$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: tZBp3G6rahd4e7zvttPqttILwf3hFSqI6kP9nGnCc2w= Subject key identifier: D2:C7:C0:83:9F:74:84:16:50:1B:18:05:3E:C8:E6:D9:0A:64:44:0B Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 47995303542EC36CFEC829D02CBF577AEF994A80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:23:42 +0000 Manifest this update: Wed 23 Sep 2026 22:18:42 +0000 Manifest next update: Fri 25 Sep 2026 00:16:42 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: u2lZnIHPMFPdy5B9MgSjBIqeKI01qmvhg7DPSNqt09M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:99:53:03:54:2e:c3:6c:fe:c8:29:d0:2c:bf:57:7a:ef:99:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Sep 23 22:18:42 2026 GMT Not After : Sep 25 00:16:42 2026 GMT Subject: CN=D2C7C0839F748416501B18053EC8E6D90A64440B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:e8:25:f1:f9:c5:d8:02:9f:9a:84:d9:0b: f2:66:97:c9:93:53:93:1d:4f:1f:fa:6c:d3:38:ee: a6:44:3b:32:59:5e:e1:dd:5b:af:ca:0f:55:71:57: c6:9d:03:a9:b2:00:20:4c:55:04:ab:97:bd:ba:4b: cf:57:7b:83:6e:b0:ef:48:bc:46:1f:46:a2:61:8c: 32:58:9c:f2:35:52:27:27:ac:3e:f5:29:10:00:b8: 4c:56:e7:c8:64:07:6a:55:18:95:82:02:32:0a:ab: 5b:f3:c0:ec:18:57:91:8f:1a:2e:3c:01:71:1d:2c: ff:e6:30:7a:50:fd:ba:56:32:cf:06:4a:7b:2d:b6: 78:a1:bd:9f:75:fe:80:de:b8:03:27:87:9a:7f:3c: fa:bc:3d:e7:21:b1:25:7f:9c:a5:9c:63:df:b6:cb: 0e:11:3a:10:cd:3c:c5:d2:cb:15:0d:8e:54:89:d2: 1b:be:44:cf:b7:81:58:b8:c5:d4:96:5a:74:99:ae: c0:3b:12:e0:cf:ed:75:65:c7:13:0f:dd:2d:c6:b2: c8:5e:4d:b9:2c:3e:fd:18:1f:5f:3e:8c:7b:82:23: 04:84:94:cb:8a:6f:7f:03:50:14:c5:47:17:b1:93: 23:b5:21:d0:69:2d:3b:ab:7d:ec:f2:ad:84:b3:7a: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:C0:83:9F:74:84:16:50:1B:18:05:3E:C8:E6:D9:0A:64:44:0B X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bb:51:6d:2d:0d:db:80:ed:c4:1a:c5:55:d4:a4:fb:dd:8e: 13:6b:ed:8b:b9:4f:00:86:db:16:51:72:03:64:a9:36:d3:b0: 26:e8:f8:98:da:3a:00:19:0a:0a:ee:29:bc:ae:36:8b:ea:fb: 69:ef:1f:18:ee:49:93:4c:d7:b3:40:ea:63:28:88:60:21:34: 72:2f:ba:ae:8c:54:d4:cf:86:40:bd:b4:7e:36:70:41:96:18: 0c:f5:b0:64:e3:a0:0a:7c:d2:e3:a4:1c:56:6c:c2:ce:87:e1: f8:45:cb:56:96:4d:ce:ff:85:18:a6:69:79:55:a8:4c:8b:21: dc:5e:46:1e:e9:b7:fa:64:f2:77:42:0b:15:f9:e6:45:15:82: e9:c3:92:98:75:ff:1b:55:bf:e4:9e:cb:fa:63:a1:cc:c2:8c: 50:3c:8d:de:30:35:b5:99:6e:e1:7b:0f:1f:8f:9e:d8:11:83: f1:5e:d2:11:cc:67:06:6a:e3:77:a4:df:b0:8a:93:46:ed:81: d7:f0:4a:cc:8f:7c:77:cc:0e:86:77:f0:79:e5:51:88:e1:01: 41:26:8e:f5:cb:2b:ee:f6:31:7e:ad:5b:63:fd:96:d1:25:40: 48:30:50:ea:4f:4a:d0:b3:10:20:ce:74:a9:b4:3a:13:e8:0e: fe:2f:af:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5lTA1Quw2z+yCnQLL9Xeu+ZSoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA5MjMyMjE4NDJaFw0yNjA5MjUwMDE2NDJaMDMxMTAvBgNV BAMTKEQyQzdDMDgzOUY3NDg0MTY1MDFCMTgwNTNFQzhFNkQ5MEE2NDQ0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4legl8fnF2AKfmoTZC/Jml8mT U5MdTx/6bNM47qZEOzJZXuHdW6/KD1VxV8adA6myACBMVQSrl726S89Xe4NusO9I vEYfRqJhjDJYnPI1UicnrD71KRAAuExW58hkB2pVGJWCAjIKq1vzwOwYV5GPGi48 AXEdLP/mMHpQ/bpWMs8GSnsttnihvZ91/oDeuAMnh5p/PPq8PechsSV/nKWcY9+2 yw4ROhDNPMXSyxUNjlSJ0hu+RM+3gVi4xdSWWnSZrsA7EuDP7XVlxxMP3S3Gsshe TbksPv0YH18+jHuCIwSElMuKb38DUBTFRxexkyO1IdBpLTurfezyrYSzeuubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sfAg590hBZQGxgFPsjm2QpkRAswHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa7UW0tDduA7cQaxVXUpPvdjhNr7Yu5TwCG 2xZRcgNkqTbTsCbo+JjaOgAZCgruKbyuNovq+2nvHxjuSZNM17NA6mMoiGAhNHIv uq6MVNTPhkC9tH42cEGWGAz1sGTjoAp80uOkHFZsws6H4fhFy1aWTc7/hRimaXlV qEyLIdxeRh7pt/pk8ndCCxX55kUVgunDkph1/xtVv+Sey/pjoczCjFA8jd4wNbWZ buF7Dx+PntgRg/Fe0hHMZwZq43ek37CKk0btgdfwSsyPfHfMDoZ38HnlUYjhAUEm jvXLK+72MX6tW2P9ltElQEgwUOpPStCzECDOdKm0OhPoDv4vr8k= -----END CERTIFICATE-----Generated at Thu Sep 24 17:32:12 2026 by rpki-client