$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft File: 1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft (raw, json) Hash identifier: tl6Vt/KfEyAyK5CAEb1qSTXvMFOCxa7jOPo1TASzQWg= Subject key identifier: 2F:D6:86:A1:7B:CD:E2:88:60:64:23:FD:0C:83:12:87:F6:83:45:BA Authority key identifier: 1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 Certificate issuer: /CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Certificate serial: 0AFA2CFFBE323FC815060D305770DE2383635A67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft Manifest number: 02 Signing time: Wed 23 Sep 2026 18:28:49 +0000 Manifest this update: Wed 23 Sep 2026 18:23:49 +0000 Manifest next update: Thu 24 Sep 2026 22:19:49 +0000 Files and hashes: 1: 1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl (hash: 4bAgmhONCfKJ9PDXH3UbpV0eojpfCAmFgHyY4GT/CKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fa:2c:ff:be:32:3f:c8:15:06:0d:30:57:70:de:23:83:63:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Validity Not Before: Sep 23 18:23:49 2026 GMT Not After : Sep 24 22:19:49 2026 GMT Subject: CN=2FD686A17BCDE288606423FD0C831287F68345BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:e1:10:a7:02:e1:29:af:d0:87:3e:3c:37: c8:ab:c8:00:e7:2b:d2:07:6c:7a:ff:7b:c0:6d:78: 93:f0:e6:f1:e6:67:33:4a:0e:79:4b:1e:ef:c2:09: de:bf:32:1a:4e:f3:5b:9d:7e:ae:8e:1a:30:2a:db: 7d:af:65:bd:fb:f8:93:4b:dd:f7:d2:1c:17:dc:8b: 9c:5a:8e:97:62:26:db:7f:a0:d9:b6:58:1e:8d:dd: ff:44:5d:51:64:78:39:65:2a:e9:0b:12:93:50:8f: 04:f2:48:c2:ea:2f:09:9c:17:50:f6:9f:ea:11:e8: 21:9c:c4:82:68:2b:65:28:b6:ac:77:58:c0:27:97: 34:63:92:48:57:88:b7:03:4a:44:46:f7:c5:47:5d: ef:0f:b8:c0:67:c1:6f:dc:63:0d:83:38:34:c3:6e: f0:70:8e:dc:fe:72:83:ec:e8:c7:5a:77:4f:17:4d: 44:31:9e:22:7d:8a:96:24:30:f5:ac:55:0c:82:ed: e2:84:ff:9d:6d:62:a3:8d:dc:bf:00:2e:3d:bc:3b: 44:d0:c4:3b:6c:d6:6c:c2:c8:92:be:fa:0c:85:55: 86:f6:20:b4:b2:5e:0b:b6:80:eb:d5:79:08:b0:46: e9:b6:ea:af:63:fb:04:7c:6a:14:71:4c:3c:94:ba: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:86:A1:7B:CD:E2:88:60:64:23:FD:0C:83:12:87:F6:83:45:BA X509v3 Authority Key Identifier: keyid:1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9b:59:a0:8d:c2:69:97:7c:e3:ac:dd:54:d0:71:91:34:28: a4:b0:ac:57:2f:f5:51:41:cc:47:3d:f7:d6:dd:8e:f6:7e:84: 36:ac:a2:46:6a:e7:df:cf:52:63:bc:5d:97:d8:ef:b3:92:72: ec:b4:a6:4a:ca:c0:90:39:5c:20:55:fd:52:6a:71:04:b2:b8: 2c:a2:7b:21:18:b9:74:ad:1b:ba:da:09:5e:7d:02:3f:10:30: 44:f7:11:74:31:bf:eb:8a:a7:89:da:2a:d9:e6:0a:a9:cf:ef: c6:96:3d:a6:fa:ea:c7:4c:3f:91:87:54:27:40:cd:c6:9a:c1: 85:35:4f:3b:b1:df:08:d3:ff:a3:be:53:ab:7a:22:b9:c8:e3: a8:d6:97:6e:ec:88:26:9f:d4:3b:b6:69:7e:fa:dd:fd:67:66: bb:3c:14:a4:53:08:56:0f:ce:f2:51:b1:39:3c:1e:d9:96:b5: 94:43:f1:c7:9a:e8:57:61:32:62:29:a7:92:26:4a:3c:44:7b: d5:24:a0:ab:00:7d:4a:b5:5d:c1:42:e8:7e:9c:1f:43:a9:81: 67:68:34:4b:7e:a1:9e:1d:7d:40:81:ef:d5:f2:08:39:8b:b5: 45:01:8c:db:04:13:52:9e:a5:d7:0a:2d:a2:16:73:3b:fb:57: 73:a6:17:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvos/74yP8gVBg0wV3DeI4NjWmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBQjZGRjY5OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkx NjFCQTJDNzAeFw0yNjA5MjMxODIzNDlaFw0yNjA5MjQyMjE5NDlaMDMxMTAvBgNV BAMTKDJGRDY4NkExN0JDREUyODg2MDY0MjNGRDBDODMxMjg3RjY4MzQ1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6OEQpwLhKa/Qhz48N8iryADn K9IHbHr/e8BteJPw5vHmZzNKDnlLHu/CCd6/MhpO81udfq6OGjAq232vZb37+JNL 3ffSHBfci5xajpdiJtt/oNm2WB6N3f9EXVFkeDllKukLEpNQjwTySMLqLwmcF1D2 n+oR6CGcxIJoK2Uotqx3WMAnlzRjkkhXiLcDSkRG98VHXe8PuMBnwW/cYw2DODTD bvBwjtz+coPs6Mdad08XTUQxniJ9ipYkMPWsVQyC7eKE/51tYqON3L8ALj28O0TQ xDts1mzCyJK++gyFVYb2ILSyXgu2gOvVeQiwRum26q9j+wR8ahRxTDyUuvylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9aGoXvN4ohgZCP9DIMSh/aDRbowHwYDVR0j BBgwFoAUHatv9pmo8UEgsO8tq9Z4SRYboscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNjMWVhYmMtZWQxMy00MmM5LWJjNWQtN2JkMDQyMTdjY2FhLzAvMURBQjZGRjY5 OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkxNjFCQTJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREFCNkZGNjk5QThGMTQxMjBCMEVGMkRBQkQ2Nzg0OTE2MUJB MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNjMWVhYmMtZWQxMy00MmM5LWJj NWQtN2JkMDQyMTdjY2FhLzAvMURBQjZGRjY5OUE4RjE0MTIwQjBFRjJEQUJENjc4 NDkxNjFCQTJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFObWaCNwmmXfOOs3VTQcZE0KKSwrFcv9VFB zEc999bdjvZ+hDasokZq59/PUmO8XZfY77OScuy0pkrKwJA5XCBV/VJqcQSyuCyi eyEYuXStG7raCV59Aj8QMET3EXQxv+uKp4naKtnmCqnP78aWPab66sdMP5GHVCdA zcaawYU1Tzux3wjT/6O+U6t6IrnI46jWl27siCaf1Du2aX763f1nZrs8FKRTCFYP zvJRsTk8HtmWtZRD8cea6FdhMmIpp5ImSjxEe9UkoKsAfUq1XcFC6H6cH0OpgWdo NEt+oZ4dfUCB79XyCDmLtUUBjNsEE1KepdcKLaIWczv7V3OmFw4= -----END CERTIFICATE-----Generated at Thu Sep 24 07:13:28 2026 by rpki-client