$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: uUY9nXJEAvECYKWnYs0uBQR6p54saPMPyKPC1RV7RS0= Subject key identifier: 1C:4F:B8:94:80:45:3C:6D:DC:A9:29:4A:01:50:9F:DC:63:A1:4B:EB Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 0697172B9FFE8FE72D793783A1A6618BD1259697 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:13:04 +0000 Manifest this update: Mon 21 Sep 2026 05:08:04 +0000 Manifest next update: Tue 22 Sep 2026 08:46:04 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: x63lofGAu6TVpp06dZdr4mdhQMr6PEvgax2ZrwdYgKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:17:2b:9f:fe:8f:e7:2d:79:37:83:a1:a6:61:8b:d1:25:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Sep 21 05:08:04 2026 GMT Not After : Sep 22 08:46:04 2026 GMT Subject: CN=1C4FB89480453C6DDCA9294A01509FDC63A14BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:dc:40:9a:d2:c3:85:a3:43:d9:ea:ea:6b: d1:3a:3d:fa:57:26:9f:10:a6:e7:c6:87:ea:a1:f7: 9f:8a:38:c5:97:1f:cd:64:11:86:2d:6c:d9:39:1b: c3:e2:65:8b:d3:f3:d6:cc:1b:76:94:5e:38:96:5c: ef:ca:eb:f3:5e:a2:b0:d2:cf:10:39:23:40:b5:87: 39:10:74:61:f8:91:c2:ed:86:09:21:fa:b7:37:64: 50:10:85:1b:d8:a8:d3:71:8f:8e:2f:b3:13:73:15: 52:8a:2c:04:b0:55:02:29:6e:7c:16:1e:68:de:9f: 34:8c:95:e8:25:ee:f9:36:5d:fc:80:17:bf:3d:04: 2f:8b:c2:e8:96:1b:21:49:1a:72:a6:6e:39:bf:a4: f3:d3:c0:6d:eb:af:04:0f:29:3a:f6:e5:c3:ff:c2: 04:48:49:67:ca:e7:3a:4e:14:78:52:2b:6a:7d:f9: 01:5e:63:b7:f4:55:11:ec:dc:db:96:54:3e:fd:e1: 18:7c:3f:a3:49:08:6d:bd:79:78:23:70:47:49:c7: 4d:85:b2:8d:df:d7:c7:03:21:9b:55:ef:b3:07:29: db:9d:02:48:dd:ae:b9:cb:6e:c9:c6:f0:9a:a0:bb: 97:e4:68:2b:53:6d:9b:fb:35:f2:2b:99:1d:0f:48: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:B8:94:80:45:3C:6D:DC:A9:29:4A:01:50:9F:DC:63:A1:4B:EB X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f4:2e:6f:84:d4:3a:35:86:88:d6:b2:0d:c4:75:d0:23:56: 94:6e:f6:05:17:30:96:cf:35:56:24:e1:80:39:23:52:ee:19: d6:0b:98:79:f4:d8:38:fc:23:3a:aa:16:fb:f2:68:f8:01:b1: 18:97:0b:f8:4f:f5:8a:a3:ea:19:67:02:be:19:9a:3c:7e:e5: c4:6d:67:b4:75:2d:fa:7d:08:46:35:28:60:9a:ca:7a:bf:e6: a4:ae:be:ab:24:51:98:43:bf:bd:c4:4d:6b:a9:4e:7f:fb:d5: 0f:87:1b:b8:c7:be:a5:66:71:98:11:e2:3c:9e:09:03:51:b1: d8:4b:b6:35:26:69:0f:c7:e0:3a:ab:8d:b6:03:a9:51:1e:43: a0:00:3e:55:6a:af:64:73:41:10:9f:f1:7f:e7:e2:a8:85:30: 65:73:9b:cf:f2:b7:6b:7f:ef:3a:43:6b:1c:49:06:6a:02:ee: 21:dd:1a:fe:6b:14:5c:43:26:20:e0:c0:bc:f4:1d:e8:50:b3: d4:05:d9:a3:c4:80:6f:24:b3:c8:94:5e:8f:9b:e3:07:5f:1c: 0f:53:e8:d0:05:46:4b:31:2a:00:28:5b:e9:de:5a:7c:ea:aa: 45:0d:db:ef:78:a9:f8:33:e5:40:99:fb:57:d4:83:8b:09:e5: 66:29:54:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpcXK5/+j+cteTeDoaZhi9EllpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA5MjEwNTA4MDRaFw0yNjA5MjIwODQ2MDRaMDMxMTAvBgNV BAMTKDFDNEZCODk0ODA0NTNDNkREQ0E5Mjk0QTAxNTA5RkRDNjNBMTRCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RtxAmtLDhaND2erqa9E6PfpX Jp8QpufGh+qh95+KOMWXH81kEYYtbNk5G8PiZYvT89bMG3aUXjiWXO/K6/NeorDS zxA5I0C1hzkQdGH4kcLthgkh+rc3ZFAQhRvYqNNxj44vsxNzFVKKLASwVQIpbnwW HmjenzSMlegl7vk2XfyAF789BC+LwuiWGyFJGnKmbjm/pPPTwG3rrwQPKTr25cP/ wgRISWfK5zpOFHhSK2p9+QFeY7f0VRHs3NuWVD794Rh8P6NJCG29eXgjcEdJx02F so3f18cDIZtV77MHKdudAkjdrrnLbsnG8Jqgu5fkaCtTbZv7NfIrmR0PSH2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHE+4lIBFPG3cqSlKAVCf3GOhS+swHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD0Lm+E1Do1hojWsg3EddAjVpRu9gUXMJbP NVYk4YA5I1LuGdYLmHn02Dj8IzqqFvvyaPgBsRiXC/hP9Yqj6hlnAr4Zmjx+5cRt Z7R1Lfp9CEY1KGCaynq/5qSuvqskUZhDv73ETWupTn/71Q+HG7jHvqVmcZgR4jye CQNRsdhLtjUmaQ/H4DqrjbYDqVEeQ6AAPlVqr2RzQRCf8X/n4qiFMGVzm8/yt2t/ 7zpDaxxJBmoC7iHdGv5rFFxDJiDgwLz0HehQs9QF2aPEgG8ks8iUXo+b4wdfHA9T 6NAFRksxKgAoW+neWnzqqkUN2+94qfgz5UCZ+1fUg4sJ5WYpVPY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:59:59 2026 by rpki-client