$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: ssXh14zwlyOL2saijxIv+Bl1PZOhdfjEXyfUlSiczTY= Subject key identifier: D4:B7:7B:92:BC:FC:E6:A4:8F:CE:F1:BE:98:0F:0B:04:1F:96:F7:92 Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 56B8AA874BA035BDEF802AEE3D8FFE3FC1F6FCB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:42:22 +0000 Manifest this update: Wed 16 Sep 2026 18:37:22 +0000 Manifest next update: Thu 17 Sep 2026 19:10:22 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: 8iXsCydn24RtXBH6mW3Tiv8pAj6rwDiQZtdXNVnlBcg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b8:aa:87:4b:a0:35:bd:ef:80:2a:ee:3d:8f:fe:3f:c1:f6:fc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Sep 16 18:37:22 2026 GMT Not After : Sep 17 19:10:22 2026 GMT Subject: CN=D4B77B92BCFCE6A48FCEF1BE980F0B041F96F792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:99:2d:75:8c:73:79:ec:8b:40:b9:aa:be: 19:de:06:68:6e:0f:7d:2c:f2:8e:4b:42:f8:96:c6: d3:e8:d5:e4:f5:32:5a:0e:77:ad:d6:6e:6b:9f:73: da:4c:a9:9c:24:7b:c5:9b:18:58:1c:25:0a:10:1f: 66:64:56:7a:6b:2b:55:0d:2d:06:d5:bb:63:5c:c7: ee:c6:35:7c:cc:5e:9c:4a:74:b7:cb:d3:33:68:45: 66:31:6f:6f:84:03:37:9c:bd:15:bf:30:f3:05:8f: 0a:7b:7f:db:f4:2f:1c:39:ca:70:04:fc:a1:75:2c: db:02:59:49:15:05:34:e2:08:a6:73:ea:58:6e:d2: b2:b3:ac:81:cc:c0:b1:8e:f2:8f:b7:3b:c9:d1:a8: 65:1c:bc:fe:8d:ce:3e:0e:11:62:dc:c6:ad:2f:80: ab:f3:0a:3f:b3:b2:63:2d:cf:3c:6e:a7:50:de:74: 6b:d2:95:a1:64:53:b4:a3:67:c2:2f:aa:9a:76:51: 35:1c:91:46:91:36:33:5b:ac:6c:32:c1:04:40:98: f6:c7:a2:2f:ab:71:fe:c7:45:84:49:16:80:cb:bc: a7:18:bb:6c:e9:bb:47:fe:90:65:9a:fc:4d:fa:d1: ec:6e:83:45:ae:43:87:df:84:a0:09:20:52:41:88: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:7B:92:BC:FC:E6:A4:8F:CE:F1:BE:98:0F:0B:04:1F:96:F7:92 X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:70:e3:f7:3f:bd:41:dc:39:7a:78:22:7b:54:cb:98:43:26: 48:cd:c1:cb:5f:df:e2:30:ce:74:55:8c:91:d9:70:42:a7:2a: 35:62:29:e2:f4:d9:0e:67:e8:da:20:dd:86:ad:5d:e6:01:ca: d1:90:77:b2:91:27:21:d7:fb:c5:63:44:05:80:07:1c:01:7e: 17:b8:5a:8c:80:6d:85:8d:39:f6:64:09:bc:09:4f:ce:6e:3c: 78:b1:77:7c:a2:7c:ed:70:50:06:21:4f:6e:b9:22:99:a9:b7: fb:59:cf:03:74:c3:22:d5:87:29:1c:61:d3:45:40:86:20:a4: 9f:16:f1:9d:37:1f:90:7f:99:80:42:e9:aa:28:e3:1a:78:1e: 90:2a:ca:6a:db:86:0f:8c:26:f3:14:60:9b:99:85:e5:6b:4b: b2:33:c1:f4:35:62:44:10:81:93:37:47:90:b1:6b:29:68:d1: 24:1b:ea:11:44:da:f8:a2:02:3d:c8:8b:44:e5:bd:10:0f:25: 40:b5:59:ae:39:79:b8:6c:bf:22:85:6c:6d:17:af:d4:b3:fc: ca:95:71:c0:b6:df:29:10:c1:16:03:76:c7:6a:af:c8:f0:26: fd:41:bf:fc:54:94:a5:06:4d:65:d7:66:69:a5:de:e4:5a:e9: 43:91:3c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVriqh0ugNb3vgCruPY/+P8H2/LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA5MTYxODM3MjJaFw0yNjA5MTcxOTEwMjJaMDMxMTAvBgNV BAMTKEQ0Qjc3QjkyQkNGQ0U2QTQ4RkNFRjFCRTk4MEYwQjA0MUY5NkY3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+JktdYxzeeyLQLmqvhneBmhu D30s8o5LQviWxtPo1eT1MloOd63Wbmufc9pMqZwke8WbGFgcJQoQH2ZkVnprK1UN LQbVu2Ncx+7GNXzMXpxKdLfL0zNoRWYxb2+EAzecvRW/MPMFjwp7f9v0Lxw5ynAE /KF1LNsCWUkVBTTiCKZz6lhu0rKzrIHMwLGO8o+3O8nRqGUcvP6Nzj4OEWLcxq0v gKvzCj+zsmMtzzxup1DedGvSlaFkU7SjZ8Ivqpp2UTUckUaRNjNbrGwywQRAmPbH oi+rcf7HRYRJFoDLvKcYu2zpu0f+kGWa/E360exug0WuQ4ffhKAJIFJBiMNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Ld7krz85qSPzvG+mA8LBB+W95IwHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElw4/c/vUHcOXp4IntUy5hDJkjNwctf3+Iw znRVjJHZcEKnKjViKeL02Q5n6Nog3YatXeYBytGQd7KRJyHX+8VjRAWABxwBfhe4 WoyAbYWNOfZkCbwJT85uPHixd3yifO1wUAYhT265Ipmpt/tZzwN0wyLVhykcYdNF QIYgpJ8W8Z03H5B/mYBC6aoo4xp4HpAqymrbhg+MJvMUYJuZheVrS7IzwfQ1YkQQ gZM3R5Cxaylo0SQb6hFE2viiAj3Ii0TlvRAPJUC1Wa45ebhsvyKFbG0Xr9Sz/MqV ccC23ykQwRYDdsdqr8jwJv1Bv/xUlKUGTWXXZmml3uRa6UORPKc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:13:02 2026 by rpki-client