$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: 90KSBl+8tm+NVcUOzpiAXMC0fxlU0xmP4GmWjn9r63Y= Subject key identifier: AE:E5:A0:27:F5:DC:7B:0F:85:94:8E:02:37:CA:A0:A3:7C:88:C9:86 Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 7CFC1802EDA2BA5B27D15F9F3A8B9B4586C8B6AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: BF Signing time: Wed 23 Sep 2026 18:28:53 +0000 Manifest this update: Wed 23 Sep 2026 18:23:53 +0000 Manifest next update: Thu 24 Sep 2026 18:54:53 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: gQJtTv0ZkoUnIsc59UVXoNZDoVm2K1cqjkp/ORX5KGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fc:18:02:ed:a2:ba:5b:27:d1:5f:9f:3a:8b:9b:45:86:c8:b6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Sep 23 18:23:53 2026 GMT Not After : Sep 24 18:54:53 2026 GMT Subject: CN=AEE5A027F5DC7B0F85948E0237CAA0A37C88C986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:c3:47:c7:b9:d0:e0:07:c0:a8:ea:2c:03: d6:c4:5c:a2:b2:f3:b0:d7:25:d6:22:b6:cc:80:39: dc:58:4b:3e:e9:00:04:56:c4:c1:11:8e:60:cf:af: 97:80:10:93:46:7d:a3:49:28:d0:23:c4:a7:ff:35: 43:95:33:19:27:ed:86:0f:fc:86:62:18:29:12:1c: 48:01:0f:47:2c:d9:a7:33:eb:e3:47:7c:61:55:27: 6c:10:6b:0b:0f:fa:2d:45:6d:68:73:e7:07:64:fc: 84:5b:c4:6d:41:54:4e:ab:8f:62:ff:34:47:93:fa: f6:f7:b5:aa:b7:b0:4e:19:8f:6a:b2:61:b6:d6:02: c3:f6:9c:97:1f:5c:30:a0:6b:db:dc:a9:ad:b9:a5: d6:b2:58:83:ad:72:3b:87:df:f4:f0:e9:14:9f:8a: d5:d0:22:e9:05:e9:0e:ba:1a:4e:78:e0:5d:3c:ad: d8:54:b2:14:e1:04:e7:01:57:b6:f0:74:f8:ca:77: 5b:1a:f0:ec:6e:77:3e:5c:30:59:e1:b1:47:30:c8: b4:bd:43:7d:f5:91:2b:2c:99:09:c3:c4:51:cd:47: 68:85:63:7a:31:48:e7:24:50:05:42:99:7c:ce:de: 97:9f:4b:35:03:b4:c0:94:40:ab:de:76:5e:37:61: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E5:A0:27:F5:DC:7B:0F:85:94:8E:02:37:CA:A0:A3:7C:88:C9:86 X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:71:86:bc:94:7f:2b:12:b5:67:5c:10:be:5a:1d:9a:3b:9d: fd:df:90:44:e3:56:47:10:44:98:dc:55:ef:d3:de:f3:21:82: b4:c4:ce:e4:00:c6:f6:d0:d5:07:11:03:93:bf:54:45:0d:26: e8:56:3d:7a:26:0a:7a:77:15:fa:40:fc:2f:fa:3a:05:e9:69: d8:6c:67:74:93:7f:24:47:b5:6d:8a:6c:59:a7:e8:f1:b9:56: 54:5f:15:4f:cd:1c:17:89:1d:72:a0:bb:52:e8:15:3e:c8:2c: 8b:cb:ef:97:ea:a9:71:6b:38:64:2b:b4:21:30:22:bd:d0:1f: 86:13:60:62:eb:49:78:2d:02:aa:6b:5c:f5:6a:e0:8d:94:f5: f0:e4:da:db:37:33:9a:eb:3a:97:7f:fa:07:bf:9a:11:61:08: 8a:cd:b6:90:27:36:c1:1c:1c:74:e2:d2:02:be:48:db:1c:a2: 85:cc:a4:b0:c9:8b:ea:87:54:85:eb:f3:3a:91:bd:c0:54:e6: 39:4c:74:ae:f0:bc:56:05:32:90:ce:ef:e8:54:ce:c3:af:fe: d1:6e:d8:82:c4:6c:1d:4d:12:7e:db:68:4b:b0:38:c6:48:0b: a6:38:af:84:87:a0:25:7d:84:2f:28:7e:9e:12:4e:1a:c8:bd: d6:b0:dd:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPwYAu2iulsn0V+fOoubRYbItqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA5MjMxODIzNTNaFw0yNjA5MjQxODU0NTNaMDMxMTAvBgNV BAMTKEFFRTVBMDI3RjVEQzdCMEY4NTk0OEUwMjM3Q0FBMEEzN0M4OEM5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo98NHx7nQ4AfAqOosA9bEXKKy 87DXJdYitsyAOdxYSz7pAARWxMERjmDPr5eAEJNGfaNJKNAjxKf/NUOVMxkn7YYP /IZiGCkSHEgBD0cs2acz6+NHfGFVJ2wQawsP+i1FbWhz5wdk/IRbxG1BVE6rj2L/ NEeT+vb3taq3sE4Zj2qyYbbWAsP2nJcfXDCga9vcqa25pdayWIOtcjuH3/Tw6RSf itXQIukF6Q66Gk544F08rdhUshThBOcBV7bwdPjKd1sa8Oxudz5cMFnhsUcwyLS9 Q331kSssmQnDxFHNR2iFY3oxSOckUAVCmXzO3pefSzUDtMCUQKvedl43YYVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruWgJ/Xcew+FlI4CN8qgo3yIyYYwHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5xhryUfysStWdcEL5aHZo7nf3fkETjVkcQ RJjcVe/T3vMhgrTEzuQAxvbQ1QcRA5O/VEUNJuhWPXomCnp3FfpA/C/6OgXpadhs Z3STfyRHtW2KbFmn6PG5VlRfFU/NHBeJHXKgu1LoFT7ILIvL75fqqXFrOGQrtCEw Ir3QH4YTYGLrSXgtAqprXPVq4I2U9fDk2ts3M5rrOpd/+ge/mhFhCIrNtpAnNsEc HHTi0gK+SNscooXMpLDJi+qHVIXr8zqRvcBU5jlMdK7wvFYFMpDO7+hUzsOv/tFu 2ILEbB1NEn7baEuwOMZIC6Y4r4SHoCV9hC8ofp4SThrIvdaw3YA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:26:10 2026 by rpki-client