$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json) Hash identifier: HuEbFX6gknZGCURHDIbsdq+leweNj/T4vwdVxMwjLKY= Subject key identifier: 84:DD:86:17:CA:71:31:10:E4:F6:A1:C2:A3:94:66:0C:90:27:86:65 Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Certificate serial: 12230447534A4FCC057D67283ABD388F34C4AE69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:41:28 +0000 Manifest this update: Thu 24 Sep 2026 04:36:28 +0000 Manifest next update: Fri 25 Sep 2026 08:00:28 +0000 Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: jzuVNyAW9cEbVhP9Ut/yWAgVSZocMQY4GQ61e/Wro8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:04:47:53:4a:4f:cc:05:7d:67:28:3a:bd:38:8f:34:c4:ae:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Validity Not Before: Sep 24 04:36:28 2026 GMT Not After : Sep 25 08:00:28 2026 GMT Subject: CN=84DD8617CA713110E4F6A1C2A394660C90278665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:da:76:fc:14:39:33:38:88:8c:b1:9d:b1: 69:ef:46:6b:52:88:f7:04:2d:a6:80:35:f5:78:88: f4:03:d6:c2:98:ef:f9:76:9d:17:7e:fa:3a:39:40: 44:bf:a1:83:f5:70:bc:28:8b:b7:8b:e7:54:15:3c: e3:88:52:dd:c3:30:8f:90:2e:f9:b6:5f:1f:d9:fc: ff:92:30:00:c9:c5:1e:0e:2b:53:77:39:34:ec:e4: eb:5f:c1:e3:b9:ba:cc:10:35:f9:70:50:82:0e:cd: 99:57:9c:26:7f:92:06:9d:64:d8:d1:ba:37:b9:18: 34:54:75:39:f0:c9:b9:17:a2:0e:64:1a:df:a5:fd: 5f:6d:44:b2:a8:e4:0f:8f:2d:9f:82:8e:44:15:82: d0:53:64:1b:2f:fa:f1:10:b2:f4:66:36:3c:87:7d: 61:d7:37:10:0c:a3:76:01:5e:96:a9:4d:b5:21:f1: a3:62:5e:76:c7:b7:0b:79:b0:c4:5f:39:80:9c:1f: d2:06:27:62:db:69:8e:1f:11:4d:7c:67:46:62:04: 10:7b:24:19:c7:0f:a2:f4:30:4d:c5:84:e4:d0:fe: ed:3b:13:bf:4e:cb:2f:30:04:87:5b:52:88:e7:7d: 35:82:aa:6c:e5:46:bf:d1:f9:02:ce:47:64:20:c3: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:86:17:CA:71:31:10:E4:F6:A1:C2:A3:94:66:0C:90:27:86:65 X509v3 Authority Key Identifier: keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:e2:d5:57:69:f9:c5:aa:91:b8:ee:5b:1d:2a:85:0f:46: 17:23:0e:04:60:70:ea:9f:7b:3b:6e:c9:33:4b:1e:48:d3:28: 47:45:14:15:c2:f4:cd:eb:7c:43:5e:20:0a:e6:20:a5:2e:a4: 99:4e:15:1d:e9:5f:c4:84:14:1a:ef:c1:57:c5:1b:be:63:8e: b6:ff:8e:2f:96:2b:d3:8e:a3:90:8f:d6:f5:ec:3c:00:ad:a1: b3:0d:fa:ce:39:8d:29:f4:8e:9f:ca:69:47:16:b0:8a:c6:f3: 23:48:25:69:14:8e:d3:7f:05:26:6e:3f:d7:db:83:1b:85:8b: 55:e5:2d:cc:a8:01:95:45:ae:48:55:48:7f:c9:07:87:8e:a0: dc:9c:69:bc:8b:12:2c:be:b2:1f:46:de:f5:34:2d:0e:69:0c: 67:ef:5a:80:b8:dc:72:f8:24:b6:7b:dd:19:ee:31:b9:c5:0f: 2f:c7:b6:a5:10:5c:29:7d:5a:d3:09:64:29:26:cb:6e:f8:f6: a6:93:6a:94:c2:b6:ac:50:23:5c:f0:eb:41:54:73:99:21:f7: d5:71:40:07:d6:25:73:cd:a7:01:99:4e:a5:6b:6b:20:81:79: 45:db:c0:de:5a:42:80:b7:ca:23:16:9f:fd:e7:0c:7c:f2:04: 8f:50:45:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiMER1NKT8wFfWcoOr04jzTErmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBB NjkwN0JENDAeFw0yNjA5MjQwNDM2MjhaFw0yNjA5MjUwODAwMjhaMDMxMTAvBgNV BAMTKDg0REQ4NjE3Q0E3MTMxMTBFNEY2QTFDMkEzOTQ2NjBDOTAyNzg2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ9p2/BQ5MziIjLGdsWnvRmtS iPcELaaANfV4iPQD1sKY7/l2nRd++jo5QES/oYP1cLwoi7eL51QVPOOIUt3DMI+Q Lvm2Xx/Z/P+SMADJxR4OK1N3OTTs5OtfweO5uswQNflwUIIOzZlXnCZ/kgadZNjR uje5GDRUdTnwybkXog5kGt+l/V9tRLKo5A+PLZ+CjkQVgtBTZBsv+vEQsvRmNjyH fWHXNxAMo3YBXpapTbUh8aNiXnbHtwt5sMRfOYCcH9IGJ2LbaY4fEU18Z0ZiBBB7 JBnHD6L0ME3FhOTQ/u07E79Oyy8wBIdbUojnfTWCqmzlRr/R+QLOR2Qgw6aPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhN2GF8pxMRDk9qHCo5RmDJAnhmUwHwYDVR0j BBgwFoAUWDYJgH5LqA0LVMmcMzt1kKaQe9QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjMjJjMmUtYWNhNy00MmYyLTliOGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3 RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBBNjkwN0JENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODM2MDk4MDdFNEJBODBEMEI1NEM5OUMzMzNCNzU5MEE2OTA3 QkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1 OTBBNjkwN0JENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwI4tVXafnFqpG47lsdKoUPRhcjDgRgcOqf eztuyTNLHkjTKEdFFBXC9M3rfENeIArmIKUupJlOFR3pX8SEFBrvwVfFG75jjrb/ ji+WK9OOo5CP1vXsPACtobMN+s45jSn0jp/KaUcWsIrG8yNIJWkUjtN/BSZuP9fb gxuFi1XlLcyoAZVFrkhVSH/JB4eOoNycabyLEiy+sh9G3vU0LQ5pDGfvWoC43HL4 JLZ73RnuMbnFDy/HtqUQXCl9WtMJZCkmy2749qaTapTCtqxQI1zw60FUc5kh99Vx QAfWJXPNpwGZTqVrayCBeUXbwN5aQoC3yiMWn/3nDHzyBI9QRbI= -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:14 2026 by rpki-client