$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: qaz2kAsAsq1seEgaJtIdVEjvTMqyV5pITbCab+ahedA= Subject key identifier: 09:75:0C:76:C8:D1:92:C4:67:58:C4:24:5C:F0:81:18:6B:F3:56:A0 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 7DD1D4B936ACBA0587780391D56F4A4771F248C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:57:17 +0000 Manifest this update: Wed 16 Sep 2026 22:52:17 +0000 Manifest next update: Fri 18 Sep 2026 01:26:17 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: dGiBcMkcXqJgHUzPtxD3SSosQxDw6EtyztYea2dPchY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d1:d4:b9:36:ac:ba:05:87:78:03:91:d5:6f:4a:47:71:f2:48:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Sep 16 22:52:17 2026 GMT Not After : Sep 18 01:26:17 2026 GMT Subject: CN=09750C76C8D192C46758C4245CF081186BF356A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:0d:df:b9:fe:ad:52:a8:5a:fa:83:fd:b1: bf:b2:bb:cf:e6:dd:1d:f9:26:bd:93:bd:4a:60:93: 03:31:38:5a:81:41:bd:f7:4d:0e:71:c0:83:50:f0: 51:e2:50:37:8d:3a:6f:8d:9a:12:91:58:c5:6b:5e: 9d:a3:ae:6d:96:08:0d:30:56:09:93:61:33:e2:52: 5e:6d:70:01:8d:01:a9:4b:40:f5:cc:e1:37:cb:7c: f1:f9:b5:96:64:ad:f2:3f:9d:97:57:82:bd:df:4e: f2:f7:0a:31:cf:30:74:37:59:41:1d:f2:d2:80:f9: d2:ff:90:d7:c6:1d:0a:ab:29:7b:3f:04:17:44:c3: 82:70:48:93:9e:b1:ea:aa:3c:d0:c5:b0:b3:5a:ec: 55:06:3f:73:ef:df:92:4e:c5:59:78:3f:a1:22:81: eb:30:cc:e8:b9:f4:ad:2f:6b:d0:d7:b5:a9:c5:ad: ab:09:82:75:bb:1d:25:f0:15:dc:49:27:7c:5a:5a: ac:19:1d:1c:ec:e3:28:83:1d:78:3c:1f:9d:b3:0c: 40:95:e0:4a:cd:be:81:40:8f:42:65:ba:af:65:a8: 79:ad:1b:24:05:b6:1d:e2:e7:aa:cb:15:9c:3d:95: 70:e2:ea:6d:12:59:17:bf:aa:d4:23:85:49:75:a0: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:75:0C:76:C8:D1:92:C4:67:58:C4:24:5C:F0:81:18:6B:F3:56:A0 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d2:94:27:cd:65:0c:b7:ac:d8:46:75:60:a7:1a:bd:20:70: 04:9a:ac:da:16:11:86:f6:83:69:26:77:51:2f:3a:87:ad:b1: 55:30:72:fe:19:b4:db:d8:03:3b:ae:ae:c5:fa:40:ec:19:f9: 3b:ef:e7:1e:f5:23:19:b8:9c:e9:a6:c0:32:c4:53:e5:82:36: 70:b7:c0:9a:e5:40:fc:0e:7c:57:18:06:1f:64:84:96:5f:cd: b4:f2:b8:bc:71:b3:13:93:f7:7f:5b:d9:16:44:6f:08:2f:71: 22:30:93:1f:01:95:f8:95:cc:15:9d:05:74:53:b8:61:28:92: 2a:cd:70:de:1d:50:f1:2e:6a:8d:71:c8:77:7b:6f:c4:c4:af: d5:21:e3:1c:29:27:49:3e:79:d2:71:78:3b:33:6f:12:b6:61: 15:aa:76:eb:7a:a6:20:07:71:d0:d5:c2:62:c7:1c:db:41:53: 9b:91:a0:1d:f7:f3:ab:35:18:21:cb:a5:79:96:ed:53:3a:ac: f7:c3:8b:d1:bc:b0:2b:da:a3:04:ce:49:22:80:1d:6c:bb:b8: 24:36:f9:c6:31:ac:1d:a4:02:7a:3b:74:93:73:9c:45:21:10: 2b:ce:ce:57:60:e2:bc:c4:d4:81:2f:bc:6d:90:3e:84:51:8b: 06:c5:71:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdHUuTasugWHeAOR1W9KR3HySMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA5MTYyMjUyMTdaFw0yNjA5MTgwMTI2MTdaMDMxMTAvBgNV BAMTKDA5NzUwQzc2QzhEMTkyQzQ2NzU4QzQyNDVDRjA4MTE4NkJGMzU2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPw3fuf6tUqha+oP9sb+yu8/m 3R35Jr2TvUpgkwMxOFqBQb33TQ5xwINQ8FHiUDeNOm+NmhKRWMVrXp2jrm2WCA0w VgmTYTPiUl5tcAGNAalLQPXM4TfLfPH5tZZkrfI/nZdXgr3fTvL3CjHPMHQ3WUEd 8tKA+dL/kNfGHQqrKXs/BBdEw4JwSJOeseqqPNDFsLNa7FUGP3Pv35JOxVl4P6Ei geswzOi59K0va9DXtanFrasJgnW7HSXwFdxJJ3xaWqwZHRzs4yiDHXg8H52zDECV 4ErNvoFAj0Jluq9lqHmtGyQFth3i56rLFZw9lXDi6m0SWRe/qtQjhUl1oMlrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXUMdsjRksRnWMQkXPCBGGvzVqAwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7SlCfNZQy3rNhGdWCnGr0gcASarNoWEYb2 g2kmd1EvOoetsVUwcv4ZtNvYAzuursX6QOwZ+Tvv5x71Ixm4nOmmwDLEU+WCNnC3 wJrlQPwOfFcYBh9khJZfzbTyuLxxsxOT939b2RZEbwgvcSIwkx8BlfiVzBWdBXRT uGEokirNcN4dUPEuao1xyHd7b8TEr9Uh4xwpJ0k+edJxeDszbxK2YRWqdut6piAH cdDVwmLHHNtBU5uRoB3386s1GCHLpXmW7VM6rPfDi9G8sCvaowTOSSKAHWy7uCQ2 +cYxrB2kAno7dJNznEUhECvOzldg4rzE1IEvvG2QPoRRiwbFcfI= -----END CERTIFICATE-----Generated at Thu Sep 17 15:51:51 2026 by rpki-client