$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: aAmdFxTWwXEi4fR3XJ6mPk821+6AckIEfsEB8R11kek= Subject key identifier: 80:25:9E:EB:C7:5F:EF:13:D6:0A:E6:DE:8A:7D:08:88:8F:93:A1:93 Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 2757CA91180F47AD39B7A441BF07AD6C83E28D2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:36:46 +0000 Manifest this update: Thu 17 Sep 2026 10:31:46 +0000 Manifest next update: Fri 18 Sep 2026 14:13:46 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: hV3gW0DmfW3YYqApeW272P+se+5MlPFF75iPZzoHNwo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:57:ca:91:18:0f:47:ad:39:b7:a4:41:bf:07:ad:6c:83:e2:8d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Sep 17 10:31:46 2026 GMT Not After : Sep 18 14:13:46 2026 GMT Subject: CN=80259EEBC75FEF13D60AE6DE8A7D08888F93A193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:00:fa:42:90:e0:b5:15:36:ed:00:b6:03: 87:36:fe:d5:b4:f9:59:74:c8:01:ed:4d:dc:e0:e0: d5:28:80:59:f4:a6:61:aa:f5:df:17:a4:c4:74:7c: a5:9a:ef:5c:83:91:15:a1:d4:b8:25:85:43:fb:21: f0:62:98:e3:88:7c:6d:f5:e2:19:5b:ab:c3:40:f5: 35:63:a5:26:f6:f5:1c:0d:f8:0c:f5:46:cf:d7:de: 59:4e:14:cf:a3:49:5e:23:d4:e4:11:40:c0:28:ed: 10:3e:e5:05:df:19:14:3a:8d:66:96:1a:37:b5:1c: 4c:c5:9a:84:21:78:88:1b:36:32:72:95:a2:b9:bf: 9e:0e:52:e4:67:07:09:66:6e:75:7d:55:1f:a4:42: b5:c8:f9:0c:3a:d3:57:1d:49:35:ad:7e:88:9a:6e: 0c:65:88:a6:5b:23:3c:92:6d:71:22:5f:b6:cc:8d: a8:37:55:64:58:f3:66:d6:c5:e1:ac:7b:f9:a4:c9: 4f:2e:c1:fe:55:c0:81:33:fd:29:82:95:17:87:ba: 54:14:ec:e7:d5:fc:ec:13:9d:82:c6:31:94:89:84: c2:94:df:61:55:5a:f8:69:ef:56:d6:58:ee:21:67: b2:e6:b4:f5:53:71:d0:b2:65:31:d6:7c:1d:0d:d6: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:25:9E:EB:C7:5F:EF:13:D6:0A:E6:DE:8A:7D:08:88:8F:93:A1:93 X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:73:c9:13:b2:0a:a5:50:5b:08:4c:94:5d:f6:e4:f0:1b:4a: e7:d0:75:58:e1:1b:a4:ad:0a:e9:18:ae:46:65:6a:0d:d2:da: 90:3f:9a:5b:77:0e:f8:4a:ea:cf:da:e8:bf:38:b7:7d:b5:91: 18:a7:da:59:55:77:f5:66:fe:2f:97:86:c6:a5:d4:3b:b8:5c: b1:02:a1:c5:30:d0:8d:21:dd:f6:47:48:73:f1:53:d7:35:13: ae:a0:b2:6c:00:3f:50:27:a8:21:32:b3:10:1b:62:cd:74:a8: 20:14:47:45:7c:9f:9c:5a:fb:5d:1f:23:36:a6:89:f4:d8:32: e9:63:97:05:64:fa:34:00:27:4c:69:ca:32:65:48:90:e8:86: 10:d7:80:7f:00:1b:bd:d8:a3:2c:76:87:ae:b1:20:41:95:1b: 54:19:db:84:ff:52:cb:57:31:56:21:77:7a:a4:34:39:7e:33: e7:c5:f7:b2:b1:62:e1:87:5c:23:a2:15:1c:dc:73:53:96:91: f0:71:91:3b:ee:17:ff:1f:7f:b2:d8:1a:91:fe:8e:7f:78:0b: c6:83:1b:06:ca:e6:77:4e:a1:ea:5c:dc:34:ff:79:78:a7:a6: 18:40:1f:50:2b:cd:e9:96:c0:39:8e:49:08:4b:46:9e:d3:31: 67:88:84:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1fKkRgPR605t6RBvwetbIPijS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA5MTcxMDMxNDZaFw0yNjA5MTgxNDEzNDZaMDMxMTAvBgNV BAMTKDgwMjU5RUVCQzc1RkVGMTNENjBBRTZERThBN0QwODg4OEY5M0ExOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofAD6QpDgtRU27QC2A4c2/tW0 +Vl0yAHtTdzg4NUogFn0pmGq9d8XpMR0fKWa71yDkRWh1LglhUP7IfBimOOIfG31 4hlbq8NA9TVjpSb29RwN+Az1Rs/X3llOFM+jSV4j1OQRQMAo7RA+5QXfGRQ6jWaW Gje1HEzFmoQheIgbNjJylaK5v54OUuRnBwlmbnV9VR+kQrXI+Qw601cdSTWtfoia bgxliKZbIzySbXEiX7bMjag3VWRY82bWxeGse/mkyU8uwf5VwIEz/SmClReHulQU 7OfV/OwTnYLGMZSJhMKU32FVWvhp71bWWO4hZ7LmtPVTcdCyZTHWfB0N1g5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCWe68df7xPWCubein0IiI+ToZMwHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBzyROyCqVQWwhMlF325PAbSufQdVjhG6St CukYrkZlag3S2pA/mlt3DvhK6s/a6L84t321kRin2llVd/Vm/i+Xhsal1Du4XLEC ocUw0I0h3fZHSHPxU9c1E66gsmwAP1AnqCEysxAbYs10qCAUR0V8n5xa+10fIzam ifTYMuljlwVk+jQAJ0xpyjJlSJDohhDXgH8AG73Yoyx2h66xIEGVG1QZ24T/UstX MVYhd3qkNDl+M+fF97KxYuGHXCOiFRzcc1OWkfBxkTvuF/8ff7LYGpH+jn94C8aD GwbK5ndOoepc3DT/eXinphhAH1ArzemWwDmOSQhLRp7TMWeIhE8= -----END CERTIFICATE-----Generated at Thu Sep 17 17:39:47 2026 by rpki-client