$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: 6vWVWV4KFSnjTXrNnIY6LlcXV1sXBkMjSTcVhTg14r4= Subject key identifier: 99:13:20:05:95:72:F2:4C:9A:AC:F4:9C:8D:98:7C:1A:16:9F:F5:41 Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 593C515BEB0C8237765E4367C1FC1F8B2051CD33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:32:53 +0000 Manifest this update: Thu 17 Sep 2026 07:27:53 +0000 Manifest next update: Fri 18 Sep 2026 10:07:53 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: BwXJSDfJj+TBUGFM/MdV5r8qxIR8+ZRZBBOyF5eB6zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3c:51:5b:eb:0c:82:37:76:5e:43:67:c1:fc:1f:8b:20:51:cd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: Sep 17 07:27:53 2026 GMT Not After : Sep 18 10:07:53 2026 GMT Subject: CN=991320059572F24C9AACF49C8D987C1A169FF541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:a8:0a:4c:df:74:95:d1:4f:55:ad:ff:4c: 45:f8:b1:5f:80:8b:80:a3:2c:45:e3:0d:2a:98:37: 74:29:c8:00:d6:83:e6:6c:ed:fb:d3:fb:ae:fd:28: 48:d5:dc:e8:f2:10:78:1a:c8:35:90:8d:e6:67:4c: 7b:fd:6a:e6:e8:c1:c2:21:96:a9:38:b8:f8:d0:0d: f0:4c:5d:7d:59:8c:52:aa:fa:f6:1e:35:46:a4:b4: 0c:e4:2d:5c:25:1e:81:29:df:90:7c:34:d0:81:2d: 40:05:9b:b4:e5:ed:22:54:33:b5:16:58:25:5b:cc: 0a:27:ba:72:5f:c6:3a:75:63:07:ad:7b:f4:02:8a: 97:3e:fa:a5:cb:42:18:55:1f:44:04:1b:89:e4:13: f9:58:2b:62:37:96:60:d1:a2:46:a4:ac:8e:61:3b: 83:84:40:c3:93:ba:2d:41:40:63:c7:a1:0d:3c:12: a6:ed:a1:9c:bc:59:12:65:45:6c:0e:7f:63:63:8b: ec:99:8f:ee:a0:39:ac:d2:08:bd:96:75:aa:59:8b: 7b:fe:92:ef:23:87:1a:ac:56:d2:72:8b:5a:2d:78: db:1b:20:25:48:6d:7e:84:da:cd:9d:85:7c:9c:66: c0:91:9b:db:0f:55:d6:20:a5:46:b1:a2:54:60:61: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:13:20:05:95:72:F2:4C:9A:AC:F4:9C:8D:98:7C:1A:16:9F:F5:41 X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d7:68:e1:e5:f4:81:ac:aa:18:73:db:17:8b:c4:6d:19:20: d9:0c:f2:2b:28:1e:b9:4e:16:52:c5:0b:e4:f9:37:ca:55:c8: 2a:53:05:aa:26:93:63:d2:77:77:ff:df:25:aa:18:55:8f:3d: 45:08:fb:32:eb:1b:21:27:86:df:81:ef:4f:0e:f3:3d:71:c6: e3:87:83:ce:15:04:99:d4:ad:da:64:17:d3:99:a5:b7:41:dc: 4b:6b:8d:94:20:c3:a5:cd:7b:0d:00:24:49:48:e6:e6:2a:6a: 62:dd:cd:2e:88:5e:07:67:b2:9a:a7:9d:14:d6:5a:95:d3:90: 6c:bb:80:80:dc:e3:a8:d7:39:84:77:87:b9:75:25:a3:8d:b4: c9:37:b7:23:b3:7b:01:fa:2a:3d:f8:5f:f4:cc:4a:62:99:2d: 01:49:cb:26:9b:89:88:a8:37:62:0e:81:a2:83:ae:45:89:e1: c3:0e:55:4f:56:af:8c:3b:ab:f2:fd:a6:05:64:14:74:8d:28: b8:97:78:e7:4d:17:93:ea:2a:13:31:0a:fd:e5:a6:7a:b0:a4: de:9f:bd:cb:e9:54:83:46:ee:f5:7e:0f:25:75:68:ad:c0:bb: 19:e4:87:6e:9a:7a:84:6a:29:67:6a:f5:9b:f6:16:42:0b:37: 1b:2b:95:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTxRW+sMgjd2XkNnwfwfiyBRzTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA5MTcwNzI3NTNaFw0yNjA5MTgxMDA3NTNaMDMxMTAvBgNV BAMTKDk5MTMyMDA1OTU3MkYyNEM5QUFDRjQ5QzhEOTg3QzFBMTY5RkY1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNagKTN90ldFPVa3/TEX4sV+A i4CjLEXjDSqYN3QpyADWg+Zs7fvT+679KEjV3OjyEHgayDWQjeZnTHv9aubowcIh lqk4uPjQDfBMXX1ZjFKq+vYeNUaktAzkLVwlHoEp35B8NNCBLUAFm7Tl7SJUM7UW WCVbzAonunJfxjp1Ywete/QCipc++qXLQhhVH0QEG4nkE/lYK2I3lmDRokakrI5h O4OEQMOTui1BQGPHoQ08EqbtoZy8WRJlRWwOf2Nji+yZj+6gOazSCL2WdapZi3v+ ku8jhxqsVtJyi1oteNsbICVIbX6E2s2dhXycZsCRm9sPVdYgpUaxolRgYZVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRMgBZVy8kyarPScjZh8Ghaf9UEwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjXaOHl9IGsqhhz2xeLxG0ZINkM8isoHrlO FlLFC+T5N8pVyCpTBaomk2PSd3f/3yWqGFWPPUUI+zLrGyEnht+B708O8z1xxuOH g84VBJnUrdpkF9OZpbdB3EtrjZQgw6XNew0AJElI5uYqamLdzS6IXgdnspqnnRTW WpXTkGy7gIDc46jXOYR3h7l1JaONtMk3tyOzewH6Kj34X/TMSmKZLQFJyyabiYio N2IOgaKDrkWJ4cMOVU9Wr4w7q/L9pgVkFHSNKLiXeOdNF5PqKhMxCv3lpnqwpN6f vcvpVING7vV+DyV1aK3Auxnkh26aeoRqKWdq9Zv2FkILNxsrlYs= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:51 2026 by rpki-client