$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: P1lJS4KTaPqIIoyJsbLiGzCO8pSqS0uzItmy8By7n4E= Subject key identifier: BD:58:68:96:B6:03:13:2F:7C:E7:22:67:E1:EB:A9:E4:DB:1F:80:A0 Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 70F428A85E40057A5ECACC9DA91B5C4BAC610844 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: BE Signing time: Tue 22 Sep 2026 09:17:59 +0000 Manifest this update: Tue 22 Sep 2026 09:12:59 +0000 Manifest next update: Wed 23 Sep 2026 13:11:59 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: gkb8RaNLJZxr262tCusB05nAK32tb8VryldQcTKlhyU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f4:28:a8:5e:40:05:7a:5e:ca:cc:9d:a9:1b:5c:4b:ac:61:08:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: Sep 22 09:12:59 2026 GMT Not After : Sep 23 13:11:59 2026 GMT Subject: CN=BD586896B603132F7CE72267E1EBA9E4DB1F80A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:32:a5:85:ff:e2:03:84:d6:4d:ff:c2:26: b7:f9:24:a8:1f:52:77:48:53:f4:69:b0:19:ba:3b: bb:59:d9:db:7e:b1:d9:11:1f:41:8b:ec:7f:5d:8e: af:2d:3c:33:04:b7:1a:95:ed:5b:76:80:33:ad:9f: c0:17:20:4d:9f:c7:53:68:ab:f1:0b:9d:3c:b2:8b: d9:f0:74:71:21:43:6e:39:48:cc:15:07:ac:85:c7: 85:48:04:11:18:5f:53:cf:87:4c:3f:f8:81:14:60: 6f:34:9b:6e:d2:76:6b:74:e3:ae:2d:e8:37:13:97: 4f:31:96:1f:f0:9d:92:9a:47:bb:7a:37:7c:07:5c: 1f:d5:8e:29:77:4a:41:0d:2e:ab:d9:05:37:6d:b8: 09:ce:51:7d:70:b3:a1:83:5b:56:7a:7b:22:29:55: 9b:c0:0a:43:a2:a4:a6:d0:7b:94:d7:40:79:97:92: fc:8f:01:11:dd:68:fd:91:ac:43:20:60:a3:a3:fc: d5:3d:8a:a0:45:83:a7:c5:62:fd:21:b2:de:f0:e4: ba:c8:5c:07:cb:6c:4d:80:d0:ac:41:11:e5:a8:a3: 13:64:46:3f:4e:17:51:49:17:73:c3:6b:ad:19:9a: de:f2:b1:3b:11:c6:c4:b4:4b:bc:8e:ee:74:4e:6a: 88:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:58:68:96:B6:03:13:2F:7C:E7:22:67:E1:EB:A9:E4:DB:1F:80:A0 X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1c:15:1a:45:94:d5:e2:3d:ca:49:c5:c8:31:fa:18:4e:2e: ac:d3:a6:02:83:d3:09:31:9d:fc:e2:a3:fe:09:d4:73:9f:bd: 7d:ac:63:a2:ae:47:d0:96:c1:1d:b6:16:41:16:30:51:3f:d6: a6:fd:a6:8a:db:af:d2:56:fa:ae:44:2e:90:c9:b3:51:cf:69: d8:60:ff:f8:0b:3d:a6:47:f9:4b:5c:e4:1e:75:40:03:81:61: bc:95:64:c4:81:2c:1c:bb:67:a6:6c:c1:cc:da:21:3e:65:56: ec:78:de:7b:cf:c8:49:98:19:60:00:81:d3:8a:dc:17:fa:3c: 83:82:56:a1:11:a0:9b:c1:3b:2b:6d:24:93:f2:df:bc:e1:c7: c4:45:3b:92:23:d5:8a:c5:bb:8a:cb:3d:8a:5a:5b:aa:95:69: 31:24:2a:d5:0c:fe:10:c4:0e:b5:ff:80:0a:27:06:d2:72:b8: b2:dc:f1:af:de:4e:9b:ef:cd:16:9d:49:dc:8e:cc:c6:ad:dd: 03:f2:3f:90:d6:1f:09:91:9f:b2:eb:11:d9:76:6b:b0:36:f9: 54:2e:af:b8:d4:5c:f8:66:e5:51:1c:d2:d0:35:ed:90:e0:42: fa:4c:61:1e:33:96:de:ed:fe:13:9f:1f:c3:39:0f:b8:87:29: 5d:02:74:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPQoqF5ABXpeysydqRtcS6xhCEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA5MjIwOTEyNTlaFw0yNjA5MjMxMzExNTlaMDMxMTAvBgNV BAMTKEJENTg2ODk2QjYwMzEzMkY3Q0U3MjI2N0UxRUJBOUU0REIxRjgwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKjKlhf/iA4TWTf/CJrf5JKgf UndIU/RpsBm6O7tZ2dt+sdkRH0GL7H9djq8tPDMEtxqV7Vt2gDOtn8AXIE2fx1No q/ELnTyyi9nwdHEhQ245SMwVB6yFx4VIBBEYX1PPh0w/+IEUYG80m27Sdmt0464t 6DcTl08xlh/wnZKaR7t6N3wHXB/Vjil3SkENLqvZBTdtuAnOUX1ws6GDW1Z6eyIp VZvACkOipKbQe5TXQHmXkvyPARHdaP2RrEMgYKOj/NU9iqBFg6fFYv0hst7w5LrI XAfLbE2A0KxBEeWooxNkRj9OF1FJF3PDa60Zmt7ysTsRxsS0S7yO7nROaohrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvVholrYDEy985yJn4eup5NsfgKAwHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0cFRpFlNXiPcpJxcgx+hhOLqzTpgKD0wkx nfzio/4J1HOfvX2sY6KuR9CWwR22FkEWMFE/1qb9porbr9JW+q5ELpDJs1HPadhg //gLPaZH+Utc5B51QAOBYbyVZMSBLBy7Z6ZswczaIT5lVux43nvPyEmYGWAAgdOK 3Bf6PIOCVqERoJvBOyttJJPy37zhx8RFO5Ij1YrFu4rLPYpaW6qVaTEkKtUM/hDE DrX/gAonBtJyuLLc8a/eTpvvzRadSdyOzMat3QPyP5DWHwmRn7LrEdl2a7A2+VQu r7jUXPhm5VEc0tA17ZDgQvpMYR4zlt7t/hOfH8M5D7iHKV0CdKc= -----END CERTIFICATE-----Generated at Wed Sep 23 01:24:22 2026 by rpki-client