$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft File: 8452DA0E5C0E92F8DBB2845824D032330956238B.mft (raw, json) Hash identifier: T/EH81FpydKleM4N99Au0aBgMEmFyrqQRZ2JOS2ALW8= Subject key identifier: 24:EF:6D:1F:76:A9:F0:64:B4:6D:49:70:E7:E3:96:29:D8:BC:C7:CA Authority key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Certificate issuer: /CN=8452DA0E5C0E92F8DBB2845824D032330956238B Certificate serial: 592DD21DA341EA605F74B5B670419676A7278BBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:08:25 +0000 Manifest this update: Wed 23 Sep 2026 22:03:25 +0000 Manifest next update: Fri 25 Sep 2026 01:32:25 +0000 Files and hashes: 1: 8452DA0E5C0E92F8DBB2845824D032330956238B.crl (hash: x53qyuzQyoij4WAyEtDMaXSOoKYW9a8zQqK19zYrWm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2d:d2:1d:a3:41:ea:60:5f:74:b5:b6:70:41:96:76:a7:27:8b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Validity Not Before: Sep 23 22:03:25 2026 GMT Not After : Sep 25 01:32:25 2026 GMT Subject: CN=24EF6D1F76A9F064B46D4970E7E39629D8BCC7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:8c:a8:a0:65:f0:54:6a:64:f0:5a:c5:f2: 1c:f2:ed:b7:9c:5a:dc:93:86:ff:24:5b:3f:5a:4c: 4d:19:f5:5a:d5:1c:4f:2c:1e:15:9a:83:41:3f:34: 3a:8b:77:5a:c1:89:76:30:00:d3:6f:be:25:f5:f5: 71:d0:fb:56:e8:53:4c:c5:52:73:ef:bd:65:87:6a: 60:c0:1f:c3:f6:dd:27:cc:f4:4a:70:08:31:66:e0: 07:f5:41:d4:a9:fc:aa:19:62:a9:e8:c1:4f:48:89: 87:da:59:b0:f1:e1:96:96:a4:64:2d:6c:a4:9f:ba: 04:72:ce:33:1e:d2:63:82:52:6f:8a:47:49:20:e8: 1f:63:6f:91:c9:12:c8:67:28:24:80:8a:69:88:9f: 9f:e6:b5:0b:f9:3a:d9:7b:7b:1a:68:e7:a9:4e:de: eb:4a:17:85:8e:e6:65:2f:b6:6a:2c:61:d7:3a:9c: 97:38:7d:72:2b:76:df:36:b2:e4:bf:88:48:9b:c1: 90:d6:08:0c:a0:1a:1d:f6:8a:73:b2:15:15:72:24: 40:e4:d3:f9:81:53:31:4a:6d:90:db:7a:ba:39:b5: 37:3f:2c:b1:33:a9:09:fd:42:48:53:e7:eb:a4:fd: bc:06:c1:24:d7:3a:9f:e1:31:2f:a4:15:64:c4:ce: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:6D:1F:76:A9:F0:64:B4:6D:49:70:E7:E3:96:29:D8:BC:C7:CA X509v3 Authority Key Identifier: keyid:84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ea:10:ac:74:5a:b8:10:c2:bb:6b:dc:90:c5:fa:0b:53:fb: 20:fc:e9:4b:bd:ad:6f:f0:d5:2e:75:1f:42:54:97:b9:7a:99: fb:40:bd:d2:3f:e7:26:80:9e:59:bc:c0:ca:1f:81:2a:87:d5: c3:f2:87:2f:e7:ea:df:39:29:5d:4c:9c:0b:54:c4:3b:ba:26: fe:14:10:5a:cd:49:ed:52:50:13:e8:6b:2f:ed:e5:aa:19:a5: b6:99:d0:d8:a2:d3:1f:57:bb:71:05:0a:ad:4b:ea:1a:b2:7d: 08:52:cc:2f:c6:f6:3c:d1:f1:aa:fe:27:17:ed:98:ad:01:d3: be:e5:8e:7b:e5:9c:78:bb:9a:82:59:89:41:45:40:11:fc:53: 55:ef:a3:7b:71:1c:bd:5c:24:c1:e2:7b:9b:db:7a:9f:1b:45: f1:f5:37:4d:f8:51:8d:82:49:af:40:9b:59:7e:00:54:ce:85: 14:84:1a:e0:fc:af:2c:bd:b3:25:40:71:24:72:8a:77:8a:8e: 0c:4b:71:9a:d9:65:76:81:9a:ef:ba:49:20:69:12:0a:39:2c: e2:d1:5d:85:3d:0f:33:b1:5c:26:c4:2f:16:32:b5:2c:ab:fd: f6:08:d2:72:93:f0:f7:5b:2c:fc:64:f6:ac:34:15:19:55:69: 14:31:c3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS3SHaNB6mBfdLW2cEGWdqcni7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMyMzMw OTU2MjM4QjAeFw0yNjA5MjMyMjAzMjVaFw0yNjA5MjUwMTMyMjVaMDMxMTAvBgNV BAMTKDI0RUY2RDFGNzZBOUYwNjRCNDZENDk3MEU3RTM5NjI5RDhCQ0M3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5f4yooGXwVGpk8FrF8hzy7bec WtyThv8kWz9aTE0Z9VrVHE8sHhWag0E/NDqLd1rBiXYwANNvviX19XHQ+1boU0zF UnPvvWWHamDAH8P23SfM9EpwCDFm4Af1QdSp/KoZYqnowU9IiYfaWbDx4ZaWpGQt bKSfugRyzjMe0mOCUm+KR0kg6B9jb5HJEshnKCSAimmIn5/mtQv5Otl7expo56lO 3utKF4WO5mUvtmosYdc6nJc4fXIrdt82suS/iEibwZDWCAygGh32inOyFRVyJEDk 0/mBUzFKbZDbero5tTc/LLEzqQn9QkhT5+uk/bwGwSTXOp/hMS+kFWTEzoglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJO9tH3ap8GS0bUlw5+OWKdi8x8owHwYDVR0j BBgwFoAUhFLaDlwOkvjbsoRYJNAyMwlWI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU5M2Y4NzYtZDUxZS00ODU3LWE2Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1 QzBFOTJGOERCQjI4NDU4MjREMDMyMzMwOTU2MjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDUyREEwRTVDMEU5MkY4REJCMjg0NTgyNEQwMzIzMzA5NTYy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMy MzMwOTU2MjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfqEKx0WrgQwrtr3JDF+gtT+yD86Uu9rW/w 1S51H0JUl7l6mftAvdI/5yaAnlm8wMofgSqH1cPyhy/n6t85KV1MnAtUxDu6Jv4U EFrNSe1SUBPoay/t5aoZpbaZ0Nii0x9Xu3EFCq1L6hqyfQhSzC/G9jzR8ar+Jxft mK0B077ljnvlnHi7moJZiUFFQBH8U1Xvo3txHL1cJMHie5vbep8bRfH1N034UY2C Sa9Am1l+AFTOhRSEGuD8ryy9syVAcSRyineKjgxLcZrZZXaBmu+6SSBpEgo5LOLR XYU9DzOxXCbELxYytSyr/fYI0nKT8PdbLPxk9qw0FRlVaRQxw2c= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:46 2026 by rpki-client