$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft File: 8452DA0E5C0E92F8DBB2845824D032330956238B.mft (raw, json) Hash identifier: mlBP0iCKQRQi3yUwb9/EeWOAxdgE0BbVZ0H29DcChAI= Subject key identifier: 11:D9:62:78:52:12:B7:02:29:7A:06:99:89:77:97:37:4E:E7:48:6B Authority key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Certificate issuer: /CN=8452DA0E5C0E92F8DBB2845824D032330956238B Certificate serial: 7B975AF07D9236C2C47992403734BD3D5B9D873E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:06:38 +0000 Manifest this update: Sun 20 Sep 2026 20:01:38 +0000 Manifest next update: Tue 22 Sep 2026 00:05:38 +0000 Files and hashes: 1: 8452DA0E5C0E92F8DBB2845824D032330956238B.crl (hash: eHIcku1YN7uSUuC98WU6essThRjMByMFe4LO387U7Z8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:97:5a:f0:7d:92:36:c2:c4:79:92:40:37:34:bd:3d:5b:9d:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Validity Not Before: Sep 20 20:01:38 2026 GMT Not After : Sep 22 00:05:38 2026 GMT Subject: CN=11D962785212B702297A0699897797374EE7486B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:a9:c2:a3:9b:c8:9b:16:c3:66:75:d9:fa: 2e:64:6d:ab:a3:21:87:e1:05:bc:c3:42:84:19:19: c1:83:f0:68:80:e5:af:df:df:b5:34:64:1f:c7:5a: e5:60:13:53:b0:0e:b5:9d:08:e8:58:f5:64:7a:9a: b5:1e:14:7f:b0:63:68:7f:8a:98:87:48:b9:f4:b9: f9:60:13:d4:9b:48:7b:d7:60:84:e5:d0:c1:48:b6: 05:bb:a0:3f:de:54:6e:ca:bb:c2:b9:e7:dd:d4:55: f0:01:4b:f2:6f:46:8a:c5:37:82:a3:3d:dd:24:f0: c7:48:6b:e3:52:3f:10:d6:f7:e2:c9:b8:26:ab:e0: f8:f3:da:25:67:0b:4f:bc:71:06:d9:60:85:15:ff: e0:db:6d:dd:12:19:cc:23:cf:22:f8:a9:20:f2:97: 69:9c:93:4c:43:60:ed:8b:6a:3c:e2:3d:00:13:82: 40:24:37:64:e1:d5:61:a9:70:7b:e6:7f:53:1c:d1: b9:b7:69:76:c6:2f:1e:e3:97:cd:de:ad:fa:6c:8c: 33:fd:b7:41:a4:72:3c:bd:9f:23:e2:71:44:7f:a9: b1:54:db:9c:ad:47:11:23:05:8d:e2:7a:6d:1e:c4: 07:78:3c:35:da:66:67:82:1d:a1:4d:42:9b:b3:31: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:62:78:52:12:B7:02:29:7A:06:99:89:77:97:37:4E:E7:48:6B X509v3 Authority Key Identifier: keyid:84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8f:c3:f0:8e:54:23:c2:d4:5b:4c:12:7e:33:67:5e:b8:34: 18:03:0c:6f:a5:09:8e:6a:65:aa:09:29:b0:92:90:90:5e:e1: 2d:6b:d8:23:07:90:84:6e:5f:3c:3a:3d:45:df:3e:5d:a3:83: b3:3a:99:49:82:a1:94:06:23:fd:23:5c:a8:08:85:32:90:d9: cd:21:06:0e:b0:aa:2d:2a:d2:7c:a8:e2:93:8b:41:10:f1:16: 3a:4e:10:c3:51:89:6c:26:5d:f1:fc:60:13:4c:2c:b5:c2:b1: 0a:7d:09:52:84:22:a4:73:4c:b6:4d:47:c1:0b:9c:4f:f3:ec: dd:4c:4a:7c:fb:71:ae:49:bb:76:6e:30:d3:5d:68:45:2a:a0: a3:44:8c:13:46:93:52:af:cf:4b:17:4e:4c:0e:96:22:9a:86: bd:f0:74:40:1c:a0:c6:84:77:0e:d6:78:64:bd:63:8f:b9:7b: 53:96:df:9e:ca:09:2b:ca:f9:78:39:d8:30:c1:22:6e:38:aa: 96:48:3c:62:a6:5c:ff:16:7b:e1:f5:43:03:8c:7c:b4:1a:a1: 8e:98:98:d8:29:ca:bf:93:d0:27:3c:53:38:0b:8d:93:37:85: 50:19:e7:3d:05:79:44:eb:da:62:5a:e1:53:3f:29:e5:16:9d: 13:61:58:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5da8H2SNsLEeZJANzS9PVudhz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMyMzMw OTU2MjM4QjAeFw0yNjA5MjAyMDAxMzhaFw0yNjA5MjIwMDA1MzhaMDMxMTAvBgNV BAMTKDExRDk2Mjc4NTIxMkI3MDIyOTdBMDY5OTg5Nzc5NzM3NEVFNzQ4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8I6nCo5vImxbDZnXZ+i5kbauj IYfhBbzDQoQZGcGD8GiA5a/f37U0ZB/HWuVgE1OwDrWdCOhY9WR6mrUeFH+wY2h/ ipiHSLn0uflgE9SbSHvXYITl0MFItgW7oD/eVG7Ku8K5593UVfABS/JvRorFN4Kj Pd0k8MdIa+NSPxDW9+LJuCar4Pjz2iVnC0+8cQbZYIUV/+Dbbd0SGcwjzyL4qSDy l2mck0xDYO2LajziPQATgkAkN2Th1WGpcHvmf1Mc0bm3aXbGLx7jl83erfpsjDP9 t0Gkcjy9nyPicUR/qbFU25ytRxEjBY3iem0exAd4PDXaZmeCHaFNQpuzMf+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEdlieFIStwIpegaZiXeXN07nSGswHwYDVR0j BBgwFoAUhFLaDlwOkvjbsoRYJNAyMwlWI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU5M2Y4NzYtZDUxZS00ODU3LWE2Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1 QzBFOTJGOERCQjI4NDU4MjREMDMyMzMwOTU2MjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDUyREEwRTVDMEU5MkY4REJCMjg0NTgyNEQwMzIzMzA5NTYy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMy MzMwOTU2MjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuPw/COVCPC1FtMEn4zZ164NBgDDG+lCY5q ZaoJKbCSkJBe4S1r2CMHkIRuXzw6PUXfPl2jg7M6mUmCoZQGI/0jXKgIhTKQ2c0h Bg6wqi0q0nyo4pOLQRDxFjpOEMNRiWwmXfH8YBNMLLXCsQp9CVKEIqRzTLZNR8EL nE/z7N1MSnz7ca5Ju3ZuMNNdaEUqoKNEjBNGk1Kvz0sXTkwOliKahr3wdEAcoMaE dw7WeGS9Y4+5e1OW357KCSvK+Xg52DDBIm44qpZIPGKmXP8We+H1QwOMfLQaoY6Y mNgpyr+T0Cc8UzgLjZM3hVAZ5z0FeUTr2mJa4VM/KeUWnRNhWGQ= -----END CERTIFICATE-----Generated at Mon Sep 21 09:55:46 2026 by rpki-client