$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: H+B0qh4JVOlbY3T4mKRyGElt/ByV2lNr2HGTeIdcT+I= Subject key identifier: DB:6F:7A:E1:F8:38:91:D0:10:6C:B8:E8:B6:A1:C1:6F:E2:19:76:7E Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 2F86FA4EF9313FB944C031D4FAE63186E0831F8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 19:14:23 +0000 Manifest this update: Thu 24 Sep 2026 19:09:23 +0000 Manifest next update: Fri 25 Sep 2026 21:56:23 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: hOyMXtuf6tGJfnA30yAM7N3xp8pfFO7u1E/m6jdhwcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:86:fa:4e:f9:31:3f:b9:44:c0:31:d4:fa:e6:31:86:e0:83:1f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Sep 24 19:09:23 2026 GMT Not After : Sep 25 21:56:23 2026 GMT Subject: CN=DB6F7AE1F83891D0106CB8E8B6A1C16FE219767E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:8c:cd:6a:cf:a7:a0:89:1f:72:8f:2a:8a: 40:c3:e7:cf:45:b4:a2:10:80:4f:fe:f9:2a:3f:5a: 52:8c:9d:21:8c:17:ce:13:a9:3d:a8:94:9a:2e:90: 8a:8f:3b:d4:54:e6:5b:4d:c2:6d:a5:4a:6f:e1:08: 7a:48:cc:79:cc:c1:21:3d:2f:f9:6a:39:b2:d9:d1: d8:06:87:00:91:24:18:1f:f4:f1:27:98:10:6e:99: d3:94:0b:c8:62:88:16:f7:6b:ca:bb:ce:20:a4:91: ed:16:52:8d:ea:6f:0a:39:a7:6c:76:fe:fe:7f:93: 47:e8:38:0b:23:8e:1c:33:e8:fb:64:16:45:5c:34: 7b:77:7f:4e:b7:7c:5b:ff:45:46:12:7b:d1:0a:05: 71:ce:c4:9f:0a:f6:07:43:27:19:3a:66:e0:d6:c6: 33:e6:de:bf:49:2a:e4:05:43:47:28:40:90:1f:09: 18:4c:9c:8f:93:8c:ba:6b:42:06:ca:17:d2:6e:6b: 50:ac:3d:ee:0b:8c:a7:7f:9f:0e:76:59:9d:21:0a: c9:eb:27:cd:9c:c9:88:94:4a:22:f0:ef:c4:be:cb: 28:db:cf:cb:50:8d:7a:23:7e:fa:37:d0:fb:ad:9e: 34:43:38:91:cc:a6:ee:86:c3:ce:65:f8:e1:e7:1d: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6F:7A:E1:F8:38:91:D0:10:6C:B8:E8:B6:A1:C1:6F:E2:19:76:7E X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c1:10:57:e9:97:1b:32:c7:d8:a9:7b:4d:65:83:b5:29:3d: 8b:a5:26:65:4f:7e:b4:4e:50:13:5a:de:fd:e0:54:09:1f:26: 88:c4:5a:ba:db:46:2e:2f:62:76:de:9c:ec:7d:bc:bf:58:0d: 0c:3e:b9:e9:34:41:d2:42:ff:9b:56:82:57:8c:ff:7d:15:e8: 5c:2a:a0:ce:d6:59:bd:34:c8:9d:e2:ad:dc:7a:e6:50:bd:a6: a7:49:3b:59:3b:a4:44:55:f0:aa:7d:f4:e3:ff:09:e3:81:6c: 28:3d:f9:27:24:74:fe:2c:c3:49:24:26:88:11:c1:a7:d9:aa: 4e:5d:80:96:50:b6:81:e4:82:cf:37:fa:aa:b1:8b:3a:6b:22: 54:2e:91:bc:cd:7d:27:fc:0f:ef:8d:8e:3f:2e:b3:23:1a:a1: 9c:36:05:ea:50:99:76:9b:ae:bb:a8:fb:3b:c0:2d:7a:40:2f: f3:6e:2a:55:4f:d8:75:b1:fc:e0:b9:58:cb:5c:c3:de:80:42: 2b:24:88:91:5e:f5:76:2b:fe:1a:7f:ee:ae:33:10:25:81:57: 00:cf:d9:70:48:eb:87:5e:35:d2:82:16:6a:35:ac:d2:8b:d7: 12:a6:ee:9b:18:0f:07:52:34:ee:65:c4:11:4f:63:7e:ee:b5: d5:ec:89:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4b6TvkxP7lEwDHU+uYxhuCDH48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA5MjQxOTA5MjNaFw0yNjA5MjUyMTU2MjNaMDMxMTAvBgNV BAMTKERCNkY3QUUxRjgzODkxRDAxMDZDQjhFOEI2QTFDMTZGRTIxOTc2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrj4zNas+noIkfco8qikDD589F tKIQgE/++So/WlKMnSGMF84TqT2olJoukIqPO9RU5ltNwm2lSm/hCHpIzHnMwSE9 L/lqObLZ0dgGhwCRJBgf9PEnmBBumdOUC8hiiBb3a8q7ziCkke0WUo3qbwo5p2x2 /v5/k0foOAsjjhwz6PtkFkVcNHt3f063fFv/RUYSe9EKBXHOxJ8K9gdDJxk6ZuDW xjPm3r9JKuQFQ0coQJAfCRhMnI+TjLprQgbKF9Jua1CsPe4LjKd/nw52WZ0hCsnr J82cyYiUSiLw78S+yyjbz8tQjXojfvo30PutnjRDOJHMpu6Gw85l+OHnHfWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22964fg4kdAQbLjotqHBb+IZdn4wHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3BEFfplxsyx9ipe01lg7UpPYulJmVPfrRO UBNa3v3gVAkfJojEWrrbRi4vYnbenOx9vL9YDQw+uek0QdJC/5tWgleM/30V6Fwq oM7WWb00yJ3irdx65lC9pqdJO1k7pERV8Kp99OP/CeOBbCg9+SckdP4sw0kkJogR wafZqk5dgJZQtoHkgs83+qqxizprIlQukbzNfSf8D++Njj8usyMaoZw2BepQmXab rruo+zvALXpAL/NuKlVP2HWx/OC5WMtcw96AQiskiJFe9XYr/hp/7q4zECWBVwDP 2XBI64deNdKCFmo1rNKL1xKm7psYDwdSNO5lxBFPY37utdXsiR8= -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:20 2026 by rpki-client