$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: VHbYH8tnRmDn/azBnFttpIjNpA0DvON0KruAVecx3Pc= Subject key identifier: A0:CB:C2:73:0C:A9:52:B7:AD:B1:79:1A:0C:22:5B:4A:4E:EC:A9:BA Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 2C0A4C9BB842AED60F8164C431AE81D7AB3A6BE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: BF Signing time: Tue 22 Sep 2026 10:55:07 +0000 Manifest this update: Tue 22 Sep 2026 10:50:07 +0000 Manifest next update: Wed 23 Sep 2026 13:16:07 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: Qd0dJfblThc4euw4kcDVFFrCZt47MJ0iIPh3IuTMsP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0a:4c:9b:b8:42:ae:d6:0f:81:64:c4:31:ae:81:d7:ab:3a:6b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Sep 22 10:50:07 2026 GMT Not After : Sep 23 13:16:07 2026 GMT Subject: CN=A0CBC2730CA952B7ADB1791A0C225B4A4EECA9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:32:14:8a:cf:0f:f8:4c:f0:af:0b:eb:a6: a3:77:a5:34:64:1f:bb:be:70:46:ca:93:fc:9b:4f: 66:d0:4c:f2:3b:a5:e7:af:be:a4:69:a8:01:b7:39: 2e:be:64:61:90:0f:ad:09:a7:7e:13:d6:a2:62:13: de:38:2e:71:62:04:11:bd:65:f2:6c:98:b7:8c:32: 54:c9:de:37:64:07:eb:f9:be:aa:76:59:d2:db:7b: c5:4c:ec:b5:f4:3b:f2:de:53:eb:ae:71:6d:e0:e0: aa:0d:4e:50:ae:be:f4:68:db:3f:de:5b:01:5f:4d: d8:00:82:f5:91:7e:03:1a:61:6c:c8:1f:6d:29:32: c2:b9:a5:8b:26:19:ab:50:c5:ce:71:7d:7f:cd:fa: 9e:17:2d:fa:4b:94:1d:06:7d:0a:92:aa:01:8e:c6: 29:1d:82:51:e1:07:d6:b2:dc:20:22:4d:c9:87:45: 8c:2e:5f:c4:16:4b:0a:87:50:c9:8e:b2:72:9f:80: 55:ac:53:89:50:22:c4:c5:33:3f:db:4c:5b:0e:a7: c5:75:2b:2a:78:e2:e8:d9:9b:8f:fb:2d:2f:29:fe: 8e:dc:ad:39:1b:29:03:ed:ff:78:22:e0:45:94:2d: c9:29:9d:4e:5d:e2:00:53:61:1b:53:4b:dd:70:3c: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CB:C2:73:0C:A9:52:B7:AD:B1:79:1A:0C:22:5B:4A:4E:EC:A9:BA X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:e2:7a:1e:f5:f6:e9:60:4e:50:ac:29:4d:b3:52:b6:55: 1a:05:2a:cf:f9:85:ee:1f:50:7e:73:15:34:07:28:19:99:b6: 2e:ba:93:72:42:ea:1f:1b:d3:73:82:11:f1:13:7e:ed:c0:19: 3d:38:ce:91:15:50:2b:60:86:f3:19:64:fe:e7:a0:1a:6c:ca: 38:1c:a6:84:8b:e1:ff:ce:25:9d:27:a0:71:3c:34:9c:6f:e7: b3:61:51:73:e6:3a:e3:38:8a:92:7f:1b:ef:01:ed:7e:74:d4: ad:6e:5e:fc:ff:12:3f:19:9e:10:87:95:94:da:e6:2b:66:fd: 8b:7c:89:c5:3d:32:a3:d3:85:68:b2:85:e7:42:8c:6c:be:61: 89:8d:2b:25:0f:4c:b6:ff:d4:62:1d:7b:7c:5b:e5:63:8d:bc: 57:2e:b5:d3:b0:d7:de:9e:c2:ae:81:87:3c:92:77:83:29:17: 78:42:c2:7e:f1:dd:4a:b9:5e:be:5a:9e:93:43:32:c3:af:ad: 0e:a7:35:2c:64:91:f6:ba:d7:49:37:f6:ac:87:1d:23:be:29: e1:db:f0:dd:d8:a0:fb:df:e0:58:7a:41:9e:28:e2:2c:7a:67: 22:b3:84:e5:5f:cf:4e:19:dd:39:e5:92:17:dc:35:95:7a:37: c6:1f:d6:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULApMm7hCrtYPgWTEMa6B16s6a+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA5MjIxMDUwMDdaFw0yNjA5MjMxMzE2MDdaMDMxMTAvBgNV BAMTKEEwQ0JDMjczMENBOTUyQjdBREIxNzkxQTBDMjI1QjRBNEVFQ0E5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DTIUis8P+EzwrwvrpqN3pTRk H7u+cEbKk/ybT2bQTPI7peevvqRpqAG3OS6+ZGGQD60Jp34T1qJiE944LnFiBBG9 ZfJsmLeMMlTJ3jdkB+v5vqp2WdLbe8VM7LX0O/LeU+uucW3g4KoNTlCuvvRo2z/e WwFfTdgAgvWRfgMaYWzIH20pMsK5pYsmGatQxc5xfX/N+p4XLfpLlB0GfQqSqgGO xikdglHhB9ay3CAiTcmHRYwuX8QWSwqHUMmOsnKfgFWsU4lQIsTFMz/bTFsOp8V1 Kyp44ujZm4/7LS8p/o7crTkbKQPt/3gi4EWULckpnU5d4gBTYRtTS91wPG1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMvCcwypUretsXkaDCJbSk7sqbowHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmW4noe9fbpYE5QrClNs1K2VRoFKs/5he4f UH5zFTQHKBmZti66k3JC6h8b03OCEfETfu3AGT04zpEVUCtghvMZZP7noBpsyjgc poSL4f/OJZ0noHE8NJxv57NhUXPmOuM4ipJ/G+8B7X501K1uXvz/Ej8ZnhCHlZTa 5itm/Yt8icU9MqPThWiyhedCjGy+YYmNKyUPTLb/1GIde3xb5WONvFcutdOw196e wq6BhzySd4MpF3hCwn7x3Uq5Xr5anpNDMsOvrQ6nNSxkkfa610k39qyHHSO+KeHb 8N3YoPvf4Fh6QZ4o4ix6ZyKzhOVfz04Z3TnlkhfcNZV6N8Yf1ig= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:16 2026 by rpki-client