$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: fQbwIL/JSZsF4xK8Jy6qt6niJa4trn4L9BktIPG++eY= Subject key identifier: A6:DB:2B:AA:3E:04:FD:9B:41:68:48:81:CD:F7:9B:33:EE:62:F7:6D Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 74FD5A8EA5C01A22B5FD8049146473133E9CAEB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:28:29 +0000 Manifest this update: Mon 21 Sep 2026 05:23:29 +0000 Manifest next update: Tue 22 Sep 2026 08:53:29 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: y0eUfRit2cE/E2ps0dTfuFwau7LsbTFYOrn/ZVDcAWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fd:5a:8e:a5:c0:1a:22:b5:fd:80:49:14:64:73:13:3e:9c:ae:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Sep 21 05:23:29 2026 GMT Not After : Sep 22 08:53:29 2026 GMT Subject: CN=A6DB2BAA3E04FD9B41684881CDF79B33EE62F76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:71:b9:f3:0b:dc:10:50:13:c9:8e:27:e4: 09:01:d7:51:e7:b9:fd:a1:6f:3b:8d:90:f2:27:c5: dc:63:2c:41:18:64:34:5a:b2:06:51:2b:01:62:25: fd:3d:6e:13:06:3a:ee:75:6f:8c:7b:e3:a1:7d:b6: c2:8e:50:c7:3a:58:0a:f1:50:0a:d6:e5:5d:5f:b2: 6e:23:c9:e5:1e:ca:cd:6c:91:e4:d7:51:5e:3c:e8: 6d:ed:6a:9d:80:35:43:be:ce:5a:1c:03:4c:ba:86: 75:0c:9a:38:4e:c4:9b:b3:28:15:b3:83:5e:b4:3f: 86:96:2f:97:b1:a9:0c:90:46:ea:02:0c:b9:5e:65: 11:a7:00:33:8c:57:92:1e:ff:2a:da:66:6e:da:a6: 9c:fa:c7:c0:33:29:94:8a:fb:fa:f9:ad:6d:b2:f6: 2a:b1:4d:63:04:1b:49:27:03:1e:00:6c:8e:cf:c3: b4:95:9d:f5:64:3d:f5:79:02:9f:ad:39:b2:31:1d: ed:25:d0:3a:67:9c:7d:08:5d:ba:70:91:7f:cb:15: a5:ec:10:4c:a4:e2:2d:a9:8a:ff:5a:06:46:4e:e6: 44:1e:02:f5:19:26:04:f8:fd:61:07:6d:c2:7f:34: ce:9f:ac:70:a3:45:22:bd:f5:52:5b:3c:a1:54:82: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DB:2B:AA:3E:04:FD:9B:41:68:48:81:CD:F7:9B:33:EE:62:F7:6D X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:36:a9:d3:1f:2a:9a:15:79:b2:b0:39:ba:a1:02:a7:33: 79:b8:dd:ba:68:ad:65:d1:31:5f:0c:c2:77:b3:a3:df:b4:83: 48:c2:c2:64:41:34:7d:3a:df:06:d2:6a:8c:ca:96:b0:ac:6d: 83:a1:56:fe:6d:ff:04:a7:ea:11:57:2f:af:8e:fe:57:a7:2b: 50:27:c5:af:63:63:31:db:c9:17:b7:e1:9d:85:86:d6:b9:02: 7b:df:92:51:e6:ef:b9:b6:cb:5f:01:c3:9b:98:86:b4:dc:ed: 5b:8e:6d:66:9f:01:69:b4:cb:0d:b2:59:bd:19:c9:a4:21:82: ef:d6:57:4d:84:bb:29:4f:54:ea:84:86:14:bc:da:4f:14:17: c1:e1:12:18:ba:50:50:4e:47:9c:6a:80:f4:d9:c8:16:cf:de: 38:5b:f8:35:a1:62:46:1a:65:57:5c:46:4e:c8:7b:0a:a2:e8: e4:18:90:5c:5a:68:d5:c2:8c:d8:af:e5:9d:ad:67:b4:b4:6a: ca:88:20:71:da:f6:f6:71:d8:11:e2:97:89:28:14:d3:52:5a: cc:74:8a:c0:50:20:52:c7:c3:b1:e3:f5:dc:0e:4e:7f:d5:dc: 39:e9:ec:a1:6c:22:9e:5c:91:6e:ed:8a:66:fe:85:0e:79:87: b7:87:cc:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdP1ajqXAGiK1/YBJFGRzEz6crrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA5MjEwNTIzMjlaFw0yNjA5MjIwODUzMjlaMDMxMTAvBgNV BAMTKEE2REIyQkFBM0UwNEZEOUI0MTY4NDg4MUNERjc5QjMzRUU2MkY3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG03G58wvcEFATyY4n5AkB11Hn uf2hbzuNkPInxdxjLEEYZDRasgZRKwFiJf09bhMGOu51b4x746F9tsKOUMc6WArx UArW5V1fsm4jyeUeys1skeTXUV486G3tap2ANUO+zlocA0y6hnUMmjhOxJuzKBWz g160P4aWL5exqQyQRuoCDLleZRGnADOMV5Ie/yraZm7appz6x8AzKZSK+/r5rW2y 9iqxTWMEG0knAx4AbI7Pw7SVnfVkPfV5Ap+tObIxHe0l0DpnnH0IXbpwkX/LFaXs EEyk4i2piv9aBkZO5kQeAvUZJgT4/WEHbcJ/NM6frHCjRSK99VJbPKFUgjQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptsrqj4E/ZtBaEiBzfebM+5i920wHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7GNqnTHyqaFXmysDm6oQKnM3m43bporWXR MV8Mwnezo9+0g0jCwmRBNH063wbSaozKlrCsbYOhVv5t/wSn6hFXL6+O/lenK1An xa9jYzHbyRe34Z2Fhta5AnvfklHm77m2y18Bw5uYhrTc7VuObWafAWm0yw2yWb0Z yaQhgu/WV02EuylPVOqEhhS82k8UF8HhEhi6UFBOR5xqgPTZyBbP3jhb+DWhYkYa ZVdcRk7Iewqi6OQYkFxaaNXCjNiv5Z2tZ7S0asqIIHHa9vZx2BHil4koFNNSWsx0 isBQIFLHw7Hj9dwOTn/V3Dnp7KFsIp5ckW7timb+hQ55h7eHzFA= -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:17 2026 by rpki-client