$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: b+f0eo0yl/nhAWcVmjZUsmLlSypi73cR1F9pJQw10zI= Subject key identifier: A1:C1:D6:D3:F5:48:E2:B9:0D:4D:0B:67:35:2A:34:6A:11:62:E6:7E Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 115FE67CA1A9B8F0ECE60BA3C3C1F2C1C324E309 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:01:26 +0000 Manifest this update: Mon 21 Sep 2026 15:56:26 +0000 Manifest next update: Tue 22 Sep 2026 18:54:26 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: p3i2rOzrf8tVN77UKyUpmTEL08lJ32iKB/3ZPHDEhns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5f:e6:7c:a1:a9:b8:f0:ec:e6:0b:a3:c3:c1:f2:c1:c3:24:e3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Sep 21 15:56:26 2026 GMT Not After : Sep 22 18:54:26 2026 GMT Subject: CN=A1C1D6D3F548E2B90D4D0B67352A346A1162E67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:e1:f6:8d:4f:25:c5:ee:b4:5a:d2:57:ab: 6a:58:b9:a1:83:bc:b8:25:9c:60:88:5b:30:3c:be: 1e:75:89:9c:32:ea:2e:8d:6c:a8:64:28:86:e6:f5: 98:a0:ca:18:48:8a:39:bb:3e:41:d4:e2:1f:3b:6c: 71:a3:08:89:a3:ee:fb:3e:35:fc:3f:78:ac:64:68: 15:87:f5:bd:13:73:35:1f:37:b8:8e:0e:cd:3b:12: b1:41:dd:bc:b7:b3:d3:08:ea:0e:75:ec:ea:30:b5: 7f:cc:0f:69:f6:6d:e7:36:c8:8f:67:1c:c7:a7:7e: 75:7b:fe:3b:3e:f1:8e:88:5f:04:68:f4:4b:91:6b: f8:89:71:85:f8:5d:fd:29:7f:5c:40:ec:33:ed:1e: f9:a5:0d:f6:92:11:92:e2:14:f5:ec:c5:ef:4e:14: da:39:64:91:d6:d8:22:3c:2f:f3:a7:9a:cf:e3:6a: 3c:f3:c7:61:16:36:67:5e:c7:bd:9e:d9:de:25:92: de:53:24:86:a1:a2:d7:38:f2:08:6e:3f:fc:88:bc: 39:0e:b3:75:44:cc:c3:ec:db:7e:de:a9:ef:a2:04: ee:70:4c:b7:af:9b:70:5a:84:f2:fa:e9:87:b3:49: b6:65:1a:ff:d8:d2:e0:ce:00:06:7e:76:96:d0:eb: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:D6:D3:F5:48:E2:B9:0D:4D:0B:67:35:2A:34:6A:11:62:E6:7E X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:21:14:59:9c:62:12:8e:bc:72:4d:83:32:fc:d9:59:a7:18: c8:f3:b4:f2:d0:c5:4d:39:88:81:a9:d0:43:fb:68:de:14:19: 4c:f1:fc:ca:80:2d:0d:23:23:23:cd:cc:b8:56:2f:94:74:80: 92:68:e5:3f:2f:76:51:29:4f:21:00:69:a1:07:e4:4b:f1:ef: 12:cb:b9:a4:dd:bf:a2:1a:60:54:d8:d1:80:7c:1c:82:c1:56: 12:1c:4e:20:6c:e0:7f:c8:ef:c4:7c:5c:f3:ec:12:db:37:ce: 01:ff:0d:16:2d:d7:93:af:d7:2a:97:67:2c:87:d3:f9:cd:f6: bc:2e:a5:ec:46:9f:2a:d2:e8:a9:be:68:52:4f:05:20:64:b5: ff:ef:bf:0d:d4:3a:05:0e:c3:79:09:8c:dc:57:b3:36:ec:af: e3:b8:75:f0:bc:a4:0c:10:fe:e5:c9:84:27:cd:b7:6a:50:05: 63:96:1f:3b:b0:6d:aa:fb:92:5b:c7:0b:2a:a0:25:60:a2:e2: e2:06:d5:82:fe:6e:5c:3d:0a:74:82:8e:13:53:70:2b:4c:cb: 12:13:c3:a9:a0:4b:95:34:17:24:c9:d7:b6:96:a1:e8:9d:15: 9d:10:0f:ef:52:09:bf:4e:f3:cb:2f:cd:44:f3:e1:28:f2:25: 43:71:41:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEV/mfKGpuPDs5gujw8HywcMk4wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA5MjExNTU2MjZaFw0yNjA5MjIxODU0MjZaMDMxMTAvBgNV BAMTKEExQzFENkQzRjU0OEUyQjkwRDREMEI2NzM1MkEzNDZBMTE2MkU2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NOH2jU8lxe60WtJXq2pYuaGD vLglnGCIWzA8vh51iZwy6i6NbKhkKIbm9ZigyhhIijm7PkHU4h87bHGjCImj7vs+ Nfw/eKxkaBWH9b0TczUfN7iODs07ErFB3by3s9MI6g517OowtX/MD2n2bec2yI9n HMenfnV7/js+8Y6IXwRo9EuRa/iJcYX4Xf0pf1xA7DPtHvmlDfaSEZLiFPXsxe9O FNo5ZJHW2CI8L/Onms/jajzzx2EWNmdex72e2d4lkt5TJIahotc48ghuP/yIvDkO s3VEzMPs237eqe+iBO5wTLevm3BahPL66YezSbZlGv/Y0uDOAAZ+dpbQ691/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocHW0/VI4rkNTQtnNSo0ahFi5n4wHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwhFFmcYhKOvHJNgzL82VmnGMjztPLQxU05 iIGp0EP7aN4UGUzx/MqALQ0jIyPNzLhWL5R0gJJo5T8vdlEpTyEAaaEH5Evx7xLL uaTdv6IaYFTY0YB8HILBVhIcTiBs4H/I78R8XPPsEts3zgH/DRYt15Ov1yqXZyyH 0/nN9rwupexGnyrS6Km+aFJPBSBktf/vvw3UOgUOw3kJjNxXszbsr+O4dfC8pAwQ /uXJhCfNt2pQBWOWHzuwbar7klvHCyqgJWCi4uIG1YL+blw9CnSCjhNTcCtMyxIT w6mgS5U0FyTJ17aWoeidFZ0QD+9SCb9O88svzUTz4SjyJUNxQdU= -----END CERTIFICATE-----Generated at Tue Sep 22 13:39:49 2026 by rpki-client