$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: kDt48vA7mjJkulMGff+2mNc2hzjyU2W1Gdfzp3ce2tg= Subject key identifier: DE:CD:97:E5:53:9C:A0:70:F7:BB:3D:AB:8B:C6:09:EB:F9:AF:4C:66 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 6B21A7941527EA5BEBB96F8680B1369E7F22AA80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:11:26 +0000 Manifest this update: Wed 16 Sep 2026 22:06:26 +0000 Manifest next update: Fri 18 Sep 2026 02:02:26 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: 3X+wxgSTDfQQiaCVmij0ZTIXNzDclIhfOXleTH50Nzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:21:a7:94:15:27:ea:5b:eb:b9:6f:86:80:b1:36:9e:7f:22:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Sep 16 22:06:26 2026 GMT Not After : Sep 18 02:02:26 2026 GMT Subject: CN=DECD97E5539CA070F7BB3DAB8BC609EBF9AF4C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:60:dd:49:ef:b8:23:76:8a:1a:7b:5b:11: 5a:5a:1e:40:66:93:44:3f:4c:b2:7e:60:6b:a8:f6: a0:2d:fa:bb:a7:0f:89:01:62:31:ee:83:cc:9c:ba: 23:c9:dd:00:4b:47:b9:f0:a7:0c:66:30:91:09:54: 14:54:58:a2:8a:f5:fc:89:c2:89:8c:91:0b:f4:40: 92:e5:5b:3e:cd:cc:07:84:40:30:76:13:e4:53:2b: 03:9e:97:d6:64:1a:04:04:da:e3:f6:b4:43:43:22: ce:e9:f6:4b:58:32:6c:1c:1b:b2:ef:09:c2:c8:ed: 38:21:60:cc:2e:e6:d2:1f:ed:ca:47:29:33:52:22: a4:28:0f:16:2f:20:8d:cd:47:74:c0:30:a1:10:0c: 44:3f:f2:33:c8:57:24:76:5c:8a:50:8c:49:00:90: 80:eb:68:b8:9b:0c:da:80:19:cf:b0:d9:20:b8:5a: 5a:47:fc:51:24:43:df:84:ec:b0:51:95:d0:d3:ab: 9a:5b:9f:5f:56:21:7a:5a:93:c3:5f:9c:4b:e7:2e: 57:ce:87:d1:6e:32:c9:ca:ad:7a:9c:12:93:b4:c0: 2f:cb:cb:f1:fd:ec:6b:0f:0b:c0:2a:7a:cb:69:6c: e9:09:df:51:c1:b0:f9:4a:78:44:bc:26:a5:d1:0a: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CD:97:E5:53:9C:A0:70:F7:BB:3D:AB:8B:C6:09:EB:F9:AF:4C:66 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:27:0c:4f:f2:c6:43:9f:f6:b6:d8:11:b3:42:7e:0d:df:92: f7:51:da:6c:3e:2a:88:8b:2f:5a:b2:7f:b5:bd:b5:10:de:d6: b2:eb:98:b4:48:cc:02:26:fb:9a:75:69:da:70:ee:ee:d9:66: 15:57:ff:98:4a:14:1a:80:42:9a:69:54:47:d3:cb:51:78:b7: 28:40:a1:c0:dc:a6:2c:08:cd:90:c7:25:77:2c:50:c0:9c:a5: e7:1f:a4:62:9b:25:10:13:66:fc:bd:cb:b7:9b:d4:8a:68:eb: 16:4a:f2:70:5c:7e:63:06:33:f1:16:c4:03:53:78:4f:60:d7: f9:75:fa:57:08:e4:45:8f:1c:72:b5:c9:67:2d:dd:ac:a2:25: ff:d8:8d:ce:c7:78:94:a3:df:84:25:57:ac:3c:cf:d1:00:65: ec:b3:ac:b1:f0:bf:6e:4f:15:f6:d2:e6:32:26:53:3b:4d:4d: 0c:53:0e:2a:08:e7:89:fb:88:da:c8:24:81:8c:99:54:0c:5a: 62:7b:32:75:4b:ef:d2:d3:dd:d9:79:01:d0:e0:45:a6:80:86: 50:24:bd:a5:a0:94:68:6a:4d:2e:f9:a6:1b:7b:27:9b:31:cd: c1:30:c9:03:44:46:78:60:7d:44:38:05:6e:5e:81:5f:44:bf: b4:d4:55:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayGnlBUn6lvruW+GgLE2nn8iqoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA5MTYyMjA2MjZaFw0yNjA5MTgwMjAyMjZaMDMxMTAvBgNV BAMTKERFQ0Q5N0U1NTM5Q0EwNzBGN0JCM0RBQjhCQzYwOUVCRjlBRjRDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gmDdSe+4I3aKGntbEVpaHkBm k0Q/TLJ+YGuo9qAt+runD4kBYjHug8ycuiPJ3QBLR7nwpwxmMJEJVBRUWKKK9fyJ womMkQv0QJLlWz7NzAeEQDB2E+RTKwOel9ZkGgQE2uP2tENDIs7p9ktYMmwcG7Lv CcLI7TghYMwu5tIf7cpHKTNSIqQoDxYvII3NR3TAMKEQDEQ/8jPIVyR2XIpQjEkA kIDraLibDNqAGc+w2SC4WlpH/FEkQ9+E7LBRldDTq5pbn19WIXpak8NfnEvnLlfO h9FuMsnKrXqcEpO0wC/Ly/H97GsPC8AqestpbOkJ31HBsPlKeES8JqXRCpz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3s2X5VOcoHD3uz2ri8YJ6/mvTGYwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcnDE/yxkOf9rbYEbNCfg3fkvdR2mw+KoiL L1qyf7W9tRDe1rLrmLRIzAIm+5p1adpw7u7ZZhVX/5hKFBqAQpppVEfTy1F4tyhA ocDcpiwIzZDHJXcsUMCcpecfpGKbJRATZvy9y7eb1Ipo6xZK8nBcfmMGM/EWxANT eE9g1/l1+lcI5EWPHHK1yWct3ayiJf/Yjc7HeJSj34QlV6w8z9EAZeyzrLHwv25P FfbS5jImUztNTQxTDioI54n7iNrIJIGMmVQMWmJ7MnVL79LT3dl5AdDgRaaAhlAk vaWglGhqTS75pht7J5sxzcEwyQNERnhgfUQ4BW5egV9Ev7TUVRU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:11 2026 by rpki-client