$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft File: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft (raw, json) Hash identifier: b5urqh/9t4fu4/UY0c4pcjUgFY/zsyDiCjWDPClwiqo= Subject key identifier: 6C:F2:81:8C:E3:17:91:36:E0:AC:C2:29:D7:F9:1F:B0:F9:C8:48:6E Authority key identifier: D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 Certificate issuer: /CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Certificate serial: 23B56CD852544DF0697E0A3C03E5B6001EC77344 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 13:47:25 +0000 Manifest this update: Fri 25 Sep 2026 13:42:25 +0000 Manifest next update: Sat 26 Sep 2026 14:35:25 +0000 Files and hashes: 1: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl (hash: L6i0UEM/WyyqjETz/g3e9QU1HdVaVtQRjcvaOo0xowU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:6c:d8:52:54:4d:f0:69:7e:0a:3c:03:e5:b6:00:1e:c7:73:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Validity Not Before: Sep 25 13:42:25 2026 GMT Not After : Sep 26 14:35:25 2026 GMT Subject: CN=6CF2818CE3179136E0ACC229D7F91FB0F9C8486E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:44:6f:01:97:6c:53:3d:8a:e0:50:a3:67: 0b:0f:ce:1a:c0:1d:a8:39:e7:30:9f:f2:1f:0b:20: 2f:56:4e:d6:5b:f2:6a:79:28:0a:1c:1c:8f:b8:48: 4c:78:37:96:d1:f5:f8:58:93:9c:ee:1b:5c:e6:4a: 93:b2:22:6f:ff:2b:f7:39:f2:fd:e1:11:78:3d:a8: cc:2b:cc:44:9c:d4:03:da:52:d3:6f:8e:94:6a:88: 8b:42:27:df:cc:67:63:22:4f:0f:d7:a0:47:47:8d: 37:41:28:c5:00:bd:7f:88:88:a5:04:8a:c9:cc:ea: 1c:40:f2:9b:a6:61:3b:2e:8e:d1:55:98:0f:66:8f: 2d:8a:1e:0c:4a:12:df:d0:2c:80:ce:96:3c:b9:b5: 6b:01:39:74:db:c0:5c:c5:05:c8:d2:02:ab:78:90: 8a:54:6f:b0:d6:6c:82:02:68:b5:ed:ec:e9:05:66: 50:a9:d9:64:e3:74:bd:36:79:df:a5:61:01:6a:f9: 53:46:c1:d6:b8:cb:ad:de:bf:b5:c3:47:6e:44:ed: ac:31:94:f2:0c:06:1c:f3:74:1a:6b:04:fb:b5:4a: 5c:20:67:75:7d:36:b3:2a:ad:8e:2f:81:c9:82:83: 40:ba:af:97:7b:13:72:01:16:5a:1b:d9:4e:07:9b: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F2:81:8C:E3:17:91:36:E0:AC:C2:29:D7:F9:1F:B0:F9:C8:48:6E X509v3 Authority Key Identifier: keyid:D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:55:5e:60:d2:a2:3d:f9:cd:37:66:b0:8a:b6:ae:32:54:7f: 6f:ee:66:fa:02:08:00:64:31:d4:09:56:53:3a:cd:63:a2:b5: 03:3f:05:1a:51:c5:d7:71:f5:4f:42:c6:3e:39:09:fe:80:bf: d0:a7:83:fc:80:ce:5c:a5:be:82:8b:a7:14:59:6e:34:6c:a6: 89:d2:aa:58:2f:78:7e:77:69:43:9a:cd:5f:df:68:18:92:70: cb:81:4f:2e:a7:9e:ec:df:60:ed:c4:87:26:cb:98:86:cb:02: b9:b1:8c:c4:41:45:64:df:18:28:57:e9:d1:6b:e6:d0:db:a4: a3:3b:57:52:55:ce:c7:da:bb:a0:6f:bd:06:34:e8:48:b8:68: fd:62:59:7a:cc:f8:c6:7a:ec:e4:a8:63:33:75:75:72:c6:9d: 90:c8:3b:a5:a7:bb:0f:45:88:70:e4:1d:f4:62:a1:ac:1a:9d: c2:33:51:f9:61:b9:b2:68:0e:70:a4:ca:ee:52:7f:23:33:16: 5e:b6:2d:68:61:e1:59:c0:82:1a:17:3e:d2:22:2a:64:2d:64: 67:eb:ef:4d:85:6d:2d:0f:53:4f:8f:6b:a0:d8:fc:8b:5d:3b: e7:d0:37:42:67:3f:6c:97:52:27:0d:56:16:01:db:a3:ba:b1: 01:c9:b3:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7Vs2FJUTfBpfgo8A+W2AB7Hc0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdF RTE3NThDMDAeFw0yNjA5MjUxMzQyMjVaFw0yNjA5MjYxNDM1MjVaMDMxMTAvBgNV BAMTKDZDRjI4MThDRTMxNzkxMzZFMEFDQzIyOUQ3RjkxRkIwRjlDODQ4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/0RvAZdsUz2K4FCjZwsPzhrA Hag55zCf8h8LIC9WTtZb8mp5KAocHI+4SEx4N5bR9fhYk5zuG1zmSpOyIm//K/c5 8v3hEXg9qMwrzESc1APaUtNvjpRqiItCJ9/MZ2MiTw/XoEdHjTdBKMUAvX+IiKUE isnM6hxA8pumYTsujtFVmA9mjy2KHgxKEt/QLIDOljy5tWsBOXTbwFzFBcjSAqt4 kIpUb7DWbIICaLXt7OkFZlCp2WTjdL02ed+lYQFq+VNGwda4y63ev7XDR25E7awx lPIMBhzzdBprBPu1SlwgZ3V9NrMqrY4vgcmCg0C6r5d7E3IBFlob2U4Hm+l1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbPKBjOMXkTbgrMIp1/kfsPnISG4wHwYDVR0j BBgwFoAU0E6O2hxuCua1iYh6zzVdd+4XWMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY0ZDFjMzYtNGEzMS00ODU3LTllMzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREEx QzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdFRTE3NThDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDRFOEVEQTFDNkUwQUU2QjU4OTg4N0FDRjM1NUQ3N0VFMTc1 OEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVE NzdFRTE3NThDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtVXmDSoj35zTdmsIq2rjJUf2/uZvoCCABk MdQJVlM6zWOitQM/BRpRxddx9U9Cxj45Cf6Av9Cng/yAzlylvoKLpxRZbjRsponS qlgveH53aUOazV/faBiScMuBTy6nnuzfYO3EhybLmIbLArmxjMRBRWTfGChX6dFr 5tDbpKM7V1JVzsfau6BvvQY06Ei4aP1iWXrM+MZ67OSoYzN1dXLGnZDIO6Wnuw9F iHDkHfRioawancIzUflhubJoDnCkyu5SfyMzFl62LWhh4VnAghoXPtIiKmQtZGfr 702FbS0PU0+Pa6DY/ItdO+fQN0JnP2yXUicNVhYB26O6sQHJsww= -----END CERTIFICATE-----Generated at Fri Sep 25 21:50:00 2026 by rpki-client