$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: dwjBorTNbl0UsuaiHrPNuCBi9R6nkTRh4g3qlTH7XxQ= Subject key identifier: 66:7D:51:2D:13:DF:41:89:84:B5:01:9A:01:E3:D7:06:B9:48:FE:07 Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 1FC509209D589DB11B0B5629DB8C1E283E50D1A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:59:26 +0000 Manifest this update: Thu 24 Sep 2026 06:54:26 +0000 Manifest next update: Fri 25 Sep 2026 08:56:26 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: lP59R4xVdSzzpXtEih5Ar+Xt7S0uic17+meAzBC+/pI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:09:20:9d:58:9d:b1:1b:0b:56:29:db:8c:1e:28:3e:50:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Sep 24 06:54:26 2026 GMT Not After : Sep 25 08:56:26 2026 GMT Subject: CN=667D512D13DF418984B5019A01E3D706B948FE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:bd:01:4a:c5:28:17:61:c4:61:f6:1e:22: 33:8f:e8:86:54:77:3d:9f:34:3b:31:da:2d:84:07: 7c:3e:e4:c6:c3:99:36:46:96:c0:01:5f:b8:09:03: bd:c1:1d:3b:fe:7f:6c:d7:fe:15:2a:b8:af:cc:e0: 47:d8:35:d0:25:17:c4:ef:53:17:d3:09:69:70:f3: ad:41:44:0d:ac:cf:26:91:d4:16:be:39:2e:2a:e1: c1:dd:d9:9a:1e:6d:b0:0b:99:0d:77:b4:82:09:ee: 7d:e1:f4:d8:90:dd:c9:90:f6:d1:28:ca:61:12:d2: 44:d7:e7:84:33:11:c8:4a:44:78:5f:eb:d3:91:e5: 01:10:86:2e:0e:70:4c:12:d0:18:5b:66:be:fd:78: 4c:28:e7:d0:90:0f:7d:ee:c4:3d:bc:82:0d:e8:4c: a0:3b:b1:b4:97:f0:3a:62:60:44:52:1f:09:fd:8e: 96:86:2f:d4:f1:46:f5:aa:d5:50:94:12:58:bc:c1: d8:87:4f:35:a7:d2:f2:ad:55:8c:1b:95:d4:3a:51: c0:2b:e4:37:20:10:f8:47:22:4a:f8:ac:33:ea:30: 2e:f6:cd:32:7c:f0:a8:92:12:10:e1:2f:74:d5:07: 11:47:02:90:59:b4:80:19:d8:23:dc:d6:93:30:45: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:51:2D:13:DF:41:89:84:B5:01:9A:01:E3:D7:06:B9:48:FE:07 X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d3:4d:1c:8e:70:0a:a2:77:08:19:a6:bf:91:84:91:a3:85: 29:66:83:e4:24:95:58:7d:c3:d8:8f:8c:07:12:e7:f7:0d:6c: ef:a8:02:d5:cb:da:a8:4b:4b:9b:d2:f8:ae:5c:40:0b:b2:94: 3d:03:ba:72:41:58:8d:56:f5:b5:ca:c7:39:fa:fb:d0:09:c1: 14:f1:f1:89:bd:7e:47:8c:46:30:ea:54:17:e3:f3:93:99:e2: 62:72:99:18:b0:70:8f:7f:f6:83:ef:41:38:ce:86:27:8e:c8: f5:ef:52:b1:1e:2d:9e:be:cc:fa:b0:35:3b:68:fe:0b:80:12: d5:83:69:f7:2e:ce:43:27:98:fa:3d:08:00:ae:fd:a9:71:da: 2f:ac:25:69:7d:f4:a5:fc:18:88:aa:7c:74:5a:2b:74:2d:b0: b1:8d:ba:c4:27:36:48:04:51:c5:27:11:f9:39:73:3a:52:94: 76:2c:51:69:b3:36:22:2e:8f:41:78:a4:23:ed:6c:61:9b:94: b7:18:3b:86:99:3a:0a:54:94:4e:99:3a:8c:8d:44:9a:4f:01: 9b:a4:04:12:a0:9a:cc:18:50:b4:30:21:c3:32:43:9d:59:99: 32:95:67:53:42:1d:7d:52:23:f3:2c:23:4c:c8:fa:d2:3b:d0: c4:17:96:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8UJIJ1YnbEbC1Yp24weKD5Q0aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA5MjQwNjU0MjZaFw0yNjA5MjUwODU2MjZaMDMxMTAvBgNV BAMTKDY2N0Q1MTJEMTNERjQxODk4NEI1MDE5QTAxRTNENzA2Qjk0OEZFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ur0BSsUoF2HEYfYeIjOP6IZU dz2fNDsx2i2EB3w+5MbDmTZGlsABX7gJA73BHTv+f2zX/hUquK/M4EfYNdAlF8Tv UxfTCWlw861BRA2szyaR1Ba+OS4q4cHd2ZoebbALmQ13tIIJ7n3h9NiQ3cmQ9tEo ymES0kTX54QzEchKRHhf69OR5QEQhi4OcEwS0BhbZr79eEwo59CQD33uxD28gg3o TKA7sbSX8DpiYERSHwn9jpaGL9TxRvWq1VCUEli8wdiHTzWn0vKtVYwbldQ6UcAr 5DcgEPhHIkr4rDPqMC72zTJ88KiSEhDhL3TVBxFHApBZtIAZ2CPc1pMwRXhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZn1RLRPfQYmEtQGaAePXBrlI/gcwHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPTTRyOcAqidwgZpr+RhJGjhSlmg+QklVh9 w9iPjAcS5/cNbO+oAtXL2qhLS5vS+K5cQAuylD0DunJBWI1W9bXKxzn6+9AJwRTx 8Ym9fkeMRjDqVBfj85OZ4mJymRiwcI9/9oPvQTjOhieOyPXvUrEeLZ6+zPqwNTto /guAEtWDafcuzkMnmPo9CACu/alx2i+sJWl99KX8GIiqfHRaK3QtsLGNusQnNkgE UcUnEfk5czpSlHYsUWmzNiIuj0F4pCPtbGGblLcYO4aZOgpUlE6ZOoyNRJpPAZuk BBKgmswYULQwIcMyQ51ZmTKVZ1NCHX1SI/MsI0zI+tI70MQXlpc= -----END CERTIFICATE-----Generated at Thu Sep 24 15:14:35 2026 by rpki-client