$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft File: E4082D8524B052029D62D695437D63F939A1F80E.mft (raw, json) Hash identifier: FCfd+mc58hYUvlLTmDx6NsRe+otTtsA8/lxbYg/7DuY= Subject key identifier: 6E:13:6C:00:7F:9D:17:F0:89:67:19:C6:59:C7:77:C0:A7:31:0C:25 Authority key identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E Certificate issuer: /CN=E4082D8524B052029D62D695437D63F939A1F80E Certificate serial: 034650D76C6BF15715E02A1E75A3C93FDE16E84E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 17:32:41 +0000 Manifest this update: Wed 23 Sep 2026 17:27:41 +0000 Manifest next update: Thu 24 Sep 2026 20:09:41 +0000 Files and hashes: 1: E4082D8524B052029D62D695437D63F939A1F80E.crl (hash: AooU8fE2yuECcNrnfWmJdZ3UZ08DudGDpK3XGJkDqEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:46:50:d7:6c:6b:f1:57:15:e0:2a:1e:75:a3:c9:3f:de:16:e8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4082D8524B052029D62D695437D63F939A1F80E Validity Not Before: Sep 23 17:27:41 2026 GMT Not After : Sep 24 20:09:41 2026 GMT Subject: CN=6E136C007F9D17F0896719C659C777C0A7310C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:a0:c3:65:b6:66:08:13:7f:a6:db:80:a5: 8b:53:d9:dc:d8:3d:4a:ba:8f:71:87:b8:c4:f7:b0: a6:1b:58:c6:87:fd:b2:68:67:51:f6:83:e6:52:64: 23:0c:05:0b:c4:c1:1a:b3:f1:ab:93:ca:f7:0b:f2: b7:32:c2:87:c3:b8:80:7c:76:18:94:25:f8:c5:46: 15:9f:f0:bf:99:f5:ff:64:d1:4a:5b:2b:f3:9d:bb: e7:ea:33:15:c1:3d:3c:d8:69:cf:aa:c9:bb:76:8d: 8c:ba:30:44:f4:c5:52:e8:b6:12:5a:62:e0:91:c5: b0:55:72:3d:67:42:37:08:40:04:fb:00:a4:e8:6d: 74:e3:1b:3e:95:61:ff:a2:00:ac:ee:2b:32:1e:85: b3:91:57:19:2a:25:e0:a9:5e:84:5c:1d:b9:8b:4c: 0b:6d:61:9b:fd:59:6b:4c:1b:41:75:43:9e:14:12: 40:bb:be:6d:21:b4:f8:80:53:bd:90:d3:b5:dd:ac: da:d1:b7:c3:2f:aa:de:2d:4f:0a:cc:b2:1b:ba:5b: 11:24:af:89:be:45:5f:aa:28:4f:e7:c0:ce:94:06: a6:07:ea:c5:bc:60:66:c0:47:43:fe:1f:59:24:60: dd:4d:35:a5:9b:95:63:85:8f:ff:2e:8b:19:40:eb: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:13:6C:00:7F:9D:17:F0:89:67:19:C6:59:C7:77:C0:A7:31:0C:25 X509v3 Authority Key Identifier: keyid:E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7e:a8:c1:ce:99:97:37:55:4f:1c:af:a1:86:26:46:53:a9: d0:31:7b:84:20:7b:f7:0e:0a:b9:42:94:b5:d2:25:a9:46:fd: 41:1c:c5:b9:f3:b0:77:b6:69:b2:fd:1b:3e:e9:74:84:e4:b5: eb:35:fe:5e:27:1e:8e:7e:a3:6c:a5:4a:09:1e:70:48:f4:8f: 07:b9:82:cb:8c:b5:f5:b5:a0:95:2c:cb:ea:1d:09:31:1b:67: e6:57:3d:f1:5e:d4:77:18:9e:f9:9d:a0:4c:e0:fa:a9:88:1c: dc:a2:ae:be:ef:ca:fc:57:0b:55:04:6e:68:4c:3b:89:19:27: ed:0b:d8:da:04:e3:8f:67:22:95:b9:18:87:91:81:94:66:ce: 9b:98:53:00:3a:7a:c3:2f:d9:3e:f9:5d:8d:8b:c3:e0:cf:8b: 0b:83:8c:64:cf:f7:66:5f:cf:9c:80:aa:b3:84:d6:c7:9a:75: d9:ff:32:0a:64:21:7b:51:d8:f1:b4:89:26:6e:42:ae:81:36: 4c:36:e9:5b:9d:2f:dd:51:53:19:92:2d:b4:a3:55:16:c1:0f: c0:0d:d0:3d:23:81:ba:97:7b:18:a0:6d:b5:7d:99:4a:ec:3d: 8b:e3:1f:a0:d5:57:11:9e:6b:73:fa:21:d2:39:f7:b0:e6:a2: 14:e1:9e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0ZQ12xr8VcV4CoedaPJP94W6E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYzRjkz OUExRjgwRTAeFw0yNjA5MjMxNzI3NDFaFw0yNjA5MjQyMDA5NDFaMDMxMTAvBgNV BAMTKDZFMTM2QzAwN0Y5RDE3RjA4OTY3MTlDNjU5Qzc3N0MwQTczMTBDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJ6DDZbZmCBN/ptuApYtT2dzY PUq6j3GHuMT3sKYbWMaH/bJoZ1H2g+ZSZCMMBQvEwRqz8auTyvcL8rcywofDuIB8 dhiUJfjFRhWf8L+Z9f9k0UpbK/Odu+fqMxXBPTzYac+qybt2jYy6MET0xVLothJa YuCRxbBVcj1nQjcIQAT7AKTobXTjGz6VYf+iAKzuKzIehbORVxkqJeCpXoRcHbmL TAttYZv9WWtMG0F1Q54UEkC7vm0htPiAU72Q07XdrNrRt8Mvqt4tTwrMshu6WxEk r4m+RV+qKE/nwM6UBqYH6sW8YGbAR0P+H1kkYN1NNaWblWOFj/8uixlA6wyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbhNsAH+dF/CJZxnGWcd3wKcxDCUwHwYDVR0j BBgwFoAU5AgthSSwUgKdYtaVQ31j+Tmh+A4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzYjY3ZTgtYTk3My00MGZlLWJhMDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUy NEIwNTIwMjlENjJENjk1NDM3RDYzRjkzOUExRjgwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDA4MkQ4NTI0QjA1MjAyOUQ2MkQ2OTU0MzdENjNGOTM5QTFG ODBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYz RjkzOUExRjgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHp+qMHOmZc3VU8cr6GGJkZTqdAxe4Qge/cO CrlClLXSJalG/UEcxbnzsHe2abL9Gz7pdITktes1/l4nHo5+o2ylSgkecEj0jwe5 gsuMtfW1oJUsy+odCTEbZ+ZXPfFe1HcYnvmdoEzg+qmIHNyirr7vyvxXC1UEbmhM O4kZJ+0L2NoE449nIpW5GIeRgZRmzpuYUwA6esMv2T75XY2Lw+DPiwuDjGTP92Zf z5yAqrOE1seaddn/MgpkIXtR2PG0iSZuQq6BNkw26VudL91RUxmSLbSjVRbBD8AN 0D0jgbqXexigbbV9mUrsPYvjH6DVVxGea3P6IdI597DmohThnlg= -----END CERTIFICATE-----Generated at Thu Sep 24 00:40:50 2026 by rpki-client