$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: iSCIpPHAGarOKleFj2BwY7wQOXJAyuKnnRNF1zSmooU= Subject key identifier: D2:5E:4D:EB:7E:A4:75:B4:03:36:BD:13:9E:E2:F8:08:30:D1:73:CD Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 14FEF91F3DFF028BCF00A55B5EF915A4C25F3A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: BE Signing time: Sun 20 Sep 2026 21:13:12 +0000 Manifest this update: Sun 20 Sep 2026 21:08:12 +0000 Manifest next update: Tue 22 Sep 2026 00:05:12 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: C2bTLtsbybMVJAxCXjJ6rk6NOyPGg9Uf11LXdo8nBrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fe:f9:1f:3d:ff:02:8b:cf:00:a5:5b:5e:f9:15:a4:c2:5f:3a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Sep 20 21:08:12 2026 GMT Not After : Sep 22 00:05:12 2026 GMT Subject: CN=D25E4DEB7EA475B40336BD139EE2F80830D173CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:5c:db:3a:72:b6:e6:64:dc:b4:96:9d:9b: 16:0d:b3:06:04:bf:9a:79:71:d1:d8:74:2b:54:18: aa:f9:0b:83:0d:94:05:9c:49:06:81:a2:f2:f1:61: 11:1a:b3:a7:2e:23:42:7e:e5:ff:2b:96:9e:d9:bc: f5:d4:8e:b2:77:88:bf:bd:57:c5:8d:d4:bd:eb:3f: 05:0e:b6:09:57:17:46:a4:65:1d:ce:21:cf:56:e5: 12:21:cc:7f:13:91:d0:af:59:77:3f:40:f4:b9:e2: 1b:89:ee:79:38:9c:db:8b:e3:a1:8a:c5:45:01:90: 22:3f:cc:d3:e6:f5:a6:82:15:26:47:b1:f9:06:a2: 0b:4e:af:19:70:72:30:ce:b4:39:2c:58:ad:da:39: 84:96:bf:70:78:cc:60:28:c9:26:d4:a0:a3:0b:fb: 5e:fa:69:2e:8f:d6:1c:78:c9:4d:e2:fc:4b:f1:3f: 72:42:a2:c3:e4:54:16:00:a2:8e:a0:20:1e:59:d6: 31:35:d1:2d:56:75:a8:bd:6b:7b:01:83:f5:dd:c8: 5a:92:c2:fa:13:01:c4:77:a5:b5:04:8c:57:56:c0: a7:e0:6a:43:40:6e:31:ff:48:33:8d:38:21:87:f1: 08:29:77:61:72:73:8b:e0:21:d1:dc:39:33:f5:d2: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5E:4D:EB:7E:A4:75:B4:03:36:BD:13:9E:E2:F8:08:30:D1:73:CD X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:57:5f:5b:16:42:10:84:93:f0:fe:31:48:aa:84:c6:07:1e: 9c:94:4a:be:e7:ce:ed:31:fa:9e:db:d1:5e:d8:b6:64:18:e5: 6b:e8:3d:f6:93:55:24:42:76:d8:15:60:00:09:46:2f:9e:00: 99:2f:77:b6:e9:6a:07:7d:49:f1:8a:b4:1a:11:94:57:72:29: 77:bf:01:a5:da:c8:16:4b:9c:2f:9a:63:6f:eb:9c:fe:27:69: 03:0a:fd:21:f7:1a:7c:82:59:dc:7a:54:f8:30:c7:bd:5c:87: f7:40:a2:d3:fe:15:8a:12:ee:e5:47:78:67:32:93:2d:d8:90: e1:8a:ba:b8:40:94:49:70:fd:d1:d1:6b:41:6e:96:e6:e5:85: 98:2b:90:0d:0b:31:3e:6c:76:20:54:a0:aa:d5:ff:c3:54:fd: 79:ef:80:a5:0d:cb:48:86:83:62:03:2f:af:46:89:70:7e:4b: 32:94:bc:2a:12:df:09:f8:3a:8a:43:85:be:83:3a:27:a5:c0: 5c:7b:49:b3:cb:6b:fe:16:b3:35:ce:d2:ed:f5:c6:67:81:8b: ac:33:08:55:60:6b:08:d4:85:12:fa:40:f8:04:b1:09:0f:3e: f4:23:03:31:c2:af:8c:78:92:52:56:e3:cb:c1:70:63:12:ad: e8:bd:23:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP75Hz3/AovPAKVbXvkVpMJfOiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA5MjAyMTA4MTJaFw0yNjA5MjIwMDA1MTJaMDMxMTAvBgNV BAMTKEQyNUU0REVCN0VBNDc1QjQwMzM2QkQxMzlFRTJGODA4MzBEMTczQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFlzbOnK25mTctJadmxYNswYE v5p5cdHYdCtUGKr5C4MNlAWcSQaBovLxYREas6cuI0J+5f8rlp7ZvPXUjrJ3iL+9 V8WN1L3rPwUOtglXF0akZR3OIc9W5RIhzH8TkdCvWXc/QPS54huJ7nk4nNuL46GK xUUBkCI/zNPm9aaCFSZHsfkGogtOrxlwcjDOtDksWK3aOYSWv3B4zGAoySbUoKML +176aS6P1hx4yU3i/EvxP3JCosPkVBYAoo6gIB5Z1jE10S1Wdai9a3sBg/XdyFqS wvoTAcR3pbUEjFdWwKfgakNAbjH/SDONOCGH8Qgpd2Fyc4vgIdHcOTP10vT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0l5N636kdbQDNr0TnuL4CDDRc80wHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZXX1sWQhCEk/D+MUiqhMYHHpyUSr7nzu0x +p7b0V7YtmQY5WvoPfaTVSRCdtgVYAAJRi+eAJkvd7bpagd9SfGKtBoRlFdyKXe/ AaXayBZLnC+aY2/rnP4naQMK/SH3GnyCWdx6VPgwx71ch/dAotP+FYoS7uVHeGcy ky3YkOGKurhAlElw/dHRa0FulublhZgrkA0LMT5sdiBUoKrV/8NU/XnvgKUNy0iG g2IDL69GiXB+SzKUvCoS3wn4OopDhb6DOielwFx7SbPLa/4WszXO0u31xmeBi6wz CFVgawjUhRL6QPgEsQkPPvQjAzHCr4x4klJW48vBcGMSrei9I1Q= -----END CERTIFICATE-----Generated at Mon Sep 21 10:08:06 2026 by rpki-client