$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json) Hash identifier: ysVx81adGN5HbVeqACT/ZSukJUTOoTYHgEsB70Fb47E= Subject key identifier: 29:41:A5:AC:F4:B9:29:A7:B9:E1:F1:1B:94:88:C3:E9:87:A8:60:52 Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Certificate serial: 43125EEB1776EAD114C9E11FA86737C3E813D0C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:52:20 +0000 Manifest this update: Tue 22 Sep 2026 12:47:20 +0000 Manifest next update: Wed 23 Sep 2026 15:32:20 +0000 Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: laAgPbssnCntOMw3nHu4rdPYQoFl3/7FF+Yg5x0IT6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:12:5e:eb:17:76:ea:d1:14:c9:e1:1f:a8:67:37:c3:e8:13:d0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Validity Not Before: Sep 22 12:47:20 2026 GMT Not After : Sep 23 15:32:20 2026 GMT Subject: CN=2941A5ACF4B929A7B9E1F11B9488C3E987A86052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:c1:81:fb:34:92:61:41:97:89:15:21:7b: 7e:9b:e9:24:cd:a3:80:4b:ca:be:09:f3:31:7b:5d: 75:25:ea:22:f0:d3:f2:81:e2:c1:ec:71:67:53:7d: bd:d0:06:76:a0:41:fd:56:86:c8:cc:61:2c:fd:09: 90:a9:44:97:f8:e4:3d:78:3d:6f:f5:f7:3a:a0:34: 3c:82:6e:52:6d:8f:0c:a7:d2:e9:b1:12:07:94:60: 59:3c:51:66:24:6d:b8:3e:d0:2a:33:cb:ef:8a:03: 36:f0:13:d6:04:51:01:e0:e4:c8:f7:64:16:b0:02: 6b:0f:e4:de:71:a4:a6:8e:54:3a:dc:0d:b6:12:c2: b5:81:6e:74:27:ff:f3:96:27:96:6e:f0:8f:fd:ce: 9e:d7:c7:d6:c6:e2:97:6e:85:40:e0:76:c5:f0:97: 63:82:b3:96:2a:46:48:d2:4f:d4:61:14:ab:55:d8: b7:93:ce:5d:b2:c5:8c:a1:66:e1:6a:6d:78:9e:24: 3c:95:ba:b5:d8:0e:15:a3:c4:5f:80:8f:f5:9b:81: a7:69:f1:36:de:19:91:5c:7d:74:54:78:7e:0a:45: 06:e7:07:71:f5:d4:b0:d6:59:43:7a:2e:a2:ff:b8: e2:98:c2:ce:82:df:74:d6:ef:85:71:9c:a3:24:0b: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:A5:AC:F4:B9:29:A7:B9:E1:F1:1B:94:88:C3:E9:87:A8:60:52 X509v3 Authority Key Identifier: keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8b:b5:88:e3:56:d5:80:7d:60:d1:f8:2d:de:db:9e:61:8d: b1:c9:14:4c:39:20:a3:c2:82:8d:fb:1b:0a:b0:40:25:27:65: 8a:3b:68:44:04:d3:c8:2f:57:99:4d:3e:65:9f:99:f7:14:d7: 80:71:49:7d:40:77:79:48:ac:0c:2b:db:fb:e2:94:e6:d9:c9: ad:cd:99:3d:19:b9:49:c6:7d:cd:40:40:6b:d3:24:06:82:0b: 38:08:8b:71:55:88:b2:60:56:15:ba:be:ee:49:7d:ff:6f:34: a7:fc:18:92:86:a5:74:e0:d5:48:fb:9b:be:27:f2:6a:a1:22: 89:b7:cc:c1:17:ec:2c:91:2c:af:98:89:ed:a0:ad:3d:21:a9: 11:ca:c8:2b:c4:b6:78:4d:2e:df:d2:50:45:55:b7:9f:76:10: ca:41:f3:72:b0:13:2f:55:d3:69:1f:4b:b6:7e:70:ee:d0:b9: 9b:8c:3b:70:15:13:33:27:50:e6:62:2d:41:15:6d:f9:41:2b: cb:a1:10:15:d9:e2:3e:08:9b:3b:bb:5b:c2:7b:27:6c:4c:4c: 58:6f:72:91:e6:3d:3f:9d:f2:55:50:3d:10:f2:76:96:67:fb: 11:6d:bd:f4:12:b0:dd:eb:91:41:87:51:e0:2a:3b:e8:fd:d5: d1:a6:09:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxJe6xd26tEUyeEfqGc3w+gT0MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZBMzhG RDBDQTc4ODAeFw0yNjA5MjIxMjQ3MjBaFw0yNjA5MjMxNTMyMjBaMDMxMTAvBgNV BAMTKDI5NDFBNUFDRjRCOTI5QTdCOUUxRjExQjk0ODhDM0U5ODdBODYwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEcGB+zSSYUGXiRUhe36b6STN o4BLyr4J8zF7XXUl6iLw0/KB4sHscWdTfb3QBnagQf1WhsjMYSz9CZCpRJf45D14 PW/19zqgNDyCblJtjwyn0umxEgeUYFk8UWYkbbg+0Cozy++KAzbwE9YEUQHg5Mj3 ZBawAmsP5N5xpKaOVDrcDbYSwrWBbnQn//OWJ5Zu8I/9zp7Xx9bG4pduhUDgdsXw l2OCs5YqRkjST9RhFKtV2LeTzl2yxYyhZuFqbXieJDyVurXYDhWjxF+Aj/Wbgadp 8TbeGZFcfXRUeH4KRQbnB3H11LDWWUN6LqL/uOKYws6C33TW74VxnKMkC/PdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUGlrPS5Kae54fEblIjD6YeoYFIwHwYDVR0j BBgwFoAU4GM/6apOG7jBTLh2S2r6OP0Mp4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYyYjE3ODYtMTgzMy00ZDBhLWExMzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlB QTRFMUJCOEMxNENCODc2NEI2QUZBMzhGRDBDQTc4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDYzM0ZFOUFBNEUxQkI4QzE0Q0I4NzY0QjZBRkEzOEZEMENB Nzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZB MzhGRDBDQTc4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWLtYjjVtWAfWDR+C3e255hjbHJFEw5IKPC go37GwqwQCUnZYo7aEQE08gvV5lNPmWfmfcU14BxSX1Ad3lIrAwr2/vilObZya3N mT0ZuUnGfc1AQGvTJAaCCzgIi3FViLJgVhW6vu5Jff9vNKf8GJKGpXTg1Uj7m74n 8mqhIom3zMEX7CyRLK+Yie2grT0hqRHKyCvEtnhNLt/SUEVVt592EMpB83KwEy9V 02kfS7Z+cO7QuZuMO3AVEzMnUOZiLUEVbflBK8uhEBXZ4j4Imzu7W8J7J2xMTFhv cpHmPT+d8lVQPRDydpZn+xFtvfQSsN3rkUGHUeAqO+j91dGmCRM= -----END CERTIFICATE-----Generated at Tue Sep 22 18:56:15 2026 by rpki-client