$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: UocpPhUiVyWBUuXFE4XNTeYK7ZiVnKDAjUFY8d1q5rQ= Subject key identifier: FF:C5:DF:D2:26:A2:63:06:92:0F:C6:93:DD:8D:86:91:AD:E4:73:8C Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 489F7493B6FF2110E31FF88E940D0D8CF9FE2934 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: BD Signing time: Mon 21 Sep 2026 10:24:26 +0000 Manifest this update: Mon 21 Sep 2026 10:19:26 +0000 Manifest next update: Tue 22 Sep 2026 11:46:26 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: ui7s32unPdFD7I6rX8QHa0Hq/vb0jIpkpBCrWo0v1bY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9f:74:93:b6:ff:21:10:e3:1f:f8:8e:94:0d:0d:8c:f9:fe:29:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Sep 21 10:19:26 2026 GMT Not After : Sep 22 11:46:26 2026 GMT Subject: CN=FFC5DFD226A26306920FC693DD8D8691ADE4738C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:64:85:b4:20:c0:ea:0c:62:89:04:f4:c2: 82:fa:7e:7f:4c:46:f4:4a:76:2f:76:1d:13:5b:3e: e2:ba:94:89:79:b5:87:d2:90:87:47:0f:fc:21:68: 55:fb:09:d2:99:92:71:e5:02:af:9a:3d:29:66:0c: c3:5c:af:cd:25:6a:82:9e:61:b6:f9:c7:5a:15:cb: 1d:45:78:76:ee:ae:10:00:72:c6:04:0b:b1:f6:ff: 09:dc:cd:71:eb:d9:91:3c:33:05:52:c6:70:4e:bc: 17:ad:b3:03:e2:b3:5d:84:e4:fb:bb:b7:5f:ee:22: e0:00:91:75:4f:43:82:64:a7:b1:da:b0:91:53:af: ac:00:b5:dc:da:2f:00:4e:97:08:0b:13:50:7b:79: be:22:49:28:c6:6a:ec:a6:52:89:b4:30:76:96:31: e1:88:97:3e:2b:03:2c:60:76:d5:11:ca:b7:3a:c1: fb:ea:b3:cf:f0:70:25:7b:1f:79:b8:10:d4:95:e6: 08:85:70:09:15:26:8e:1b:64:59:27:ec:f7:50:90: cf:b5:ca:23:61:3a:c3:d4:a9:fb:ed:6c:32:09:f3: 7f:c0:4c:b7:cf:ff:a0:04:fb:59:e9:f3:fb:6b:72: 20:2f:07:e4:da:f1:f0:41:cc:5d:be:3f:db:46:3a: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C5:DF:D2:26:A2:63:06:92:0F:C6:93:DD:8D:86:91:AD:E4:73:8C X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:49:ba:a7:89:73:73:53:06:e6:d1:0f:fd:7c:b7:89:39:02: 8b:a8:5d:74:6a:7e:67:b3:9f:7a:e2:96:5d:10:7b:2b:c7:ef: 0a:8b:6a:10:83:7f:a1:42:8e:21:86:39:a0:78:3f:7b:9b:8f: 7d:da:f2:34:ab:88:bf:53:a9:d8:92:c1:f3:cb:e4:3b:69:93: 6e:23:3d:78:82:61:b7:1a:ba:5a:d4:28:ea:bb:a0:8a:47:83: 1d:52:4d:d1:be:56:63:76:7a:ee:e9:d4:20:4b:8c:4e:70:f0: 5a:63:4e:d9:75:5f:91:bf:76:36:bb:a5:d3:6d:5c:bc:55:83: 26:7f:24:ef:53:dc:ce:35:76:cc:8a:2b:69:2d:1b:66:28:8e: 94:51:ce:69:36:96:3c:37:0a:bb:78:16:d9:63:30:c9:b0:cc: 11:6c:2e:4e:12:d2:d1:c4:69:bc:ef:5a:cc:8b:9c:47:d5:60: 48:c1:cd:b8:a8:03:f1:b5:21:e4:d3:d3:3b:36:d4:76:a9:77: 29:bb:13:67:b8:b7:d9:f6:7a:bb:47:41:09:52:b0:d1:88:81: f2:b0:19:ac:cf:f8:20:3c:24:51:0b:c4:56:15:b2:09:57:59: 92:c7:61:ff:0d:9b:a1:39:43:95:9a:e4:83:0e:d8:b4:71:e3: da:29:1b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJ90k7b/IRDjH/iOlA0NjPn+KTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA5MjExMDE5MjZaFw0yNjA5MjIxMTQ2MjZaMDMxMTAvBgNV BAMTKEZGQzVERkQyMjZBMjYzMDY5MjBGQzY5M0REOEQ4NjkxQURFNDczOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5mSFtCDA6gxiiQT0woL6fn9M RvRKdi92HRNbPuK6lIl5tYfSkIdHD/whaFX7CdKZknHlAq+aPSlmDMNcr80laoKe Ybb5x1oVyx1FeHburhAAcsYEC7H2/wnczXHr2ZE8MwVSxnBOvBetswPis12E5Pu7 t1/uIuAAkXVPQ4Jkp7HasJFTr6wAtdzaLwBOlwgLE1B7eb4iSSjGauymUom0MHaW MeGIlz4rAyxgdtURyrc6wfvqs8/wcCV7H3m4ENSV5giFcAkVJo4bZFkn7PdQkM+1 yiNhOsPUqfvtbDIJ83/ATLfP/6AE+1np8/trciAvB+Ta8fBBzF2+P9tGOnQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/8Xf0iaiYwaSD8aT3Y2Gka3kc4wwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlJuqeJc3NTBubRD/18t4k5AouoXXRqfmez n3rill0QeyvH7wqLahCDf6FCjiGGOaB4P3ubj33a8jSriL9TqdiSwfPL5Dtpk24j PXiCYbcaulrUKOq7oIpHgx1STdG+VmN2eu7p1CBLjE5w8FpjTtl1X5G/dja7pdNt XLxVgyZ/JO9T3M41dsyKK2ktG2YojpRRzmk2ljw3Crt4FtljMMmwzBFsLk4S0tHE abzvWsyLnEfVYEjBzbioA/G1IeTT0zs21Hapdym7E2e4t9n2ertHQQlSsNGIgfKw GazP+CA8JFELxFYVsglXWZLHYf8Nm6E5Q5Wa5IMO2LRx49opG3Y= -----END CERTIFICATE-----Generated at Mon Sep 21 16:58:27 2026 by rpki-client