$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: xihNPH18daohF7lFTYwCn/yei/sr+zfB/RR8uyBLdIc= Subject key identifier: 2A:E9:AD:0D:04:B2:6F:75:67:E0:38:2A:D5:D0:E7:6E:5F:52:B3:FA Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 506E9433623C8FF97090938F63DF2122704CDA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:20:02 +0000 Manifest this update: Wed 23 Sep 2026 15:15:02 +0000 Manifest next update: Thu 24 Sep 2026 18:36:02 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: Lm3qe/iXyLM0QTthwlm3tBnnZiKpGtGhdZYSKKYM2Dg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6e:94:33:62:3c:8f:f9:70:90:93:8f:63:df:21:22:70:4c:da:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Sep 23 15:15:02 2026 GMT Not After : Sep 24 18:36:02 2026 GMT Subject: CN=2AE9AD0D04B26F7567E0382AD5D0E76E5F52B3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:10:c7:28:5e:ca:ad:df:2f:2d:75:4a:ac: dd:da:8e:11:57:b2:96:7d:46:c7:d2:ae:dc:ea:cb: 54:d5:f4:1a:05:a4:ee:12:3e:8b:c2:16:a3:ae:95: e2:d4:15:ec:85:77:c2:8f:90:07:d3:da:c3:f9:b7: eb:4d:0a:3f:c3:f5:46:68:b5:99:4e:b6:69:db:ea: 67:81:39:bf:33:c6:44:e3:98:39:96:07:5b:3f:0b: ce:68:e6:63:54:43:a4:c7:48:e6:57:c7:51:d0:21: bc:d0:ca:63:9f:9d:67:3e:06:6e:b6:42:f3:ac:ab: 27:73:9e:70:c4:56:06:38:76:5a:6b:14:cf:ab:2f: 7e:ef:68:8a:4d:29:8e:a0:a8:bd:f8:63:23:e4:93: d3:ee:b7:b1:cd:8b:16:31:9a:bd:69:88:8a:38:5a: ed:cb:0b:32:de:6d:04:f1:59:ae:38:f0:4e:8c:7c: f1:cf:2f:be:33:0a:ef:ae:ea:4d:32:bd:1d:8a:1d: 0c:09:5d:86:1b:26:7f:61:ca:48:48:67:05:35:69: c8:d6:a1:bc:80:22:19:1c:05:2c:18:00:6a:37:cc: cc:10:30:54:8b:cd:e4:c3:88:62:56:0a:23:24:c6: 0d:9f:c6:82:de:47:7a:15:d4:01:3c:35:b1:72:12: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E9:AD:0D:04:B2:6F:75:67:E0:38:2A:D5:D0:E7:6E:5F:52:B3:FA X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fe:2e:e1:78:19:67:fa:30:ea:9b:2c:c4:d4:aa:f4:56:f5: cc:8d:55:e1:1e:36:36:b2:23:67:57:51:21:89:80:9d:f1:5f: 42:01:b3:f3:23:e5:59:ef:a8:ec:0e:76:31:ca:4a:c7:61:07: 54:2c:73:81:3f:d2:72:34:1b:7c:6b:fb:48:41:33:ac:fb:e1: 47:74:ff:00:bf:56:5a:38:b9:00:18:ce:22:cb:da:8a:e3:32: a4:d0:85:7b:74:de:01:5d:0b:a8:bf:84:59:5f:1d:97:07:8d: 5a:b9:88:18:2e:67:cd:5e:13:b5:aa:27:ba:b5:91:bf:80:f6: b9:93:f8:2a:85:b1:3a:92:51:3b:9b:c0:bf:ee:38:7b:5e:c8: cc:02:61:c7:2a:01:24:31:f9:ce:58:a0:09:4e:7d:59:ef:82: 5a:ba:1a:07:af:e8:49:d6:5c:1e:89:0b:d9:fe:c5:57:5d:40: a8:d8:d3:39:39:16:d8:7a:d5:fa:d7:16:fd:ce:64:82:25:69: e5:91:24:a0:b7:ba:de:c1:c1:79:53:e1:56:21:f0:11:70:5c: 96:40:a0:8b:6d:7c:1b:ec:f8:6d:27:95:92:64:22:9b:30:df: 5c:4d:bc:5d:b9:de:06:e8:ca:3d:86:09:0c:f5:83:c1:c0:a1: 3c:91:ae:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUG6UM2I8j/lwkJOPY98hInBM2i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA5MjMxNTE1MDJaFw0yNjA5MjQxODM2MDJaMDMxMTAvBgNV BAMTKDJBRTlBRDBEMDRCMjZGNzU2N0UwMzgyQUQ1RDBFNzZFNUY1MkIzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqxDHKF7Krd8vLXVKrN3ajhFX spZ9RsfSrtzqy1TV9BoFpO4SPovCFqOuleLUFeyFd8KPkAfT2sP5t+tNCj/D9UZo tZlOtmnb6meBOb8zxkTjmDmWB1s/C85o5mNUQ6THSOZXx1HQIbzQymOfnWc+Bm62 QvOsqydznnDEVgY4dlprFM+rL37vaIpNKY6gqL34YyPkk9Put7HNixYxmr1piIo4 Wu3LCzLebQTxWa448E6MfPHPL74zCu+u6k0yvR2KHQwJXYYbJn9hykhIZwU1acjW obyAIhkcBSwYAGo3zMwQMFSLzeTDiGJWCiMkxg2fxoLeR3oV1AE8NbFyElg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKumtDQSyb3Vn4Dgq1dDnbl9Ss/owHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj+LuF4GWf6MOqbLMTUqvRW9cyNVeEeNjay I2dXUSGJgJ3xX0IBs/Mj5VnvqOwOdjHKSsdhB1Qsc4E/0nI0G3xr+0hBM6z74Ud0 /wC/Vlo4uQAYziLL2orjMqTQhXt03gFdC6i/hFlfHZcHjVq5iBguZ81eE7WqJ7q1 kb+A9rmT+CqFsTqSUTubwL/uOHteyMwCYccqASQx+c5YoAlOfVnvglq6Ggev6EnW XB6JC9n+xVddQKjY0zk5Fth61frXFv3OZIIlaeWRJKC3ut7BwXlT4VYh8BFwXJZA oIttfBvs+G0nlZJkIpsw31xNvF253gboyj2GCQz1g8HAoTyRrnk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:22:13 2026 by rpki-client