$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: XQk8MVA/m1jPmc5LwTCT73p6ohH4PBv/A9WYdzxE82A= Subject key identifier: 44:AC:F7:4D:A9:76:61:6F:2D:C0:27:E9:84:24:64:EB:41:3C:F6:90 Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 417EC991D0B85571DF77E851C449F8F41B9CDD88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:11:49 +0000 Manifest this update: Mon 21 Sep 2026 00:06:49 +0000 Manifest next update: Tue 22 Sep 2026 01:54:49 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: 4Ondsave+SykdwdjMwNK+7ox3vLJfQ9KCyq3aysxiU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7e:c9:91:d0:b8:55:71:df:77:e8:51:c4:49:f8:f4:1b:9c:dd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: Sep 21 00:06:49 2026 GMT Not After : Sep 22 01:54:49 2026 GMT Subject: CN=44ACF74DA976616F2DC027E9842464EB413CF690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:c2:7e:0c:4f:6c:ea:3c:e0:c7:21:1b:59: d9:ee:fc:e3:ec:cc:34:9a:21:99:4e:39:d2:74:49: 71:4d:80:0a:3c:80:47:5b:05:53:82:1b:48:90:c9: fb:49:8b:70:64:db:c3:48:c2:72:ee:a1:8c:3b:92: 1f:b4:de:d1:dc:85:04:40:e7:51:93:b5:ea:9c:b6: 9a:7c:81:de:aa:c7:09:08:de:3a:3d:7b:ed:a2:ad: 5f:58:b2:18:c6:87:9a:60:ae:67:88:f6:33:23:5d: f5:9a:6a:07:04:47:d4:94:56:2b:8e:9c:12:ec:25: 1f:c2:8f:ff:16:b5:5e:dc:54:79:ad:08:5c:d9:0d: 71:7b:c2:bb:6c:b5:ca:3b:5d:cc:5f:b3:7e:8c:f6: a8:1c:26:71:47:a7:a0:14:c9:3d:3e:fa:23:b3:f8: eb:39:08:aa:04:89:d5:6a:5c:fb:82:17:dc:b1:99: 16:c5:ea:29:c3:99:fa:87:1f:db:d1:23:af:0a:fd: 66:4c:fe:7a:68:7e:16:0e:62:09:92:d9:5b:3e:7d: ea:8b:28:8a:24:f3:ef:8b:0e:db:f3:60:2e:6e:bf: 3a:ae:d3:ed:c6:83:55:1a:c2:4a:60:5c:37:00:a4: 84:14:f9:34:a5:55:ad:78:9e:20:97:fd:ee:1d:4a: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:F7:4D:A9:76:61:6F:2D:C0:27:E9:84:24:64:EB:41:3C:F6:90 X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6d:d3:a1:ac:de:ed:ce:a1:02:24:45:ac:61:fb:54:97:2c: 7a:5b:27:81:67:3b:9f:51:6e:8d:78:38:0b:b2:98:3a:e3:c9: f4:92:03:df:c4:dc:2a:12:9d:15:30:f2:3f:1c:37:89:b1:f4: d7:1c:04:88:d1:4b:dc:22:2d:b6:a4:3e:28:09:8d:6c:bc:a0: cd:57:1a:f8:04:85:f8:77:fd:58:88:94:fc:a8:8b:60:54:19: ac:03:e4:cf:d0:a8:b5:e1:60:89:4c:25:05:4b:79:89:84:b2: 20:c8:d6:78:27:f9:00:0a:6e:92:ba:c0:22:96:82:7e:2a:cc: d0:3f:57:cd:7c:d4:f7:3b:f8:cc:a7:72:95:45:95:f8:43:4c: f0:54:66:5a:39:f8:d5:91:1d:bd:cf:69:5c:ba:0e:24:0a:03: c3:d0:0e:ae:d4:78:f2:c7:c1:41:49:f3:b8:80:54:fa:e6:50: 19:e2:f1:88:4a:14:dc:57:b8:53:eb:e4:f5:d3:68:b9:16:cb: f0:55:9c:a9:c4:d7:7c:3d:25:40:59:20:7e:73:ef:a9:d3:9c: 55:5e:b7:87:c4:64:3c:34:f6:c3:50:25:6b:ca:e6:47:0a:45: a0:97:e7:c0:f2:87:c8:df:6e:31:1c:d3:9e:14:39:c8:f3:03: 2a:12:d3:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX7JkdC4VXHfd+hRxEn49Buc3YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA5MjEwMDA2NDlaFw0yNjA5MjIwMTU0NDlaMDMxMTAvBgNV BAMTKDQ0QUNGNzREQTk3NjYxNkYyREMwMjdFOTg0MjQ2NEVCNDEzQ0Y2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJ8J+DE9s6jzgxyEbWdnu/OPs zDSaIZlOOdJ0SXFNgAo8gEdbBVOCG0iQyftJi3Bk28NIwnLuoYw7kh+03tHchQRA 51GTteqctpp8gd6qxwkI3jo9e+2irV9YshjGh5pgrmeI9jMjXfWaagcER9SUViuO nBLsJR/Cj/8WtV7cVHmtCFzZDXF7wrtstco7Xcxfs36M9qgcJnFHp6AUyT0++iOz +Os5CKoEidVqXPuCF9yxmRbF6inDmfqHH9vRI68K/WZM/npofhYOYgmS2Vs+feqL KIok8++LDtvzYC5uvzqu0+3Gg1UawkpgXDcApIQU+TSlVa14niCX/e4dSuZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKz3Tal2YW8twCfphCRk60E89pAwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVt06Gs3u3OoQIkRaxh+1SXLHpbJ4FnO59R bo14OAuymDrjyfSSA9/E3CoSnRUw8j8cN4mx9NccBIjRS9wiLbakPigJjWy8oM1X GvgEhfh3/ViIlPyoi2BUGawD5M/QqLXhYIlMJQVLeYmEsiDI1ngn+QAKbpK6wCKW gn4qzNA/V8181Pc7+MyncpVFlfhDTPBUZlo5+NWRHb3PaVy6DiQKA8PQDq7UePLH wUFJ87iAVPrmUBni8YhKFNxXuFPr5PXTaLkWy/BVnKnE13w9JUBZIH5z76nTnFVe t4fEZDw09sNQJWvK5kcKRaCX58Dyh8jfbjEc054UOcjzAyoS09M= -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:25 2026 by rpki-client