$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: cqBG5242UJjLOvZq4jCEGpr5eLyH7nC8nnlIfVBmm3s= Subject key identifier: C5:DC:04:E8:F3:30:29:2A:49:B6:C1:70:A0:B3:56:ED:3A:FE:64:24 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 7A0B0A590CB4DAE50628C915A520D3FB378E3C23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 15:57:37 +0000 Manifest this update: Tue 03 Nov 2026 15:52:37 +0000 Manifest next update: Wed 04 Nov 2026 16:59:37 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: oUT1J2oDd+yahgHBkWcTv96AiFmMeI24KAb6IICZZl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0b:0a:59:0c:b4:da:e5:06:28:c9:15:a5:20:d3:fb:37:8e:3c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Nov 3 15:52:37 2026 GMT Not After : Nov 4 16:59:37 2026 GMT Subject: CN=C5DC04E8F330292A49B6C170A0B356ED3AFE6424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:90:62:9c:b3:22:7e:8f:b8:55:2e:b2:06: 75:4a:29:eb:b8:38:b0:dd:61:6a:37:b5:d7:d1:81: 15:da:9c:20:74:37:22:82:ec:25:1d:5c:8b:81:8a: fe:55:bb:89:9f:48:8e:d5:f5:63:81:e7:e6:73:bb: d0:e8:46:88:21:18:f1:f0:51:b7:3c:77:7c:d2:bd: 46:1a:39:fb:ae:06:f6:84:9b:d2:52:f8:73:c4:dd: e8:7e:3e:b0:1f:59:f1:50:e5:63:ef:48:e6:55:48: aa:25:d8:3a:68:c4:43:01:b8:6f:c1:39:f1:80:3f: ca:33:bd:48:57:44:69:5c:76:4d:e2:3c:c8:6c:93: f5:77:2c:7f:61:9e:1f:b7:3d:bf:4b:77:c9:71:97: 08:fe:3e:5e:8a:42:78:fd:0c:c2:66:02:ef:a6:79: 69:f8:32:90:15:37:ca:1a:29:11:b7:9b:6d:78:55: 13:72:e9:f1:c0:ca:ff:cc:5e:e3:ea:c7:54:50:4a: 75:e9:9f:29:eb:a5:7d:bf:90:ef:de:12:89:d6:3a: 02:fa:6c:d0:7a:c7:c3:79:ef:75:4c:ed:a2:f2:e4: c7:4d:b5:83:29:90:62:4b:67:ed:aa:24:b4:6b:ae: 52:82:94:58:3f:6a:f1:92:b9:70:9c:bb:cb:9e:df: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DC:04:E8:F3:30:29:2A:49:B6:C1:70:A0:B3:56:ED:3A:FE:64:24 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2e:bc:90:5b:d4:b1:2a:d9:d0:d1:91:9a:62:55:cf:0e:b6: 06:9b:bc:4f:ed:0b:ea:93:c9:48:72:f4:f5:d2:f8:37:96:44: 97:15:bd:31:0f:a8:4c:ce:ea:1f:ca:10:e2:d0:c0:c2:bf:62: e0:3e:96:ce:07:a0:54:7a:3b:2e:b1:10:43:82:48:8f:ff:7a: 2c:9f:31:84:3a:15:5c:05:25:b0:fe:d7:bd:a3:2c:37:a4:01: 49:b8:60:2d:58:76:b5:74:83:fb:f6:b1:e7:42:8e:d4:50:ab: 90:a3:0a:79:0e:04:5c:60:de:1d:9c:20:a5:9f:64:63:05:63: 41:ff:db:f1:59:f5:3f:73:93:03:b2:43:b1:8c:f9:f0:6d:b3: ff:15:21:ef:2c:5c:9a:5f:28:e9:bc:bc:c1:a4:8a:92:e2:5b: e7:4a:62:0c:9b:43:61:eb:97:98:12:f9:fd:61:fe:09:ba:e9: 02:ac:06:2d:78:50:94:e5:e8:63:88:27:ec:76:fd:5d:8f:4e: 2e:cb:4c:1b:70:32:f6:91:6c:3b:30:80:81:f4:cf:a4:4b:d3: 1e:51:43:f8:b7:23:fe:45:4a:a5:b8:40:43:f3:74:ff:ea:70: 90:a7:03:18:62:69:77:40:73:84:f6:e4:3c:c9:72:81:94:ec: 4d:79:4f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegsKWQy02uUGKMkVpSDT+zeOPCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjExMDMxNTUyMzdaFw0yNjExMDQxNjU5MzdaMDMxMTAvBgNV BAMTKEM1REMwNEU4RjMzMDI5MkE0OUI2QzE3MEEwQjM1NkVEM0FGRTY0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEpBinLMifo+4VS6yBnVKKeu4 OLDdYWo3tdfRgRXanCB0NyKC7CUdXIuBiv5Vu4mfSI7V9WOB5+Zzu9DoRoghGPHw Ubc8d3zSvUYaOfuuBvaEm9JS+HPE3eh+PrAfWfFQ5WPvSOZVSKol2DpoxEMBuG/B OfGAP8ozvUhXRGlcdk3iPMhsk/V3LH9hnh+3Pb9Ld8lxlwj+Pl6KQnj9DMJmAu+m eWn4MpAVN8oaKRG3m214VRNy6fHAyv/MXuPqx1RQSnXpnynrpX2/kO/eEonWOgL6 bNB6x8N573VM7aLy5MdNtYMpkGJLZ+2qJLRrrlKClFg/avGSuXCcu8ue31QZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdwE6PMwKSpJtsFwoLNW7Tr+ZCQwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAuvJBb1LEq2dDRkZpiVc8OtgabvE/tC+qT yUhy9PXS+DeWRJcVvTEPqEzO6h/KEOLQwMK/YuA+ls4HoFR6Oy6xEEOCSI//eiyf MYQ6FVwFJbD+172jLDekAUm4YC1YdrV0g/v2sedCjtRQq5CjCnkOBFxg3h2cIKWf ZGMFY0H/2/FZ9T9zkwOyQ7GM+fBts/8VIe8sXJpfKOm8vMGkipLiW+dKYgybQ2Hr l5gS+f1h/gm66QKsBi14UJTl6GOIJ+x2/V2PTi7LTBtwMvaRbDswgIH0z6RL0x5R Q/i3I/5FSqW4QEPzdP/qcJCnAxhiaXdAc4T25DzJcoGU7E15T9Y= -----END CERTIFICATE-----Generated at Tue Nov 3 22:42:13 2026 by rpki-client