$ rpki-client -vvvf rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft File: 392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft (raw, json) Hash identifier: I0vzBMuUZc0rF837s6f6b79wkACsQJBeRvjM0xs36dg= Subject key identifier: 12:E0:A6:56:8B:BD:7E:00:A4:28:8A:EE:3F:73:61:57:9B:8E:CC:D9 Authority key identifier: 39:25:22:CA:F6:B8:C7:36:A7:0F:65:AB:59:15:7B:11:0F:5C:E4:A6 Certificate issuer: /CN=392522CAF6B8C736A70F65AB59157B110F5CE4A6 Certificate serial: 6D6BE642A9C6C2CED0987B2534B7D0165DFAC2F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/392522CAF6B8C736A70F65AB59157B110F5CE4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft Manifest number: 16 Signing time: Tue 03 Nov 2026 20:28:10 +0000 Manifest this update: Tue 03 Nov 2026 20:23:10 +0000 Manifest next update: Wed 04 Nov 2026 21:33:10 +0000 Files and hashes: 1: 392522CAF6B8C736A70F65AB59157B110F5CE4A6.crl (hash: rtTnQb79NSoquh8FXuIJ4TGKnEoWW9q+OF4D413pLoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.crl rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/392522CAF6B8C736A70F65AB59157B110F5CE4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:e6:42:a9:c6:c2:ce:d0:98:7b:25:34:b7:d0:16:5d:fa:c2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=392522CAF6B8C736A70F65AB59157B110F5CE4A6 Validity Not Before: Nov 3 20:23:10 2026 GMT Not After : Nov 4 21:33:10 2026 GMT Subject: CN=12E0A6568BBD7E00A4288AEE3F7361579B8ECCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:c8:88:6a:8a:5e:61:17:c4:23:52:ea:7d: 3d:5e:37:98:6d:e0:3e:42:8b:9f:22:c2:bd:63:b0: 01:6f:ea:28:b8:a8:af:d1:b8:37:e4:6a:f5:7f:9c: 3f:cb:b0:56:7f:de:87:91:f0:68:bd:81:16:c3:5d: 64:1d:13:e9:58:7f:2d:96:48:99:49:c8:f0:2c:db: 33:8c:07:19:9f:ef:7a:d5:1c:d2:30:01:80:b4:54: de:a6:1a:7a:11:4b:93:6d:4e:2e:28:fa:6a:fa:6c: 04:54:35:9c:13:54:1b:71:98:54:56:12:c5:94:4f: 61:6f:9e:73:e0:95:e0:c5:f9:2e:13:e3:f2:c8:aa: 20:05:60:32:70:7c:25:a3:ee:97:ab:21:94:20:42: c0:63:8b:e9:57:46:1c:c8:9a:80:69:58:13:db:45: 05:c1:14:a5:8f:0b:6b:a0:1d:65:a1:96:43:36:9e: 80:d3:f7:0e:21:25:0d:f8:26:9c:a8:b0:fe:e5:b7: bf:db:a0:7f:59:65:1b:0b:34:a4:0a:44:3c:82:e5: 00:66:ee:2f:52:61:35:b3:3b:c3:d3:ce:68:2c:df: 31:ea:27:9b:4e:03:65:a9:cc:be:04:2c:fd:6a:f2: f8:27:26:3c:79:41:61:9d:9f:34:31:18:17:ac:4e: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:A6:56:8B:BD:7E:00:A4:28:8A:EE:3F:73:61:57:9B:8E:CC:D9 X509v3 Authority Key Identifier: keyid:39:25:22:CA:F6:B8:C7:36:A7:0F:65:AB:59:15:7B:11:0F:5C:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/392522CAF6B8C736A70F65AB59157B110F5CE4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/806d975f-8076-4899-9f8c-a8faa137870f/1/392522CAF6B8C736A70F65AB59157B110F5CE4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:75:bf:45:8a:04:aa:8b:42:44:01:7c:47:87:5d:a0:3c:e9: 9c:e3:fd:dc:be:bd:7e:17:f5:40:f3:50:b4:bc:3d:6f:b9:36: f2:2c:67:a2:82:45:7e:60:07:f4:5c:f8:bb:78:b7:ad:9a:5f: 68:3c:75:6e:42:df:04:eb:3b:ac:92:02:b1:8d:d9:78:e2:dd: 44:3d:6c:e9:dc:20:1e:d0:70:90:96:36:17:81:15:19:32:86: 52:5c:23:ab:7d:ae:ed:b1:28:42:3c:c4:e3:d8:5e:39:f5:f5: 72:55:8a:29:1f:92:85:f7:ac:20:f4:bf:f9:80:98:5a:96:e5: c8:a7:63:c7:ff:1a:af:f1:85:97:4b:f4:67:54:87:6a:3a:4d: fb:e1:ec:e7:5b:ea:f3:a5:19:b6:55:b3:96:2f:a3:fc:16:17: ee:d2:c5:df:77:37:05:e3:43:c7:b7:54:81:6a:5e:18:91:cf: 8a:be:d8:33:83:a2:4e:8f:f5:6d:93:0d:a0:79:26:ce:3d:8d: bc:05:b8:7c:fc:bd:17:42:0f:56:7d:29:91:fd:ba:a5:a8:3a: 5b:79:e8:48:33:b6:ee:69:54:34:4c:1e:b0:76:dc:08:65:07: b9:fe:3e:bc:58:9c:6d:0a:19:c1:7c:21:97:56:17:0a:a2:bf: a9:2d:1c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWvmQqnGws7QmHslNLfQFl36wvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkyNTIyQ0FGNkI4QzczNkE3MEY2NUFCNTkxNTdCMTEw RjVDRTRBNjAeFw0yNjExMDMyMDIzMTBaFw0yNjExMDQyMTMzMTBaMDMxMTAvBgNV BAMTKDEyRTBBNjU2OEJCRDdFMDBBNDI4OEFFRTNGNzM2MTU3OUI4RUNDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveciIaopeYRfEI1LqfT1eN5ht 4D5Ci58iwr1jsAFv6ii4qK/RuDfkavV/nD/LsFZ/3oeR8Gi9gRbDXWQdE+lYfy2W SJlJyPAs2zOMBxmf73rVHNIwAYC0VN6mGnoRS5NtTi4o+mr6bARUNZwTVBtxmFRW EsWUT2FvnnPgleDF+S4T4/LIqiAFYDJwfCWj7perIZQgQsBji+lXRhzImoBpWBPb RQXBFKWPC2ugHWWhlkM2noDT9w4hJQ34JpyosP7lt7/boH9ZZRsLNKQKRDyC5QBm 7i9SYTWzO8PTzmgs3zHqJ5tOA2WpzL4ELP1q8vgnJjx5QWGdnzQxGBesTvojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuCmVou9fgCkKIruP3NhV5uOzNkwHwYDVR0j BBgwFoAUOSUiyva4xzanD2WrWRV7EQ9c5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA2ZDk3NWYtODA3Ni00ODk5LTlmOGMtYThmYWExMzc4NzBmLzEvMzkyNTIyQ0FG NkI4QzczNkE3MEY2NUFCNTkxNTdCMTEwRjVDRTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOTI1MjJDQUY2QjhDNzM2QTcwRjY1QUI1OTE1N0IxMTBGNUNF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA2ZDk3NWYtODA3Ni00ODk5LTlm OGMtYThmYWExMzc4NzBmLzEvMzkyNTIyQ0FGNkI4QzczNkE3MEY2NUFCNTkxNTdC MTEwRjVDRTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF1v0WKBKqLQkQBfEeHXaA86Zzj/dy+vX4X 9UDzULS8PW+5NvIsZ6KCRX5gB/Rc+Lt4t62aX2g8dW5C3wTrO6ySArGN2Xji3UQ9 bOncIB7QcJCWNheBFRkyhlJcI6t9ru2xKEI8xOPYXjn19XJViikfkoX3rCD0v/mA mFqW5cinY8f/Gq/xhZdL9GdUh2o6Tfvh7Odb6vOlGbZVs5Yvo/wWF+7Sxd93NwXj Q8e3VIFqXhiRz4q+2DODok6P9W2TDaB5Js49jbwFuHz8vRdCD1Z9KZH9uqWoOlt5 6Egztu5pVDRMHrB23AhlB7n+PrxYnG0KGcF8IZdWFwqiv6ktHCc= -----END CERTIFICATE-----Generated at Wed Nov 4 14:36:49 2026 by rpki-client