$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft File: 0364E5E1741E1D920A287362374F4F8FC981377D.mft (raw, json) Hash identifier: +idyHIrR9HTTR8E3Hso1/C12XlLZF29xnvXdxNCMrJI= Subject key identifier: 8F:37:85:69:B8:31:14:F1:11:42:27:FB:C2:BD:5F:D7:A8:80:1F:67 Authority key identifier: 03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D Certificate issuer: /CN=0364E5E1741E1D920A287362374F4F8FC981377D Certificate serial: 5D2FE83F0D38EE5FE8D3CE3812E3333BF73F3489 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:06:36 +0000 Manifest this update: Mon 21 Sep 2026 16:01:36 +0000 Manifest next update: Tue 22 Sep 2026 17:53:36 +0000 Files and hashes: 1: 0364E5E1741E1D920A287362374F4F8FC981377D.crl (hash: reTm+O18eS9GDODX3lgQ/9pcyNba1X14U8u1FVs+yuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2f:e8:3f:0d:38:ee:5f:e8:d3:ce:38:12:e3:33:3b:f7:3f:34:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0364E5E1741E1D920A287362374F4F8FC981377D Validity Not Before: Sep 21 16:01:36 2026 GMT Not After : Sep 22 17:53:36 2026 GMT Subject: CN=8F378569B83114F1114227FBC2BD5FD7A8801F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:22:e1:7b:b9:f3:29:98:a9:15:f4:03:f2: 43:c9:00:4b:52:7f:d2:43:fa:80:d4:57:da:1b:64: c3:64:6a:42:4c:61:a5:36:9a:f5:ff:3c:ff:a2:b9: 9e:9a:cc:96:f6:ad:b9:49:da:ac:7b:e9:df:c0:2b: 3c:d6:02:79:ba:3c:aa:43:13:18:a0:b6:60:94:d4: 74:96:a2:b8:c9:a7:60:86:89:72:66:ac:16:0c:68: 89:2a:35:1f:dd:12:eb:03:58:c2:1d:43:1f:81:59: 28:b0:b5:cc:d3:0e:c4:f8:fa:9c:75:77:6e:95:74: 89:82:a1:63:54:54:f5:67:f3:f0:81:29:67:c7:4a: f8:45:d8:0c:02:9f:73:41:6d:e2:6c:e5:65:8d:95: a3:49:a0:70:4d:44:74:74:ad:c5:ab:93:26:e6:bf: 79:3c:aa:6c:c3:73:fe:51:c8:31:76:8c:52:d4:49: 0c:bb:e6:d4:eb:16:80:4f:7c:9a:cd:2f:45:fc:00: 13:27:c8:50:79:0f:85:5f:60:a9:a9:99:f1:59:43: 96:85:9b:4f:1c:d0:f5:a6:5c:e6:d4:d0:ce:8d:05: f5:7f:6a:13:c1:1c:c0:3a:fa:2e:76:52:a7:66:83: 93:49:3c:c9:97:51:c6:37:e8:7e:b7:5c:6c:d5:9e: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:85:69:B8:31:14:F1:11:42:27:FB:C2:BD:5F:D7:A8:80:1F:67 X509v3 Authority Key Identifier: keyid:03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:19:6e:0a:15:10:7c:cd:be:d5:2f:30:55:cd:e2:eb:96:a5: 82:53:46:47:33:8a:11:36:64:b9:44:f1:c2:79:73:4c:ce:62: 59:3d:99:d1:c5:ea:20:b2:d2:ba:c3:4c:92:23:94:dc:98:69: 3e:ce:8e:36:2a:04:a4:2c:53:a9:a5:b6:3c:0c:91:37:f2:6d: ee:ad:24:08:eb:dd:4e:1e:62:79:59:b4:c2:20:d7:76:17:0f: d1:31:f1:89:cb:b6:50:0a:78:8c:55:03:b6:68:76:46:c3:86: 54:62:68:94:8a:87:38:d3:96:b5:c1:1c:e8:57:de:c3:e9:e8: 95:37:18:a0:26:ec:f4:38:aa:aa:36:4a:c0:cb:79:87:06:31: 80:f9:4c:98:68:4d:ea:35:17:d4:2e:d3:96:c1:0e:1f:03:1d: df:3e:85:b8:22:6a:d7:75:7b:a7:ef:d0:ae:69:0f:c8:2d:46: 91:3a:99:6a:76:bb:dc:7d:63:65:1b:c9:3d:8e:32:a6:18:29: 7e:17:cd:ba:53:29:f7:73:95:02:f9:da:6a:c1:2b:ae:ad:84: 74:56:68:9b:25:96:5f:0d:f2:f8:c0:10:08:52:e7:2e:a6:04: 74:25:ba:cc:dc:ee:31:61:94:81:07:03:50:69:b8:88:73:72: 83:4c:8a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXS/oPw047l/o0844EuMzO/c/NIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZD OTgxMzc3RDAeFw0yNjA5MjExNjAxMzZaFw0yNjA5MjIxNzUzMzZaMDMxMTAvBgNV BAMTKDhGMzc4NTY5QjgzMTE0RjExMTQyMjdGQkMyQkQ1RkQ3QTg4MDFGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMCLhe7nzKZipFfQD8kPJAEtS f9JD+oDUV9obZMNkakJMYaU2mvX/PP+iuZ6azJb2rblJ2qx76d/AKzzWAnm6PKpD ExigtmCU1HSWorjJp2CGiXJmrBYMaIkqNR/dEusDWMIdQx+BWSiwtczTDsT4+px1 d26VdImCoWNUVPVn8/CBKWfHSvhF2AwCn3NBbeJs5WWNlaNJoHBNRHR0rcWrkybm v3k8qmzDc/5RyDF2jFLUSQy75tTrFoBPfJrNL0X8ABMnyFB5D4VfYKmpmfFZQ5aF m08c0PWmXObU0M6NBfV/ahPBHMA6+i52Uqdmg5NJPMmXUcY36H63XGzVnmZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzeFabgxFPERQif7wr1f16iAH2cwHwYDVR0j BBgwFoAUA2Tl4XQeHZIKKHNiN09Pj8mBN30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhkYjczNzUtMTJkMS00OTM1LWJlZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3 NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZDOTgxMzc3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzY0RTVFMTc0MUUxRDkyMEEyODczNjIzNzRGNEY4RkM5ODEz NzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRG OEZDOTgxMzc3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIZbgoVEHzNvtUvMFXN4uuWpYJTRkczihE2 ZLlE8cJ5c0zOYlk9mdHF6iCy0rrDTJIjlNyYaT7OjjYqBKQsU6mltjwMkTfybe6t JAjr3U4eYnlZtMIg13YXD9Ex8YnLtlAKeIxVA7ZodkbDhlRiaJSKhzjTlrXBHOhX 3sPp6JU3GKAm7PQ4qqo2SsDLeYcGMYD5TJhoTeo1F9Qu05bBDh8DHd8+hbgiatd1 e6fv0K5pD8gtRpE6mWp2u9x9Y2UbyT2OMqYYKX4XzbpTKfdzlQL52mrBK66thHRW aJslll8N8vjAEAhS5y6mBHQluszc7jFhlIEHA1BpuIhzcoNMikA= -----END CERTIFICATE-----Generated at Tue Sep 22 04:11:22 2026 by rpki-client