$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: mhY4rK5W4ks+lVl/KOGasohbkwfc+65wgtZ+lwpKKUU= Subject key identifier: 5E:A5:58:46:80:B3:66:DC:9C:ED:DA:78:FE:82:16:68:BE:E6:A5:54 Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 30B227A1E43C8671EA69630C6D3727FDDD086234 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:53:17 +0000 Manifest this update: Wed 23 Sep 2026 13:48:17 +0000 Manifest next update: Thu 24 Sep 2026 16:09:17 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: B7iLAo+H4/aWOwLAbDyZBtPzfNr3Xc6zP+5pcTdgV30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b2:27:a1:e4:3c:86:71:ea:69:63:0c:6d:37:27:fd:dd:08:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Sep 23 13:48:17 2026 GMT Not After : Sep 24 16:09:17 2026 GMT Subject: CN=5EA5584680B366DC9CEDDA78FE821668BEE6A554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:59:e2:c3:02:d3:d5:99:00:41:fa:13:39: 73:31:c4:e6:a2:19:d0:7d:86:c9:21:4d:81:51:b1: d7:99:69:75:3a:31:66:f9:76:90:19:e8:c8:bc:a0: a0:0e:d3:b8:ae:dc:2d:5f:d3:38:6f:3f:da:33:ee: 65:e3:11:56:2c:4f:02:97:1c:30:02:1c:63:ed:81: 10:74:e2:4f:27:10:86:8e:8b:78:ae:01:22:4d:58: 1b:34:36:1e:b2:f1:25:9a:20:25:20:b4:08:9e:af: 61:0b:af:26:9f:29:78:87:e1:e1:58:fd:cf:a5:b9: b0:b5:b6:a4:61:dc:9d:a8:59:3d:cc:3a:a6:40:af: 5d:78:7c:12:4a:96:f0:4c:43:b7:c9:a2:af:f4:bc: 37:97:d9:a4:af:d5:db:2f:d1:27:79:2e:94:ba:d0: 59:1a:91:c5:fe:c7:c9:c4:f4:a3:74:0a:0c:76:fd: 7d:6d:e4:59:3f:8b:3d:fc:be:69:e3:15:84:16:00: 2f:42:60:ea:e5:96:66:c5:2f:34:b4:6b:0a:c5:3a: 0d:dc:b8:bc:83:75:64:a0:22:a9:c0:ad:cc:2c:48: 1a:18:f3:e7:f8:5d:a8:42:94:78:91:72:06:b7:44: 3d:7e:b2:93:c6:01:bd:60:ee:cd:84:3d:69:57:0c: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A5:58:46:80:B3:66:DC:9C:ED:DA:78:FE:82:16:68:BE:E6:A5:54 X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c6:d5:f0:ef:fd:b4:53:22:08:b2:b1:8f:05:2b:18:71:da: cd:84:31:3f:42:df:3e:e8:1c:83:35:a2:86:f3:f5:91:34:fb: 10:32:75:ca:20:be:b8:ef:91:65:8b:d6:17:b8:91:69:38:6b: d3:c2:b1:65:77:0f:21:3d:9a:fa:4d:ad:8b:fa:58:ea:a8:37: 25:3f:cc:dd:ef:71:de:0c:ac:22:1e:00:85:cf:e8:47:7a:c7: 90:2e:9d:8d:df:e7:22:bf:26:e0:20:7f:4c:55:a8:5d:93:6c: bc:ca:e6:8d:4b:04:91:84:f0:36:f1:4e:21:3f:df:db:b8:65: 9d:3f:f5:43:68:2a:e4:fc:98:48:77:69:ad:fc:2a:be:89:4b: e1:6d:d9:7c:8d:86:89:21:f5:58:b9:52:0b:2c:79:ec:65:06: 04:3c:39:a1:1b:78:2f:57:77:51:85:f1:91:a5:aa:98:f8:a0: 41:e6:b4:ca:95:89:a5:2c:3d:3b:5e:d6:00:8b:b6:7c:bd:10: 78:33:4b:d5:0e:68:ac:29:07:aa:61:65:dd:af:fd:2d:84:af: 36:34:aa:55:4d:63:1e:78:b4:74:53:38:55:57:13:66:0e:fe: 06:fd:ae:4a:40:84:75:8a:37:1b:1d:6d:19:57:81:fb:c5:64: c9:a1:15:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLInoeQ8hnHqaWMMbTcn/d0IYjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA5MjMxMzQ4MTdaFw0yNjA5MjQxNjA5MTdaMDMxMTAvBgNV BAMTKDVFQTU1ODQ2ODBCMzY2REM5Q0VEREE3OEZFODIxNjY4QkVFNkE1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpClniwwLT1ZkAQfoTOXMxxOai GdB9hskhTYFRsdeZaXU6MWb5dpAZ6Mi8oKAO07iu3C1f0zhvP9oz7mXjEVYsTwKX HDACHGPtgRB04k8nEIaOi3iuASJNWBs0Nh6y8SWaICUgtAier2ELryafKXiH4eFY /c+lubC1tqRh3J2oWT3MOqZAr114fBJKlvBMQ7fJoq/0vDeX2aSv1dsv0Sd5LpS6 0FkakcX+x8nE9KN0Cgx2/X1t5Fk/iz38vmnjFYQWAC9CYOrllmbFLzS0awrFOg3c uLyDdWSgIqnArcwsSBoY8+f4XahClHiRcga3RD1+spPGAb1g7s2EPWlXDFmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqVYRoCzZtyc7dp4/oIWaL7mpVQwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnG1fDv/bRTIgiysY8FKxhx2s2EMT9C3z7o HIM1oobz9ZE0+xAydcogvrjvkWWL1he4kWk4a9PCsWV3DyE9mvpNrYv6WOqoNyU/ zN3vcd4MrCIeAIXP6Ed6x5AunY3f5yK/JuAgf0xVqF2TbLzK5o1LBJGE8DbxTiE/ 39u4ZZ0/9UNoKuT8mEh3aa38Kr6JS+Ft2XyNhokh9Vi5UgsseexlBgQ8OaEbeC9X d1GF8ZGlqpj4oEHmtMqViaUsPTte1gCLtny9EHgzS9UOaKwpB6phZd2v/S2ErzY0 qlVNYx54tHRTOFVXE2YO/gb9rkpAhHWKNxsdbRlXgfvFZMmhFWg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:54:38 2026 by rpki-client