$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: huwP9GiNz2r69BH8zMmGp8+yAn+m8LbfTMXaytG7qjg= Subject key identifier: F9:2D:46:50:F1:6D:0E:63:2D:7A:70:E5:FD:9F:1B:25:D1:31:80:D9 Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 597B1F3CAAB7360DA294F7C32375EAF1BFC956D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 07:31:50 +0000 Manifest this update: Thu 03 Sep 2026 07:26:50 +0000 Manifest next update: Fri 04 Sep 2026 10:28:50 +0000 Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: n5PdUnIC9qf2OxR7VBB2YXVx/8gbIah5QM+K1c0edOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7b:1f:3c:aa:b7:36:0d:a2:94:f7:c3:23:75:ea:f1:bf:c9:56:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Sep 3 07:26:50 2026 GMT Not After : Sep 4 10:28:50 2026 GMT Subject: CN=F92D4650F16D0E632D7A70E5FD9F1B25D13180D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:61:1e:cf:a7:c0:88:bf:7c:49:35:fb:b0: 38:72:20:9e:f6:03:04:cd:02:ea:91:08:18:67:f2: 33:ba:fa:6a:49:27:e5:1f:94:4d:b8:8f:ef:78:33: 64:d0:88:94:2b:df:87:fe:75:07:7d:9f:83:cd:0b: e0:a0:5f:c0:95:60:82:07:f4:39:82:0e:72:59:61: 2d:72:5b:21:34:ec:10:4c:02:2f:10:00:7b:a6:61: c3:20:e9:ec:ef:dd:32:15:c2:e9:14:c3:3c:90:f1: 48:84:82:76:17:25:20:a7:cc:fc:0d:df:32:ef:f9: 84:49:38:54:0d:ee:bb:6a:ef:5e:57:69:ef:4d:45: 54:68:1d:f3:80:fa:ae:ad:2a:ac:86:c7:ad:1e:80: a3:2e:7a:30:a6:57:79:1e:85:47:65:b3:d6:d6:f4: 59:39:b1:7d:68:5f:ed:88:59:f1:7d:92:0d:9e:22: 28:e9:de:f5:f4:b8:9c:12:c2:8a:d1:32:93:64:20: d8:8d:13:2c:29:ff:f9:45:dc:96:9a:2a:39:47:17: 04:9c:1f:17:26:b4:86:63:af:56:28:3b:eb:db:f9: 58:61:c8:1a:3b:f1:ec:ea:4a:e6:5a:94:ec:54:fd: c5:04:aa:ba:c8:7c:92:52:5a:23:40:97:1e:21:74: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2D:46:50:F1:6D:0E:63:2D:7A:70:E5:FD:9F:1B:25:D1:31:80:D9 X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a9:16:53:85:e7:5f:2f:8f:76:e2:8c:26:b6:37:9d:04:d5: a1:b8:a6:b9:e8:7b:ad:87:7c:c1:b3:bd:34:b8:ad:44:6a:ad: 8d:2b:e2:08:e5:e0:ef:84:5c:f0:c7:bf:3d:28:3b:c7:24:0f: f6:f4:0f:e5:c8:6c:bc:1e:23:1d:52:8c:1b:80:9d:50:b9:bd: b1:5e:fb:16:5c:e8:57:17:4c:8f:bd:d9:42:01:d3:2e:46:84: d0:18:bb:40:e6:f6:65:1a:28:0d:23:d3:24:92:09:b1:ca:94: 47:c6:de:70:fc:b1:63:f7:1c:52:ee:53:ec:82:5c:68:7b:54: 6b:0d:cd:2a:85:6b:cb:fa:6b:ee:04:0f:f3:e6:6f:77:d8:e4: 0a:eb:09:59:6a:2e:9a:22:13:6f:93:cd:e6:c5:10:05:d3:39: f0:66:b5:90:bd:90:3f:f1:c8:a4:96:ef:54:1a:b5:ef:bc:f6: 60:9f:fd:75:b6:84:cd:36:37:28:e4:c0:d5:ed:91:0e:c1:04: 95:d8:c3:d3:c8:54:fa:5f:d8:9d:42:5f:08:e8:33:4a:58:f7: 64:23:08:d1:51:ea:41:81:e2:ef:85:bf:8a:56:03:df:85:5d: be:38:24:20:cc:e5:ca:ae:fb:d7:10:4a:44:73:91:b7:5e:9c: 68:11:f5:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXsfPKq3Ng2ilPfDI3Xq8b/JVtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA5MDMwNzI2NTBaFw0yNjA5MDQxMDI4NTBaMDMxMTAvBgNV BAMTKEY5MkQ0NjUwRjE2RDBFNjMyRDdBNzBFNUZEOUYxQjI1RDEzMTgwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcmEez6fAiL98STX7sDhyIJ72 AwTNAuqRCBhn8jO6+mpJJ+UflE24j+94M2TQiJQr34f+dQd9n4PNC+CgX8CVYIIH 9DmCDnJZYS1yWyE07BBMAi8QAHumYcMg6ezv3TIVwukUwzyQ8UiEgnYXJSCnzPwN 3zLv+YRJOFQN7rtq715Xae9NRVRoHfOA+q6tKqyGx60egKMuejCmV3kehUdls9bW 9Fk5sX1oX+2IWfF9kg2eIijp3vX0uJwSworRMpNkINiNEywp//lF3JaaKjlHFwSc HxcmtIZjr1YoO+vb+VhhyBo78ezqSuZalOxU/cUEqrrIfJJSWiNAlx4hdPj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+S1GUPFtDmMtenDl/Z8bJdExgNkwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGpFlOF518vj3bijCa2N50E1aG4prnoe62H fMGzvTS4rURqrY0r4gjl4O+EXPDHvz0oO8ckD/b0D+XIbLweIx1SjBuAnVC5vbFe +xZc6FcXTI+92UIB0y5GhNAYu0Dm9mUaKA0j0ySSCbHKlEfG3nD8sWP3HFLuU+yC XGh7VGsNzSqFa8v6a+4ED/Pmb3fY5ArrCVlqLpoiE2+TzebFEAXTOfBmtZC9kD/x yKSW71Qate+89mCf/XW2hM02NyjkwNXtkQ7BBJXYw9PIVPpf2J1CXwjoM0pY92Qj CNFR6kGB4u+Fv4pWA9+FXb44JCDM5cqu+9cQSkRzkbdenGgR9ak= -----END CERTIFICATE-----Generated at Thu Sep 3 22:32:40 2026 by rpki-client