$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft File: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft (raw, json) Hash identifier: p4Ly/qvmdmMPs34AyPl9D9m2GfTzhrGDMy1r0piC6bo= Subject key identifier: 97:12:1F:00:B2:34:11:F3:D9:1A:53:BF:31:35:47:97:50:3B:AC:2F Authority key identifier: 11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 Certificate issuer: /CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Certificate serial: 2FDF26B5EA8CEFACC204692E09E64BE85AFA7FBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:29:53 +0000 Manifest this update: Thu 24 Sep 2026 15:24:53 +0000 Manifest next update: Fri 25 Sep 2026 17:19:53 +0000 Files and hashes: 1: 11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl (hash: g0zSM5BX2yTbm7C+bHZSdjPAiLY720kYxDW0NRn4HAI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:df:26:b5:ea:8c:ef:ac:c2:04:69:2e:09:e6:4b:e8:5a:fa:7f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11167603082AA68EC7458AAAD61EFC5B0B3BED03 Validity Not Before: Sep 24 15:24:53 2026 GMT Not After : Sep 25 17:19:53 2026 GMT Subject: CN=97121F00B23411F3D91A53BF31354797503BAC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:58:0b:74:be:f2:2c:8d:aa:ea:cb:c7:c0: ff:cf:74:0d:1b:f3:c5:a5:b1:d3:21:d5:bf:41:9d: de:c2:cf:19:54:6e:4f:8a:1a:1e:d2:b0:49:d8:b8: 33:5d:26:53:3f:2c:e6:be:ef:9e:c2:32:0a:ae:33: c1:1a:8d:72:ab:1d:8a:eb:52:ea:5f:2f:48:f9:3e: b5:16:82:ea:54:04:e7:ec:ca:cf:48:a0:ac:9d:8e: a6:ec:bf:2f:68:2e:d8:8c:f7:6a:23:36:66:fd:91: 2a:23:18:2f:78:c0:66:50:cb:e0:96:de:3a:5f:13: 59:41:27:57:4a:4e:d0:15:57:70:33:58:62:33:29: 88:79:23:fb:2a:e4:be:e1:e9:1c:67:b2:43:7c:cd: ca:85:47:2e:6a:e1:1c:fb:17:61:aa:82:e9:59:a8: db:aa:e7:02:c0:3b:7f:5f:3d:a6:31:b7:fe:c0:c8: f8:4a:4a:20:7b:4c:5b:53:28:c4:67:39:d7:55:16: e9:c8:bf:c0:9d:2b:dd:be:9d:2e:0d:41:74:cd:83: 44:93:06:41:d7:df:f7:39:05:d4:0b:03:48:c3:60: c0:db:a9:d4:67:bd:f0:63:e5:10:62:7f:ef:be:cb: e3:1b:c1:02:08:e8:36:cf:25:46:d7:fa:51:93:90: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:12:1F:00:B2:34:11:F3:D9:1A:53:BF:31:35:47:97:50:3B:AC:2F X509v3 Authority Key Identifier: keyid:11:16:76:03:08:2A:A6:8E:C7:45:8A:AA:D6:1E:FC:5B:0B:3B:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11167603082AA68EC7458AAAD61EFC5B0B3BED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/11167603082AA68EC7458AAAD61EFC5B0B3BED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b4:06:c1:b5:bf:15:2d:1a:3e:8e:53:bd:82:b5:45:1f:96: e9:90:bd:c3:2b:8f:4a:55:92:14:29:94:b9:28:1a:e0:1b:8e: c4:01:5d:58:d0:4f:b6:d6:a5:59:8b:64:ba:30:1a:af:7a:a8: df:d0:15:ab:6f:66:fe:a2:3b:7e:03:ad:a8:2e:b8:02:14:f1: f2:01:37:1c:ef:2a:e0:e3:7a:37:ad:d2:c1:9b:04:6b:71:4b: ba:dc:a2:0a:e1:a4:b6:05:fc:53:2d:f9:df:b6:8d:44:a6:c0: 80:9a:05:29:62:9f:c5:c9:b3:9b:db:2e:30:39:03:3f:6f:d5: 5b:92:6a:4e:cc:17:b0:60:62:51:82:77:99:7a:01:91:20:ab: 95:2f:52:a1:d4:63:ff:c5:6d:8a:c7:95:dc:11:1b:1a:5c:04: c4:2c:d1:82:c5:7e:41:19:c0:d1:71:c5:4b:cf:cc:7f:f3:c7: 7e:98:b4:1e:26:a0:98:1a:5f:c2:13:9e:af:ee:67:d6:b7:d8: f8:74:3d:69:d9:0b:73:55:2f:96:8a:f3:11:b0:0e:a3:71:a7: 9b:27:33:b0:72:79:66:de:a4:63:d2:1c:2b:3c:6b:86:ea:a3: 6d:2d:32:78:99:3a:78:84:f2:88:20:46:73:b0:fb:c3:0c:3d: 1f:f5:fa:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL98mteqM76zCBGkuCeZL6Fr6f74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIw QjNCRUQwMzAeFw0yNjA5MjQxNTI0NTNaFw0yNjA5MjUxNzE5NTNaMDMxMTAvBgNV BAMTKDk3MTIxRjAwQjIzNDExRjNEOTFBNTNCRjMxMzU0Nzk3NTAzQkFDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmFgLdL7yLI2q6svHwP/PdA0b 88WlsdMh1b9Bnd7CzxlUbk+KGh7SsEnYuDNdJlM/LOa+757CMgquM8EajXKrHYrr UupfL0j5PrUWgupUBOfsys9IoKydjqbsvy9oLtiM92ojNmb9kSojGC94wGZQy+CW 3jpfE1lBJ1dKTtAVV3AzWGIzKYh5I/sq5L7h6RxnskN8zcqFRy5q4Rz7F2GqgulZ qNuq5wLAO39fPaYxt/7AyPhKSiB7TFtTKMRnOddVFunIv8CdK92+nS4NQXTNg0ST BkHX3/c5BdQLA0jDYMDbqdRnvfBj5RBif+++y+MbwQII6DbPJUbX+lGTkLp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxIfALI0EfPZGlO/MTVHl1A7rC8wHwYDVR0j BBgwFoAUERZ2Awgqpo7HRYqq1h78Wws77QMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3NjVmMDYtYjRjOS00N2MxLWFkOWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMw ODJBQTY4RUM3NDU4QUFBRDYxRUZDNUIwQjNCRUQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTE2NzYwMzA4MkFBNjhFQzc0NThBQUFENjFFRkM1QjBCM0JF RDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3NjVmMDYtYjRjOS00N2MxLWFk OWEtMDYxMmM3YzAyZDFjLzAvMTExNjc2MDMwODJBQTY4RUM3NDU4QUFBRDYxRUZD NUIwQjNCRUQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG20BsG1vxUtGj6OU72CtUUflumQvcMrj0pV khQplLkoGuAbjsQBXVjQT7bWpVmLZLowGq96qN/QFatvZv6iO34DraguuAIU8fIB NxzvKuDjejet0sGbBGtxS7rcogrhpLYF/FMt+d+2jUSmwICaBSlin8XJs5vbLjA5 Az9v1VuSak7MF7BgYlGCd5l6AZEgq5UvUqHUY//FbYrHldwRGxpcBMQs0YLFfkEZ wNFxxUvPzH/zx36YtB4moJgaX8ITnq/uZ9a32Ph0PWnZC3NVL5aK8xGwDqNxp5sn M7ByeWbepGPSHCs8a4bqo20tMniZOniE8oggRnOw+8MMPR/1+vQ= -----END CERTIFICATE-----Generated at Fri Sep 25 05:11:31 2026 by rpki-client