$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: eXCCHYdqbB4ypSs0TOMlQ1unLuen8oxWcFU+h5G6wFg= Subject key identifier: 34:7F:23:F0:5F:CF:B4:47:85:A2:53:0B:AC:13:D9:08:9A:90:B2:1C Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 0C33B9D90330BA4BC0ABFCACEC58EFD483A5A1FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 22:03:25 +0000 Manifest this update: Wed 23 Sep 2026 21:58:25 +0000 Manifest next update: Fri 25 Sep 2026 01:52:25 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: Ea/mW2hpE+qweNfp2HFMinqytRRRFc+RmFnSf1UPwzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:33:b9:d9:03:30:ba:4b:c0:ab:fc:ac:ec:58:ef:d4:83:a5:a1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: Sep 23 21:58:25 2026 GMT Not After : Sep 25 01:52:25 2026 GMT Subject: CN=347F23F05FCFB44785A2530BAC13D9089A90B21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:54:9f:4f:ad:a2:89:2b:8f:45:e5:3c:82: 67:c0:a4:aa:a8:ca:b1:2d:f7:a4:e0:4a:62:92:38: 04:39:61:cf:b4:d7:b3:e6:8e:37:9a:6a:40:74:35: 17:20:26:35:1b:e8:51:69:d0:35:10:dc:6f:d3:74: fb:b7:e8:62:c0:16:7c:88:89:82:85:1d:57:0d:9c: b9:5f:8c:dc:4a:01:a5:6d:a7:19:0b:7d:93:48:f0: c7:55:e9:33:fe:72:a9:56:e3:64:3d:9b:28:b3:f0: 7d:58:28:2a:2a:36:b5:68:2a:c3:34:8c:c4:7a:8f: f7:3b:0c:fd:8c:53:e8:5a:4f:c7:b4:5d:a9:13:31: dc:43:0a:41:ea:93:a0:db:ec:ac:5a:22:a9:0b:47: 2f:1f:53:10:e6:ba:5e:af:54:b4:df:c4:42:f9:2d: e5:68:0b:e3:50:c4:d8:90:45:5c:f0:7b:3b:32:a2: b8:b9:b8:c3:da:d1:a3:76:34:f5:16:ed:27:d0:a1: 73:6e:9f:36:ee:c0:c9:a9:22:9f:73:9d:89:1c:e9: 5e:52:5e:19:40:bc:d7:35:07:ee:07:c9:54:1f:79: 1c:ff:50:c7:52:82:d5:a2:80:0b:ab:78:61:4d:8d: ad:16:43:38:9d:52:d4:d9:ae:d4:80:db:a6:06:23: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7F:23:F0:5F:CF:B4:47:85:A2:53:0B:AC:13:D9:08:9A:90:B2:1C X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:b6:e1:5e:8d:05:f4:be:96:0e:5c:74:97:7a:e7:9b:e2: ee:51:ac:cc:21:91:b6:4d:12:8f:b4:6e:c3:ef:0b:35:cc:b7: b4:ae:62:49:40:fa:5a:2d:96:ff:93:a2:6f:d6:47:d0:f7:0a: 4a:d9:3e:f0:e1:c6:e8:b2:89:ce:75:b0:51:49:13:90:c9:69: ba:f3:4b:11:f0:63:28:d2:42:4e:1d:a8:07:91:ee:11:22:c1: 55:c7:6a:a1:41:d3:1d:4b:ad:98:0f:7f:14:ce:d9:57:26:62: 8b:c9:17:b4:0e:b5:82:e9:80:82:f6:30:7e:b4:ee:72:fa:b8: 32:11:77:71:e3:0f:bf:bc:1a:50:e1:6e:37:84:fb:4a:a7:20: 22:a7:8d:db:8c:f6:72:45:86:9b:c5:be:20:90:5d:5e:30:73: 03:ee:1b:65:dd:8e:3d:54:d3:7e:d3:96:cd:04:e1:d9:91:3a: 4e:d9:e5:5f:db:1c:db:90:af:8d:78:b9:1d:6d:93:5c:40:20: 15:d7:bc:62:7f:d1:5f:28:0c:62:91:70:ff:d4:de:d9:1b:32: f7:f2:32:e7:57:1a:18:ad:e6:89:fe:32:86:7b:05:5a:86:b3: 91:b6:b7:2e:b7:b2:bb:f7:f5:db:3a:22:55:0f:7e:45:28:a4: 30:18:08:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDO52QMwukvAq/ys7Fjv1IOlof0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA5MjMyMTU4MjVaFw0yNjA5MjUwMTUyMjVaMDMxMTAvBgNV BAMTKDM0N0YyM0YwNUZDRkI0NDc4NUEyNTMwQkFDMTNEOTA4OUE5MEIyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrlSfT62iiSuPReU8gmfApKqo yrEt96TgSmKSOAQ5Yc+017PmjjeaakB0NRcgJjUb6FFp0DUQ3G/TdPu36GLAFnyI iYKFHVcNnLlfjNxKAaVtpxkLfZNI8MdV6TP+cqlW42Q9myiz8H1YKCoqNrVoKsM0 jMR6j/c7DP2MU+haT8e0XakTMdxDCkHqk6Db7KxaIqkLRy8fUxDmul6vVLTfxEL5 LeVoC+NQxNiQRVzwezsyori5uMPa0aN2NPUW7SfQoXNunzbuwMmpIp9znYkc6V5S XhlAvNc1B+4HyVQfeRz/UMdSgtWigAureGFNja0WQzidUtTZrtSA26YGIzWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNH8j8F/PtEeFolMLrBPZCJqQshwwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5ntuFejQX0vpYOXHSXeueb4u5RrMwhkbZN Eo+0bsPvCzXMt7SuYklA+lotlv+Tom/WR9D3CkrZPvDhxuiyic51sFFJE5DJabrz SxHwYyjSQk4dqAeR7hEiwVXHaqFB0x1LrZgPfxTO2VcmYovJF7QOtYLpgIL2MH60 7nL6uDIRd3HjD7+8GlDhbjeE+0qnICKnjduM9nJFhpvFviCQXV4wcwPuG2Xdjj1U 037Tls0E4dmROk7Z5V/bHNuQr414uR1tk1xAIBXXvGJ/0V8oDGKRcP/U3tkbMvfy MudXGhit5on+MoZ7BVqGs5G2ty63srv39ds6IlUPfkUopDAYCM4= -----END CERTIFICATE-----Generated at Thu Sep 24 17:11:31 2026 by rpki-client