$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft File: 13605A136F0092B1019BDEF64A0199270705BFA5.mft (raw, json) Hash identifier: 06XeUNu3coiPZ8PaDaJlP+6Rc2McBfGGrkNqLqUQsh8= Subject key identifier: 9B:9E:5E:F5:A3:10:23:AE:98:D6:DB:58:FD:55:A9:B9:F0:08:45:F8 Authority key identifier: 13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 Certificate issuer: /CN=13605A136F0092B1019BDEF64A0199270705BFA5 Certificate serial: 60F1C817C285273D7F8A38322794A07980B74778 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:10:05 +0000 Manifest this update: Thu 17 Sep 2026 01:05:05 +0000 Manifest next update: Fri 18 Sep 2026 03:49:05 +0000 Files and hashes: 1: 13605A136F0092B1019BDEF64A0199270705BFA5.crl (hash: SktKANG2HbEQGLMkaB9U9wbHNs5SjyyjvdLEgm+TXdQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f1:c8:17:c2:85:27:3d:7f:8a:38:32:27:94:a0:79:80:b7:47:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13605A136F0092B1019BDEF64A0199270705BFA5 Validity Not Before: Sep 17 01:05:05 2026 GMT Not After : Sep 18 03:49:05 2026 GMT Subject: CN=9B9E5EF5A31023AE98D6DB58FD55A9B9F00845F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:5c:fa:4b:c0:d8:37:b6:0d:5c:42:81:8e: d9:ed:d7:6f:ac:1f:77:53:7b:79:30:9e:8a:c5:6e: cf:7f:8f:29:c2:b5:b5:d1:db:61:c2:46:c7:9c:28: 99:f6:a5:e6:d3:8f:e8:0f:b3:e0:b9:cf:16:60:38: ff:f2:f6:77:dd:17:a1:78:f8:15:56:a5:fe:aa:7d: 23:0b:04:6e:d5:0b:ec:b0:8f:d6:68:aa:05:ac:77: e7:58:b2:bb:56:22:1c:22:28:d7:a9:c9:88:e9:5f: a1:59:1e:73:89:42:76:85:7d:ea:63:7e:7c:fd:ac: 04:c8:42:0d:f0:02:d2:5c:9d:0d:e1:e1:71:83:23: d9:af:bd:bb:7d:6c:8d:c7:7e:67:83:54:0a:2d:d9: 6f:ce:e9:84:77:92:eb:3d:a4:a7:ac:c7:62:73:e4: c4:23:0b:f3:d1:f0:9d:91:c0:04:94:bd:ef:bf:0f: 34:36:5f:52:b9:3b:90:f1:ad:93:6b:28:52:4d:06: bf:dc:48:41:34:75:fe:c6:11:82:36:4e:57:77:38: dc:95:0a:2d:f8:54:c6:dc:ea:ea:43:87:4a:ef:d2: 33:23:a3:f0:f3:be:b8:64:59:a7:a8:c7:d7:7d:62: cc:7b:53:16:c1:2d:d7:55:1d:28:f7:05:32:cf:d2: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:5E:F5:A3:10:23:AE:98:D6:DB:58:FD:55:A9:B9:F0:08:45:F8 X509v3 Authority Key Identifier: keyid:13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:55:ec:4a:82:20:52:08:4a:b0:a7:2f:4a:a9:02:7b:00: f0:86:15:6d:43:2d:d4:e5:2e:1e:99:88:4a:35:af:dc:43:8b: 2b:29:ba:91:9c:13:94:e2:23:4a:3d:c4:b9:62:1a:62:70:36: e5:4e:cd:39:d2:fb:51:37:c8:e8:53:b2:99:6f:1c:9f:65:89: ce:f6:19:fe:1a:fa:9b:74:46:18:ca:78:95:1a:fb:f2:f8:34: 78:bb:4a:11:4e:94:be:83:18:3e:f0:ce:ec:87:e3:f7:1d:69: f7:27:cf:0c:58:a3:8d:9e:4a:d5:6f:32:35:c1:88:ed:23:bd: f5:4a:54:2a:f2:f3:d1:e5:4e:9a:fc:96:e9:64:bb:97:20:0e: 8a:3f:ec:c2:5d:77:25:0f:98:06:a7:56:35:20:3f:bf:53:fa: b2:92:e2:4e:7d:ae:a4:4d:11:69:ac:d1:11:e5:8e:4d:cc:02: ca:33:2c:5f:87:b2:3d:0d:25:c3:24:9d:c4:9b:f1:32:7b:0b: 63:4f:88:72:2c:1c:3e:b0:39:db:2f:bd:2f:36:9b:c8:16:73: ea:c6:0c:74:4e:5f:4a:5a:ad:a4:14:b9:e1:0e:97:9c:6b:0b: 3d:fa:4c:e2:ca:bb:4f:52:50:f2:e6:cf:3a:19:83:11:67:5b: d8:43:b1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPHIF8KFJz1/ijgyJ5SgeYC3R3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5Mjcw NzA1QkZBNTAeFw0yNjA5MTcwMTA1MDVaFw0yNjA5MTgwMzQ5MDVaMDMxMTAvBgNV BAMTKDlCOUU1RUY1QTMxMDIzQUU5OEQ2REI1OEZENTVBOUI5RjAwODQ1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xFz6S8DYN7YNXEKBjtnt12+s H3dTe3kwnorFbs9/jynCtbXR22HCRsecKJn2pebTj+gPs+C5zxZgOP/y9nfdF6F4 +BVWpf6qfSMLBG7VC+ywj9ZoqgWsd+dYsrtWIhwiKNepyYjpX6FZHnOJQnaFfepj fnz9rATIQg3wAtJcnQ3h4XGDI9mvvbt9bI3HfmeDVAot2W/O6YR3kus9pKesx2Jz 5MQjC/PR8J2RwASUve+/DzQ2X1K5O5DxrZNrKFJNBr/cSEE0df7GEYI2Tld3ONyV Ci34VMbc6upDh0rv0jMjo/DzvrhkWaeox9d9Ysx7UxbBLddVHSj3BTLP0q7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm55e9aMQI66Y1ttY/VWpufAIRfgwHwYDVR0j BBgwFoAUE2BaE28AkrEBm972SgGZJwcFv6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyNjc4MjUtNTFhZi00NTZkLWI0NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2 RjAwOTJCMTAxOUJERUY2NEEwMTk5MjcwNzA1QkZBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzYwNUExMzZGMDA5MkIxMDE5QkRFRjY0QTAxOTkyNzA3MDVC RkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTM2MDVBMTM2RjAwOTJCMTAxOUJERUY2NEEwMTk5 MjcwNzA1QkZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGEVexKgiBSCEqwpy9KqQJ7APCGFW1DLdTl Lh6ZiEo1r9xDiyspupGcE5TiI0o9xLliGmJwNuVOzTnS+1E3yOhTsplvHJ9lic72 Gf4a+pt0RhjKeJUa+/L4NHi7ShFOlL6DGD7wzuyH4/cdafcnzwxYo42eStVvMjXB iO0jvfVKVCry89HlTpr8lulku5cgDoo/7MJddyUPmAanVjUgP79T+rKS4k59rqRN EWms0RHljk3MAsozLF+Hsj0NJcMkncSb8TJ7C2NPiHIsHD6wOdsvvS82m8gWc+rG DHROX0paraQUueEOl5xrCz36TOLKu09SUPLmzzoZgxFnW9hDsbw= -----END CERTIFICATE-----Generated at Thu Sep 17 12:48:17 2026 by rpki-client