$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: xYAumEWIXoYC7Al6T26S7p36f8jsKiXlkB4CbgpMg+Q= Subject key identifier: 5D:B7:EC:A6:76:06:E2:2E:ED:EE:5D:4F:5B:C8:B2:70:EA:94:1C:C4 Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 732EF686749F734A16312F02CC3ECF0E07FB8CF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:56:53 +0000 Manifest this update: Thu 24 Sep 2026 12:51:53 +0000 Manifest next update: Fri 25 Sep 2026 13:10:53 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: VpyByC8McJiQAvGsUzDZYphe6X11W8Nhx0Rf8iA7LD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:f6:86:74:9f:73:4a:16:31:2f:02:cc:3e:cf:0e:07:fb:8c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: Sep 24 12:51:53 2026 GMT Not After : Sep 25 13:10:53 2026 GMT Subject: CN=5DB7ECA67606E22EEDEE5D4F5BC8B270EA941CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:b9:de:72:d9:ef:4a:d5:60:02:d9:4d:47: 7a:32:1d:e1:f1:ae:f2:96:a5:35:e2:fe:98:be:f8: 8a:b7:bb:d6:d1:3d:c0:6e:be:b8:6f:73:e8:b1:45: c6:d3:d7:52:45:a3:48:50:01:32:27:03:f0:ad:72: 60:8c:46:c3:d3:c6:64:14:bb:cb:28:b9:66:85:19: 8f:ff:76:81:7d:d9:e1:86:9e:96:91:42:e7:8f:14: 78:02:4f:0f:0b:c9:df:95:d9:8a:6f:41:c1:1e:4e: 9f:e4:1b:80:7c:c5:9a:c1:f0:21:99:2d:bd:8d:26: 4a:e8:31:d4:5b:ba:6a:f6:07:84:bd:10:c8:87:0a: 9d:c6:91:be:49:9a:b4:3c:a2:fc:f1:84:73:3c:b0: 27:03:67:9b:20:36:f3:5a:1e:df:2b:0b:a8:54:8a: 1b:3b:44:79:94:c3:04:cc:1e:2f:0f:73:8b:a1:86: f8:00:e8:f8:92:56:9c:ef:83:2d:6f:f7:73:b1:14: 21:50:99:12:4c:37:75:c8:d9:f7:89:95:29:49:19: 19:a1:2e:2e:7a:1b:74:20:ea:f5:02:88:67:63:8e: 74:46:b2:c4:ac:3a:83:98:01:8c:68:42:a8:76:87: 4c:bb:b3:b7:65:96:13:4a:f8:93:6e:93:cd:c0:af: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:EC:A6:76:06:E2:2E:ED:EE:5D:4F:5B:C8:B2:70:EA:94:1C:C4 X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b1:c8:7e:b4:0a:be:fb:8f:de:a5:77:e5:81:9d:90:6f:82: ae:7a:c5:42:e1:e8:1e:bd:ad:ca:d9:95:3b:89:27:1d:c0:7e: e1:7e:e4:e7:0e:34:7f:7b:71:61:8f:ee:53:ff:e0:c3:54:52: 41:34:5d:0b:1e:8a:8e:94:14:b6:68:9b:9e:5e:a2:61:45:07: 7d:06:26:23:ab:0c:99:28:18:67:e2:e0:5b:be:9a:d8:70:c2: 83:31:b6:c7:87:c5:ec:f7:ba:f0:14:9d:6e:e1:ab:05:7d:12: 33:bc:6f:61:5d:0b:b1:85:b1:41:d3:b9:e1:9e:12:f0:63:fc: 40:7c:f7:65:c8:88:f3:3a:d8:8a:8e:f4:ea:ec:4b:e9:fc:18: 43:03:0e:a5:41:53:66:5f:44:5d:d7:fb:ff:6c:de:40:40:30: cd:a1:a0:59:a2:4b:b9:bf:c5:e0:03:32:f9:91:7a:ce:b6:d0: 49:53:7b:88:87:27:18:11:1f:68:fc:8c:0c:49:82:44:f3:f6: 2b:9d:d4:41:c7:e5:55:60:d4:50:2f:23:8d:bb:80:0f:12:2e: d0:81:7b:75:a9:92:0e:a1:94:34:d7:9a:a2:f1:a1:de:28:b3: 61:52:5e:03:c2:cd:69:fa:36:d9:e2:ee:70:47:50:9f:92:d2: 6a:68:31:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcy72hnSfc0oWMS8CzD7PDgf7jPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA5MjQxMjUxNTNaFw0yNjA5MjUxMzEwNTNaMDMxMTAvBgNV BAMTKDVEQjdFQ0E2NzYwNkUyMkVFREVFNUQ0RjVCQzhCMjcwRUE5NDFDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBLnectnvStVgAtlNR3oyHeHx rvKWpTXi/pi++Iq3u9bRPcBuvrhvc+ixRcbT11JFo0hQATInA/CtcmCMRsPTxmQU u8souWaFGY//doF92eGGnpaRQuePFHgCTw8Lyd+V2YpvQcEeTp/kG4B8xZrB8CGZ Lb2NJkroMdRbumr2B4S9EMiHCp3Gkb5JmrQ8ovzxhHM8sCcDZ5sgNvNaHt8rC6hU ihs7RHmUwwTMHi8Pc4uhhvgA6PiSVpzvgy1v93OxFCFQmRJMN3XI2feJlSlJGRmh Li56G3Qg6vUCiGdjjnRGssSsOoOYAYxoQqh2h0y7s7dllhNK+JNuk83ArwC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbfspnYG4i7t7l1PW8iycOqUHMQwHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuxyH60Cr77j96ld+WBnZBvgq56xULh6B69 rcrZlTuJJx3AfuF+5OcONH97cWGP7lP/4MNUUkE0XQseio6UFLZom55eomFFB30G JiOrDJkoGGfi4Fu+mthwwoMxtseHxez3uvAUnW7hqwV9EjO8b2FdC7GFsUHTueGe EvBj/EB892XIiPM62IqO9OrsS+n8GEMDDqVBU2ZfRF3X+/9s3kBAMM2hoFmiS7m/ xeADMvmRes620ElTe4iHJxgRH2j8jAxJgkTz9iud1EHH5VVg1FAvI427gA8SLtCB e3Wpkg6hlDTXmqLxod4os2FSXgPCzWn6Ntni7nBHUJ+S0mpoMXg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:31:01 2026 by rpki-client