$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: 58k3InQxg/D1btF+Kc09ooAxO0GEiS145deeWA8fUcY= Subject key identifier: 47:8B:C5:D5:62:9A:C5:EC:33:D5:4F:EB:6F:14:67:15:AD:3F:5B:B1 Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 61A6E699D8E9671C4A306EAB8CF6247F21117E84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:53:19 +0000 Manifest this update: Wed 23 Sep 2026 13:48:19 +0000 Manifest next update: Thu 24 Sep 2026 14:01:19 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: arHKrGMv+NcVV5udpgde2eD2uVfTyYaakNI4f9GYFeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a6:e6:99:d8:e9:67:1c:4a:30:6e:ab:8c:f6:24:7f:21:11:7e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Sep 23 13:48:19 2026 GMT Not After : Sep 24 14:01:19 2026 GMT Subject: CN=478BC5D5629AC5EC33D54FEB6F146715AD3F5BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:65:7d:81:94:1f:2e:e5:2a:bc:08:51:c4: 09:e0:e8:d9:fb:a4:49:a0:f5:32:60:e9:f8:d6:6d: 93:08:c8:23:5a:72:c1:b0:f5:91:8c:c8:56:16:f3: 61:3a:e6:d6:f1:f0:82:d5:18:41:77:29:22:56:d7: d8:66:65:ec:67:53:d5:4d:b2:9a:a4:f6:ab:2e:97: 3f:bf:de:bc:03:1c:a7:8a:4c:e2:a3:1f:d2:9a:de: 9a:c2:f9:7b:0c:fd:0e:52:aa:0e:c5:90:28:80:60: fd:40:02:3a:c7:f2:18:79:29:dc:4d:6e:35:44:43: b7:05:cf:e1:6e:a2:6f:56:96:4a:59:89:dd:6b:85: 77:a4:eb:9c:ed:5b:3f:41:68:6e:02:fb:75:a3:57: 5b:dc:6c:8e:08:b6:cf:d7:2e:d1:28:c2:de:95:02: 6e:2a:2e:d6:0f:f6:ec:08:49:c7:16:23:70:4d:36: 90:94:15:1c:76:5a:66:82:b8:e5:aa:6f:5a:c6:fb: 75:74:0a:79:4c:68:0e:cb:e1:a4:76:4d:e1:b2:2e: ac:2f:e0:4d:16:74:0a:e1:11:77:22:7c:c1:24:52: 0f:75:39:e5:4b:02:20:46:55:4f:a4:29:92:88:1e: 00:e5:50:d1:73:4f:6d:18:96:68:a0:6b:8e:be:a7: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:C5:D5:62:9A:C5:EC:33:D5:4F:EB:6F:14:67:15:AD:3F:5B:B1 X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:79:93:32:d3:18:a8:0f:e9:94:67:e6:7d:8a:9f:1a:c7:17: fc:2f:8f:a5:cf:17:85:99:35:77:27:a2:aa:45:84:65:24:e5: da:6b:15:aa:64:9d:f0:2a:98:0e:46:d8:4a:80:07:2b:ff:ba: 79:21:d5:0d:bb:43:4e:b1:d4:1e:a2:8a:a6:0d:8b:d4:15:aa: cd:a8:b3:73:29:f0:e6:5a:d9:d8:1b:78:55:24:55:55:b0:37: dc:e8:5f:14:7e:dd:e1:e8:3a:48:0f:76:9e:67:eb:88:35:65: be:45:a4:cd:73:05:71:57:f1:0b:cf:77:3b:c4:d9:8e:dd:5e: 65:31:86:38:b6:30:bc:f4:cb:cc:74:4a:96:4d:c8:17:97:bc: f6:fa:6e:d0:d2:87:f4:0d:19:b9:e4:67:04:65:a8:64:d2:0b: e2:f7:f5:12:32:88:15:5f:68:69:aa:37:61:5d:df:a2:55:17: 7e:bb:4b:47:60:fc:8c:16:59:2f:b2:9f:03:a0:33:4a:65:2c: bd:98:bf:8d:1e:84:0f:a5:99:20:83:11:9b:32:ac:6b:a7:14: 2a:88:1c:37:c1:b0:0c:a2:33:8a:62:e6:96:56:4a:5b:ec:69: c4:c2:34:8b:b6:34:ee:2e:cf:c5:44:d3:48:73:bc:42:0c:be: f8:72:96:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYabmmdjpZxxKMG6rjPYkfyERfoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA5MjMxMzQ4MTlaFw0yNjA5MjQxNDAxMTlaMDMxMTAvBgNV BAMTKDQ3OEJDNUQ1NjI5QUM1RUMzM0Q1NEZFQjZGMTQ2NzE1QUQzRjVCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZY2V9gZQfLuUqvAhRxAng6Nn7 pEmg9TJg6fjWbZMIyCNacsGw9ZGMyFYW82E65tbx8ILVGEF3KSJW19hmZexnU9VN spqk9qsulz+/3rwDHKeKTOKjH9Ka3prC+XsM/Q5Sqg7FkCiAYP1AAjrH8hh5KdxN bjVEQ7cFz+Fuom9WlkpZid1rhXek65ztWz9BaG4C+3WjV1vcbI4Its/XLtEowt6V Am4qLtYP9uwISccWI3BNNpCUFRx2WmaCuOWqb1rG+3V0CnlMaA7L4aR2TeGyLqwv 4E0WdArhEXcifMEkUg91OeVLAiBGVU+kKZKIHgDlUNFzT20Ylmiga46+p5SPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR4vF1WKaxewz1U/rbxRnFa0/W7EwHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId5kzLTGKgP6ZRn5n2KnxrHF/wvj6XPF4WZ NXcnoqpFhGUk5dprFapknfAqmA5G2EqAByv/unkh1Q27Q06x1B6iiqYNi9QVqs2o s3Mp8OZa2dgbeFUkVVWwN9zoXxR+3eHoOkgPdp5n64g1Zb5FpM1zBXFX8QvPdzvE 2Y7dXmUxhji2MLz0y8x0SpZNyBeXvPb6btDSh/QNGbnkZwRlqGTSC+L39RIyiBVf aGmqN2Fd36JVF367S0dg/IwWWS+ynwOgM0plLL2Yv40ehA+lmSCDEZsyrGunFCqI HDfBsAyiM4pi5pZWSlvsacTCNIu2NO4uz8VE00hzvEIMvvhylns= -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:19 2026 by rpki-client