$ rpki-client -vvvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: X74r5zivgjroaEagER7QW1iUK/Bkl06rQWDpFQpCH1U= Subject key identifier: AF:19:91:4A:8D:FD:BA:42:99:7E:B2:80:32:33:0F:9A:60:8D:1F:55 Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 2A19E32C17022E0AF220E899FCE83BBD8C3A10FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 01:58:09 +0000 Manifest this update: Thu 24 Sep 2026 01:53:09 +0000 Manifest next update: Fri 25 Sep 2026 04:19:09 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: WTm8ZJAvDqLClDZ2qDzDoEuO8Wwaz5K3qrhPZr7stc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:19:e3:2c:17:02:2e:0a:f2:20:e8:99:fc:e8:3b:bd:8c:3a:10:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Sep 24 01:53:09 2026 GMT Not After : Sep 25 04:19:09 2026 GMT Subject: CN=AF19914A8DFDBA42997EB28032330F9A608D1F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:dd:34:82:07:a5:b8:d9:74:dd:a0:f2:95: df:3f:e2:90:85:d2:7c:2c:9e:1d:b6:6f:5f:71:2d: e3:b9:25:6c:c9:63:8c:30:44:50:65:46:6c:29:b0: 4c:9a:44:ac:25:5e:38:ea:2d:26:3c:a3:f9:0a:31: f9:42:8b:34:6f:d0:b9:f1:ac:ec:2a:96:ff:c2:c0: df:8d:e4:8d:5c:58:a1:f9:40:9a:2b:b7:fd:a4:bc: 09:af:42:b6:a2:b5:ac:6e:5f:17:d9:d8:d8:1b:c5: 50:ae:ee:fc:d8:87:a1:fb:b3:62:ba:7d:87:25:c6: ab:15:b2:d1:47:7c:52:a5:0c:3b:51:6d:99:0f:7c: 36:31:bf:7e:9e:fb:3b:c9:c5:62:7b:a7:17:52:e5: 41:b6:ee:ba:aa:fb:e8:80:52:46:65:79:bc:84:9e: 21:1b:18:d2:5a:c9:f9:77:22:de:77:b4:2e:9a:43: 0e:75:a3:c1:21:41:dc:2f:54:b5:7b:2f:62:c4:b5: cf:26:61:57:bb:8a:9c:f7:b2:3b:39:59:0e:c8:b9: 45:db:07:58:41:01:bb:1b:be:5a:e0:cb:0e:de:bc: 6e:97:86:02:fe:ff:b3:45:cb:fc:fc:c3:7c:08:98: e0:35:08:9f:74:c5:c9:cf:23:64:ba:5d:87:44:72: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:91:4A:8D:FD:BA:42:99:7E:B2:80:32:33:0F:9A:60:8D:1F:55 X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f4:5d:76:07:e3:73:48:59:53:b5:b1:28:e3:d9:f3:48:7c: 54:2a:7a:1f:2a:d7:ab:2f:23:ed:70:2d:69:04:64:56:c7:3c: 5d:f7:43:48:1c:94:38:2a:3a:0e:cd:be:ef:b3:a1:44:18:32: 1c:48:83:5f:bc:da:ff:61:68:d0:34:71:63:bf:57:b2:d8:ef: 14:ac:28:ec:60:91:19:a1:2c:ea:f9:68:6b:b1:49:24:25:aa: 55:16:4c:90:7a:b0:02:6b:c2:c4:9f:2d:ea:e9:a4:31:53:3f: 87:5c:05:3c:b0:60:d5:41:3a:43:5f:ac:84:c5:c3:74:a4:26: 74:a4:ff:1f:04:bd:1b:df:5c:0b:e7:89:28:00:4b:cc:de:93: 54:5f:5c:52:87:92:61:93:df:99:e1:b8:bd:57:79:cc:92:9e: e1:ee:61:a9:62:34:01:63:72:1d:a5:23:10:3d:46:20:59:59: fc:62:75:4a:d3:84:68:9f:0b:0a:8b:ad:23:e0:92:0c:53:e3: 35:49:f5:23:22:6d:2f:d4:62:25:5b:2b:0e:da:39:b8:83:92: f6:e6:6a:8d:4a:9d:88:36:0a:1c:ab:41:b6:26:48:e4:46:9d: 3f:bd:7e:ac:85:8f:84:94:2e:c5:2b:b7:23:67:27:36:43:0b: a8:a3:97:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhnjLBcCLgryIOiZ/Og7vYw6EP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA5MjQwMTUzMDlaFw0yNjA5MjUwNDE5MDlaMDMxMTAvBgNV BAMTKEFGMTk5MTRBOERGREJBNDI5OTdFQjI4MDMyMzMwRjlBNjA4RDFGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavt00ggeluNl03aDyld8/4pCF 0nwsnh22b19xLeO5JWzJY4wwRFBlRmwpsEyaRKwlXjjqLSY8o/kKMflCizRv0Lnx rOwqlv/CwN+N5I1cWKH5QJort/2kvAmvQraitaxuXxfZ2NgbxVCu7vzYh6H7s2K6 fYclxqsVstFHfFKlDDtRbZkPfDYxv36e+zvJxWJ7pxdS5UG27rqq++iAUkZlebyE niEbGNJayfl3It53tC6aQw51o8EhQdwvVLV7L2LEtc8mYVe7ipz3sjs5WQ7IuUXb B1hBAbsbvlrgyw7evG6XhgL+/7NFy/z8w3wImOA1CJ90xcnPI2S6XYdEckhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrxmRSo39ukKZfrKAMjMPmmCNH1UwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/0XXYH43NIWVO1sSjj2fNIfFQqeh8q16sv I+1wLWkEZFbHPF33Q0gclDgqOg7Nvu+zoUQYMhxIg1+82v9haNA0cWO/V7LY7xSs KOxgkRmhLOr5aGuxSSQlqlUWTJB6sAJrwsSfLerppDFTP4dcBTywYNVBOkNfrITF w3SkJnSk/x8EvRvfXAvniSgAS8zek1RfXFKHkmGT35nhuL1XecySnuHuYaliNAFj ch2lIxA9RiBZWfxidUrThGifCwqLrSPgkgxT4zVJ9SMibS/UYiVbKw7aObiDkvbm ao1KnYg2ChyrQbYmSORGnT+9fqyFj4SULsUrtyNnJzZDC6ijl5k= -----END CERTIFICATE-----Generated at Thu Sep 24 11:47:43 2026 by rpki-client