoVq7mIynKzk1tEPezd2qP3DMTtMMnchI X4avB1mod4uG2aSIC+sBvBpWdfwjo4WAHoiTeM5g4LshjDY+R/Bc0xinyFdZunTG aipuvRd5sUnvD/YvM2SRwheOUl+fLiKJGW0T44RSWVwOU0DvZVPi5j6mHSbgqvbp KqNejcAwzTdzgGEylBJClqglqlacuLPBLV0QIAybVJGntUIAwVf1uwlswrtlonds dQZeQWiQOZano6G4GzXagEcwlSNYaMcA+sNMnsxZ2P2It0KkwshIXXsCvJn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq23vFJR7GT5OiV1R3ij5A5LauMMwHwYDVR0j BBgwFoAUBWV3Dh5cd42watY7AJ+R0tNHRsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDk1NTZhMzEtOTM3ZS00YWZlLWI5OWEtMjc0Yzk1MjRmOTgxLzAvMDU2NTc3MEUx RTVDNzc4REIwNkFENjNCMDA5RjkxRDJEMzQ3NDZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTY1NzcwRTFFNUM3NzhEQjA2QUQ2M0IwMDlGOTFEMkQzNDc0 NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvMDU2NTc3MEUxRTVDNzc4REIwNkFENjNCMDA5Rjkx RDJEMzQ3NDZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFPNW5PSK/oXt7NWibiNw5EfNAWN62vSP5o uOBkDjCSOxWabWMZdpgr3pt18dghwKmfR5wgvRIskLeOQf97L15TraBhUeWeBfat EBBkCFMreLyI3U5lZNfJbN40enqQxlpzNXyVjzEq+1kcP0GYIkD9R4yWW6u6q5NN IJT1GkuNhba/Q5Hy5vr2wtrj3sjU/pm+VbN5mBTeHkwUatEkI6h3ndsWIjQ6Cl02 rSDOLFEnHr2e0QV/B0UIoYiLJ5wiHnU+e1V3QSAgwSNhg1pnecD8Mg186v7wXmr2 JC4c0jlv8usDouN/I0wMRuTv0Bhf6mtXWVVvx7IW6pEfgE6pNjo= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:16 2026 by rpki-client