$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: 0bFAj9/QDgRZpjzYhTaoa9G7f7MYx7rzAjQDe1UvEfo= Subject key identifier: 00:E2:D5:D4:1A:D9:C8:1B:18:78:09:81:B4:C3:8B:C1:12:4E:6F:C1 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 0DBD5803E2FAEF92EEAB68F11DF20FD72FF66825 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:25:45 +0000 Manifest this update: Mon 21 Sep 2026 03:20:45 +0000 Manifest next update: Tue 22 Sep 2026 05:05:45 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: gLGMjoVB9Px9Wl8DyP1oDox0UuwYMbWTh71Z8OiNa2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bd:58:03:e2:fa:ef:92:ee:ab:68:f1:1d:f2:0f:d7:2f:f6:68:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Sep 21 03:20:45 2026 GMT Not After : Sep 22 05:05:45 2026 GMT Subject: CN=00E2D5D41AD9C81B18780981B4C38BC1124E6FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:35:30:47:2e:b0:cc:00:29:06:43:4d:e9: 4b:2a:b2:df:82:4f:f5:08:a1:aa:ff:2a:9a:45:dc: 6c:48:45:c0:5d:55:a7:00:ab:c7:c1:a9:57:2e:f9: 5f:e7:7a:06:84:20:52:de:28:59:36:52:31:9e:fb: 4e:39:4a:a5:ba:6e:6c:8a:0b:b3:48:41:76:57:78: 7f:35:68:d1:df:86:b6:a5:ec:93:a4:7f:0c:39:29: 13:ab:7b:b1:e4:fb:7a:a5:31:f3:16:78:e7:7c:18: f4:b5:c1:07:a3:e6:21:e4:bc:51:6f:cb:11:cf:03: 95:f9:b7:29:d4:ed:52:d1:e7:33:99:db:5f:a8:17: 40:27:4e:66:62:9d:c2:d5:02:cc:54:f7:25:ce:77: 22:52:06:6a:54:5e:e0:dc:bf:ed:8e:41:00:1b:16: 2e:cc:ba:6b:52:b6:75:42:ab:19:fe:60:1f:dd:66: 9f:47:d8:8c:35:b7:21:08:b1:34:d2:ca:51:1d:92: 4b:91:5b:c9:9a:94:4d:c7:70:9a:88:53:a3:f5:f0: bd:90:f1:40:34:95:cc:80:b7:41:e9:39:90:cc:74: 3e:27:4b:9c:78:60:9e:dc:ea:df:d0:9e:e8:81:18: 8f:68:27:9e:22:3d:4c:20:cc:2b:12:a8:15:67:17: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:D5:D4:1A:D9:C8:1B:18:78:09:81:B4:C3:8B:C1:12:4E:6F:C1 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f8:bc:a2:b3:08:5b:6e:e9:ad:d8:4b:38:74:84:98:1c:70: 60:b8:7e:a0:ee:4e:c3:5f:16:4d:50:3e:38:0c:f8:73:62:d5: c1:d1:4a:fd:ab:cb:04:82:19:78:4d:24:f3:15:67:b7:dc:7d: 2d:7b:70:87:b0:93:66:21:d8:af:b9:a6:fb:ca:5e:a0:84:39: d7:87:ac:9f:8b:be:d1:0a:0e:6e:ee:eb:9d:c3:29:0d:21:f0: 41:94:7a:77:12:b7:48:14:f6:75:27:6d:e7:49:1c:2d:8e:cc: c0:fe:0f:bb:36:45:55:78:a4:45:53:02:ef:0e:67:aa:f4:e1: 59:f5:9e:88:34:62:63:29:9f:12:aa:f4:30:b7:f6:5a:ff:79: 2c:93:f5:94:96:4f:d9:d5:2b:39:3a:64:fc:e8:0b:ef:43:ce: ee:02:62:c2:ea:64:0c:ac:46:de:0a:e1:61:be:36:6f:47:9f: 66:49:b3:c7:6e:41:dd:cd:aa:65:b4:fc:8a:78:4e:52:60:49: 8e:67:38:d9:77:0b:ef:e6:45:9a:79:6b:85:d8:2b:e1:99:3f: 5e:94:e8:f4:4c:6d:92:bc:35:b0:01:22:cd:6e:1c:ae:ad:10: a6:d3:dc:6c:1c:c2:b6:98:46:0f:45:ba:12:d0:35:40:2f:4b: 19:b0:03:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDb1YA+L675Luq2jxHfIP1y/2aCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA5MjEwMzIwNDVaFw0yNjA5MjIwNTA1NDVaMDMxMTAvBgNV BAMTKDAwRTJENUQ0MUFEOUM4MUIxODc4MDk4MUI0QzM4QkMxMTI0RTZGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT/TUwRy6wzAApBkNN6Usqst+C T/UIoar/KppF3GxIRcBdVacAq8fBqVcu+V/negaEIFLeKFk2UjGe+045SqW6bmyK C7NIQXZXeH81aNHfhral7JOkfww5KROre7Hk+3qlMfMWeOd8GPS1wQej5iHkvFFv yxHPA5X5tynU7VLR5zOZ21+oF0AnTmZincLVAsxU9yXOdyJSBmpUXuDcv+2OQQAb Fi7MumtStnVCqxn+YB/dZp9H2Iw1tyEIsTTSylEdkkuRW8malE3HcJqIU6P18L2Q 8UA0lcyAt0HpOZDMdD4nS5x4YJ7c6t/QnuiBGI9oJ54iPUwgzCsSqBVnFyJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOLV1BrZyBsYeAmBtMOLwRJOb8EwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALn4vKKzCFtu6a3YSzh0hJgccGC4fqDuTsNf Fk1QPjgM+HNi1cHRSv2rywSCGXhNJPMVZ7fcfS17cIewk2Yh2K+5pvvKXqCEOdeH rJ+LvtEKDm7u653DKQ0h8EGUencSt0gU9nUnbedJHC2OzMD+D7s2RVV4pEVTAu8O Z6r04Vn1nog0YmMpnxKq9DC39lr/eSyT9ZSWT9nVKzk6ZPzoC+9Dzu4CYsLqZAys Rt4K4WG+Nm9Hn2ZJs8duQd3NqmW0/Ip4TlJgSY5nONl3C+/mRZp5a4XYK+GZP16U 6PRMbZK8NbABIs1uHK6tEKbT3GwcwraYRg9FuhLQNUAvSxmwAzU= -----END CERTIFICATE-----Generated at Mon Sep 21 15:55:46 2026 by rpki-client