$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: s26gb//Bb7OXf8xBawhlIj8wEy2YK04TYnH8PqLsJvI= Subject key identifier: 46:B6:FA:2E:3F:C0:FE:9A:CE:0A:F1:51:D3:1F:96:9B:C8:29:BC:AD Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 340353BDA67163397904EAE35AB48099D71A6C50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: BB Signing time: Sun 20 Sep 2026 18:09:19 +0000 Manifest this update: Sun 20 Sep 2026 18:04:19 +0000 Manifest next update: Mon 21 Sep 2026 19:12:19 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: y05QnJOsy7dbnh8/qp/GmHVMSkqohmNassJZg/dDyJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:03:53:bd:a6:71:63:39:79:04:ea:e3:5a:b4:80:99:d7:1a:6c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Sep 20 18:04:19 2026 GMT Not After : Sep 21 19:12:19 2026 GMT Subject: CN=46B6FA2E3FC0FE9ACE0AF151D31F969BC829BCAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:03:14:d2:7f:af:f5:d8:9f:64:41:68:3e: 5a:01:40:93:c5:c0:df:f4:a2:50:9c:68:48:53:a9: 3b:c1:70:1b:48:9b:f7:59:95:60:65:2c:db:c6:0e: ca:74:30:c5:c8:64:9c:bd:14:3d:ab:b2:60:34:ca: 93:8e:0a:9d:3a:4d:53:75:0e:dd:91:f9:f1:40:aa: 66:bc:fa:66:51:0e:7a:8b:5b:ac:5d:05:fe:2d:5a: e6:50:7c:d4:21:8a:4c:20:fc:d6:47:1d:c0:42:71: fe:55:80:e8:c0:59:9e:d0:d0:d2:e2:8d:5a:4c:71: 57:d0:fd:56:12:f8:4e:c4:33:76:30:db:da:32:57: c1:0b:a2:ec:e8:6f:d9:bf:9d:0a:df:33:6f:2e:41: 46:c6:2c:26:32:bc:9c:79:0e:61:6a:24:b0:d0:f4: 33:11:09:25:fd:52:ae:5b:92:8e:33:5a:71:6b:25: 56:c1:b3:b9:39:c0:aa:77:92:ce:df:1d:92:f5:9f: 16:46:fd:d7:ce:25:52:3b:b9:86:7e:9d:f7:f8:31: 61:4f:9e:42:0e:97:ed:53:88:71:4b:17:ed:c0:be: ee:3e:e3:4c:5f:ce:1f:e6:46:46:2c:4d:54:41:d8: 43:34:f1:51:7e:76:5e:a1:61:5f:d3:fb:bd:55:7b: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:FA:2E:3F:C0:FE:9A:CE:0A:F1:51:D3:1F:96:9B:C8:29:BC:AD X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:0e:25:a4:aa:e2:a4:29:4b:f2:ef:fd:d9:9b:bd:58:c2: c4:5f:5f:9d:26:09:1f:91:31:4d:86:8c:9f:2e:41:09:53:94: f7:a8:e4:b1:a6:b5:ab:2a:48:96:0d:65:90:d8:e2:4f:6b:8b: 8c:e8:c7:10:2d:46:1c:a8:b9:06:4e:67:96:3d:85:cb:f2:2d: 90:63:83:ed:47:f3:03:4b:00:04:34:c6:51:92:b0:31:09:12: 10:44:6d:d8:a2:df:c1:61:0f:62:bd:da:02:63:44:5a:aa:d3: a4:d3:a6:63:dd:05:bf:08:2a:60:c0:79:61:03:8b:66:e9:6b: 56:e5:28:d5:48:fe:96:fa:ea:58:6d:e2:2a:87:8e:0d:01:7d: c5:71:a6:3f:85:14:33:51:47:6a:c9:73:9a:97:6d:76:dd:cf: f8:1f:33:56:02:6f:17:7f:53:99:f0:0d:1d:1c:bd:ab:d5:7a: e8:9a:93:76:29:45:c9:61:e7:73:6d:18:cc:8e:b5:33:76:9a: 0f:40:27:3a:5a:38:6d:9a:e0:09:33:40:96:0a:cf:40:d9:66: 3e:db:b6:f8:79:b4:5d:fb:53:57:f1:00:ca:81:a2:e1:c0:c1: 79:0b:6a:10:6d:b7:64:ee:2e:93:b8:b9:26:c4:2b:28:e4:ab: 52:76:fe:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNANTvaZxYzl5BOrjWrSAmdcabFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA5MjAxODA0MTlaFw0yNjA5MjExOTEyMTlaMDMxMTAvBgNV BAMTKDQ2QjZGQTJFM0ZDMEZFOUFDRTBBRjE1MUQzMUY5NjlCQzgyOUJDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKlgMU0n+v9difZEFoPloBQJPF wN/0olCcaEhTqTvBcBtIm/dZlWBlLNvGDsp0MMXIZJy9FD2rsmA0ypOOCp06TVN1 Dt2R+fFAqma8+mZRDnqLW6xdBf4tWuZQfNQhikwg/NZHHcBCcf5VgOjAWZ7Q0NLi jVpMcVfQ/VYS+E7EM3Yw29oyV8ELouzob9m/nQrfM28uQUbGLCYyvJx5DmFqJLDQ 9DMRCSX9Uq5bko4zWnFrJVbBs7k5wKp3ks7fHZL1nxZG/dfOJVI7uYZ+nff4MWFP nkIOl+1TiHFLF+3Avu4+40xfzh/mRkYsTVRB2EM08VF+dl6hYV/T+71Vexa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrb6Lj/A/prOCvFR0x+Wm8gpvK0wHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg1DiWkquKkKUvy7/3Zm71YwsRfX50mCR+R MU2GjJ8uQQlTlPeo5LGmtasqSJYNZZDY4k9ri4zoxxAtRhyouQZOZ5Y9hcvyLZBj g+1H8wNLAAQ0xlGSsDEJEhBEbdii38FhD2K92gJjRFqq06TTpmPdBb8IKmDAeWED i2bpa1blKNVI/pb66lht4iqHjg0BfcVxpj+FFDNRR2rJc5qXbXbdz/gfM1YCbxd/ U5nwDR0cvavVeuiak3YpRclh53NtGMyOtTN2mg9AJzpaOG2a4AkzQJYKz0DZZj7b tvh5tF37U1fxAMqBouHAwXkLahBtt2TuLpO4uSbEKyjkq1J2/rw= -----END CERTIFICATE-----Generated at Sun Sep 20 22:22:55 2026 by rpki-client