$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: ZvhAGeNGGXSw1v2zWyhCHgNXKrgDxGDw+0X4XHhhLt0= Subject key identifier: 45:11:BB:88:82:7D:3A:16:F2:DD:30:66:91:04:FF:54:D7:CD:42:C6 Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 0A76215537E66BB0FABE2D136E2B3AAFB1D1DA98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:41:04 +0000 Manifest this update: Thu 24 Sep 2026 20:36:04 +0000 Manifest next update: Fri 25 Sep 2026 23:04:04 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: lz8ZAZ71Oy0hPrjz8MKuP0gLU13MpcRToLt8iqdC/uI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:76:21:55:37:e6:6b:b0:fa:be:2d:13:6e:2b:3a:af:b1:d1:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: Sep 24 20:36:04 2026 GMT Not After : Sep 25 23:04:04 2026 GMT Subject: CN=4511BB88827D3A16F2DD30669104FF54D7CD42C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:a4:9c:f3:ea:3e:3f:bc:4c:29:72:7f:28: e3:13:84:b3:44:59:35:75:db:c1:57:e2:cb:86:b9: 02:e7:37:15:5a:ce:ed:8d:67:51:6b:d8:21:e0:9f: 49:50:40:33:86:82:a8:d8:0a:3c:05:36:0f:25:dc: 0b:25:15:a0:9d:88:0e:13:5c:ff:9c:7b:46:1d:56: 00:f1:d5:7c:ac:4a:93:31:3d:c6:db:e8:ea:d9:e3: 5f:c3:e4:6d:bc:31:20:73:7e:4b:5b:c5:a8:7f:bd: 46:1c:f3:3b:0c:79:f9:fa:5e:58:c3:fc:cb:9b:4a: c4:7e:70:61:75:3b:9d:7f:61:a1:ae:45:f4:e9:ab: 6c:28:d5:1f:b2:ef:6b:bd:21:4a:b0:c2:7c:ab:d7: 21:28:49:a7:b1:19:45:7d:cf:a0:86:ea:bc:39:a0: 94:ec:52:18:d6:bd:86:4f:96:82:26:69:81:fd:c6: d4:36:ce:b9:00:e6:a4:7a:a6:f2:21:24:02:fc:8d: 0d:96:74:66:6c:91:4b:cc:71:16:07:51:d4:1d:e4: b3:bb:8e:0f:c3:47:d8:71:a4:64:97:42:5d:36:4a: 7d:4a:51:13:60:f2:a8:08:46:fc:93:97:e2:86:80: 09:75:68:94:da:f7:3b:a6:12:52:ec:f1:bd:eb:10: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:11:BB:88:82:7D:3A:16:F2:DD:30:66:91:04:FF:54:D7:CD:42:C6 X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:44:37:cb:03:d0:14:c8:ce:af:11:66:38:d9:fe:70:8a:f4: 29:49:64:ad:1b:3a:c3:77:ef:ea:b4:00:30:97:c6:db:d9:f5: 5f:01:52:d7:bf:45:24:d3:43:5c:ed:66:6f:05:06:de:38:48: e4:51:3f:fd:ed:9c:a0:b0:3c:f9:ca:4d:fc:73:e6:e1:fa:12: 58:c1:ce:ee:ab:19:10:ef:1f:d7:1f:2e:f8:18:c6:16:7b:4e: 8c:12:49:1d:f1:28:d4:a1:c3:c6:9d:c6:11:c7:62:6d:5f:78: fe:b8:ca:ef:31:39:35:7e:e2:fc:2a:c0:1e:0e:07:b7:2c:18: b4:64:77:b3:b4:ba:10:2f:d7:4f:4b:64:3a:1d:0e:12:05:24: 79:06:47:cf:1d:96:2b:6d:37:4b:97:f1:22:23:00:77:c5:7d: 09:60:ec:e2:f0:30:72:02:80:69:a4:87:e8:62:0a:18:8f:21: b0:97:ac:a7:6e:eb:b8:e8:03:d7:4d:4d:59:bc:7d:8b:f0:eb: 51:ef:c9:05:de:30:bc:4e:09:6a:d1:6c:57:06:49:81:1b:ca: de:22:40:2f:68:6f:ae:94:fe:a0:9c:92:1c:b9:d8:5a:63:84: dd:ec:80:3c:84:c4:5e:cf:99:22:36:1e:5e:c6:57:12:a1:f0: bf:59:f9:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnYhVTfma7D6vi0Tbis6r7HR2pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA5MjQyMDM2MDRaFw0yNjA5MjUyMzA0MDRaMDMxMTAvBgNV BAMTKDQ1MTFCQjg4ODI3RDNBMTZGMkREMzA2NjkxMDRGRjU0RDdDRDQyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdKSc8+o+P7xMKXJ/KOMThLNE WTV128FX4suGuQLnNxVazu2NZ1Fr2CHgn0lQQDOGgqjYCjwFNg8l3AslFaCdiA4T XP+ce0YdVgDx1XysSpMxPcbb6OrZ41/D5G28MSBzfktbxah/vUYc8zsMefn6XljD /MubSsR+cGF1O51/YaGuRfTpq2wo1R+y72u9IUqwwnyr1yEoSaexGUV9z6CG6rw5 oJTsUhjWvYZPloImaYH9xtQ2zrkA5qR6pvIhJAL8jQ2WdGZskUvMcRYHUdQd5LO7 jg/DR9hxpGSXQl02Sn1KURNg8qgIRvyTl+KGgAl1aJTa9zumElLs8b3rEAo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRG7iIJ9Ohby3TBmkQT/VNfNQsYwHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNEN8sD0BTIzq8RZjjZ/nCK9ClJZK0bOsN3 7+q0ADCXxtvZ9V8BUte/RSTTQ1ztZm8FBt44SORRP/3tnKCwPPnKTfxz5uH6EljB zu6rGRDvH9cfLvgYxhZ7TowSSR3xKNShw8adxhHHYm1feP64yu8xOTV+4vwqwB4O B7csGLRkd7O0uhAv109LZDodDhIFJHkGR88dlittN0uX8SIjAHfFfQlg7OLwMHIC gGmkh+hiChiPIbCXrKdu67joA9dNTVm8fYvw61HvyQXeMLxOCWrRbFcGSYEbyt4i QC9ob66U/qCckhy52FpjhN3sgDyExF7PmSI2Hl7GVxKh8L9Z+SE= -----END CERTIFICATE-----Generated at Fri Sep 25 01:29:04 2026 by rpki-client