$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: ejdJ/BnNsvuWVqMer/f2cTGFlm1mbmmrCHNMTfu1sG4= Subject key identifier: 8A:FC:61:0B:03:A9:75:9F:AA:D5:36:92:3B:A4:F8:27:18:C3:9F:9E Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 0A1D7A55FF443E552815A0D51522D2589A60C5C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:30:53 +0000 Manifest this update: Sun 20 Sep 2026 19:25:53 +0000 Manifest next update: Mon 21 Sep 2026 22:50:53 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: fyp9zwwxZTSeZMbGnpfYJ1FwY29mn2WS7DZqeGU5LTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1d:7a:55:ff:44:3e:55:28:15:a0:d5:15:22:d2:58:9a:60:c5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Sep 20 19:25:53 2026 GMT Not After : Sep 21 22:50:53 2026 GMT Subject: CN=8AFC610B03A9759FAAD536923BA4F82718C39F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:94:26:b9:fc:d2:18:0e:17:0e:90:81:7c: 6f:ce:e8:5d:ec:da:c4:ac:dc:2e:46:5f:2d:63:7b: bb:cc:3b:47:53:c5:06:19:69:e0:7b:10:b4:46:85: 13:34:95:6c:c7:ba:d8:84:ef:3c:f1:d9:e1:c6:8b: d6:98:64:bb:8d:23:c3:3f:42:f2:df:e6:61:6d:d9: 35:7f:b7:a9:2c:e3:e6:78:be:ee:47:e3:00:3c:80: 2b:44:b6:cb:5b:67:ec:28:a9:89:4f:61:d2:a3:5d: c1:df:96:d2:6d:d4:a9:94:9e:1f:e1:45:77:1d:5d: 1e:53:b0:7b:70:0a:d0:2b:e4:43:f7:03:2d:90:37: b5:d5:bf:a4:5d:43:c5:7c:36:87:b4:b4:67:03:40: ca:0b:37:1e:df:ac:62:57:4c:e3:84:66:d3:31:db: f7:40:d1:50:d4:05:f5:1e:2d:be:9b:a2:80:c2:83: 22:41:a6:18:c2:62:b4:48:93:21:1b:b7:c7:d8:d9: 79:22:4f:c5:00:7d:44:f4:67:70:9b:c8:b1:c5:45: 27:9b:9c:32:78:5e:99:68:6b:f1:a4:f2:7e:3c:49: 54:cd:21:39:b5:ab:68:13:48:e5:c4:df:0f:a9:06: 7e:77:4a:59:a4:10:44:be:5e:10:2a:d0:d0:e0:5a: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FC:61:0B:03:A9:75:9F:AA:D5:36:92:3B:A4:F8:27:18:C3:9F:9E X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:44:4d:c0:cb:35:fe:8b:6e:2c:f5:cb:db:0c:88:fd:e8:cd: 16:2c:ca:86:36:8c:f6:d8:42:72:e6:d0:a2:46:6f:06:25:0c: b0:05:93:bd:22:57:c9:65:51:3a:e9:5f:cd:65:fa:1c:8a:b2: ed:58:0e:6c:68:ab:30:db:24:e7:62:2c:84:6a:80:08:c9:f4: f9:50:c4:cb:d2:aa:25:59:11:04:f4:78:21:85:bc:fa:b4:30: 49:e3:f7:0e:c3:3a:93:e2:a9:b2:80:41:ae:ce:25:0f:de:57: 88:d2:42:4a:06:d3:33:55:33:8c:14:e4:4d:e5:f1:b3:31:bd: b8:56:18:83:cc:9e:97:3b:06:9d:55:ae:18:67:08:f6:f3:ff: 07:8f:43:1c:3d:98:da:89:56:9e:a8:de:76:65:e6:6e:0c:b7: fc:38:8e:3b:80:af:fe:77:09:cf:f0:3a:ac:63:56:73:49:d9: 74:c2:26:09:5b:46:d4:e9:49:41:ff:66:81:05:a9:dc:68:43: 19:ed:b8:27:8a:79:17:b9:31:b9:69:81:6e:fc:ab:65:be:dd: 62:bd:ef:7a:3d:f2:bc:70:53:5d:05:44:e3:27:d2:5c:2c:3c: d4:9f:77:27:80:a4:cb:7d:27:1d:c5:f3:e7:6d:99:e5:85:4f: 9d:9f:21:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCh16Vf9EPlUoFaDVFSLSWJpgxcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA5MjAxOTI1NTNaFw0yNjA5MjEyMjUwNTNaMDMxMTAvBgNV BAMTKDhBRkM2MTBCMDNBOTc1OUZBQUQ1MzY5MjNCQTRGODI3MThDMzlGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C5QmufzSGA4XDpCBfG/O6F3s 2sSs3C5GXy1je7vMO0dTxQYZaeB7ELRGhRM0lWzHutiE7zzx2eHGi9aYZLuNI8M/ QvLf5mFt2TV/t6ks4+Z4vu5H4wA8gCtEtstbZ+woqYlPYdKjXcHfltJt1KmUnh/h RXcdXR5TsHtwCtAr5EP3Ay2QN7XVv6RdQ8V8Noe0tGcDQMoLNx7frGJXTOOEZtMx 2/dA0VDUBfUeLb6booDCgyJBphjCYrRIkyEbt8fY2XkiT8UAfUT0Z3CbyLHFRSeb nDJ4Xploa/Gk8n48SVTNITm1q2gTSOXE3w+pBn53SlmkEES+XhAq0NDgWkovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivxhCwOpdZ+q1TaSO6T4JxjDn54wHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZETcDLNf6Lbiz1y9sMiP3ozRYsyoY2jPbY QnLm0KJGbwYlDLAFk70iV8llUTrpX81l+hyKsu1YDmxoqzDbJOdiLIRqgAjJ9PlQ xMvSqiVZEQT0eCGFvPq0MEnj9w7DOpPiqbKAQa7OJQ/eV4jSQkoG0zNVM4wU5E3l 8bMxvbhWGIPMnpc7Bp1VrhhnCPbz/wePQxw9mNqJVp6o3nZl5m4Mt/w4jjuAr/53 Cc/wOqxjVnNJ2XTCJglbRtTpSUH/ZoEFqdxoQxntuCeKeRe5MblpgW78q2W+3WK9 73o98rxwU10FROMn0lwsPNSfdyeApMt9Jx3F8+dtmeWFT52fIVw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:18:00 2026 by rpki-client