$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: N4MO0LOYxTtsq+uvvT5uVRcqgEow7OkFx99ZTrDf/U0= Subject key identifier: 0C:DA:2D:09:3B:8E:7A:0B:53:2E:CD:D4:33:A5:E6:43:44:E8:E8:C6 Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 16444DCAE4DFC96722262053C03798E413DF101E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:56:57 +0000 Manifest this update: Thu 24 Sep 2026 00:51:57 +0000 Manifest next update: Fri 25 Sep 2026 03:31:57 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: jUTjBQtUirlf/v+C+du+qtp6+gHSOMGaeZ8Hw9W9npg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:44:4d:ca:e4:df:c9:67:22:26:20:53:c0:37:98:e4:13:df:10:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Sep 24 00:51:57 2026 GMT Not After : Sep 25 03:31:57 2026 GMT Subject: CN=0CDA2D093B8E7A0B532ECDD433A5E64344E8E8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:db:09:c9:bf:56:7d:a6:22:53:fd:ab:b9: 63:ab:6a:a8:a3:99:ea:f9:5b:db:29:2c:e0:05:05: 6b:53:24:5a:1e:96:8d:35:b7:55:4c:aa:1d:b9:fd: 4f:49:e4:02:52:62:e8:be:54:29:bd:8c:3c:79:88: f6:e3:f3:b1:b7:f9:84:84:6f:3f:8c:85:39:66:38: c0:ba:1d:29:bb:b9:c8:e4:08:70:89:7f:a1:7a:5f: 5b:18:77:ad:cb:99:77:31:e9:a5:0d:ec:04:2b:00: 89:4a:74:54:87:0c:d7:40:2a:d6:0c:15:ac:8b:d6: 3e:2e:43:dc:28:61:c9:d2:67:7d:7f:cd:2b:fc:1f: a8:6b:a3:9e:2e:55:4c:fd:a3:3f:6e:c7:80:4b:0b: 6c:10:67:1a:df:76:4f:d2:85:77:fd:c8:b5:04:8a: 71:04:04:5f:90:aa:fb:1b:b8:5b:95:02:7c:98:40: 54:f6:6b:71:c6:c7:d4:40:2a:b1:1b:f8:57:3d:0a: 5b:81:ba:ab:aa:2d:1b:b7:9c:9e:57:f6:ce:0b:45: 1e:b7:75:89:67:bc:3f:11:1b:68:8c:a4:d8:88:47: 3d:2f:8f:8c:29:de:dd:c6:a0:57:65:90:5a:55:0e: 7e:f5:89:0d:3b:f7:e8:10:c8:cf:5c:0e:53:70:7e: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:2D:09:3B:8E:7A:0B:53:2E:CD:D4:33:A5:E6:43:44:E8:E8:C6 X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f0:63:66:69:c6:9b:3d:17:3d:7b:41:bf:7e:07:90:56:03: fc:2a:0c:c1:df:5a:02:d9:c8:71:9d:22:60:e5:44:08:d3:6f: 73:4b:f3:7e:00:af:51:a9:b8:35:84:64:7e:50:b1:ad:25:d4: 3d:fc:e7:e7:7d:2c:57:65:a5:c4:95:b9:8d:d2:e0:eb:3c:4e: a7:98:e0:ee:44:8f:2b:0b:3e:41:82:8e:f0:bd:e8:be:56:1b: d1:fe:a8:7b:11:41:03:90:a5:ea:05:84:a2:f9:6f:fe:1d:6b: af:20:3d:0e:f3:29:54:41:5e:21:45:b3:9b:00:5c:bc:ba:3e: 4f:9f:44:f8:b4:7a:1a:19:9d:a8:d7:be:38:6a:f9:3b:10:f9: e3:1a:81:c6:32:10:85:2d:b5:25:9a:a7:ef:f3:30:04:29:f0: 38:e3:7d:b4:b3:ed:3e:09:62:cf:f1:c2:bc:ce:b2:4e:ff:bb: e9:f7:c3:c4:93:3b:6a:57:28:22:4f:32:4b:eb:97:c9:91:a5: 85:6a:d0:f2:e7:ba:64:b0:1d:c0:92:62:bc:92:db:bc:b2:d2: 54:a0:5a:40:0f:fd:ee:90:e3:d9:d9:0d:65:84:10:d8:65:5c: 7e:ca:51:05:96:30:d9:5b:9e:81:24:94:b0:ed:85:d0:b2:f4: c3:70:17:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkRNyuTfyWciJiBTwDeY5BPfEB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA5MjQwMDUxNTdaFw0yNjA5MjUwMzMxNTdaMDMxMTAvBgNV BAMTKDBDREEyRDA5M0I4RTdBMEI1MzJFQ0RENDMzQTVFNjQzNDRFOEU4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMtsJyb9WfaYiU/2ruWOraqij mer5W9spLOAFBWtTJFoelo01t1VMqh25/U9J5AJSYui+VCm9jDx5iPbj87G3+YSE bz+MhTlmOMC6HSm7ucjkCHCJf6F6X1sYd63LmXcx6aUN7AQrAIlKdFSHDNdAKtYM FayL1j4uQ9woYcnSZ31/zSv8H6hro54uVUz9oz9ux4BLC2wQZxrfdk/ShXf9yLUE inEEBF+QqvsbuFuVAnyYQFT2a3HGx9RAKrEb+Fc9CluBuquqLRu3nJ5X9s4LRR63 dYlnvD8RG2iMpNiIRz0vj4wp3t3GoFdlkFpVDn71iQ079+gQyM9cDlNwfsl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNotCTuOegtTLs3UM6XmQ0To6MYwHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7wY2Zpxps9Fz17Qb9+B5BWA/wqDMHfWgLZ yHGdImDlRAjTb3NL834Ar1GpuDWEZH5Qsa0l1D385+d9LFdlpcSVuY3S4Os8TqeY 4O5EjysLPkGCjvC96L5WG9H+qHsRQQOQpeoFhKL5b/4da68gPQ7zKVRBXiFFs5sA XLy6Pk+fRPi0ehoZnajXvjhq+TsQ+eMagcYyEIUttSWap+/zMAQp8DjjfbSz7T4J Ys/xwrzOsk7/u+n3w8STO2pXKCJPMkvrl8mRpYVq0PLnumSwHcCSYryS27yy0lSg WkAP/e6Q49nZDWWEENhlXH7KUQWWMNlbnoEklLDthdCy9MNwF5I= -----END CERTIFICATE-----Generated at Thu Sep 24 12:44:06 2026 by rpki-client