$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: UTz/Zj6/uUzyWS98gMvFWa6kKzhlQGRtmCuKG+FIJ50= Subject key identifier: 4C:B8:95:DD:36:75:BA:A1:0F:9A:07:65:8B:26:CC:91:4E:28:F9:3B Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 54B761EEC97EF49B267D346B627533B99E3270C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:55:01 +0000 Manifest this update: Mon 21 Sep 2026 14:50:01 +0000 Manifest next update: Tue 22 Sep 2026 16:34:01 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: ZBlCBx8uleTtB8RvqRj2kmnWDM7BJCfv1lUGYOY12Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b7:61:ee:c9:7e:f4:9b:26:7d:34:6b:62:75:33:b9:9e:32:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Sep 21 14:50:01 2026 GMT Not After : Sep 22 16:34:01 2026 GMT Subject: CN=4CB895DD3675BAA10F9A07658B26CC914E28F93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:60:03:44:d7:10:bc:23:50:e1:f1:c1:1b: 28:74:4a:8e:8a:4e:e4:f8:e8:16:75:06:e4:1b:b2: f5:7e:62:89:79:2a:8b:a1:80:65:4b:75:f0:8c:a5: dd:53:10:af:2e:48:40:97:6b:0d:c5:c3:ee:32:7b: 5b:42:a1:53:22:2f:f0:89:c0:ad:1c:ae:e3:33:c7: 05:25:43:f8:4c:ed:ab:59:a6:11:70:f8:ce:ac:1a: 46:ec:09:25:c0:2e:a5:27:80:4e:cc:f1:6b:e4:13: b5:2a:8c:7c:02:55:76:96:49:9f:77:82:7e:21:81: d7:66:e0:99:2c:46:09:1d:67:1d:36:27:09:0c:56: 2b:c5:1c:68:d4:fc:ec:69:b0:3a:7d:94:db:b6:fa: d8:b3:0a:ad:dc:34:63:4d:ce:c1:89:5e:14:40:62: 94:a6:cc:fe:1c:9e:e2:c8:ef:f9:84:97:96:82:d5: fb:71:f6:92:85:cd:55:d9:7b:cd:64:c0:e8:a4:1d: 65:ec:3b:1d:81:45:18:3f:11:df:da:ed:b6:05:24: 91:0c:a3:76:78:7a:4c:3b:07:73:cf:a8:a5:37:1d: 9b:71:66:e2:e3:53:d9:1d:b2:44:cd:45:50:03:76: bd:1b:c5:9b:9c:67:6f:f1:b6:26:f9:c5:aa:1c:18: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:95:DD:36:75:BA:A1:0F:9A:07:65:8B:26:CC:91:4E:28:F9:3B X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ec:59:d5:ef:c5:e2:df:3b:4c:f3:09:6f:b6:37:4a:61:3f: 18:3a:18:39:9a:88:72:e9:bd:2a:b8:9e:85:0d:b4:00:24:93: 7c:00:a7:a1:b1:73:0f:f7:ff:47:85:2c:1a:71:4a:e0:bc:0f: d0:8b:2b:36:be:27:0f:ee:6e:5a:95:46:a2:45:15:34:45:52: 59:a5:ca:36:ed:e2:38:48:e0:f5:41:9c:d0:30:0b:7a:dd:93: 89:4c:56:df:42:de:0b:44:1b:d5:d1:5e:80:de:93:b3:ea:60: fc:b4:af:2a:b4:cb:44:19:3c:16:09:91:40:74:aa:4c:16:b5: 18:d9:f9:3b:b3:8c:aa:57:b9:14:9c:f7:b6:6f:66:71:19:b7: 3b:3b:32:c1:de:6a:19:64:34:21:ea:c8:28:57:f5:37:f7:26: 7d:87:e0:24:cd:86:b9:0f:d1:54:1f:56:83:fd:6e:a8:85:45: e7:6d:a1:5b:8d:d5:1b:af:7c:04:f6:7b:8d:53:82:f4:eb:92: 8c:0c:d5:59:1a:f3:b3:de:f6:6b:d4:2e:f6:a7:e9:69:eb:12: 50:af:4f:c7:a3:31:6a:af:c4:cc:fc:f3:50:70:48:53:b2:30: d2:8c:de:77:8d:d3:da:e8:02:d0:f2:84:54:0c:e0:f7:0d:9d: 7c:9a:cd:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLdh7sl+9JsmfTRrYnUzuZ4ycMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA5MjExNDUwMDFaFw0yNjA5MjIxNjM0MDFaMDMxMTAvBgNV BAMTKDRDQjg5NUREMzY3NUJBQTEwRjlBMDc2NThCMjZDQzkxNEUyOEY5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7mADRNcQvCNQ4fHBGyh0So6K TuT46BZ1BuQbsvV+Yol5KouhgGVLdfCMpd1TEK8uSECXaw3Fw+4ye1tCoVMiL/CJ wK0cruMzxwUlQ/hM7atZphFw+M6sGkbsCSXALqUngE7M8WvkE7UqjHwCVXaWSZ93 gn4hgddm4JksRgkdZx02JwkMVivFHGjU/OxpsDp9lNu2+tizCq3cNGNNzsGJXhRA YpSmzP4cnuLI7/mEl5aC1ftx9pKFzVXZe81kwOikHWXsOx2BRRg/Ed/a7bYFJJEM o3Z4ekw7B3PPqKU3HZtxZuLjU9kdskTNRVADdr0bxZucZ2/xtib5xaocGHl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLiV3TZ1uqEPmgdliybMkU4o+TswHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbsWdXvxeLfO0zzCW+2N0phPxg6GDmaiHLp vSq4noUNtAAkk3wAp6Gxcw/3/0eFLBpxSuC8D9CLKza+Jw/ublqVRqJFFTRFUlml yjbt4jhI4PVBnNAwC3rdk4lMVt9C3gtEG9XRXoDek7PqYPy0ryq0y0QZPBYJkUB0 qkwWtRjZ+TuzjKpXuRSc97ZvZnEZtzs7MsHeahlkNCHqyChX9Tf3Jn2H4CTNhrkP 0VQfVoP9bqiFRedtoVuN1RuvfAT2e41TgvTrkowM1Vka87Pe9mvULvan6WnrElCv T8ejMWqvxMz881BwSFOyMNKM3neN09roAtDyhFQM4PcNnXyazWY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:50:38 2026 by rpki-client