$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft File: E978EBFAC3752F5D920856938CCD5CB512D8A763.mft (raw, json) Hash identifier: Ly6ZHqiLHIAO2U8crBit7Ob/fEM2KXhR/5hgrFApK/s= Subject key identifier: C5:8B:5C:96:89:1D:F2:E9:30:A1:B2:A0:62:65:1D:03:CB:48:88:CE Authority key identifier: E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63 Certificate issuer: /CN=E978EBFAC3752F5D920856938CCD5CB512D8A763 Certificate serial: 772139BE1FAB908A2FD29B40C2E55DF4F54CFC23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 08:56:46 +0000 Manifest this update: Thu 24 Sep 2026 08:51:46 +0000 Manifest next update: Fri 25 Sep 2026 10:44:46 +0000 Files and hashes: 1: E978EBFAC3752F5D920856938CCD5CB512D8A763.crl (hash: 3YJsS+2JmXWIWCHBop2UuV7RJhRQbo21aPNvs2zRu9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:21:39:be:1f:ab:90:8a:2f:d2:9b:40:c2:e5:5d:f4:f5:4c:fc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E978EBFAC3752F5D920856938CCD5CB512D8A763 Validity Not Before: Sep 24 08:51:46 2026 GMT Not After : Sep 25 10:44:46 2026 GMT Subject: CN=C58B5C96891DF2E930A1B2A062651D03CB4888CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:24:1d:3b:da:6c:53:3e:71:50:16:a1:31: d7:65:b3:67:a0:a5:42:94:e1:94:bb:05:54:9e:8d: 7c:e3:69:b4:1b:58:fe:0a:65:25:c2:55:14:00:1f: 5d:6b:f4:e7:2c:d9:e1:c7:8f:25:87:ff:3d:52:1a: 94:e7:17:f9:17:1d:fe:02:a6:84:d8:cd:e9:25:d0: c3:ff:31:f7:26:fa:48:38:99:ba:3a:52:42:8f:11: 00:88:38:b7:5a:cc:91:a7:62:5d:ea:c8:de:94:90: 32:40:05:f7:ef:e8:02:32:7a:c6:4e:e5:58:0b:ac: 11:b6:ad:86:b3:03:0b:c6:6b:bd:91:00:f4:5c:58: af:86:23:51:2d:49:28:d2:a7:23:60:2d:42:3e:b6: a1:eb:87:47:e6:fd:de:da:09:65:a1:2f:c0:1f:37: b4:24:f1:12:d4:da:66:2c:ca:d4:43:30:04:55:6b: 35:d5:b4:27:b9:23:44:1e:8f:d5:94:83:a0:e1:fc: 3a:4d:a1:d4:11:c7:e5:2e:29:2b:35:f4:76:49:96: 8d:b0:18:c9:ec:0e:00:d4:d4:32:f5:44:f3:96:13: 11:8c:ac:e8:b6:11:e2:23:98:60:40:4f:dc:50:b2: a3:6e:11:7a:c4:58:59:84:b9:85:c0:3e:4d:50:96: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:5C:96:89:1D:F2:E9:30:A1:B2:A0:62:65:1D:03:CB:48:88:CE X509v3 Authority Key Identifier: keyid:E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:90:d5:4a:5b:21:7a:42:d5:47:8b:75:96:65:99:43:cb: 99:71:ea:9c:c9:61:5a:16:e7:a5:2d:d0:73:df:9f:12:cc:bd: d8:7f:9b:d2:9d:12:db:59:2a:2f:cc:37:95:53:b1:21:a1:c5: 04:1d:76:06:d5:66:0a:bd:ec:17:39:12:51:49:7f:41:d9:c8: 6d:28:b1:c7:f7:4c:08:21:9d:49:dd:ee:3f:fd:d6:53:dd:5a: 96:92:d5:4c:b7:9e:ff:d9:58:84:b1:9c:0a:0a:77:2e:2f:1d: 6b:73:55:71:ed:16:de:01:90:b3:55:79:9f:e0:c8:d3:79:9a: 45:8b:5e:f4:57:ed:77:bf:b3:76:0c:ce:f1:94:0e:b7:23:8e: 79:9e:90:7b:cb:eb:83:c5:f3:9e:2e:3d:03:3d:8b:06:d0:9c: a0:5c:80:9e:14:36:30:f8:9e:13:1c:d0:49:63:05:5c:6d:fb: 9a:e4:43:b9:53:e1:9d:e9:ea:e2:1f:03:b3:ae:53:38:9d:c2: 4b:b8:30:b4:97:ae:57:c7:9b:0e:83:7e:e1:37:45:30:4e:7c: 66:01:d9:58:59:23:e9:26:f7:ea:29:32:87:d2:18:69:e4:b9: bb:cb:6f:fa:f4:35:3c:66:44:2d:04:59:1c:81:7f:3e:08:d7: 01:fc:6a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyE5vh+rkIov0ptAwuVd9PVM/CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVDQjUx MkQ4QTc2MzAeFw0yNjA5MjQwODUxNDZaFw0yNjA5MjUxMDQ0NDZaMDMxMTAvBgNV BAMTKEM1OEI1Qzk2ODkxREYyRTkzMEExQjJBMDYyNjUxRDAzQ0I0ODg4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAiQdO9psUz5xUBahMddls2eg pUKU4ZS7BVSejXzjabQbWP4KZSXCVRQAH11r9Ocs2eHHjyWH/z1SGpTnF/kXHf4C poTYzekl0MP/Mfcm+kg4mbo6UkKPEQCIOLdazJGnYl3qyN6UkDJABffv6AIyesZO 5VgLrBG2rYazAwvGa72RAPRcWK+GI1EtSSjSpyNgLUI+tqHrh0fm/d7aCWWhL8Af N7Qk8RLU2mYsytRDMARVazXVtCe5I0Qej9WUg6Dh/DpNodQRx+UuKSs19HZJlo2w GMnsDgDU1DL1RPOWExGMrOi2EeIjmGBAT9xQsqNuEXrEWFmEuYXAPk1QlvdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYtclokd8ukwobKgYmUdA8tIiM4wHwYDVR0j BBgwFoAU6Xjr+sN1L12SCFaTjM1ctRLYp2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFD Mzc1MkY1RDkyMDg1NjkzOENDRDVDQjUxMkQ4QTc2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTc4RUJGQUMzNzUyRjVEOTIwODU2OTM4Q0NENUNCNTEyRDhB NzYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVD QjUxMkQ4QTc2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn8kNVKWyF6QtVHi3WWZZlDy5lx6pzJYVoW 56Ut0HPfnxLMvdh/m9KdEttZKi/MN5VTsSGhxQQddgbVZgq97Bc5ElFJf0HZyG0o scf3TAghnUnd7j/91lPdWpaS1Uy3nv/ZWISxnAoKdy4vHWtzVXHtFt4BkLNVeZ/g yNN5mkWLXvRX7Xe/s3YMzvGUDrcjjnmekHvL64PF854uPQM9iwbQnKBcgJ4UNjD4 nhMc0EljBVxt+5rkQ7lT4Z3p6uIfA7OuUzidwku4MLSXrlfHmw6DfuE3RTBOfGYB 2VhZI+km9+opMofSGGnkubvLb/r0NTxmRC0EWRyBfz4I1wH8al8= -----END CERTIFICATE-----Generated at Thu Sep 24 22:49:58 2026 by rpki-client