$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: QaFY/3VolID834MRX7JBkxcm2L6Z5+gGjepXD/EYS6s= Subject key identifier: C4:4B:13:37:8F:D7:79:06:B4:57:51:C4:0D:85:7A:29:D4:EB:C8:90 Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 5CEEA332BF9473918F6A2CC8453C6209BB07D99D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 17:53:05 +0000 Manifest this update: Wed 23 Sep 2026 17:48:05 +0000 Manifest next update: Thu 24 Sep 2026 20:10:05 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: eBpOpDrkmXlx+uDCTnggC+0ApKpNSFO9qIvvYufTXpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ee:a3:32:bf:94:73:91:8f:6a:2c:c8:45:3c:62:09:bb:07:d9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Sep 23 17:48:05 2026 GMT Not After : Sep 24 20:10:05 2026 GMT Subject: CN=C44B13378FD77906B45751C40D857A29D4EBC890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:79:08:0d:cb:14:b8:6d:60:d0:b1:4c:0f: fc:6d:75:d4:3f:09:37:a4:b0:7a:fc:d1:15:70:c9: d8:08:32:7b:11:5d:2b:4e:37:58:7e:7e:7a:64:2a: 12:e3:47:80:af:08:d4:2d:de:93:52:91:28:bd:59: 52:b2:ed:39:80:54:f4:35:4a:0c:c7:f8:7c:cf:a3: ab:71:c9:0f:0f:1e:b8:40:d1:e6:01:4f:15:14:99: 4a:74:54:31:53:c7:4c:b1:42:4a:27:c0:6f:2d:56: 87:b5:11:07:ed:0a:40:3f:32:54:bc:8c:ca:b2:ee: f5:ed:c3:22:41:b1:69:2c:5c:4e:2c:dd:d5:75:59: 0f:4f:c5:9c:df:b7:da:26:44:41:a6:c5:2f:5a:4c: 2c:8e:e8:bc:ce:b5:25:b6:81:17:d1:e5:6a:15:c5: 10:ff:5e:07:b9:44:d5:c8:9f:01:7e:6e:ca:1d:92: 9b:71:0c:83:e2:63:29:00:fa:5c:14:0a:e9:db:6c: d0:5f:ab:4b:08:fa:d8:01:ca:91:1d:36:3b:6d:30: 98:b6:a2:6c:a8:df:53:06:74:6d:0c:ed:71:61:24: 13:ca:be:d0:cc:8c:43:79:3e:76:7b:ed:a4:da:8b: 21:d1:96:69:f4:47:88:8f:26:8e:95:f9:e5:4c:63: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:13:37:8F:D7:79:06:B4:57:51:C4:0D:85:7A:29:D4:EB:C8:90 X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b9:d9:34:4a:65:62:db:23:f1:40:76:e3:44:32:76:30:ea: 4b:69:62:a4:76:56:ee:ce:0e:b2:73:13:b5:9a:3c:93:b2:38: 41:1f:55:3a:f7:61:d8:a1:b7:c6:d0:0f:74:6a:83:16:0c:43: 26:1c:d4:8c:79:6c:5f:27:b7:af:67:d9:d8:41:04:48:80:19: b5:ed:55:02:8c:63:55:a9:61:6e:b2:db:13:9a:37:a9:27:7b: fa:a8:e9:b4:f1:26:ea:8d:b8:92:6e:f4:db:d9:ab:95:77:51: 16:36:08:6b:d3:f4:e2:94:61:23:a0:0b:49:2f:d6:1d:16:b9: 1e:ef:96:37:01:92:c0:8e:f3:07:f7:55:0b:ef:d1:84:3c:06: 0b:63:5f:19:fc:e6:1a:d6:02:99:58:0b:64:cc:53:d0:03:21: 60:14:23:91:42:d7:e4:e6:4a:f8:13:b1:51:5c:5a:95:96:f6: 5d:fc:47:00:02:b7:d5:91:1a:ca:2d:fd:7e:f8:43:08:51:5d: c1:90:49:ff:36:2c:22:8c:13:47:ec:6e:ce:0f:35:96:d2:a7: cd:82:74:83:d6:ed:3a:51:3b:a3:fd:f1:b9:b7:a3:f6:4a:3a: 2e:66:4e:6a:6c:aa:79:32:58:18:d2:1e:6d:88:4d:dd:58:a0: 9a:51:cf:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXO6jMr+Uc5GPaizIRTxiCbsH2Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA5MjMxNzQ4MDVaFw0yNjA5MjQyMDEwMDVaMDMxMTAvBgNV BAMTKEM0NEIxMzM3OEZENzc5MDZCNDU3NTFDNDBEODU3QTI5RDRFQkM4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEHkIDcsUuG1g0LFMD/xtddQ/ CTeksHr80RVwydgIMnsRXStON1h+fnpkKhLjR4CvCNQt3pNSkSi9WVKy7TmAVPQ1 SgzH+HzPo6txyQ8PHrhA0eYBTxUUmUp0VDFTx0yxQkonwG8tVoe1EQftCkA/MlS8 jMqy7vXtwyJBsWksXE4s3dV1WQ9PxZzft9omREGmxS9aTCyO6LzOtSW2gRfR5WoV xRD/Xge5RNXInwF+bsodkptxDIPiYykA+lwUCunbbNBfq0sI+tgBypEdNjttMJi2 omyo31MGdG0M7XFhJBPKvtDMjEN5PnZ77aTaiyHRlmn0R4iPJo6V+eVMY3gvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEsTN4/XeQa0V1HEDYV6KdTryJAwHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK52TRKZWLbI/FAduNEMnYw6ktpYqR2Vu7O DrJzE7WaPJOyOEEfVTr3Ydiht8bQD3RqgxYMQyYc1Ix5bF8nt69n2dhBBEiAGbXt VQKMY1WpYW6y2xOaN6kne/qo6bTxJuqNuJJu9NvZq5V3URY2CGvT9OKUYSOgC0kv 1h0WuR7vljcBksCO8wf3VQvv0YQ8BgtjXxn85hrWAplYC2TMU9ADIWAUI5FC1+Tm SvgTsVFcWpWW9l38RwACt9WRGsot/X74QwhRXcGQSf82LCKME0fsbs4PNZbSp82C dIPW7TpRO6P98bm3o/ZKOi5mTmpsqnkyWBjSHm2ITd1YoJpRz7g= -----END CERTIFICATE-----Generated at Thu Sep 24 05:59:17 2026 by rpki-client