$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: I8KnujzIEXr72pnaKVd7w1EwCQdNqMr5cvpc2c4H9PY= Subject key identifier: 65:AD:2A:03:B1:F7:7A:4C:16:7A:DF:43:86:24:E4:F0:CB:4F:71:BC Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 32B3C78324F6A94B84A8C59B6B87F2F9BDAC99DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: BE Signing time: Sun 20 Sep 2026 14:04:19 +0000 Manifest this update: Sun 20 Sep 2026 13:59:19 +0000 Manifest next update: Mon 21 Sep 2026 14:49:19 +0000 Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: 6YS9rugUM87fdP8n4kOS0DJ/M6Zsw3uRnDHTt9rWmOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b3:c7:83:24:f6:a9:4b:84:a8:c5:9b:6b:87:f2:f9:bd:ac:99:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Sep 20 13:59:19 2026 GMT Not After : Sep 21 14:49:19 2026 GMT Subject: CN=65AD2A03B1F77A4C167ADF438624E4F0CB4F71BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:1f:5e:1c:ef:23:f3:27:b8:67:6a:62:5b: 64:8b:d3:27:56:9c:39:98:e0:d5:19:54:8a:15:46: d6:ad:de:2a:f4:5f:e6:c0:dd:14:b3:47:46:2d:49: 23:cf:1a:a0:62:4b:5b:a0:3e:74:4c:c5:2d:03:7e: 0d:99:44:47:65:ee:cf:e5:44:af:7b:f4:62:25:c1: 90:01:bc:db:ff:f6:27:a2:ef:8b:cc:9b:e4:e4:93: 44:6f:56:d3:ca:37:be:d3:b5:44:65:a5:84:8d:1a: 2a:95:d0:e3:37:a6:c1:41:c9:49:28:71:4e:85:0c: 56:8f:e0:d4:75:a9:f2:a3:12:99:4e:07:5c:8e:fb: f5:6d:bf:3c:f7:d3:c3:62:6a:8d:cf:9a:92:3d:43: f6:ff:04:59:56:81:3d:41:a0:66:a8:53:59:08:fb: 9b:56:70:fa:86:3d:0f:ff:60:c3:c5:0c:6b:9c:7c: 35:c2:a7:b8:ec:26:4d:1a:e0:f8:8b:ab:05:22:37: e7:2b:b6:a4:cd:8b:56:5e:48:95:9d:a1:55:84:71: 3a:6f:ca:8f:31:92:88:99:f3:13:f8:a5:ea:2e:cd: b4:71:25:a8:67:4c:da:1a:46:b8:26:06:50:e2:e7: 3f:9e:7f:65:98:c5:b4:6c:cd:5f:9b:d6:ce:ac:b0: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:2A:03:B1:F7:7A:4C:16:7A:DF:43:86:24:E4:F0:CB:4F:71:BC X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5a:99:d9:b5:17:bc:07:13:26:c8:83:d8:81:35:97:b7:bf: ad:d0:c2:bb:64:80:82:0f:4c:84:59:0a:e0:08:2a:36:2d:35: b2:f3:fe:27:52:c2:fa:2b:c4:c8:5f:7c:5f:f3:85:10:ba:57: 1b:a8:cf:fe:a4:ec:82:39:09:ec:3f:19:17:51:19:99:6c:9d: 7e:df:c2:68:61:c6:1f:98:98:81:b8:fc:e6:4f:49:ce:5d:d4: 2b:4f:2c:65:b9:d5:28:75:07:f5:a9:dc:fe:0c:ec:e9:3d:43: f6:48:ac:4c:cf:4c:dd:e9:f0:cd:2f:4d:7c:54:3e:28:60:bd: 18:2a:c4:09:9e:f3:6e:fc:a9:b5:f6:5e:d0:5c:fc:79:e9:76: 22:3a:b7:a2:84:97:7b:ba:a0:52:cf:61:40:6d:d9:85:38:7e: ce:b8:03:70:71:ae:b0:7b:e8:5a:54:c4:3b:e5:80:6c:63:d9: c0:3e:33:c7:a6:28:5e:2a:e9:31:7e:4c:7b:8e:20:c0:76:45: 78:5f:6b:0b:cf:08:5d:34:80:aa:ec:e2:97:85:ab:5c:b3:31: 4c:ee:7d:8c:48:24:31:ae:f1:9d:81:5f:63:45:b0:7e:1c:88: 1e:39:55:85:73:58:28:68:62:42:65:e3:dc:81:f6:bc:0b:af: 7a:cc:a8:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrPHgyT2qUuEqMWba4fy+b2smdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA5MjAxMzU5MTlaFw0yNjA5MjExNDQ5MTlaMDMxMTAvBgNV BAMTKDY1QUQyQTAzQjFGNzdBNEMxNjdBREY0Mzg2MjRFNEYwQ0I0RjcxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJh9eHO8j8ye4Z2piW2SL0ydW nDmY4NUZVIoVRtat3ir0X+bA3RSzR0YtSSPPGqBiS1ugPnRMxS0Dfg2ZREdl7s/l RK979GIlwZABvNv/9iei74vMm+Tkk0RvVtPKN77TtURlpYSNGiqV0OM3psFByUko cU6FDFaP4NR1qfKjEplOB1yO+/Vtvzz308Niao3PmpI9Q/b/BFlWgT1BoGaoU1kI +5tWcPqGPQ//YMPFDGucfDXCp7jsJk0a4PiLqwUiN+crtqTNi1ZeSJWdoVWEcTpv yo8xkoiZ8xP4peouzbRxJahnTNoaRrgmBlDi5z+ef2WYxbRszV+b1s6ssJqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZa0qA7H3ekwWet9DhiTk8MtPcbwwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdamdm1F7wHEybIg9iBNZe3v63QwrtkgIIP TIRZCuAIKjYtNbLz/idSwvorxMhffF/zhRC6Vxuoz/6k7II5Cew/GRdRGZlsnX7f wmhhxh+YmIG4/OZPSc5d1CtPLGW51Sh1B/Wp3P4M7Ok9Q/ZIrEzPTN3p8M0vTXxU PihgvRgqxAme8278qbX2XtBc/HnpdiI6t6KEl3u6oFLPYUBt2YU4fs64A3BxrrB7 6FpUxDvlgGxj2cA+M8emKF4q6TF+THuOIMB2RXhfawvPCF00gKrs4peFq1yzMUzu fYxIJDGu8Z2BX2NFsH4ciB45VYVzWChoYkJl49yB9rwLr3rMqNk= -----END CERTIFICATE-----Generated at Sun Sep 20 21:13:19 2026 by rpki-client