$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: C4t9XATht1KuRgoeOtp6KHuPw6MOorpZifzbUSIVmlA= Subject key identifier: 6B:6D:4F:D9:20:14:36:85:D9:71:13:5F:61:F8:03:7B:BE:F6:7B:57 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 3F2C63870A416DACE308589D4D72EBE29F9C4049 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: BF Signing time: Tue 22 Sep 2026 10:14:17 +0000 Manifest this update: Tue 22 Sep 2026 10:09:17 +0000 Manifest next update: Wed 23 Sep 2026 12:34:17 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: RTjkBAGpBzx7HTOKma5Tw6kOOo3D48jeE883dvXhCxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2c:63:87:0a:41:6d:ac:e3:08:58:9d:4d:72:eb:e2:9f:9c:40:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Sep 22 10:09:17 2026 GMT Not After : Sep 23 12:34:17 2026 GMT Subject: CN=6B6D4FD920143685D971135F61F8037BBEF67B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:25:4e:cc:ba:43:b6:e1:70:03:83:24:f1: d6:19:8f:2e:f4:5b:f6:c9:27:92:67:8d:be:14:ed: d4:ca:a5:65:88:1a:bc:6d:c6:2d:ab:c7:c2:0f:c4: 91:4c:ae:59:8a:27:94:f8:cf:85:fe:d8:11:ef:1d: 43:c1:d4:ca:bb:fa:cd:95:be:c5:fa:aa:f9:07:a1: 99:dc:0f:52:fa:43:b9:3f:84:e6:e6:93:23:bf:44: bb:ac:0d:64:eb:c0:04:2f:bd:88:3a:19:e0:a6:4c: 0a:4e:5d:04:1b:e7:07:94:e3:35:1b:6f:f1:2d:4d: aa:63:da:90:35:6a:bb:e6:49:35:0c:14:87:f0:46: 16:a5:fa:68:e4:ae:4b:a8:27:58:e0:09:44:0d:9b: 97:83:20:98:2b:7b:00:d2:11:c2:e4:6b:ed:99:f2: 18:cc:7d:c5:58:a3:93:e3:fe:4b:62:42:e6:a9:f5: 72:f3:a8:8c:38:d9:5c:34:e9:e1:71:70:d9:7e:22: e4:ab:90:43:e7:79:23:ec:82:23:5d:b8:65:25:df: b8:be:56:49:48:4e:62:45:5a:7b:3c:dc:5b:3d:dc: a6:9a:ec:9b:ab:69:7f:e4:76:5a:9f:9c:cc:d5:3d: da:1d:36:c2:33:5b:d3:a3:b2:a1:6a:7a:2c:c3:0e: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6D:4F:D9:20:14:36:85:D9:71:13:5F:61:F8:03:7B:BE:F6:7B:57 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0c:7e:65:e3:a1:ec:9d:0f:b8:9b:2b:1d:65:e8:7f:d2:7d: 44:e7:3f:a3:3d:ca:a2:b8:00:5f:df:c8:83:e1:6e:c6:f1:5b: ee:02:29:1d:03:ec:c1:e5:b7:a3:ac:3a:c3:53:4f:ac:8c:cb: 72:11:c7:ad:f3:60:1a:b8:fc:cd:30:ab:3e:c3:58:56:bb:9b: 15:2e:93:0e:09:ea:75:37:cd:b6:d2:e4:c4:dc:f7:e4:4d:a4: 7f:ed:20:d6:42:9e:96:94:0c:ca:aa:8b:69:f8:66:e1:16:16: 2f:dd:74:06:ec:6a:d3:28:f9:88:d4:6a:9f:64:90:ea:cc:84: 62:04:62:66:15:95:12:a0:14:3e:6a:a5:16:2b:14:0f:c0:aa: 37:b7:39:6b:6e:d4:cd:b9:3a:5f:fe:b2:09:47:8e:95:a1:82: 85:a6:e1:39:a7:51:c6:8b:a5:64:d7:37:63:ce:bb:f1:da:ef: dc:56:9a:6c:b3:a1:2c:c9:29:1b:cd:31:56:ed:c6:f7:03:87: cf:32:ed:87:21:ac:02:30:3b:06:82:66:9c:e8:c4:0f:12:3b: d2:50:a0:c0:2b:15:95:e0:9a:af:69:86:fa:2d:21:10:3d:c2: 85:9f:4b:4c:0d:bd:73:88:b4:26:e6:ba:33:34:a6:ab:bc:52: 99:ff:0b:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyxjhwpBbazjCFidTXLr4p+cQEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA5MjIxMDA5MTdaFw0yNjA5MjMxMjM0MTdaMDMxMTAvBgNV BAMTKDZCNkQ0RkQ5MjAxNDM2ODVEOTcxMTM1RjYxRjgwMzdCQkVGNjdCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywyVOzLpDtuFwA4Mk8dYZjy70 W/bJJ5Jnjb4U7dTKpWWIGrxtxi2rx8IPxJFMrlmKJ5T4z4X+2BHvHUPB1Mq7+s2V vsX6qvkHoZncD1L6Q7k/hObmkyO/RLusDWTrwAQvvYg6GeCmTApOXQQb5weU4zUb b/EtTapj2pA1arvmSTUMFIfwRhal+mjkrkuoJ1jgCUQNm5eDIJgrewDSEcLka+2Z 8hjMfcVYo5Pj/ktiQuap9XLzqIw42Vw06eFxcNl+IuSrkEPneSPsgiNduGUl37i+ VklITmJFWns83Fs93Kaa7JuraX/kdlqfnMzVPdodNsIzW9OjsqFqeizDDpkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa21P2SAUNoXZcRNfYfgDe772e1cwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEMfmXjoeydD7ibKx1l6H/SfUTnP6M9yqK4 AF/fyIPhbsbxW+4CKR0D7MHlt6OsOsNTT6yMy3IRx63zYBq4/M0wqz7DWFa7mxUu kw4J6nU3zbbS5MTc9+RNpH/tINZCnpaUDMqqi2n4ZuEWFi/ddAbsatMo+YjUap9k kOrMhGIEYmYVlRKgFD5qpRYrFA/Aqje3OWtu1M25Ol/+sglHjpWhgoWm4TmnUcaL pWTXN2POu/Ha79xWmmyzoSzJKRvNMVbtxvcDh88y7YchrAIwOwaCZpzoxA8SO9JQ oMArFZXgmq9phvotIRA9woWfS0wNvXOItCbmujM0pqu8Upn/C9k= -----END CERTIFICATE-----Generated at Tue Sep 22 22:41:20 2026 by rpki-client