$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json) Hash identifier: RUIg7c/OgZDfkOqsTxklXUkRm2IVdwqGRbocOaq28bk= Subject key identifier: 53:A0:BB:D1:B3:38:A0:1A:F4:B1:CE:5D:AB:54:6E:08:43:2C:B9:C6 Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Certificate issuer: /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Certificate serial: 69F10020821E72C183B5B2D2B5F0E0ACBFF1B2D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 04:15:30 +0000 Manifest this update: Fri 25 Sep 2026 04:10:30 +0000 Manifest next update: Sat 26 Sep 2026 06:19:30 +0000 Files and hashes: 1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: /2AcmmEuwgPnYpy1ox3TuEHQvP88qOwNsAMIvQpBKc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f1:00:20:82:1e:72:c1:83:b5:b2:d2:b5:f0:e0:ac:bf:f1:b2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Validity Not Before: Sep 25 04:10:30 2026 GMT Not After : Sep 26 06:19:30 2026 GMT Subject: CN=53A0BBD1B338A01AF4B1CE5DAB546E08432CB9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:5b:50:e2:ae:ff:c1:4b:ac:de:c4:3c:30: 86:1a:fe:72:51:72:61:27:09:90:c5:3c:36:51:03: 8e:e0:a6:a5:ad:e2:18:e0:5f:ce:ba:0d:af:8f:0c: 89:6b:8f:5b:b7:cb:42:27:14:3d:87:7d:de:a4:ac: 75:56:e8:e4:a9:09:ca:75:54:86:ed:5f:6f:ed:d5: cb:4f:33:5e:be:52:ad:db:80:e4:9e:00:0b:70:f0: 59:c2:c2:1c:8b:46:ad:d0:7c:58:8a:cc:23:6e:94: 22:d2:d2:93:b0:fe:07:4c:b7:99:76:41:95:d2:3d: 07:1c:9f:ad:3c:75:7e:4e:0d:97:b8:7d:0e:9c:6d: 7b:6f:ad:60:9f:49:81:2c:96:83:8f:85:4a:c6:93: 2f:94:02:26:dd:5e:4a:f6:95:25:ba:a0:83:05:9c: b4:41:78:bb:f3:37:6f:0a:82:ea:b1:41:30:52:5c: 83:5b:8e:93:31:25:5a:cc:72:9b:f3:aa:07:b6:ec: 09:bb:f4:ef:f7:c1:be:33:89:6e:d0:c3:e9:40:1d: 45:f7:ba:3d:e1:b4:b3:38:37:c5:e8:30:44:db:96: 2e:ef:51:f4:b7:80:f9:de:b3:b6:96:8b:65:a3:52: 9e:29:35:19:3b:9b:8e:2a:e4:ff:b1:67:bc:3b:b5: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:BB:D1:B3:38:A0:1A:F4:B1:CE:5D:AB:54:6E:08:43:2C:B9:C6 X509v3 Authority Key Identifier: keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:8a:49:f9:ea:18:5a:b2:aa:5a:29:2a:84:08:29:e9:b7:8f: 8e:e5:d9:aa:1a:75:c8:cb:31:88:e8:d2:43:df:e8:00:47:ed: d2:92:79:4a:1f:13:61:21:84:c0:35:71:61:0f:9d:49:7e:26: 65:c7:3b:a4:da:d2:b3:d4:d1:73:f0:58:69:eb:bd:91:d2:a6: 8a:e3:2f:4a:76:83:f4:c8:3d:ca:18:1c:5b:8d:15:4d:4d:0b: 23:49:b8:c0:b6:88:bf:40:c1:6e:33:1b:af:48:95:15:e4:53: 48:59:64:48:84:76:25:0f:4d:55:4f:87:44:a0:f8:c3:d8:85: ad:64:6c:89:34:8e:2d:15:00:3a:69:a3:43:90:1d:26:2a:62: 77:5b:9b:b4:2c:7d:5c:be:4c:cc:4c:ee:7f:ef:85:7c:37:a9: f2:a6:60:4c:ea:13:a5:d9:04:5f:54:21:45:94:1a:55:fd:5a: e1:ce:1f:74:21:d6:88:6e:6f:5e:fa:64:39:d3:30:b5:14:19: 05:71:c1:0d:0b:6e:ba:ba:0e:12:5d:09:b5:60:cd:be:99:56: 7f:f9:c5:94:85:d3:72:12:07:76:8f:92:90:ba:31:99:6e:12: 04:45:f0:dd:84:ac:76:63:7f:21:d6:6f:63:df:92:a3:17:89: 99:e0:be:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafEAIIIecsGDtbLStfDgrL/xstEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlG Q0YzMTIxMDAeFw0yNjA5MjUwNDEwMzBaFw0yNjA5MjYwNjE5MzBaMDMxMTAvBgNV BAMTKDUzQTBCQkQxQjMzOEEwMUFGNEIxQ0U1REFCNTQ2RTA4NDMyQ0I5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtVtQ4q7/wUus3sQ8MIYa/nJR cmEnCZDFPDZRA47gpqWt4hjgX866Da+PDIlrj1u3y0InFD2Hfd6krHVW6OSpCcp1 VIbtX2/t1ctPM16+Uq3bgOSeAAtw8FnCwhyLRq3QfFiKzCNulCLS0pOw/gdMt5l2 QZXSPQccn608dX5ODZe4fQ6cbXtvrWCfSYEsloOPhUrGky+UAibdXkr2lSW6oIMF nLRBeLvzN28KguqxQTBSXINbjpMxJVrMcpvzqge27Am79O/3wb4ziW7Qw+lAHUX3 uj3htLM4N8XoMETbli7vUfS3gPnes7aWi2WjUp4pNRk7m44q5P+xZ7w7tZx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6C70bM4oBr0sc5dq1RuCEMsucYwHwYDVR0j BBgwFoAU2uWdfDIJwzSd4BeOcBy06fzzEhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA0MWI0OGQtNzNjNC00Y2RkLWJjYWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0Mz MjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlGQ0YzMTIxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQUU1OUQ3QzMyMDlDMzM0OURFMDE3OEU3MDFDQjRFOUZDRjMx MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0 RTlGQ0YzMTIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANiKSfnqGFqyqlopKoQIKem3j47l2aoadcjL MYjo0kPf6ABH7dKSeUofE2EhhMA1cWEPnUl+JmXHO6Ta0rPU0XPwWGnrvZHSporj L0p2g/TIPcoYHFuNFU1NCyNJuMC2iL9AwW4zG69IlRXkU0hZZEiEdiUPTVVPh0Sg +MPYha1kbIk0ji0VADppo0OQHSYqYndbm7QsfVy+TMxM7n/vhXw3qfKmYEzqE6XZ BF9UIUWUGlX9WuHOH3Qh1ohub176ZDnTMLUUGQVxwQ0Lbrq6DhJdCbVgzb6ZVn/5 xZSF03ISB3aPkpC6MZluEgRF8N2ErHZjfyHWb2PfkqMXiZngvhw= -----END CERTIFICATE-----Generated at Fri Sep 25 09:21:12 2026 by rpki-client