$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft File: 0364E5E1741E1D920A287362374F4F8FC981377D.mft (raw, json) Hash identifier: En6UAB3QE5yfYzZsIYNMzMxjBgnDBrsXIVQYbvdZo2s= Subject key identifier: 74:8F:3D:7E:A6:77:02:51:D1:64:B8:23:B7:B5:90:D5:36:40:EA:C9 Authority key identifier: 03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D Certificate issuer: /CN=0364E5E1741E1D920A287362374F4F8FC981377D Certificate serial: 35B4D0B5F7EABB8D55B41193BD42081A0B126618 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:44:02 +0000 Manifest this update: Thu 24 Sep 2026 14:39:02 +0000 Manifest next update: Fri 25 Sep 2026 18:30:02 +0000 Files and hashes: 1: 0364E5E1741E1D920A287362374F4F8FC981377D.crl (hash: Fli1jo6pXOkVM9JWYSwj0vKNDXIgBn5eJGQZJwsnq10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:d0:b5:f7:ea:bb:8d:55:b4:11:93:bd:42:08:1a:0b:12:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0364E5E1741E1D920A287362374F4F8FC981377D Validity Not Before: Sep 24 14:39:02 2026 GMT Not After : Sep 25 18:30:02 2026 GMT Subject: CN=748F3D7EA6770251D164B823B7B590D53640EAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:c9:25:0e:3a:af:5a:ed:a5:4e:bc:31:b9: 59:c1:8b:d9:62:8b:50:9e:37:90:f8:56:d7:59:7e: f8:53:b4:f2:04:97:00:bb:63:b8:08:dd:45:98:b5: 1b:02:b4:9c:6e:fa:0f:a9:0d:e1:38:f5:75:12:4b: 9b:48:b1:68:0e:7a:25:e8:7f:8e:68:03:1c:30:56: 5b:5f:ba:74:1e:78:fb:dd:91:04:76:d2:b2:b1:6b: 1a:11:37:4e:82:0d:40:61:bc:ec:1c:f0:81:41:5f: 82:8d:47:39:2a:d2:08:87:2a:df:59:40:4a:0c:48: fa:9b:57:49:6b:26:60:db:a2:ff:34:b1:69:b7:6a: 9e:c8:c8:ab:2e:d4:5d:07:09:b1:57:b2:25:e1:c8: 65:53:e1:5a:e2:34:74:1b:d1:2e:6c:0b:f0:1c:71: 33:43:59:e5:f4:e7:59:04:53:e3:02:e5:f3:48:10: e4:70:9e:fb:d6:71:82:64:8c:40:81:93:c4:7a:7a: 9a:a2:8d:bb:61:67:f4:a0:c9:f1:e1:51:f7:45:59: be:39:cb:60:8b:65:c8:1e:b6:80:93:e2:ff:9a:81: 12:fb:2f:6c:a6:9b:1e:3e:00:0c:fa:87:03:8f:c1: c4:09:5a:33:b3:9c:df:2f:52:7b:90:aa:7f:82:e3: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8F:3D:7E:A6:77:02:51:D1:64:B8:23:B7:B5:90:D5:36:40:EA:C9 X509v3 Authority Key Identifier: keyid:03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:06:3e:cc:8b:bd:57:b7:0e:8f:2e:fd:17:7e:a4:da:d2:d0: c3:60:eb:25:61:d0:3a:db:c8:8f:8c:f4:3f:f9:37:5c:6a:87: d9:fe:2b:37:72:3a:a3:a0:58:86:21:32:ff:1e:16:74:5f:11: f7:1d:c2:a3:45:40:cf:bf:64:36:84:6d:40:55:64:a0:6c:bf: c1:70:a8:d4:74:de:07:7b:ff:13:c3:ba:a0:a2:cb:12:9c:27: 26:c8:2f:24:39:26:ec:70:1d:b3:70:5f:38:2b:8d:01:cb:22: 2d:88:33:7e:21:f1:d7:ff:42:83:81:ff:2e:c6:5f:e4:42:fb: 50:50:b4:bd:28:0a:fb:bd:00:13:af:8e:75:19:ca:f7:ae:bf: 38:0b:26:ba:c9:fd:a5:13:e9:84:8b:cf:a6:04:21:1d:2d:d1: 63:7e:27:a5:ae:53:1f:33:57:b8:7e:d4:ce:a4:ba:35:b9:aa: 27:9f:05:53:3c:48:59:a1:2d:9b:f9:83:05:ef:8d:00:c5:4f: d7:66:db:8a:86:d1:ac:f9:24:10:f2:0e:dd:2b:c0:b9:51:58: af:d0:a4:6d:81:e6:86:63:fc:75:92:e6:e3:3c:71:a2:2d:04: 3d:e2:de:99:04:d9:4a:90:fd:17:d8:46:97:9a:43:0f:57:b4: e4:48:1f:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbTQtffqu41VtBGTvUIIGgsSZhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZD OTgxMzc3RDAeFw0yNjA5MjQxNDM5MDJaFw0yNjA5MjUxODMwMDJaMDMxMTAvBgNV BAMTKDc0OEYzRDdFQTY3NzAyNTFEMTY0QjgyM0I3QjU5MEQ1MzY0MEVBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYcklDjqvWu2lTrwxuVnBi9li i1CeN5D4VtdZfvhTtPIElwC7Y7gI3UWYtRsCtJxu+g+pDeE49XUSS5tIsWgOeiXo f45oAxwwVltfunQeePvdkQR20rKxaxoRN06CDUBhvOwc8IFBX4KNRzkq0giHKt9Z QEoMSPqbV0lrJmDbov80sWm3ap7IyKsu1F0HCbFXsiXhyGVT4VriNHQb0S5sC/Ac cTNDWeX051kEU+MC5fNIEORwnvvWcYJkjECBk8R6epqijbthZ/SgyfHhUfdFWb45 y2CLZcgetoCT4v+agRL7L2ymmx4+AAz6hwOPwcQJWjOznN8vUnuQqn+C469LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdI89fqZ3AlHRZLgjt7WQ1TZA6skwHwYDVR0j BBgwFoAUA2Tl4XQeHZIKKHNiN09Pj8mBN30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhkYjczNzUtMTJkMS00OTM1LWJlZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3 NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZDOTgxMzc3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzY0RTVFMTc0MUUxRDkyMEEyODczNjIzNzRGNEY4RkM5ODEz NzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRG OEZDOTgxMzc3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAGPsyLvVe3Do8u/Rd+pNrS0MNg6yVh0Drb yI+M9D/5N1xqh9n+KzdyOqOgWIYhMv8eFnRfEfcdwqNFQM+/ZDaEbUBVZKBsv8Fw qNR03gd7/xPDuqCiyxKcJybILyQ5JuxwHbNwXzgrjQHLIi2IM34h8df/QoOB/y7G X+RC+1BQtL0oCvu9ABOvjnUZyveuvzgLJrrJ/aUT6YSLz6YEIR0t0WN+J6WuUx8z V7h+1M6kujW5qiefBVM8SFmhLZv5gwXvjQDFT9dm24qG0az5JBDyDt0rwLlRWK/Q pG2B5oZj/HWS5uM8caItBD3i3pkE2UqQ/RfYRpeaQw9XtORIH0o= -----END CERTIFICATE-----Generated at Thu Sep 24 19:34:44 2026 by rpki-client