$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft File: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft (raw, json) Hash identifier: ksOePI3+2mbm/tdMLyMeWUXBFeQT3uAuZg4OkbV4Nt0= Subject key identifier: B7:2B:F7:79:E2:CF:7A:43:76:30:33:80:B7:1D:8F:76:43:01:A3:EB Authority key identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 Certificate issuer: /CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Certificate serial: 65B0790C059E3C643BFC637318A432AD87F83A4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:30:54 +0000 Manifest this update: Sun 20 Sep 2026 19:25:54 +0000 Manifest next update: Mon 21 Sep 2026 23:16:54 +0000 Files and hashes: 1: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl (hash: TRlWX1OJjQ5g900NsWQvDJtj5tZ+rrasvpW8p+rcGio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b0:79:0c:05:9e:3c:64:3b:fc:63:73:18:a4:32:ad:87:f8:3a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Validity Not Before: Sep 20 19:25:54 2026 GMT Not After : Sep 21 23:16:54 2026 GMT Subject: CN=B72BF779E2CF7A4376303380B71D8F764301A3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:2e:a3:6c:10:75:80:d2:5b:c6:c8:88:b3: 96:cb:8a:fa:d8:88:1e:c4:cd:60:bb:03:cc:28:79: db:1f:b7:6f:91:e1:25:2c:e7:dc:56:30:71:fc:28: e0:5f:f9:b6:58:17:f1:8a:07:fb:f4:36:c4:61:14: 09:4d:45:0a:8e:29:f5:13:8e:86:87:42:df:6f:5e: 6f:8a:5d:a3:9a:cc:1e:48:34:ee:7a:b2:52:8f:15: 7a:08:e0:d8:9b:ac:ec:56:db:47:f2:96:ef:58:e5: d3:cc:63:d8:7c:f1:01:6c:8c:7b:63:08:31:c5:e5: 3b:df:6c:24:db:6a:fa:73:b8:2d:64:05:46:88:75: 2f:5a:1f:f8:38:c3:57:4e:0b:14:bf:08:04:50:c5: 79:4e:4e:6e:50:2b:35:d6:f8:ca:31:80:ec:0e:28: c9:95:ed:99:34:92:75:a3:75:6f:91:5a:9a:82:ae: 48:42:6c:02:f2:11:7b:b5:55:96:f2:76:ec:9e:df: 70:6d:5c:52:c6:98:2d:d0:59:7d:a6:8f:e4:bc:08: 6f:66:12:da:2e:92:9b:23:7f:66:5d:5c:79:d0:b2: 6b:b4:0a:dc:c3:82:37:2c:c9:65:79:0c:2a:b2:d9: 5c:96:03:1a:19:c5:a9:28:fd:10:2f:e4:20:1e:7e: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2B:F7:79:E2:CF:7A:43:76:30:33:80:B7:1D:8F:76:43:01:A3:EB X509v3 Authority Key Identifier: keyid:F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:b0:5f:79:83:ed:52:83:e4:7a:04:51:d4:50:d1:d4:18: ef:4f:d9:00:60:4c:85:fa:f4:5b:aa:ae:2e:c6:a0:5d:30:96: d0:f8:2b:6f:09:45:a8:5d:f4:2d:5b:df:f5:c5:b9:31:a5:42: 97:c8:15:5e:e2:77:0d:1e:8e:76:45:88:ce:bd:c9:9e:fb:ea: fa:61:cd:b5:cc:f0:f4:ee:8c:c5:be:8a:b9:c5:92:82:73:56: 29:97:52:f9:72:d2:35:8d:c2:21:57:b9:b1:40:f4:b1:1a:db: 5b:b9:37:74:77:87:72:68:fa:18:54:0b:e6:02:20:f4:79:51: 00:0a:f8:e3:92:c2:38:8a:9c:da:a7:4d:62:ae:98:1f:55:9f: c1:aa:19:e2:02:e7:5a:35:47:a5:98:43:8b:17:c3:0d:38:96: bf:32:3a:a8:a3:31:a4:9e:3f:5a:aa:c4:07:84:ef:9a:97:c7: 69:1e:5e:f5:57:da:02:d3:96:1f:56:0d:a8:9e:28:bf:f4:7e: 31:e4:9b:2b:c0:0e:22:0d:02:aa:18:a4:18:33:31:27:50:69: 96:58:71:6e:c0:ca:19:e9:10:a2:c0:91:5b:67:e2:0f:5b:1e: bf:67:d4:30:f5:94:8b:77:08:ce:21:ba:6a:01:b5:63:46:07: 2d:9c:e0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbB5DAWePGQ7/GNzGKQyrYf4Ok8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMy OUVDMkY5MzAeFw0yNjA5MjAxOTI1NTRaFw0yNjA5MjEyMzE2NTRaMDMxMTAvBgNV BAMTKEI3MkJGNzc5RTJDRjdBNDM3NjMwMzM4MEI3MUQ4Rjc2NDMwMUEzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4S6jbBB1gNJbxsiIs5bLivrY iB7EzWC7A8woedsft2+R4SUs59xWMHH8KOBf+bZYF/GKB/v0NsRhFAlNRQqOKfUT joaHQt9vXm+KXaOazB5INO56slKPFXoI4NibrOxW20fylu9Y5dPMY9h88QFsjHtj CDHF5TvfbCTbavpzuC1kBUaIdS9aH/g4w1dOCxS/CARQxXlOTm5QKzXW+MoxgOwO KMmV7Zk0knWjdW+RWpqCrkhCbALyEXu1VZbyduye33BtXFLGmC3QWX2mj+S8CG9m Etoukpsjf2ZdXHnQsmu0CtzDgjcsyWV5DCqy2VyWAxoZxako/RAv5CAefit/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtyv3eeLPekN2MDOAtx2PdkMBo+swHwYDVR0j BBgwFoAU+T2NhTGz/7rrbfGpBpYQ7CnsL5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlOTZiZjMtZDAyMS00ZDg0LTkwZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUz MUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMyOUVDMkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNEOEQ4NTMxQjNGRkJBRUI2REYxQTkwNjk2MTBFQzI5RUMy RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEw RUMyOUVDMkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbPsF95g+1Sg+R6BFHUUNHUGO9P2QBgTIX6 9Fuqri7GoF0wltD4K28JRahd9C1b3/XFuTGlQpfIFV7idw0ejnZFiM69yZ776vph zbXM8PTujMW+irnFkoJzVimXUvly0jWNwiFXubFA9LEa21u5N3R3h3Jo+hhUC+YC IPR5UQAK+OOSwjiKnNqnTWKumB9Vn8GqGeIC51o1R6WYQ4sXww04lr8yOqijMaSe P1qqxAeE75qXx2keXvVX2gLTlh9WDaieKL/0fjHkmyvADiINAqoYpBgzMSdQaZZY cW7AyhnpEKLAkVtn4g9bHr9n1DD1lIt3CM4humoBtWNGBy2c4F8= -----END CERTIFICATE-----Generated at Mon Sep 21 12:06:38 2026 by rpki-client