$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: PIOZ2+faMfIBtMTpRJ2rhmVSISQDYTzuNnjFRECBsVg= Subject key identifier: 10:69:6C:3E:02:BA:D4:53:A2:98:C4:6B:E5:C2:35:45:FB:C2:BD:6D Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 6822A27ACF90182F88439AB644D50E61946BC0E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:50:30 +0000 Manifest this update: Wed 23 Sep 2026 19:45:30 +0000 Manifest next update: Thu 24 Sep 2026 22:36:30 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: OV4Nkl8LiPERCa0OKJWUSnroxSmVun0vG1o3LORKwVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:22:a2:7a:cf:90:18:2f:88:43:9a:b6:44:d5:0e:61:94:6b:c0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: Sep 23 19:45:30 2026 GMT Not After : Sep 24 22:36:30 2026 GMT Subject: CN=10696C3E02BAD453A298C46BE5C23545FBC2BD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:9d:29:30:cc:0c:b2:1c:52:ba:23:c0:7e: ac:45:78:10:4c:1e:fa:c9:ea:89:8c:35:f6:cf:63: 86:95:74:8c:dd:54:b5:12:f4:51:31:0f:56:0f:15: 71:35:93:e1:78:04:8c:20:94:61:39:72:ea:37:c2: 03:48:df:f5:7c:e5:83:3c:37:7b:fe:6c:fc:e4:ca: bd:f7:b7:a7:c3:f2:43:3e:9f:ec:ba:20:c3:35:81: 04:98:35:23:d9:08:b8:27:ca:18:a0:26:ff:29:c4: 76:d1:c5:9b:91:36:fb:7f:d9:d6:49:59:d9:a0:80: da:66:92:41:a0:f0:c3:65:66:54:89:6b:d5:3e:c5: 5d:12:25:ac:4f:b1:d4:2c:61:de:14:24:9b:af:9c: 30:be:fe:74:44:87:13:22:26:60:a7:7d:02:31:1e: 16:39:d0:96:bc:0f:e2:0c:16:9a:db:93:13:1f:ef: 63:01:3a:28:2f:e9:4d:d2:fc:ea:04:c8:48:93:b1: 58:a0:72:34:b7:61:49:1d:07:61:a2:6d:aa:5d:56: bd:1d:9c:a1:18:d0:d6:50:4f:bb:45:8e:82:07:09: 54:17:a2:c7:93:c9:f3:18:59:b5:ec:e1:b7:2c:5b: 2e:b5:98:b4:81:53:4e:10:72:8b:a9:db:9d:72:ca: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:6C:3E:02:BA:D4:53:A2:98:C4:6B:E5:C2:35:45:FB:C2:BD:6D X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:af:8b:9d:34:6f:ec:48:ff:d6:5e:67:1d:e2:c9:5e:8b:c0: be:eb:b0:3c:6a:40:21:f9:85:b9:e8:a0:32:b5:40:94:5f:d6: 12:41:87:73:24:ab:62:67:37:36:74:03:db:fb:f5:b9:6e:af: 5c:10:d2:27:da:19:f9:f1:8d:81:3f:86:99:f1:31:e7:50:da: c7:a5:c2:94:9f:69:5e:2d:6e:3f:b1:20:67:4a:0e:84:38:53: e6:93:93:cb:47:9e:3d:48:52:b1:bb:7c:fc:f1:f3:d8:e0:f2: 4f:a5:1c:79:9f:19:93:d3:1a:18:03:e7:57:d9:49:5b:cb:62: 6e:12:62:88:bc:6d:be:42:4e:02:49:73:c0:bf:3b:41:33:c4: b1:76:80:24:e6:9f:3c:89:0e:c9:64:79:4a:bb:4b:f8:1c:cb: ec:72:c4:c5:da:fe:05:cb:b2:46:aa:79:27:72:1f:91:f7:04: 73:93:d8:9f:da:20:5a:66:44:ed:49:cb:cf:f5:e1:ef:2b:23: 0c:b9:c9:b5:34:11:d8:d5:2f:1f:ca:0a:ea:0d:f3:d9:15:b9: 27:ee:c4:96:1d:9f:2c:a5:d5:2d:3a:d7:97:d2:3b:de:35:fe: c8:22:cb:5f:c9:4c:f9:a9:28:2c:d0:18:18:da:2c:02:6a:4d: bf:cd:64:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCKies+QGC+IQ5q2RNUOYZRrwOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA5MjMxOTQ1MzBaFw0yNjA5MjQyMjM2MzBaMDMxMTAvBgNV BAMTKDEwNjk2QzNFMDJCQUQ0NTNBMjk4QzQ2QkU1QzIzNTQ1RkJDMkJENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugp0pMMwMshxSuiPAfqxFeBBM HvrJ6omMNfbPY4aVdIzdVLUS9FExD1YPFXE1k+F4BIwglGE5cuo3wgNI3/V85YM8 N3v+bPzkyr33t6fD8kM+n+y6IMM1gQSYNSPZCLgnyhigJv8pxHbRxZuRNvt/2dZJ WdmggNpmkkGg8MNlZlSJa9U+xV0SJaxPsdQsYd4UJJuvnDC+/nREhxMiJmCnfQIx HhY50Ja8D+IMFprbkxMf72MBOigv6U3S/OoEyEiTsVigcjS3YUkdB2GibapdVr0d nKEY0NZQT7tFjoIHCVQXoseTyfMYWbXs4bcsWy61mLSBU04Qcoup251yygtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGlsPgK61FOimMRr5cI1RfvCvW0wHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2vi500b+xI/9ZeZx3iyV6LwL7rsDxqQCH5 hbnooDK1QJRf1hJBh3Mkq2JnNzZ0A9v79blur1wQ0ifaGfnxjYE/hpnxMedQ2sel wpSfaV4tbj+xIGdKDoQ4U+aTk8tHnj1IUrG7fPzx89jg8k+lHHmfGZPTGhgD51fZ SVvLYm4SYoi8bb5CTgJJc8C/O0EzxLF2gCTmnzyJDslkeUq7S/gcy+xyxMXa/gXL skaqeSdyH5H3BHOT2J/aIFpmRO1Jy8/14e8rIwy5ybU0EdjVLx/KCuoN89kVuSfu xJYdnyyl1S0615fSO941/sgiy1/JTPmpKCzQGBjaLAJqTb/NZLE= -----END CERTIFICATE-----Generated at Thu Sep 24 12:02:01 2026 by rpki-client