$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json) Hash identifier: wan/V8972rUy8iOWAF3fJA6168An4FweLmuT2K5luFQ= Subject key identifier: A2:8B:66:8C:DD:C9:01:2C:CF:FF:EA:6C:C1:34:2A:7F:2E:F1:5B:DA Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Certificate serial: 60B10DB4AD1E29920C53225F14CB2FE7B18A143D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:40:34 +0000 Manifest this update: Thu 17 Sep 2026 01:35:34 +0000 Manifest next update: Fri 18 Sep 2026 03:42:34 +0000 Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: LQ2/nvWGa73T1ACIg2JaEnsaGsO0Z5gXDK7dNwoAdvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b1:0d:b4:ad:1e:29:92:0c:53:22:5f:14:cb:2f:e7:b1:8a:14:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Validity Not Before: Sep 17 01:35:34 2026 GMT Not After : Sep 18 03:42:34 2026 GMT Subject: CN=A28B668CDDC9012CCFFFEA6CC1342A7F2EF15BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:d3:c1:0d:59:07:50:5c:fe:b9:24:bb:91: 23:ed:8f:50:43:1f:9f:0b:13:7b:19:e3:64:56:37: 6d:29:27:ba:fa:b4:21:14:2a:a4:33:fd:be:da:68: 65:3d:03:72:20:fc:0c:73:6b:1d:10:c7:6f:c4:91: b8:0b:85:6d:14:93:be:77:5b:80:5c:d2:48:42:b8: 8d:bf:10:b5:41:55:1a:94:f2:ae:64:93:e0:34:bf: af:c2:b9:02:c9:62:55:f5:9a:25:ac:65:ea:7f:b1: f7:e0:23:d3:d8:b8:9a:1d:62:7f:ea:7f:39:9e:88: 2c:cc:b5:bb:fa:c6:b8:4a:e6:7f:cb:a3:c9:5b:42: c9:b6:cb:b6:55:c6:b3:d9:4d:aa:f9:d4:e1:c5:41: 43:6b:39:55:c4:92:fe:88:e5:2e:84:02:39:af:58: 97:25:47:87:25:db:4e:a3:cc:c7:83:3b:a3:de:a6: d4:c8:cc:b0:81:6d:26:44:8d:3f:3f:5d:a4:e9:89: 6c:7a:69:27:2e:ec:e0:50:a7:b4:8b:13:44:90:6f: 7c:2d:0c:f2:5b:72:fe:b7:a5:2b:52:18:89:84:b6: 07:e0:80:8f:a6:92:c6:37:ff:a0:f5:c2:b0:85:82: 55:70:f2:f3:e2:43:da:b4:e0:6b:49:4c:45:47:da: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:66:8C:DD:C9:01:2C:CF:FF:EA:6C:C1:34:2A:7F:2E:F1:5B:DA X509v3 Authority Key Identifier: keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1a:06:19:a9:d9:48:c2:9d:38:d6:f7:c2:d0:d9:e7:05:2e: 6f:df:7c:23:d8:e1:46:4a:9d:24:11:51:7e:7e:5d:c7:61:05: 2b:bc:71:df:31:bd:d3:9f:d2:e8:bb:c9:ee:b6:3e:be:24:b5: 7b:9b:22:8e:18:72:a5:c0:24:50:af:9e:92:fc:3e:b0:eb:5b: bc:de:d5:04:c9:e6:16:8d:3d:6e:e5:e2:36:6d:8d:62:08:66: e6:d4:ba:db:89:50:da:1d:b4:f2:c6:2d:52:ed:a0:41:ce:89: 3e:85:e0:de:35:77:4a:e2:99:9f:c6:93:0a:d7:97:f7:2f:56: 86:7b:73:7c:2a:b8:61:45:35:9b:24:b3:47:57:58:30:5d:68: f2:8e:70:8b:73:56:82:62:a5:0b:74:bc:4c:e5:75:50:59:1e: bb:c2:a1:7a:9d:b0:e8:61:c6:82:1b:b8:41:1b:6d:c4:9b:88: bb:48:25:ec:c6:a4:61:eb:d4:33:d2:3c:71:6a:b9:7f:94:87: 23:97:a3:58:20:0d:93:78:3a:fc:7f:f5:6c:e1:0d:b4:af:87: 3d:d4:ee:93:61:a3:1c:11:81:95:3a:8c:1b:ff:11:90:3a:60: 29:05:7e:d1:9c:e1:58:46:a2:06:a4:a9:39:d6:aa:bf:3d:49: fe:f8:1a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLENtK0eKZIMUyJfFMsv57GKFD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0Yx RjQyRDU4OTAeFw0yNjA5MTcwMTM1MzRaFw0yNjA5MTgwMzQyMzRaMDMxMTAvBgNV BAMTKEEyOEI2NjhDRERDOTAxMkNDRkZGRUE2Q0MxMzQyQTdGMkVGMTVCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt29PBDVkHUFz+uSS7kSPtj1BD H58LE3sZ42RWN20pJ7r6tCEUKqQz/b7aaGU9A3Ig/Axzax0Qx2/EkbgLhW0Uk753 W4Bc0khCuI2/ELVBVRqU8q5kk+A0v6/CuQLJYlX1miWsZep/sffgI9PYuJodYn/q fzmeiCzMtbv6xrhK5n/Lo8lbQsm2y7ZVxrPZTar51OHFQUNrOVXEkv6I5S6EAjmv WJclR4cl206jzMeDO6PeptTIzLCBbSZEjT8/XaTpiWx6aScu7OBQp7SLE0SQb3wt DPJbcv63pStSGImEtgfggI+mksY3/6D1wrCFglVw8vPiQ9q04GtJTEVH2qiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUootmjN3JASzP/+pswTQqfy7xW9owHwYDVR0j BBgwFoAUqUGSyyYvp4xfxnzhi9uczx9C1YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0Iy NjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0YxRjQyRDU4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTQxOTJDQjI2MkZBNzhDNUZDNjdDRTE4QkRCOUNDRjFGNDJE NTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlD Q0YxRjQyRDU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0aBhmp2UjCnTjW98LQ2ecFLm/ffCPY4UZK nSQRUX5+XcdhBSu8cd8xvdOf0ui7ye62Pr4ktXubIo4YcqXAJFCvnpL8PrDrW7ze 1QTJ5haNPW7l4jZtjWIIZubUutuJUNodtPLGLVLtoEHOiT6F4N41d0rimZ/GkwrX l/cvVoZ7c3wquGFFNZsks0dXWDBdaPKOcItzVoJipQt0vEzldVBZHrvCoXqdsOhh xoIbuEEbbcSbiLtIJezGpGHr1DPSPHFquX+UhyOXo1ggDZN4Ovx/9WzhDbSvhz3U 7pNhoxwRgZU6jBv/EZA6YCkFftGc4VhGogakqTnWqr89Sf74GvY= -----END CERTIFICATE-----Generated at Thu Sep 17 19:18:07 2026 by rpki-client