$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: I6aZ3DCQAsQDJV096IY6dFogj9elitdUTsMTQ8Jqm64= Subject key identifier: 0C:42:1B:FE:CA:E2:B8:10:DF:A2:27:08:7B:07:C9:30:A6:C4:92:DA Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 15F70EF4ECF0EE22B7D7C8AE22BE887D348A444E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:13:58 +0000 Manifest this update: Thu 17 Sep 2026 00:08:58 +0000 Manifest next update: Fri 18 Sep 2026 03:17:58 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: Ed37aBcNhjxpdHsyPkDPsYF9V4BQPdnZL1Zpyoe9M90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:0e:f4:ec:f0:ee:22:b7:d7:c8:ae:22:be:88:7d:34:8a:44:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Sep 17 00:08:58 2026 GMT Not After : Sep 18 03:17:58 2026 GMT Subject: CN=0C421BFECAE2B810DFA227087B07C930A6C492DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:79:c2:27:9e:c9:0e:88:8e:29:6b:7d:94: 96:89:2a:13:e9:18:fd:98:2f:7f:0e:4c:ed:4d:a8: 97:6f:f8:e0:36:c8:fa:13:17:7b:c7:81:ab:41:00: 98:9e:e7:51:da:d9:64:1e:40:05:05:a0:c1:d4:3e: 04:45:fa:62:5c:72:9b:fb:22:e9:9c:d7:5a:d8:b5: 8c:5c:b2:77:55:3b:99:88:f1:e6:59:76:b7:99:2c: b2:02:9e:ff:c5:81:84:b0:c2:0c:68:22:e7:fc:d5: a9:28:02:b0:fd:af:ae:ac:3c:2c:7b:72:d9:50:6b: e2:06:41:b0:8f:51:2d:0f:fe:b0:86:ac:3e:e4:ea: a4:e4:89:6b:47:f2:b2:7f:32:bd:4f:c8:fd:a4:af: 2a:96:7a:1e:a7:ef:70:3d:50:8d:cb:de:91:43:7a: 42:c3:54:7c:a0:cb:8a:04:1b:f5:89:ef:2c:ac:14: 07:51:5e:2d:68:ce:31:23:6c:ad:7a:54:39:86:d0: d6:7b:7c:ed:cb:e8:9f:5f:58:b7:4a:5e:af:1a:75: a0:43:1b:43:4c:5d:14:a4:bc:43:f4:ec:31:44:66: b3:43:9e:da:c2:cb:1c:4d:2a:16:a2:f0:5a:6e:89: 18:9d:5b:52:cc:27:97:5a:ea:6e:89:6f:88:a9:2b: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:42:1B:FE:CA:E2:B8:10:DF:A2:27:08:7B:07:C9:30:A6:C4:92:DA X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:48:cf:31:51:a7:ae:ca:fe:3c:21:8e:d4:9d:70:86:b5:5c: 1d:12:7f:81:ea:3e:9f:db:33:12:a8:87:82:52:32:59:eb:65: 1d:01:90:14:8d:58:5f:0a:85:84:b3:6d:18:86:ff:8c:7d:4e: ee:d9:8b:4b:ff:58:92:ac:cd:c3:77:d6:09:4c:a8:24:b6:81: e9:4f:b5:80:44:97:d5:c4:a2:c2:de:40:7a:56:7f:2c:81:ab: 2a:31:e0:a3:79:ad:43:53:60:c2:d5:d0:f3:42:43:54:6e:ca: eb:b6:83:c5:5a:05:f1:41:60:d5:22:c2:35:f8:30:ec:c0:fd: b4:08:c6:e4:36:73:d0:3e:e9:54:f4:5e:cf:70:60:02:8a:62: ce:aa:c0:2e:cf:44:6a:58:60:52:11:16:6d:8d:9d:7c:e7:bb: 25:f2:4f:40:15:85:b4:cb:a2:0d:73:35:f1:bf:be:5a:8d:cf: ba:42:2f:ca:94:99:a7:de:8c:6b:39:bb:14:9b:e9:b4:82:32: c8:5f:24:db:79:09:da:c4:75:f7:d1:b7:bc:08:c8:b6:53:3a: b3:84:86:d4:08:5e:ac:f4:62:a0:bb:f3:7b:f8:41:ab:58:63: 8c:e9:f2:c1:73:e4:93:e4:4a:17:02:c0:52:52:0e:b3:45:92: 74:38:05:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfcO9Ozw7iK318iuIr6IfTSKRE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA5MTcwMDA4NThaFw0yNjA5MTgwMzE3NThaMDMxMTAvBgNV BAMTKDBDNDIxQkZFQ0FFMkI4MTBERkEyMjcwODdCMDdDOTMwQTZDNDkyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNXnCJ57JDoiOKWt9lJaJKhPp GP2YL38OTO1NqJdv+OA2yPoTF3vHgatBAJie51Ha2WQeQAUFoMHUPgRF+mJccpv7 Iumc11rYtYxcsndVO5mI8eZZdreZLLICnv/FgYSwwgxoIuf81akoArD9r66sPCx7 ctlQa+IGQbCPUS0P/rCGrD7k6qTkiWtH8rJ/Mr1PyP2kryqWeh6n73A9UI3L3pFD ekLDVHygy4oEG/WJ7yysFAdRXi1ozjEjbK16VDmG0NZ7fO3L6J9fWLdKXq8adaBD G0NMXRSkvEP07DFEZrNDntrCyxxNKhai8FpuiRidW1LMJ5da6m6Jb4ipK+YjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDEIb/sriuBDfoicIewfJMKbEktowHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1IzzFRp67K/jwhjtSdcIa1XB0Sf4HqPp/b MxKoh4JSMlnrZR0BkBSNWF8KhYSzbRiG/4x9Tu7Zi0v/WJKszcN31glMqCS2gelP tYBEl9XEosLeQHpWfyyBqyox4KN5rUNTYMLV0PNCQ1Ruyuu2g8VaBfFBYNUiwjX4 MOzA/bQIxuQ2c9A+6VT0Xs9wYAKKYs6qwC7PRGpYYFIRFm2NnXznuyXyT0AVhbTL og1zNfG/vlqNz7pCL8qUmafejGs5uxSb6bSCMshfJNt5CdrEdffRt7wIyLZTOrOE htQIXqz0YqC783v4QatYY4zp8sFz5JPkShcCwFJSDrNFknQ4BYI= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:21 2026 by rpki-client