$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft File: CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft (raw, json) Hash identifier: LdjGluPzIZ3N+htrgYwq9rnkWN6/Erjsz324ocJPIO8= Subject key identifier: ED:4D:98:AD:63:38:75:96:D9:51:5D:AA:BC:34:DD:CE:D3:90:3F:17 Authority key identifier: CD:42:D1:C3:D4:58:36:B5:86:FB:32:BA:90:24:E9:4D:D3:87:11:C4 Certificate issuer: /CN=CD42D1C3D45836B586FB32BA9024E94DD38711C4 Certificate serial: 4EF8F8A5F5F89E1B1F8CF9F9CD5BBB92DB374245 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft Manifest number: 02 Signing time: Thu 24 Sep 2026 23:29:41 +0000 Manifest this update: Thu 24 Sep 2026 23:24:41 +0000 Manifest next update: Sat 26 Sep 2026 00:01:41 +0000 Files and hashes: 1: CD42D1C3D45836B586FB32BA9024E94DD38711C4.crl (hash: 2UGQ3YFXfFgrUH6izQ3uzXX/PgedwBGMMGObgcSy6jM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.crl rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:f8:a5:f5:f8:9e:1b:1f:8c:f9:f9:cd:5b:bb:92:db:37:42:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD42D1C3D45836B586FB32BA9024E94DD38711C4 Validity Not Before: Sep 24 23:24:41 2026 GMT Not After : Sep 26 00:01:41 2026 GMT Subject: CN=ED4D98AD63387596D9515DAABC34DDCED3903F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:fa:d0:97:3c:71:a8:6d:a1:83:7a:74:79: 55:be:49:1f:c1:a5:d7:0c:6e:be:47:8a:c5:ad:9b: 03:9e:67:10:19:0f:d4:42:f8:e9:42:df:b7:d4:08: 33:cf:b6:ec:d5:f5:4b:ce:64:90:8c:bd:b5:ed:5e: 82:0d:c1:55:16:33:54:6a:d0:46:2f:57:9b:78:22: 61:6e:64:b4:b9:40:1c:19:45:f0:a6:ee:95:1d:3e: de:5f:c4:9a:7a:6c:33:b0:9d:c6:56:4a:22:ed:16: cb:77:79:37:33:1e:af:aa:91:75:0b:86:4a:df:77: 67:07:85:65:03:ef:53:1d:21:ec:ac:1c:56:ed:e7: 01:ce:6f:6a:0c:62:7a:07:3e:92:92:20:b8:35:77: c9:e3:4f:b0:44:0d:f9:e0:41:eb:33:10:ef:98:a5: c9:08:40:62:b8:3b:6b:50:72:6e:65:50:f3:22:d5: 13:97:bd:54:e2:c8:34:dc:0f:85:08:ff:ad:5d:62: 7e:3c:79:76:b1:e5:27:94:2a:ba:2e:84:4f:81:96: d2:8b:a7:fc:b5:3a:71:77:12:99:8b:1c:84:38:c9: 7c:77:9c:15:23:1e:f3:33:70:b6:52:e4:10:35:df: 8f:0f:45:1e:5a:3e:5b:1f:b9:aa:fd:f2:f6:57:03: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4D:98:AD:63:38:75:96:D9:51:5D:AA:BC:34:DD:CE:D3:90:3F:17 X509v3 Authority Key Identifier: keyid:CD:42:D1:C3:D4:58:36:B5:86:FB:32:BA:90:24:E9:4D:D3:87:11:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/1/CD42D1C3D45836B586FB32BA9024E94DD38711C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6a:77:90:db:76:7f:e7:ae:80:a5:05:ce:8f:45:19:63:ce: 90:70:cb:96:21:54:94:89:34:ef:20:d5:fd:f0:26:22:e2:66: 7b:cd:83:a5:6f:62:34:24:30:70:8e:fe:e2:c7:ab:18:3e:23: 4a:8d:bc:a5:4f:81:f1:49:2b:0b:25:da:03:ee:39:19:c3:cf: 69:cf:52:00:d1:7b:4a:77:f1:27:d4:ec:9a:ed:60:0c:fc:35: ec:76:f6:f4:16:37:fe:05:be:fc:f9:2a:68:a6:97:9d:8a:41: 65:96:35:fb:7e:52:fe:4a:1c:ec:4a:c6:0d:f4:a2:14:ba:a6: 7c:1b:8d:18:99:ac:30:82:a2:6c:8e:ad:8c:e8:78:dc:50:65: a0:12:40:79:6f:11:16:17:fe:3b:a4:b9:34:a6:13:db:81:97: f1:b9:6a:32:c9:62:fd:84:25:ac:6e:39:32:21:fc:db:cf:6b: 6d:6d:81:c2:27:63:d2:3c:88:ed:ae:f9:34:ed:5a:c2:e2:2d: 43:3c:53:d3:a8:f9:82:95:93:68:6e:80:61:47:35:64:c0:59: 24:ec:a2:ec:46:4c:8e:06:80:4c:12:36:c4:03:59:5c:70:47: b6:5a:5f:c6:fe:d7:1e:50:c4:9a:a5:91:ba:b7:97:85:4e:5b: 78:5f:d0:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvj4pfX4nhsfjPn5zVu7kts3QkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0MkQxQzNENDU4MzZCNTg2RkIzMkJBOTAyNEU5NERE Mzg3MTFDNDAeFw0yNjA5MjQyMzI0NDFaFw0yNjA5MjYwMDAxNDFaMDMxMTAvBgNV BAMTKEVENEQ5OEFENjMzODc1OTZEOTUxNURBQUJDMzRERENFRDM5MDNGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZfrQlzxxqG2hg3p0eVW+SR/B pdcMbr5HisWtmwOeZxAZD9RC+OlC37fUCDPPtuzV9UvOZJCMvbXtXoINwVUWM1Rq 0EYvV5t4ImFuZLS5QBwZRfCm7pUdPt5fxJp6bDOwncZWSiLtFst3eTczHq+qkXUL hkrfd2cHhWUD71MdIeysHFbt5wHOb2oMYnoHPpKSILg1d8njT7BEDfngQeszEO+Y pckIQGK4O2tQcm5lUPMi1ROXvVTiyDTcD4UI/61dYn48eXax5SeUKrouhE+BltKL p/y1OnF3EpmLHIQ4yXx3nBUjHvMzcLZS5BA1348PRR5aPlsfuar98vZXA8UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7U2YrWM4dZbZUV2qvDTdztOQPxcwHwYDVR0j BBgwFoAUzULRw9RYNrWG+zK6kCTpTdOHEcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjdkMjctNmI2Yy00NWFjLWIzN2QtNDlmZjk1ZDNmY2M4LzEvQ0Q0MkQxQzNE NDU4MzZCNTg2RkIzMkJBOTAyNEU5NEREMzg3MTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQyRDFDM0Q0NTgzNkI1ODZGQjMyQkE5MDI0RTk0REQzODcx MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjdkMjctNmI2Yy00NWFjLWIz N2QtNDlmZjk1ZDNmY2M4LzEvQ0Q0MkQxQzNENDU4MzZCNTg2RkIzMkJBOTAyNEU5 NEREMzg3MTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1qd5Dbdn/nroClBc6PRRljzpBwy5YhVJSJ NO8g1f3wJiLiZnvNg6VvYjQkMHCO/uLHqxg+I0qNvKVPgfFJKwsl2gPuORnDz2nP UgDRe0p38SfU7JrtYAz8Nex29vQWN/4Fvvz5Kmiml52KQWWWNft+Uv5KHOxKxg30 ohS6pnwbjRiZrDCComyOrYzoeNxQZaASQHlvERYX/jukuTSmE9uBl/G5ajLJYv2E JaxuOTIh/NvPa21tgcInY9I8iO2u+TTtWsLiLUM8U9Oo+YKVk2hugGFHNWTAWSTs ouxGTI4GgEwSNsQDWVxwR7ZaX8b+1x5QxJqlkbq3l4VOW3hf0DQ= -----END CERTIFICATE-----Generated at Fri Sep 25 12:59:49 2026 by rpki-client