$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft File: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft (raw, json) Hash identifier: RW9Xd1BNEn/6QgBIFcEACT7cJ3iyw1f8O2HPE27zZYQ= Subject key identifier: D9:92:21:06:A3:CB:4C:7D:F9:82:91:8B:8B:B1:AC:7E:2F:BA:49:15 Authority key identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 Certificate issuer: /CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Certificate serial: 10562827124ED17F8E0A2E17C675333079C0C22E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 12:05:32 +0000 Manifest this update: Fri 25 Sep 2026 12:00:32 +0000 Manifest next update: Sat 26 Sep 2026 14:10:32 +0000 Files and hashes: 1: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl (hash: BaxBdSQ4iSk6GbbtZbPUUph6YsG7vCHv5o9Tt+z0lq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:56:28:27:12:4e:d1:7f:8e:0a:2e:17:c6:75:33:30:79:c0:c2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Validity Not Before: Sep 25 12:00:32 2026 GMT Not After : Sep 26 14:10:32 2026 GMT Subject: CN=D9922106A3CB4C7DF982918B8BB1AC7E2FBA4915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:15:94:3f:9e:84:1f:70:0d:d2:46:5d:c4: ab:b4:ff:6a:8b:8a:20:af:d1:d1:1a:b5:42:3f:7a: 0d:0c:9c:c3:49:3b:94:b3:af:1a:bc:02:a1:7c:92: f7:8e:f5:d3:27:19:ba:e4:44:de:81:4c:a4:be:20: 2c:6a:54:26:9e:1f:a5:22:68:3a:8d:ff:ef:09:97: 9e:06:ff:ef:ef:10:72:35:9b:16:14:94:8e:f5:3c: 8e:88:e5:b0:cb:1d:62:db:17:38:c3:10:e7:7e:70: 42:0a:d8:ed:13:98:05:bc:cb:dd:20:4c:05:db:01: dd:be:a1:52:75:33:1b:0c:eb:c0:39:13:e5:2e:24: 9a:a8:f3:c1:85:ba:74:16:89:a4:05:41:2e:df:39: 7b:8f:d4:dc:d9:90:f6:98:c8:cc:34:f6:f4:2f:f5: 9f:ae:a9:9d:6b:ff:84:f1:e3:de:7f:df:ec:a4:1d: 86:38:ba:8b:9c:6d:4c:4a:73:5c:62:d4:90:7a:84: eb:be:70:75:5e:72:65:c9:ba:44:be:19:a2:de:aa: b6:ac:55:e0:9e:96:72:b7:3a:da:8f:10:e9:d3:c8: 5b:25:fb:eb:7c:58:11:52:75:cc:bf:14:55:b4:8a: be:07:a7:05:a3:87:4b:ab:2a:9a:fb:4e:15:94:4f: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:92:21:06:A3:CB:4C:7D:F9:82:91:8B:8B:B1:AC:7E:2F:BA:49:15 X509v3 Authority Key Identifier: keyid:F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9b:68:33:95:0e:cd:f4:66:1d:f9:a6:62:6d:90:39:2f:68: 1f:ec:f0:09:74:eb:d7:0a:bb:5e:26:c1:92:e8:28:fe:2a:8a: 7d:b7:fb:0e:a5:10:e3:a1:ed:af:1f:85:a4:bb:0f:2e:ab:91: e5:df:4f:d3:bd:44:64:7c:35:b9:95:54:b3:02:33:fe:56:73: a5:20:58:fb:8f:28:57:cd:ca:c1:13:7d:b4:77:6f:52:2f:e8: 27:9e:13:98:7e:d8:06:70:28:a8:7f:69:fc:54:b8:2c:da:96: 6b:76:ea:e5:a5:d3:9b:b4:82:26:e1:44:d0:b2:0f:12:04:99: 3d:82:31:81:a1:8b:a5:ca:59:89:7e:a5:86:30:d1:63:7a:cc: cf:14:c8:65:18:94:03:c2:e5:1c:65:93:5e:b4:d2:a9:aa:ae: 98:db:d5:fb:59:f4:8e:be:8a:09:df:53:bf:07:28:9e:18:4e: 44:4d:b3:11:d3:7e:aa:23:28:ee:e6:96:d9:fe:4f:6d:6d:5f: 03:c6:9f:3d:7e:8a:d5:63:56:ed:cc:3d:d0:1d:34:5b:76:e0: be:15:47:93:72:12:28:28:4b:45:ca:09:a5:d0:f6:c2:73:6d: 4c:34:2e:bd:ee:8f:7f:bb:52:4e:57:50:8c:40:f1:c7:ea:8e: 11:7b:ac:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFYoJxJO0X+OCi4XxnUzMHnAwi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMy OUVDMkY5MzAeFw0yNjA5MjUxMjAwMzJaFw0yNjA5MjYxNDEwMzJaMDMxMTAvBgNV BAMTKEQ5OTIyMTA2QTNDQjRDN0RGOTgyOTE4QjhCQjFBQzdFMkZCQTQ5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtxWUP56EH3AN0kZdxKu0/2qL iiCv0dEatUI/eg0MnMNJO5Szrxq8AqF8kveO9dMnGbrkRN6BTKS+ICxqVCaeH6Ui aDqN/+8Jl54G/+/vEHI1mxYUlI71PI6I5bDLHWLbFzjDEOd+cEIK2O0TmAW8y90g TAXbAd2+oVJ1MxsM68A5E+UuJJqo88GFunQWiaQFQS7fOXuP1NzZkPaYyMw09vQv 9Z+uqZ1r/4Tx495/3+ykHYY4uoucbUxKc1xi1JB6hOu+cHVecmXJukS+GaLeqras VeCelnK3OtqPEOnTyFsl++t8WBFSdcy/FFW0ir4HpwWjh0urKpr7ThWUT5bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZIhBqPLTH35gpGLi7Gsfi+6SRUwHwYDVR0j BBgwFoAU+T2NhTGz/7rrbfGpBpYQ7CnsL5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlOTZiZjMtZDAyMS00ZDg0LTkwZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUz MUIzRkZCQUVCNkRGMUE5MDY5NjEwRUMyOUVDMkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNEOEQ4NTMxQjNGRkJBRUI2REYxQTkwNjk2MTBFQzI5RUMy RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvRjkzRDhEODUzMUIzRkZCQUVCNkRGMUE5MDY5NjEw RUMyOUVDMkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6baDOVDs30Zh35pmJtkDkvaB/s8Al069cK u14mwZLoKP4qin23+w6lEOOh7a8fhaS7Dy6rkeXfT9O9RGR8NbmVVLMCM/5Wc6Ug WPuPKFfNysETfbR3b1Iv6CeeE5h+2AZwKKh/afxUuCzalmt26uWl05u0gibhRNCy DxIEmT2CMYGhi6XKWYl+pYYw0WN6zM8UyGUYlAPC5Rxlk1600qmqrpjb1ftZ9I6+ ignfU78HKJ4YTkRNsxHTfqojKO7mltn+T21tXwPGnz1+itVjVu3MPdAdNFt24L4V R5NyEigoS0XKCaXQ9sJzbUw0Lr3uj3+7Uk5XUIxA8cfqjhF7rOQ= -----END CERTIFICATE-----Generated at Sat Sep 26 08:42:15 2026 by rpki-client