$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: s6fDBB+PScmwe2XR7xN3tdKElj+p8ly3CCFxvXJdlXM= Subject key identifier: 3D:0B:CB:1D:76:B9:7F:68:10:96:C6:66:9E:86:AD:AB:91:31:E3:F4 Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 209FFBFFF5BD85CC9D161B2B8C9BA5CCFB57674F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:01:00 +0000 Manifest this update: Thu 17 Sep 2026 01:56:00 +0000 Manifest next update: Fri 18 Sep 2026 04:42:00 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: Mklh8yEMpkCT70g05RtwzHD26TrhbNmRTgYCTkS7OuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:fb:ff:f5:bd:85:cc:9d:16:1b:2b:8c:9b:a5:cc:fb:57:67:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Sep 17 01:56:00 2026 GMT Not After : Sep 18 04:42:00 2026 GMT Subject: CN=3D0BCB1D76B97F681096C6669E86ADAB9131E3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:4b:cf:57:0d:ab:f2:84:37:1a:58:bc:d3: 37:7f:6a:f0:c4:67:e3:19:e7:56:7e:3d:c7:cf:6d: e7:38:01:e8:cd:1e:7e:d0:be:92:fd:06:41:94:7c: 90:9c:fe:83:8a:df:7b:18:a6:bb:32:71:4d:f7:6a: 88:36:c0:c7:34:55:98:46:50:43:4e:9a:d6:ad:79: 2d:c0:22:19:7a:bc:82:0a:5f:18:c9:59:a2:a7:68: 6d:5c:42:3d:a2:42:dc:d4:e4:f8:89:7f:6e:c2:63: b4:ed:ad:eb:54:b0:42:d6:a8:df:7c:a4:91:1d:f6: ea:6d:03:56:52:23:b4:38:c3:17:bd:5d:a0:11:64: 7a:d5:d9:42:20:50:65:bd:28:4c:a1:b7:fb:59:fb: 41:e3:fa:10:0d:0f:52:c8:2f:58:74:d8:01:32:36: c1:01:dd:fc:b9:3f:ea:ec:ba:33:51:4c:c8:bc:39: a0:63:03:8b:98:8b:d4:54:50:67:5a:7a:9c:b3:49: e7:cb:6e:ca:74:48:8b:82:6b:a3:85:b8:66:81:72: ad:40:3f:64:36:2a:af:74:ad:b9:fc:2c:ab:0f:e3: a7:41:0a:e4:0e:c8:1a:19:5d:18:ec:ce:b2:19:25: b8:b1:1f:7f:fb:81:8c:34:3e:48:4c:d5:37:1e:70: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0B:CB:1D:76:B9:7F:68:10:96:C6:66:9E:86:AD:AB:91:31:E3:F4 X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b9:4a:b0:b7:0b:46:4c:0e:17:80:31:67:82:a7:f0:3a:04: 97:e2:62:cc:d6:8a:f9:02:32:4f:d7:98:0d:fe:7e:f6:82:02: b8:dc:65:31:38:8c:93:60:2f:bf:fa:02:71:4c:0c:5e:33:26: aa:86:cc:59:de:d1:2e:92:f8:0d:b7:62:b2:6b:9d:a0:74:db: 24:bd:c0:e5:c3:db:44:19:9b:99:f5:f1:44:ca:b3:20:77:a9: 80:11:30:dd:39:8f:c6:d1:74:49:ff:b6:95:3b:29:df:a5:6c: 19:26:aa:bc:a0:32:6b:83:8c:e3:b0:a5:b8:f7:cb:9f:9c:8a: be:0d:b1:69:77:3d:04:1c:bd:0e:5a:b2:d1:41:75:62:9e:22: cc:bd:17:69:b2:62:89:c0:c3:fa:6b:e7:d6:8c:10:e2:b7:46: 0d:be:81:52:8e:00:fe:f9:af:a9:11:66:4c:96:6f:75:5e:4e: 0e:c8:6b:e9:e5:25:70:ee:f4:59:42:9c:e8:cf:73:79:a0:b5: ab:6f:8b:a9:d0:46:2f:e7:13:84:ed:6b:ff:dc:96:f3:14:54: e6:c7:cd:9e:2d:6e:23:c9:cb:b0:67:d2:06:e1:d5:7f:ac:46: 42:50:b3:08:df:8a:56:48:71:e8:94:31:5d:2c:19:b6:e2:90: 3c:73:b9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJ/7//W9hcydFhsrjJulzPtXZ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA5MTcwMTU2MDBaFw0yNjA5MTgwNDQyMDBaMDMxMTAvBgNV BAMTKDNEMEJDQjFENzZCOTdGNjgxMDk2QzY2NjlFODZBREFCOTEzMUUzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9u0vPVw2r8oQ3Gli80zd/avDE Z+MZ51Z+PcfPbec4AejNHn7QvpL9BkGUfJCc/oOK33sYprsycU33aog2wMc0VZhG UENOmtateS3AIhl6vIIKXxjJWaKnaG1cQj2iQtzU5PiJf27CY7TtretUsELWqN98 pJEd9uptA1ZSI7Q4wxe9XaARZHrV2UIgUGW9KEyht/tZ+0Hj+hAND1LIL1h02AEy NsEB3fy5P+rsujNRTMi8OaBjA4uYi9RUUGdaepyzSefLbsp0SIuCa6OFuGaBcq1A P2Q2Kq90rbn8LKsP46dBCuQOyBoZXRjszrIZJbixH3/7gYw0PkhM1TcecJ6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQvLHXa5f2gQlsZmnoatq5Ex4/QwHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO5SrC3C0ZMDheAMWeCp/A6BJfiYszWivkC Mk/XmA3+fvaCArjcZTE4jJNgL7/6AnFMDF4zJqqGzFne0S6S+A23YrJrnaB02yS9 wOXD20QZm5n18UTKsyB3qYARMN05j8bRdEn/tpU7Kd+lbBkmqrygMmuDjOOwpbj3 y5+cir4NsWl3PQQcvQ5astFBdWKeIsy9F2myYonAw/pr59aMEOK3Rg2+gVKOAP75 r6kRZkyWb3VeTg7Ia+nlJXDu9FlCnOjPc3mgtatvi6nQRi/nE4Tta//clvMUVObH zZ4tbiPJy7Bn0gbh1X+sRkJQswjfilZIceiUMV0sGbbikDxzueY= -----END CERTIFICATE-----Generated at Thu Sep 17 06:37:05 2026 by rpki-client