$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: VvYm0Y9eMkW6TMd8Rx3PyPJTubpR0ZMAVGMI0exbdFU= Subject key identifier: 71:27:AF:83:C9:4E:BC:5A:D8:42:0B:61:BD:F9:55:EB:B1:26:EF:75 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 050D9778422FED0456C75C566D096DAEDE442DD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:33:56 +0000 Manifest this update: Wed 23 Sep 2026 22:28:56 +0000 Manifest next update: Fri 25 Sep 2026 01:23:56 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: EbNhiWmYWJN/DBZL1qng5AP8FYK5+ok7WJ8EElEkMa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0d:97:78:42:2f:ed:04:56:c7:5c:56:6d:09:6d:ae:de:44:2d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Sep 23 22:28:56 2026 GMT Not After : Sep 25 01:23:56 2026 GMT Subject: CN=7127AF83C94EBC5AD8420B61BDF955EBB126EF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:3f:c1:8c:07:2c:a4:a5:93:d2:94:79:4b: f9:43:0e:7e:a0:df:5d:85:3c:78:fb:f7:40:d1:0b: df:51:00:d7:f8:55:a8:d3:43:dd:53:79:c3:5d:b8: 19:0c:fe:ff:18:3f:25:fc:d7:e8:79:82:90:f7:4d: aa:bc:51:ae:1c:9d:1d:39:b8:75:9f:52:30:3d:88: af:be:74:ee:a8:b1:a9:ae:bf:eb:e3:c5:d1:85:5e: 83:5e:d6:06:83:a9:ab:8d:41:fa:bd:75:99:8c:1b: 0a:ea:d5:de:e3:ed:ad:dd:e4:26:d1:f4:4b:de:bb: 88:e3:08:92:92:03:76:ea:38:e1:a0:b2:77:a1:e0: 99:de:4f:56:20:e2:b6:9a:aa:47:f7:eb:d1:68:fd: df:df:ba:b8:9f:75:ae:13:6d:79:9c:f8:f1:19:5e: 2e:9b:9a:28:18:62:7b:c5:2d:1d:be:ee:40:44:3e: 8a:74:ea:e8:c3:28:67:22:5d:47:3b:a1:3c:ed:39: 22:ef:f9:b2:91:c6:cb:27:b0:c6:97:3d:f3:e4:e4: 1f:09:97:fe:04:da:06:9a:cd:c8:42:00:de:2c:9f: fe:b4:f8:57:bd:7b:56:66:0e:8c:6c:a5:6a:4e:f7: 94:e4:0b:c7:42:c7:bb:82:68:26:95:f9:24:22:f5: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:AF:83:C9:4E:BC:5A:D8:42:0B:61:BD:F9:55:EB:B1:26:EF:75 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e3:29:b0:ae:2f:8b:c8:7c:de:40:f7:f8:c9:18:40:b5:97: d5:79:77:dc:9f:62:72:4e:7c:b4:54:f7:27:47:d4:3c:be:b1: 1b:0c:a5:aa:12:21:37:3e:56:d1:62:fc:1b:60:f5:87:1d:ea: f9:47:7c:dc:17:7d:d7:aa:4f:4e:03:d6:4c:7c:57:72:57:b7: 17:35:e6:00:6b:09:c6:be:6c:fc:6a:18:ee:a4:6f:9c:5e:9f: c2:3f:09:be:f8:f2:dd:dc:82:9c:87:e3:5c:cd:cd:95:84:a7: a8:6a:b8:13:e3:0c:89:bb:aa:8f:84:80:c3:42:3d:e2:32:70: 9d:07:c0:52:1f:d6:57:fe:23:71:55:9e:c0:0a:e8:4a:80:6d: 79:ed:e7:97:38:1b:9b:96:7a:15:96:24:ac:2b:0a:3c:4a:72: 7d:42:b5:85:5e:2c:97:57:30:19:9e:34:7b:c9:4e:e5:f3:46: c7:d5:e3:84:60:0e:77:05:a7:dd:3d:29:e5:72:ca:96:6a:fc: d4:5d:bf:43:1f:e1:64:a6:c5:d0:d2:c5:b2:fc:b3:3a:38:0e: a3:2f:91:71:36:02:05:ea:93:3e:62:24:1b:cd:d5:23:c3:79: 31:4e:c1:18:a8:b4:0f:56:aa:24:ed:b2:c7:3c:86:83:0f:fe: 00:03:4c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQ2XeEIv7QRWx1xWbQltrt5ELdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA5MjMyMjI4NTZaFw0yNjA5MjUwMTIzNTZaMDMxMTAvBgNV BAMTKDcxMjdBRjgzQzk0RUJDNUFEODQyMEI2MUJERjk1NUVCQjEyNkVGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQT/BjAcspKWT0pR5S/lDDn6g 312FPHj790DRC99RANf4VajTQ91TecNduBkM/v8YPyX81+h5gpD3Taq8Ua4cnR05 uHWfUjA9iK++dO6osamuv+vjxdGFXoNe1gaDqauNQfq9dZmMGwrq1d7j7a3d5CbR 9Eveu4jjCJKSA3bqOOGgsneh4JneT1Yg4raaqkf369Fo/d/furifda4TbXmc+PEZ Xi6bmigYYnvFLR2+7kBEPop06ujDKGciXUc7oTztOSLv+bKRxssnsMaXPfPk5B8J l/4E2gaazchCAN4sn/60+Fe9e1ZmDoxspWpO95TkC8dCx7uCaCaV+SQi9Ta5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSevg8lOvFrYQgthvflV67Em73UwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHjKbCuL4vIfN5A9/jJGEC1l9V5d9yfYnJO fLRU9ydH1Dy+sRsMpaoSITc+VtFi/Btg9Ycd6vlHfNwXfdeqT04D1kx8V3JXtxc1 5gBrCca+bPxqGO6kb5xen8I/Cb748t3cgpyH41zNzZWEp6hquBPjDIm7qo+EgMNC PeIycJ0HwFIf1lf+I3FVnsAK6EqAbXnt55c4G5uWehWWJKwrCjxKcn1CtYVeLJdX MBmeNHvJTuXzRsfV44RgDncFp909KeVyypZq/NRdv0Mf4WSmxdDSxbL8szo4DqMv kXE2AgXqkz5iJBvN1SPDeTFOwRiotA9WqiTtssc8hoMP/gADTLY= -----END CERTIFICATE-----Generated at Thu Sep 24 09:01:33 2026 by rpki-client