$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft File: 468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json) Hash identifier: DgkxegRS5wa5DrXUCN0ZRPt/GYIjNZ21e5XKkho19cU= Subject key identifier: 11:71:2C:A6:5D:07:14:D4:A4:E5:CE:E2:64:F8:2E:14:54:C2:13:D6 Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37 Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637 Certificate serial: 1D9C51A6446C2CDEF47A128029A6B0A416FBD092 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:44:41 +0000 Manifest this update: Mon 21 Sep 2026 10:39:41 +0000 Manifest next update: Tue 22 Sep 2026 11:09:41 +0000 Files and hashes: 1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: XwydkRAF83Pg5oVihkkTzq9p74CvlfVfdqX3ILhjOs8=) 2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9c:51:a6:44:6c:2c:de:f4:7a:12:80:29:a6:b0:a4:16:fb:d0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637 Validity Not Before: Sep 21 10:39:41 2026 GMT Not After : Sep 22 11:09:41 2026 GMT Subject: CN=11712CA65D0714D4A4E5CEE264F82E1454C213D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:e9:44:64:b0:01:74:46:6e:05:91:c8:54: 50:83:62:23:e6:26:f7:e6:17:2c:3b:76:88:79:bf: 39:27:74:2c:3c:68:95:e6:a4:b1:f8:23:4b:e4:07: 5d:b9:5c:f3:dc:ab:f6:a7:68:5a:19:7d:b9:ac:06: 3c:c5:bd:ca:14:5e:98:d8:3b:76:59:8e:92:04:4e: 4a:88:4e:1d:5e:5e:64:63:49:44:3f:bf:b7:b4:6e: df:88:7d:c4:15:e7:23:4a:2a:e6:7a:c2:48:ea:50: 75:4c:0a:bf:c7:83:fe:d0:26:30:0a:29:53:37:d3: 1b:d4:63:41:ad:dd:a0:0d:87:3a:16:49:46:b9:38: be:4f:b6:7c:1c:65:a5:42:e9:3a:e9:ca:4a:bb:ea: 09:59:b0:ad:c6:49:f4:c1:fc:bd:03:d9:5e:d7:16: 47:d5:20:33:e3:2b:85:d6:2e:54:6a:76:97:0e:53: f6:c7:80:43:42:79:27:46:4c:f7:f1:97:f5:d8:f1: e9:75:8d:e6:70:6a:ab:2b:c5:c7:b8:8e:bc:24:9f: d2:b8:99:80:0f:79:2e:d2:3c:98:10:aa:b5:7f:77: b2:1f:89:61:ae:4c:ff:42:37:50:8e:67:c4:cc:65: ea:f7:e2:c3:77:56:50:d3:34:d4:fc:90:08:01:7a: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:2C:A6:5D:07:14:D4:A4:E5:CE:E2:64:F8:2E:14:54:C2:13:D6 X509v3 Authority Key Identifier: keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:94:a4:40:d6:41:c2:15:30:48:e1:78:a7:cb:50:b0:5d: d7:93:2f:6e:4f:16:56:89:a7:0b:6d:7c:2f:90:a1:5f:8c:54: b0:77:9d:d9:0c:5c:73:9f:1f:a7:29:cc:af:b0:e3:69:f1:de: e6:c3:58:c2:fe:1d:21:5d:76:59:3e:4b:65:b4:87:46:49:93: 56:66:fc:4d:bd:3c:bb:cb:e6:17:7c:25:bb:2c:e9:41:a5:a3: d4:18:b9:e3:ad:0a:b1:0f:44:09:2f:06:83:f5:81:35:e8:66: 06:08:fe:cb:73:2e:94:d6:f1:07:8c:59:57:4b:46:43:a3:47: 80:84:62:63:e5:e5:d2:dd:ad:f1:99:59:2b:d3:85:4d:38:e3: 13:04:54:79:b1:9d:38:d2:5a:ad:ad:4f:84:5f:1b:9d:1b:c4: 8c:ce:ef:a5:a8:63:9f:28:dc:07:a4:e2:c3:6e:27:5d:77:ac: 12:2e:45:d1:99:6d:45:c6:13:16:6f:33:8f:17:61:ab:de:26: 70:30:fd:ac:71:2a:e0:26:b1:af:29:80:01:d9:3a:d6:04:9f: d2:d4:9b:16:01:b8:61:19:f4:d6:24:8f:b0:05:c0:d1:93:83: 7e:5a:8c:ca:91:12:a5:a4:58:e5:82:a2:dc:25:6a:51:36:c5: b3:da:b5:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZxRpkRsLN70ehKAKaawpBb70JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYw RUMzOTYzNzAeFw0yNjA5MjExMDM5NDFaFw0yNjA5MjIxMTA5NDFaMDMxMTAvBgNV BAMTKDExNzEyQ0E2NUQwNzE0RDRBNEU1Q0VFMjY0RjgyRTE0NTRDMjEzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOy+lEZLABdEZuBZHIVFCDYiPm JvfmFyw7doh5vzkndCw8aJXmpLH4I0vkB125XPPcq/anaFoZfbmsBjzFvcoUXpjY O3ZZjpIETkqITh1eXmRjSUQ/v7e0bt+IfcQV5yNKKuZ6wkjqUHVMCr/Hg/7QJjAK KVM30xvUY0Gt3aANhzoWSUa5OL5PtnwcZaVC6Trpykq76glZsK3GSfTB/L0D2V7X FkfVIDPjK4XWLlRqdpcOU/bHgENCeSdGTPfxl/XY8el1jeZwaqsrxce4jrwkn9K4 mYAPeS7SPJgQqrV/d7IfiWGuTP9CN1COZ8TMZer34sN3VlDTNNT8kAgBeiARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXEspl0HFNSk5c7iZPguFFTCE9YwHwYDVR0j BBgwFoAURoZi3keJ4WY4gaJXCMpfvw7DljcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2VjZjVkOTQtN2YxZi00M2JmLWI3YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0 Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYwRUMzOTYzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80Njg2NjJERTQ3ODlFMTY2Mzg4MUEyNTcwOENBNUZCRjBFQzM5 NjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVG QkYwRUMzOTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5olKRA1kHCFTBI4Xiny1CwXdeTL25PFlaJ pwttfC+QoV+MVLB3ndkMXHOfH6cpzK+w42nx3ubDWML+HSFddlk+S2W0h0ZJk1Zm /E29PLvL5hd8Jbss6UGlo9QYueOtCrEPRAkvBoP1gTXoZgYI/stzLpTW8QeMWVdL RkOjR4CEYmPl5dLdrfGZWSvThU044xMEVHmxnTjSWq2tT4RfG50bxIzO76WoY58o 3Aek4sNuJ113rBIuRdGZbUXGExZvM48XYaveJnAw/axxKuAmsa8pgAHZOtYEn9LU mxYBuGEZ9NYkj7AFwNGTg35ajMqREqWkWOWCotwlalE2xbPatW0= -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:40 2026 by rpki-client