$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: WntN8yNDydcrlb+Zi3hjyuJ/IWaye1OYU52C9H/XEOM= Subject key identifier: BC:F2:81:32:9E:C4:DF:C3:DE:6B:14:15:CF:67:E0:01:38:01:6C:C4 Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 65FEA8BA1329B465C02722F4B500AB781A322587 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:18:53 +0000 Manifest this update: Wed 23 Sep 2026 06:13:53 +0000 Manifest next update: Thu 24 Sep 2026 10:14:53 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: YhHQe/7mPsuAGX3ZNsUA1VLPa1HKzYNn59W6ieK2v7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fe:a8:ba:13:29:b4:65:c0:27:22:f4:b5:00:ab:78:1a:32:25:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: Sep 23 06:13:53 2026 GMT Not After : Sep 24 10:14:53 2026 GMT Subject: CN=BCF281329EC4DFC3DE6B1415CF67E00138016CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:bf:c8:6e:de:f4:fc:1e:7f:cb:b0:da:3a: 26:cb:2d:53:a5:da:be:15:a0:fc:8e:34:54:92:04: 4f:56:93:7a:e0:1e:77:5f:b7:08:a6:69:02:34:9c: 18:bb:d9:62:c1:f0:52:6e:a3:00:d2:af:8e:5b:e3: af:f7:c6:5a:ab:c8:b6:62:93:6f:57:35:e0:d0:eb: 5e:20:e1:e9:9e:f6:7c:bd:14:8e:ef:08:1c:8e:81: 94:ca:09:cd:eb:53:8f:33:dd:4f:be:37:a9:f3:d1: 27:a9:c4:27:61:cf:b2:57:0c:e0:44:22:52:5f:10: 0a:6f:8f:bf:a8:71:6b:17:d1:0b:64:88:71:b3:3a: 92:f1:ff:ae:4e:09:36:4c:8b:56:0b:10:5c:1c:7f: 07:e6:bb:41:e0:95:04:46:20:a3:ee:d6:df:38:17: 72:06:cf:1c:a3:7d:1c:e4:ce:e2:40:d8:fb:22:cc: 2a:38:ad:83:2d:d1:8b:c4:6d:81:f6:26:0b:cb:98: 23:f5:35:aa:1e:99:94:8f:ef:4f:c7:3b:e9:27:00: 94:24:5f:40:cb:26:90:ef:d3:94:c3:9c:79:d0:59: 5d:92:ea:5a:a9:f9:8c:fa:7e:1f:5c:83:e3:32:8a: 55:d5:07:05:95:62:29:11:fc:2f:ce:71:7c:f4:df: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:81:32:9E:C4:DF:C3:DE:6B:14:15:CF:67:E0:01:38:01:6C:C4 X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:95:a5:80:8d:0d:af:d3:09:d1:2a:9b:f0:c1:72:50:82: 09:fe:9b:87:e6:7a:d4:4c:8b:95:de:d5:14:4a:88:e4:5f:08: 4f:b2:71:22:4e:36:fe:1a:40:3c:a0:cc:7b:39:88:93:f1:f8: 35:7c:b6:66:67:1f:ef:30:cf:dd:8b:bc:ab:7c:bb:17:b6:34: d3:c4:c5:57:38:9d:60:b7:81:78:7e:89:47:ef:91:64:53:d3: 11:29:81:ca:ff:fa:86:12:d2:af:71:03:ad:c3:d4:ef:1a:f5: 7b:17:b4:2a:2e:5e:89:10:c6:c0:20:d2:b7:96:5c:bb:f1:e4: 0a:88:bc:ee:37:0b:db:a4:e2:e9:38:8d:6f:c8:40:7b:01:e4: 29:7c:51:db:67:6e:af:1c:4b:f1:4c:0f:f0:d6:de:79:84:38: bd:7e:86:04:97:37:f3:0b:fb:75:d7:43:46:17:8f:84:a4:b4: 68:ad:f0:7a:50:be:a3:68:9b:ff:b5:44:02:27:ab:ff:0e:44: 05:a9:6f:90:cc:b0:bd:17:06:04:83:9f:e5:71:b8:42:ad:96: b0:72:0d:b8:d1:bc:1e:82:c9:97:4b:f3:1a:0e:6f:2b:b9:ee: 0d:ba:c5:83:ad:65:b0:fe:98:e1:e7:d1:81:96:e9:98:b9:7c: 69:e5:0f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZf6ouhMptGXAJyL0tQCreBoyJYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA5MjMwNjEzNTNaFw0yNjA5MjQxMDE0NTNaMDMxMTAvBgNV BAMTKEJDRjI4MTMyOUVDNERGQzNERTZCMTQxNUNGNjdFMDAxMzgwMTZDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I7/Ibt70/B5/y7DaOibLLVOl 2r4VoPyONFSSBE9Wk3rgHndftwimaQI0nBi72WLB8FJuowDSr45b46/3xlqryLZi k29XNeDQ614g4eme9ny9FI7vCByOgZTKCc3rU48z3U++N6nz0SepxCdhz7JXDOBE IlJfEApvj7+ocWsX0QtkiHGzOpLx/65OCTZMi1YLEFwcfwfmu0HglQRGIKPu1t84 F3IGzxyjfRzkzuJA2PsizCo4rYMt0YvEbYH2JgvLmCP1NaoemZSP70/HO+knAJQk X0DLJpDv05TDnHnQWV2S6lqp+Yz6fh9cg+MyilXVBwWVYikR/C/OcXz03wwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPKBMp7E38PeaxQVz2fgATgBbMQwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkylaWAjQ2v0wnRKpvwwXJQggn+m4fmetRM i5Xe1RRKiORfCE+ycSJONv4aQDygzHs5iJPx+DV8tmZnH+8wz92LvKt8uxe2NNPE xVc4nWC3gXh+iUfvkWRT0xEpgcr/+oYS0q9xA63D1O8a9XsXtCouXokQxsAg0reW XLvx5AqIvO43C9uk4uk4jW/IQHsB5Cl8Udtnbq8cS/FMD/DW3nmEOL1+hgSXN/ML +3XXQ0YXj4SktGit8HpQvqNom/+1RAInq/8ORAWpb5DMsL0XBgSDn+VxuEKtlrBy DbjRvB6CyZdL8xoObyu57g26xYOtZbD+mOHn0YGW6Zi5fGnlD7U= -----END CERTIFICATE-----Generated at Wed Sep 23 19:40:54 2026 by rpki-client