$ rpki-client -vvvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: Bc7M5cMFphd+jvPOzdI16Noxa6IBeKHh3b2hkyTZGNc= Subject key identifier: 6C:65:18:4C:92:5E:70:68:30:CC:5C:C8:2D:35:AC:2B:27:DB:04:72 Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 6DE7178136E3AE6067115A10BBA56818E9FD5B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 20:20:34 +0000 Manifest this update: Thu 24 Sep 2026 20:15:34 +0000 Manifest next update: Fri 25 Sep 2026 21:38:34 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: ciFwl7vCMI+Ot/A7foypOB9I70AqXIZ/EIoso/jM0eY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e7:17:81:36:e3:ae:60:67:11:5a:10:bb:a5:68:18:e9:fd:5b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Sep 24 20:15:34 2026 GMT Not After : Sep 25 21:38:34 2026 GMT Subject: CN=6C65184C925E706830CC5CC82D35AC2B27DB0472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:80:a4:e6:ad:24:3f:fb:11:f0:95:4a:f6: 33:57:43:df:87:7d:05:2a:e2:aa:50:ad:89:5f:c6: 60:68:4d:c4:97:8c:45:f8:54:1e:e2:cc:4b:b3:7d: 04:69:d8:07:94:a4:d2:70:0b:ff:cf:ac:4a:1e:84: 73:90:4e:8a:80:81:6f:e6:c6:39:0a:5b:32:86:35: 5a:f9:42:db:f6:38:88:9a:35:51:e8:21:27:31:2b: f0:0b:67:97:af:eb:5a:c3:f5:db:8d:9d:d9:6f:fc: b8:5c:ac:aa:13:36:bc:61:da:a0:52:fd:dc:8e:aa: d8:98:d6:60:58:52:ed:40:28:8a:9a:0e:1c:61:3d: b5:5a:54:dd:f0:58:4a:29:b6:33:24:6f:ae:eb:47: 99:52:cd:ea:4e:35:d7:30:e4:2c:73:71:a2:2e:79: d3:46:b3:e9:35:59:a5:f4:82:07:f7:e2:d1:75:f9: e1:06:3b:69:80:c1:10:5e:df:87:ec:64:b2:77:5a: d9:18:95:42:c8:c6:ac:b1:3c:8c:9d:87:80:af:00: 35:94:8d:16:a5:61:d0:8e:56:a8:6b:57:87:63:6d: ae:77:4e:94:44:d8:cf:f1:b7:dd:ac:6c:0d:00:0c: 2d:34:a9:6a:35:11:2f:40:35:c8:d2:9f:f8:59:20: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:65:18:4C:92:5E:70:68:30:CC:5C:C8:2D:35:AC:2B:27:DB:04:72 X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:be:8f:b6:be:7a:2d:71:1a:90:80:da:9e:65:68:20:09:7f: 83:62:cb:bf:e5:42:c6:a6:da:ae:af:4c:fc:bd:6d:8b:d6:34: 0d:3d:18:e3:b1:1d:2b:03:7b:f3:33:53:6d:99:7c:4f:ff:81: 56:e2:63:fe:97:0c:5d:82:62:12:bf:c9:6f:42:a6:c5:85:ac: 6c:d1:2f:22:ca:44:99:b4:85:73:9b:59:8e:ff:e8:00:f3:5a: a3:b5:08:c8:40:b2:f6:77:ad:1f:fc:69:8d:c9:e7:d0:9f:85: 24:77:1b:8e:7f:5f:f4:06:6a:0b:9e:97:fd:ef:b1:26:18:f4: 3e:6c:8f:39:74:fd:8a:69:a1:0c:3c:cf:c7:6d:cf:87:03:ff: b0:e8:4f:3e:ac:fa:67:f3:77:cc:49:98:b1:7e:9b:c9:da:44: 9d:1d:a3:27:e3:ed:d0:ca:45:30:6c:64:86:94:92:71:5a:4b: 07:30:8e:d2:92:38:4b:d0:24:8d:34:ff:b6:7f:de:ca:de:7c: b0:35:3a:6a:0c:52:fb:0e:e7:7c:c1:5d:61:53:e2:c6:0d:65: 13:2d:e4:2b:b4:26:94:df:88:79:02:0a:73:43:95:26:ad:47: 91:16:5c:12:33:c0:23:17:59:ab:ed:d3:08:14:39:6d:c8:0e: c8:e0:5f:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbecXgTbjrmBnEVoQu6VoGOn9WzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA5MjQyMDE1MzRaFw0yNjA5MjUyMTM4MzRaMDMxMTAvBgNV BAMTKDZDNjUxODRDOTI1RTcwNjgzMENDNUNDODJEMzVBQzJCMjdEQjA0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaICk5q0kP/sR8JVK9jNXQ9+H fQUq4qpQrYlfxmBoTcSXjEX4VB7izEuzfQRp2AeUpNJwC//PrEoehHOQToqAgW/m xjkKWzKGNVr5Qtv2OIiaNVHoIScxK/ALZ5ev61rD9duNndlv/LhcrKoTNrxh2qBS /dyOqtiY1mBYUu1AKIqaDhxhPbVaVN3wWEoptjMkb67rR5lSzepONdcw5CxzcaIu edNGs+k1WaX0ggf34tF1+eEGO2mAwRBe34fsZLJ3WtkYlULIxqyxPIydh4CvADWU jRalYdCOVqhrV4djba53TpRE2M/xt92sbA0ADC00qWo1ES9ANcjSn/hZIGwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGUYTJJecGgwzFzILTWsKyfbBHIwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC+j7a+ei1xGpCA2p5laCAJf4Niy7/lQsam 2q6vTPy9bYvWNA09GOOxHSsDe/MzU22ZfE//gVbiY/6XDF2CYhK/yW9CpsWFrGzR LyLKRJm0hXObWY7/6ADzWqO1CMhAsvZ3rR/8aY3J59CfhSR3G45/X/QGaguel/3v sSYY9D5sjzl0/YppoQw8z8dtz4cD/7DoTz6s+mfzd8xJmLF+m8naRJ0doyfj7dDK RTBsZIaUknFaSwcwjtKSOEvQJI00/7Z/3srefLA1OmoMUvsO53zBXWFT4sYNZRMt 5Cu0JpTfiHkCCnNDlSatR5EWXBIzwCMXWavt0wgUOW3IDsjgX6A= -----END CERTIFICATE-----Generated at Fri Sep 25 02:07:25 2026 by rpki-client