$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: Gf7eTabNHYLrGBnDyNsF9+5tz5RnFzX8j9fpD7iPzcI= Subject key identifier: 8E:42:95:4C:57:30:29:08:92:70:CB:C5:56:61:38:65:04:77:20:16 Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 3020341D8AF84A018EF018717726C71AA7E589FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: BE Signing time: Tue 22 Sep 2026 09:33:24 +0000 Manifest this update: Tue 22 Sep 2026 09:28:24 +0000 Manifest next update: Wed 23 Sep 2026 09:36:24 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: Yzzl9CvK2jpy65VPtFbXd4b/zomn+Ti5kZhqKavM2dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:20:34:1d:8a:f8:4a:01:8e:f0:18:71:77:26:c7:1a:a7:e5:89:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: Sep 22 09:28:24 2026 GMT Not After : Sep 23 09:36:24 2026 GMT Subject: CN=8E42954C573029089270CBC55661386504772016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:84:33:39:99:e6:7d:29:b0:1c:1b:43:67: ba:08:a6:a3:87:2a:0e:6e:7e:25:db:27:c3:94:44: 41:dc:cf:c1:ef:b4:94:29:24:fe:74:2d:f2:8d:25: a1:f0:68:95:5a:0c:aa:48:c8:bf:8e:59:90:2b:58: 7d:0c:4f:de:63:a3:9c:a5:3b:26:8f:39:d1:d6:4f: d1:8c:8b:37:7e:b3:a9:1f:dc:3d:5d:fd:81:c7:71: 8f:53:c4:f3:44:c6:e5:27:bc:78:32:a2:e8:6b:a6: 83:ba:b5:9a:c9:fd:26:3c:5e:e9:5a:5f:a9:64:82: 6b:d6:64:29:25:de:4b:c1:4c:55:cb:4c:af:a7:06: fa:b2:80:64:46:6e:18:c5:ff:01:70:7f:86:e2:ce: a9:eb:81:77:c2:1b:be:6d:42:35:3f:d7:cf:72:c7: 7b:c0:c7:0a:5b:d2:71:0d:17:a1:86:cd:f1:dd:68: b7:05:15:30:11:53:de:c2:0f:61:92:4c:81:33:39: 3f:50:c5:68:c0:f9:cb:66:f7:8e:e4:a3:96:44:00: 3b:12:7b:0b:81:d5:06:f9:47:06:09:c1:4c:ba:24: 7a:e7:d3:6d:46:e0:eb:6c:6d:6c:a9:8a:e3:19:8d: 5b:6a:02:97:13:cc:ad:19:43:eb:28:01:7a:3f:f2: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:42:95:4C:57:30:29:08:92:70:CB:C5:56:61:38:65:04:77:20:16 X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:fe:6d:eb:bb:2c:7f:9d:3a:54:6d:35:eb:22:09:29:02: 81:18:61:8d:1a:d1:7d:fc:bb:76:3c:08:80:bf:2f:47:30:99: 3c:cd:6d:21:35:f4:d9:92:4b:c0:e3:6e:2d:d1:33:ed:00:80: 68:3e:3d:dc:5f:eb:5e:b5:b8:eb:91:72:b2:b8:54:2c:a9:30: 2b:cc:c2:8f:e9:6e:14:77:35:bd:f1:4f:ba:fd:d8:ef:7e:5c: 4e:9f:7f:c9:b1:53:45:cc:3d:ed:3a:76:79:ba:92:c6:bd:27: 13:6a:4c:13:e3:c7:7a:4c:42:8c:fb:81:56:1c:ed:eb:f5:f8: 22:bc:86:8d:d9:64:e9:3a:a7:4b:c9:00:9c:b4:e0:fb:df:55: 2d:12:17:5a:9c:df:e3:0c:36:53:51:7f:e8:3a:83:4a:89:3d: b6:e8:89:29:75:f6:a5:00:fe:72:a8:93:73:27:98:df:8c:70: d2:3a:50:92:cf:dc:c0:97:88:02:02:71:2c:2c:35:5f:24:23: b6:02:89:d1:a2:db:68:24:9e:45:26:c9:24:9d:fa:1f:34:6e: e6:fa:65:cd:09:ea:6a:51:80:43:66:ec:8d:6c:14:90:91:3d: 99:f2:03:22:8f:33:2d:3d:27:5b:0f:fb:26:62:16:bf:a3:8d: 59:45:79:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCA0HYr4SgGO8BhxdybHGqflif4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA5MjIwOTI4MjRaFw0yNjA5MjMwOTM2MjRaMDMxMTAvBgNV BAMTKDhFNDI5NTRDNTczMDI5MDg5MjcwQ0JDNTU2NjEzODY1MDQ3NzIwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK5YQzOZnmfSmwHBtDZ7oIpqOH Kg5ufiXbJ8OUREHcz8HvtJQpJP50LfKNJaHwaJVaDKpIyL+OWZArWH0MT95jo5yl OyaPOdHWT9GMizd+s6kf3D1d/YHHcY9TxPNExuUnvHgyouhrpoO6tZrJ/SY8Xula X6lkgmvWZCkl3kvBTFXLTK+nBvqygGRGbhjF/wFwf4bizqnrgXfCG75tQjU/189y x3vAxwpb0nENF6GGzfHdaLcFFTARU97CD2GSTIEzOT9QxWjA+ctm947ko5ZEADsS ewuB1Qb5RwYJwUy6JHrn021G4OtsbWypiuMZjVtqApcTzK0ZQ+soAXo/8t6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjkKVTFcwKQiScMvFVmE4ZQR3IBYwHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADur/m3ruyx/nTpUbTXrIgkpAoEYYY0a0X38 u3Y8CIC/L0cwmTzNbSE19NmSS8Djbi3RM+0AgGg+Pdxf6161uOuRcrK4VCypMCvM wo/pbhR3Nb3xT7r92O9+XE6ff8mxU0XMPe06dnm6ksa9JxNqTBPjx3pMQoz7gVYc 7ev1+CK8ho3ZZOk6p0vJAJy04PvfVS0SF1qc3+MMNlNRf+g6g0qJPbboiSl19qUA /nKok3MnmN+McNI6UJLP3MCXiAICcSwsNV8kI7YCidGi22gknkUmySSd+h80bub6 Zc0J6mpRgENm7I1sFJCRPZnyAyKPMy09J1sP+yZiFr+jjVlFeU4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:05 2026 by rpki-client