$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: 3zSPiHY4hb/HUGd+WEZWIZL6ennmqd13IwUxfA+/Mgs= Subject key identifier: 58:5A:1A:A2:4B:D4:44:07:8B:41:07:53:80:0A:0B:1A:A9:C8:FC:03 Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 3402238DE145F9FEEDDEBD33B5502C95FD36D83A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 15:45:35 +0000 Manifest this update: Wed 23 Sep 2026 15:40:35 +0000 Manifest next update: Thu 24 Sep 2026 17:26:35 +0000 Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: rRTKcS2txyV59DB2hrJdVRyAernWs1FUkjIiQ856kz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:02:23:8d:e1:45:f9:fe:ed:de:bd:33:b5:50:2c:95:fd:36:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Sep 23 15:40:35 2026 GMT Not After : Sep 24 17:26:35 2026 GMT Subject: CN=585A1AA24BD444078B410753800A0B1AA9C8FC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:ac:30:1d:8d:f6:e8:5c:53:5c:33:c4:f7: 7c:fc:cd:f0:36:4d:81:f6:22:c3:52:db:2b:e3:22: 56:57:1e:bc:8a:c7:24:94:8d:04:db:5d:79:84:68: f7:ca:52:ac:27:20:6b:e2:2f:a7:7b:a6:e9:dd:a9: a7:37:3a:7f:67:c4:b6:62:68:3a:9f:db:ab:38:6e: 7b:16:bf:fc:c2:20:dd:b0:45:07:e0:53:02:07:12: 52:87:82:88:73:11:6b:59:3e:e3:72:94:01:92:d6: 10:dd:45:90:39:8c:09:23:57:c8:b8:fd:98:5b:fc: 31:ee:fe:52:b4:18:1b:6f:51:18:a3:9e:83:d0:9a: 05:3a:cf:aa:3e:89:10:7e:76:67:3f:38:7a:b0:09: 06:e5:c3:44:db:5e:76:44:61:0d:73:4a:10:48:72: a7:12:80:f0:8d:3f:56:3d:3e:90:57:f8:80:0b:3d: e2:43:1b:a0:a3:5b:2f:45:e8:f6:82:0b:7c:1a:40: 26:8c:5d:79:b8:2f:c8:f7:13:3a:ad:76:9f:16:e5: 7d:8c:3e:87:77:9e:0a:ae:ed:f8:09:d1:fa:f8:6c: b8:ec:4b:75:ec:09:7f:66:92:77:6a:26:e0:8b:70: 7a:2c:c4:89:22:a1:01:b3:e5:d6:46:ea:ba:c0:c5: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:1A:A2:4B:D4:44:07:8B:41:07:53:80:0A:0B:1A:A9:C8:FC:03 X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:21:69:f7:06:f5:a9:0a:68:92:f1:0c:5a:e4:74:4e:b3:d1: 48:77:6a:c6:87:cf:5a:dd:fd:ac:ce:79:0c:09:9c:26:2b:1a: ed:4b:3c:a1:98:7f:8c:7c:db:14:de:5f:e7:13:c4:85:64:e8: 94:3c:cd:f5:80:5c:dd:a8:86:3f:d5:6e:86:60:75:3f:4b:8d: 2e:59:6c:28:e4:4b:b2:b4:bf:b7:b3:10:01:b8:a2:f4:3f:e7: 61:07:83:c8:90:e7:a0:67:6a:ef:2f:e9:e8:1a:0c:bc:4a:7a: 60:7d:92:5a:0b:ec:ca:24:cf:a3:b5:03:ba:08:5d:86:50:78: 16:96:48:69:19:0a:86:03:64:2a:9d:2b:fe:19:f6:d6:f7:32: b4:28:df:89:0d:14:43:58:17:8b:00:f5:15:aa:04:90:ac:0d: eb:5a:05:e0:91:8c:79:99:5a:88:c8:dc:37:49:f0:01:db:11: 82:0e:0e:e4:f2:d4:bd:46:16:9c:15:53:19:55:a2:38:cc:d8: d1:c5:64:d9:31:18:57:90:c5:e6:9d:7d:05:a4:09:04:31:33: 98:35:70:31:d0:42:1b:72:af:0e:8d:37:f5:83:57:20:a5:8c: 79:fa:2f:4d:ff:7e:79:20:c5:34:f5:9d:c2:5b:77:1d:00:0b: ba:e7:da:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAIjjeFF+f7t3r0ztVAslf022DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA5MjMxNTQwMzVaFw0yNjA5MjQxNzI2MzVaMDMxMTAvBgNV BAMTKDU4NUExQUEyNEJENDQ0MDc4QjQxMDc1MzgwMEEwQjFBQTlDOEZDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAawwHY326FxTXDPE93z8zfA2 TYH2IsNS2yvjIlZXHryKxySUjQTbXXmEaPfKUqwnIGviL6d7pundqac3On9nxLZi aDqf26s4bnsWv/zCIN2wRQfgUwIHElKHgohzEWtZPuNylAGS1hDdRZA5jAkjV8i4 /Zhb/DHu/lK0GBtvURijnoPQmgU6z6o+iRB+dmc/OHqwCQblw0TbXnZEYQ1zShBI cqcSgPCNP1Y9PpBX+IALPeJDG6CjWy9F6PaCC3waQCaMXXm4L8j3Ezqtdp8W5X2M Pod3ngqu7fgJ0fr4bLjsS3XsCX9mkndqJuCLcHosxIkioQGz5dZG6rrAxeIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFoaokvURAeLQQdTgAoLGqnI/AMwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4hafcG9akKaJLxDFrkdE6z0Uh3asaHz1rd /azOeQwJnCYrGu1LPKGYf4x82xTeX+cTxIVk6JQ8zfWAXN2ohj/VboZgdT9LjS5Z bCjkS7K0v7ezEAG4ovQ/52EHg8iQ56Bnau8v6egaDLxKemB9kloL7Mokz6O1A7oI XYZQeBaWSGkZCoYDZCqdK/4Z9tb3MrQo34kNFENYF4sA9RWqBJCsDetaBeCRjHmZ WojI3DdJ8AHbEYIODuTy1L1GFpwVUxlVojjM2NHFZNkxGFeQxeadfQWkCQQxM5g1 cDHQQhtyrw6NN/WDVyCljHn6L03/fnkgxTT1ncJbdx0AC7rn2i8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:06:34 2026 by rpki-client