$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: HDllO0UCXsS9H7bJgjpmn5AmVISelSjB6/6qPn+0w7s= Subject key identifier: 3C:2B:B1:29:EC:65:4C:77:D2:C9:BA:D5:E4:62:ED:77:31:1D:13:C6 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 66A6BE86EC3733286CB3326342B4D31DD9EC07D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:49:11 +0000 Manifest this update: Thu 24 Sep 2026 02:44:11 +0000 Manifest next update: Fri 25 Sep 2026 05:30:11 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: ZMz2CgW07GyPHb4pmfn7iODDixvG+CCdUAhtJbitLAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a6:be:86:ec:37:33:28:6c:b3:32:63:42:b4:d3:1d:d9:ec:07:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Sep 24 02:44:11 2026 GMT Not After : Sep 25 05:30:11 2026 GMT Subject: CN=3C2BB129EC654C77D2C9BAD5E462ED77311D13C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:da:de:75:cb:1d:0c:89:77:b7:fc:3d:53: 47:f8:df:2b:48:cb:b4:51:28:ab:f4:f5:6c:43:d2: 26:4b:13:e3:a6:a3:85:dd:88:98:63:18:7a:3d:c8: b5:33:56:3e:cc:0c:f1:bc:0e:1c:6e:00:33:29:f8: d3:32:74:f6:7b:be:33:88:ef:fb:db:8f:fd:23:62: a5:4b:c3:21:2e:7b:3f:07:95:d1:24:ab:ed:64:42: 1b:65:62:32:3d:ad:85:bd:38:25:32:ca:57:dc:49: 02:de:0b:02:59:62:fb:e9:5b:ca:49:0d:c8:df:67: dc:f3:b0:ef:48:ef:24:1a:27:20:5f:a4:12:ee:7d: b0:ab:d1:af:bd:1c:e6:37:92:2b:c4:36:2b:45:3d: 90:04:4c:a3:65:9f:b8:83:e1:1e:b2:50:b8:f7:40: 3d:64:4e:20:5c:02:c8:3b:cf:a8:51:7e:f5:cf:a7: ca:66:1a:40:ff:6c:74:52:55:c6:48:83:b5:8e:8a: 01:9c:d5:78:28:99:74:86:b0:fe:40:7d:ec:2d:f1: 6c:0c:82:50:ef:d5:e2:16:69:66:18:6a:51:4e:6e: 6f:60:12:9b:b2:b5:b4:fd:24:0a:37:fb:57:52:4a: 1f:8f:17:47:cc:88:af:b0:f0:93:a8:6c:a7:2d:cb: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:B1:29:EC:65:4C:77:D2:C9:BA:D5:E4:62:ED:77:31:1D:13:C6 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ed:60:1e:70:7e:b3:0d:1d:49:83:72:44:6d:07:02:b2:11: 82:5b:22:5e:5b:d7:55:31:99:f2:77:a1:37:f6:7f:85:b6:2b: 34:cc:52:7d:63:c1:2d:1b:8e:b8:d6:fd:dc:d3:79:b3:13:e3: d7:95:bd:ec:1a:ac:69:d3:a4:50:5b:62:43:08:25:22:17:0f: ef:cd:d0:21:87:24:f2:35:ae:14:02:cd:c3:24:ec:95:70:be: f8:fb:69:84:66:2f:13:73:bb:de:4e:90:c0:8d:df:29:6a:9f: a9:69:ea:ba:3a:dc:71:0d:66:9c:70:fd:58:c4:7f:89:54:71: 9c:70:4a:3f:26:da:25:d9:14:a9:09:da:65:fb:54:f1:85:38: a1:4f:3f:11:4a:2b:5b:c6:e6:e9:c0:d9:d3:64:37:c3:52:71: 32:ee:f9:f2:8d:ac:99:b8:aa:9a:ba:ab:56:e7:8d:86:5b:ff: f3:0f:03:8f:3a:f5:9b:fb:0a:26:d3:c7:19:2e:ed:ae:2c:99: c4:ce:ef:9c:4a:d3:12:3f:ae:a1:82:48:7c:ba:4e:b5:99:7d: e4:d9:b8:f3:78:0f:f8:96:8d:7a:3e:e2:65:ff:fb:72:1e:a3: e1:fb:1d:0b:ae:04:a5:40:e3:db:f4:c8:c2:61:fb:10:ff:73: c4:a6:ae:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqa+huw3MyhsszJjQrTTHdnsB9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA5MjQwMjQ0MTFaFw0yNjA5MjUwNTMwMTFaMDMxMTAvBgNV BAMTKDNDMkJCMTI5RUM2NTRDNzdEMkM5QkFENUU0NjJFRDc3MzExRDEzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7dredcsdDIl3t/w9U0f43ytI y7RRKKv09WxD0iZLE+Omo4XdiJhjGHo9yLUzVj7MDPG8DhxuADMp+NMydPZ7vjOI 7/vbj/0jYqVLwyEuez8HldEkq+1kQhtlYjI9rYW9OCUyylfcSQLeCwJZYvvpW8pJ DcjfZ9zzsO9I7yQaJyBfpBLufbCr0a+9HOY3kivENitFPZAETKNln7iD4R6yULj3 QD1kTiBcAsg7z6hRfvXPp8pmGkD/bHRSVcZIg7WOigGc1XgomXSGsP5Afewt8WwM glDv1eIWaWYYalFObm9gEpuytbT9JAo3+1dSSh+PF0fMiK+w8JOobKcty4odAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCuxKexlTHfSybrV5GLtdzEdE8YwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLtYB5wfrMNHUmDckRtBwKyEYJbIl5b11Ux mfJ3oTf2f4W2KzTMUn1jwS0bjrjW/dzTebMT49eVvewarGnTpFBbYkMIJSIXD+/N 0CGHJPI1rhQCzcMk7JVwvvj7aYRmLxNzu95OkMCN3ylqn6lp6ro63HENZpxw/VjE f4lUcZxwSj8m2iXZFKkJ2mX7VPGFOKFPPxFKK1vG5unA2dNkN8NScTLu+fKNrJm4 qpq6q1bnjYZb//MPA4869Zv7CibTxxku7a4smcTO75xK0xI/rqGCSHy6TrWZfeTZ uPN4D/iWjXo+4mX/+3Ieo+H7HQuuBKVA49v0yMJh+xD/c8Smrhc= -----END CERTIFICATE-----Generated at Thu Sep 24 20:50:50 2026 by rpki-client