$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: 3wpiw4wdLcrdKZ9m+XwZku9gqB4nB8B4nnrT4yN9wfM= Subject key identifier: D3:31:20:0A:24:7F:9D:42:4B:6B:D7:97:A4:26:79:64:F1:8E:B1:CC Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 17A344C1FD3932CDA6DE5F205B8EBFEF942CEB24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:20:47 +0000 Manifest this update: Sun 20 Sep 2026 23:15:47 +0000 Manifest next update: Tue 22 Sep 2026 02:43:47 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: NLAlK016MXi5a2dnStMy2SDnxupic7WF2Wc3OsGnRQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a3:44:c1:fd:39:32:cd:a6:de:5f:20:5b:8e:bf:ef:94:2c:eb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: Sep 20 23:15:47 2026 GMT Not After : Sep 22 02:43:47 2026 GMT Subject: CN=D331200A247F9D424B6BD797A4267964F18EB1CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:5a:21:87:f4:4a:09:e3:dc:53:1c:4c:e3: b5:d0:dc:37:01:f0:43:a0:59:c7:4d:c6:0e:cd:66: 1d:12:7a:2e:a2:4c:1e:26:3d:b3:00:6e:5f:69:3a: 87:64:3f:de:b5:99:7b:cf:da:99:5b:92:7e:60:7f: 44:f5:a1:e1:82:78:82:c7:2e:df:ac:57:a7:a4:c8: 69:5f:ed:71:cb:b0:c6:44:e4:38:01:7d:db:db:d4: de:2c:5a:d2:60:0b:f2:8a:8c:3f:57:7a:47:6c:09: 00:e5:74:52:5a:bf:5b:f0:6b:78:fc:a1:7a:4e:c5: 0e:c9:12:8e:71:b6:e8:a7:fc:0c:94:3d:d2:65:37: 24:89:3c:d4:ca:9d:79:d2:2c:8f:7f:40:67:8d:38: ad:f2:4d:53:76:67:eb:47:ba:91:c1:8c:e1:53:7e: 1e:1f:a1:cc:d9:aa:1f:a1:e6:34:ff:39:63:5e:a8: 2c:c8:8a:4e:8a:c9:05:07:d8:94:c0:fa:0f:9b:41: 30:3f:73:ce:90:9d:ef:38:0d:8d:5f:14:55:c0:cb: 19:32:15:ca:50:7b:a6:07:1a:0f:77:35:64:f5:52: c3:d6:84:5f:88:d8:7b:9f:fb:3b:b1:94:c3:31:0a: 49:81:00:6b:f2:30:1d:db:27:94:90:dc:5d:d1:f9: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:20:0A:24:7F:9D:42:4B:6B:D7:97:A4:26:79:64:F1:8E:B1:CC X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:aa:5b:1f:86:5c:fe:bf:69:29:6a:1e:6a:e5:41:5d:e7:3a: 0a:ef:09:2e:b2:1c:01:48:03:6e:58:18:d7:26:00:70:aa:69: eb:17:29:08:c4:17:f3:f2:e3:58:07:85:78:07:36:38:2a:c2: 16:9a:6d:77:85:8d:7f:e0:85:6e:0a:1a:9f:20:b7:ac:33:df: bc:ac:9c:80:3a:4f:0b:7e:20:37:fe:18:62:dc:07:d9:54:3a: 0b:53:48:c7:c2:ad:e2:7e:f2:f0:cf:70:92:74:01:fb:9c:b5: 8b:96:2b:50:ee:06:1c:0b:d2:d6:ae:18:f5:f8:0a:89:4f:aa: 41:ed:ed:19:e6:5a:6a:e0:94:9c:f3:8b:ba:e5:e9:8a:b8:44: 80:f5:9f:49:2c:74:82:2e:47:c8:c0:70:85:53:1a:02:ee:69: a4:88:09:17:a7:82:b9:52:ba:a8:eb:f2:64:66:11:3a:7f:bb: 20:92:0b:9d:66:7a:80:80:ee:25:5c:84:f5:12:23:32:0a:09: 2b:2c:d4:2c:f5:aa:b4:4f:5f:45:6f:f5:e9:62:38:0d:97:c7: a0:25:98:9d:68:0c:9a:ee:2f:77:6b:09:1f:65:64:ad:97:cf: f3:06:1e:28:00:a2:0c:83:7b:11:95:91:f1:1c:21:25:70:ef: ba:5a:74:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6NEwf05Ms2m3l8gW46/75Qs6yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA5MjAyMzE1NDdaFw0yNjA5MjIwMjQzNDdaMDMxMTAvBgNV BAMTKEQzMzEyMDBBMjQ3RjlENDI0QjZCRDc5N0E0MjY3OTY0RjE4RUIxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsVohh/RKCePcUxxM47XQ3DcB 8EOgWcdNxg7NZh0Sei6iTB4mPbMAbl9pOodkP961mXvP2plbkn5gf0T1oeGCeILH Lt+sV6ekyGlf7XHLsMZE5DgBfdvb1N4sWtJgC/KKjD9XekdsCQDldFJav1vwa3j8 oXpOxQ7JEo5xtuin/AyUPdJlNySJPNTKnXnSLI9/QGeNOK3yTVN2Z+tHupHBjOFT fh4foczZqh+h5jT/OWNeqCzIik6KyQUH2JTA+g+bQTA/c86Qne84DY1fFFXAyxky FcpQe6YHGg93NWT1UsPWhF+I2Huf+zuxlMMxCkmBAGvyMB3bJ5SQ3F3R+dmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zEgCiR/nUJLa9eXpCZ5ZPGOscwwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKqWx+GXP6/aSlqHmrlQV3nOgrvCS6yHAFI A25YGNcmAHCqaesXKQjEF/Py41gHhXgHNjgqwhaabXeFjX/ghW4KGp8gt6wz37ys nIA6Twt+IDf+GGLcB9lUOgtTSMfCreJ+8vDPcJJ0AfuctYuWK1DuBhwL0tauGPX4 ColPqkHt7RnmWmrglJzzi7rl6Yq4RID1n0ksdIIuR8jAcIVTGgLuaaSICRengrlS uqjr8mRmETp/uyCSC51meoCA7iVchPUSIzIKCSss1Cz1qrRPX0Vv9eliOA2Xx6Al mJ1oDJruL3drCR9lZK2Xz/MGHigAogyDexGVkfEcISVw77padPQ= -----END CERTIFICATE-----Generated at Mon Sep 21 06:32:14 2026 by rpki-client