$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft File: 368503D1386A131369164C5912181352537A2D3C.mft (raw, json) Hash identifier: jW/CCNSFk1KFfV7+5PJznePs3op+BhBVqiWZ193F+QM= Subject key identifier: ED:44:B4:FA:AB:6D:28:80:05:2A:D1:AA:78:C6:9E:68:FF:7D:64:F8 Authority key identifier: 36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C Certificate issuer: /CN=368503D1386A131369164C5912181352537A2D3C Certificate serial: 4FB3A010B61481BB5D96CAD6264E18EAEECBCE51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 17:47:06 +0000 Manifest this update: Sat 26 Sep 2026 17:42:06 +0000 Manifest next update: Sun 27 Sep 2026 18:48:06 +0000 Files and hashes: 1: 368503D1386A131369164C5912181352537A2D3C.crl (hash: vbl+IOovpgUbZP5Rwzr4lEDcvKlfXY8LaHgv03mbtNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b3:a0:10:b6:14:81:bb:5d:96:ca:d6:26:4e:18:ea:ee:cb:ce:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368503D1386A131369164C5912181352537A2D3C Validity Not Before: Sep 26 17:42:06 2026 GMT Not After : Sep 27 18:48:06 2026 GMT Subject: CN=ED44B4FAAB6D2880052AD1AA78C69E68FF7D64F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:f1:d5:9d:fc:8b:c9:a6:77:4d:8b:f1:62: 1c:c7:f7:0a:84:9b:01:f3:69:98:59:44:7e:9a:51: d5:55:61:ac:8c:39:ce:99:4e:97:d4:c4:56:f2:33: 24:ba:07:9a:13:f4:8d:d7:a4:99:32:d5:80:2e:9c: c7:fd:dc:60:99:9b:37:7a:eb:8f:e9:2e:3b:b2:f4: fd:a4:11:57:a1:ab:79:78:5b:ad:c4:73:99:e0:a0: ab:a6:a1:55:86:ae:7d:de:18:ef:ab:ca:8a:80:e8: ce:44:a6:2d:22:89:79:1b:b5:ea:bb:23:14:df:44: 27:a1:de:87:79:e2:cb:6a:78:e1:15:74:c7:ef:ce: b5:ec:78:d0:ef:57:1e:7d:15:79:86:6f:fa:49:e8: 43:7a:e1:0e:a8:1e:c6:0a:0b:47:9e:78:77:5a:54: 43:f2:2b:9a:3b:fa:e3:93:ec:1c:e6:77:f4:6c:5a: e7:1f:53:9f:a4:6e:4e:9f:fb:ec:17:19:6f:e8:12: 57:a8:2f:01:30:cc:2f:20:2d:dc:81:19:c0:fa:a6: e3:99:62:c0:a7:e2:d6:48:b5:f7:12:dc:68:ba:45: d2:62:75:4b:0a:6b:f4:11:e6:f3:16:4f:af:0f:f5: 86:da:5d:d2:46:3f:30:f2:6d:5f:36:35:ff:e4:5b: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:44:B4:FA:AB:6D:28:80:05:2A:D1:AA:78:C6:9E:68:FF:7D:64:F8 X509v3 Authority Key Identifier: keyid:36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f8:73:99:8f:48:78:60:78:ff:35:a7:c2:fe:94:27:42:d9: 77:2f:c6:78:62:1c:45:fb:c3:b2:f8:37:ba:ce:43:3c:a8:ed: b8:75:4c:69:c3:fd:e8:29:cb:2c:36:14:0a:e7:3c:97:0d:e4: ef:74:f5:c6:ae:1e:d9:42:44:b0:5d:c1:d5:18:55:3a:3e:2d: 0a:92:9d:d1:af:30:1c:05:72:41:a4:a7:c5:ab:a6:3c:27:bb: 1e:6c:a6:c0:00:29:5f:e5:e3:db:5b:c0:9b:9a:fd:39:37:2d: cd:2d:9b:ba:14:cf:4d:c6:5b:21:d6:93:16:13:f8:ed:6a:99: bd:5a:cd:8d:d6:bf:71:cd:07:d0:26:ce:7d:1f:1b:6d:b1:73: 44:6d:18:84:f2:b5:37:eb:2e:37:68:a2:a9:e7:ee:98:3d:c0: c0:87:b0:be:a5:14:71:bb:23:47:6a:f1:af:02:ef:90:e3:5e: 75:ba:11:63:f4:16:10:05:35:45:c9:b2:ce:c6:b0:12:c4:ca: 7d:1a:d1:10:59:f6:10:4b:1e:86:b7:8a:a0:4f:4d:d4:7b:66: d4:6a:e8:37:12:3a:d2:2c:83:7a:cc:0a:1f:b6:41:fa:e0:bf: 7b:64:08:b3:78:b1:c0:8b:9c:5b:8c:89:8f:6b:0d:d8:72:1d: 20:a6:dd:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7OgELYUgbtdlsrWJk4Y6u7LzlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1 MzdBMkQzQzAeFw0yNjA5MjYxNzQyMDZaFw0yNjA5MjcxODQ4MDZaMDMxMTAvBgNV BAMTKEVENDRCNEZBQUI2RDI4ODAwNTJBRDFBQTc4QzY5RTY4RkY3RDY0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BfHVnfyLyaZ3TYvxYhzH9wqE mwHzaZhZRH6aUdVVYayMOc6ZTpfUxFbyMyS6B5oT9I3XpJky1YAunMf93GCZmzd6 64/pLjuy9P2kEVehq3l4W63Ec5ngoKumoVWGrn3eGO+ryoqA6M5Epi0iiXkbteq7 IxTfRCeh3od54stqeOEVdMfvzrXseNDvVx59FXmGb/pJ6EN64Q6oHsYKC0eeeHda VEPyK5o7+uOT7Bzmd/RsWucfU5+kbk6f++wXGW/oEleoLwEwzC8gLdyBGcD6puOZ YsCn4tZItfcS3Gi6RdJidUsKa/QR5vMWT68P9YbaXdJGPzDybV82Nf/kW/P9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7US0+qttKIAFKtGqeMaeaP99ZPgwHwYDVR0j BBgwFoAUNoUD0ThqExNpFkxZEhgTUlN6LTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTkyMDVlN2MtYTg4MS00ODczLTkxODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEz ODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1MzdBMkQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjg1MDNEMTM4NkExMzEzNjkxNjRDNTkxMjE4MTM1MjUzN0Ey RDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEz NTI1MzdBMkQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj4c5mPSHhgeP81p8L+lCdC2XcvxnhiHEX7 w7L4N7rOQzyo7bh1TGnD/egpyyw2FArnPJcN5O909cauHtlCRLBdwdUYVTo+LQqS ndGvMBwFckGkp8Wrpjwnux5spsAAKV/l49tbwJua/Tk3Lc0tm7oUz03GWyHWkxYT +O1qmb1azY3Wv3HNB9Amzn0fG22xc0RtGITytTfrLjdooqnn7pg9wMCHsL6lFHG7 I0dq8a8C75DjXnW6EWP0FhAFNUXJss7GsBLEyn0a0RBZ9hBLHoa3iqBPTdR7ZtRq 6DcSOtIsg3rMCh+2Qfrgv3tkCLN4scCLnFuMiY9rDdhyHSCm3co= -----END CERTIFICATE-----Generated at Sun Sep 27 11:15:45 2026 by rpki-client