$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: jAUA+91KttjQdI5cAPhf8HX/BYfGIIdpK7Dpi3xT1Bg= Subject key identifier: 13:B6:43:36:3F:70:23:63:FE:43:A4:7F:8F:52:CC:B6:2E:4A:07:18 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 7CB3D9B9D874AA65C88C530C9078C5742BD1A996 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:10:02 +0000 Manifest this update: Thu 17 Sep 2026 01:05:02 +0000 Manifest next update: Fri 18 Sep 2026 02:18:02 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: MS88BpPkzpCf+oIfXI2HJ0w8XwPN3ZvjXmHVA3AtyIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b3:d9:b9:d8:74:aa:65:c8:8c:53:0c:90:78:c5:74:2b:d1:a9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Sep 17 01:05:02 2026 GMT Not After : Sep 18 02:18:02 2026 GMT Subject: CN=13B643363F702363FE43A47F8F52CCB62E4A0718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:d7:9d:e8:d2:35:4b:75:1d:d0:cb:38:92: 02:91:d8:2d:a3:2a:fb:ca:5b:d4:54:86:81:65:6f: f5:4c:77:da:fc:34:18:ff:fc:30:79:bf:67:39:8b: 8b:78:3a:17:16:72:3f:6b:ec:34:2f:50:67:7e:c4: 77:84:d8:0b:a9:30:bd:ae:ba:9e:46:1e:23:1e:03: 39:51:0f:92:a8:32:e0:0d:ac:bb:fc:68:95:1f:0a: 4a:00:9b:6a:5d:e3:49:b3:4e:ad:c9:5c:99:49:f4: fc:5b:35:0b:09:69:a1:b9:59:ba:5c:65:67:6b:6a: 4e:f7:36:7b:5f:98:67:5c:e5:ec:cd:2a:ec:38:ae: ce:7e:8e:87:49:8d:e6:44:bb:07:e3:2c:aa:ec:27: 88:41:78:05:94:f7:98:0f:ec:97:01:81:03:8f:f6: 88:0c:3a:72:24:ac:fb:f0:3b:03:74:21:69:e2:f9: ff:3f:8e:48:55:55:15:47:6e:5b:f6:55:c7:e1:95: b5:9f:96:72:53:4b:27:84:c9:f5:9b:98:92:90:c9: 8d:6a:72:df:4a:51:c7:b9:6e:4a:bf:47:a0:ea:16: 2b:ec:8e:a7:cf:60:b8:45:3d:e5:a3:db:b8:72:b2: 37:af:f6:76:cf:ea:57:75:ee:e1:29:1a:31:ef:26: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:43:36:3F:70:23:63:FE:43:A4:7F:8F:52:CC:B6:2E:4A:07:18 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ac:1f:53:a0:54:51:ec:01:3c:a9:15:b1:26:8f:c6:32:41: 45:34:3d:7e:24:2a:e9:69:8f:0a:93:5a:85:44:00:d0:74:53: c0:03:59:66:d7:e6:b8:e8:d0:89:c7:32:da:00:37:3f:06:8d: ca:16:61:94:f4:c0:2d:c1:74:81:be:79:a9:0c:f8:24:c5:ca: 89:0f:66:ed:9e:2b:46:7d:66:18:9c:69:4c:85:a6:52:93:c2: be:3e:63:23:8e:ac:33:c6:8e:85:c6:2b:39:ab:25:9c:d7:9f: 6d:95:86:f7:5b:a7:fd:9e:c5:cf:73:e5:6f:b3:17:c9:4c:9e: 11:6d:0a:71:56:76:1d:d3:1e:c7:d1:d8:e1:3d:a2:d5:39:d2: ff:f6:c9:47:c9:98:73:ff:62:55:ad:ff:4d:bb:c0:06:72:7e: 2d:eb:21:e2:79:74:b2:d6:31:d3:e6:8a:26:25:27:3b:b8:c5: 72:3f:dc:a4:70:4b:81:0e:89:6f:7a:58:81:9a:61:9b:eb:44: 6b:74:e1:16:f2:c1:8d:8c:5c:03:26:de:56:e7:06:f6:e9:51: 0e:b7:d4:84:3a:78:9d:d6:99:a8:03:55:f1:4f:d2:96:76:7c: fe:a3:d7:c8:73:31:28:fb:31:e8:a9:a6:a6:59:ef:70:3b:08: 23:3b:99:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLPZudh0qmXIjFMMkHjFdCvRqZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA5MTcwMTA1MDJaFw0yNjA5MTgwMjE4MDJaMDMxMTAvBgNV BAMTKDEzQjY0MzM2M0Y3MDIzNjNGRTQzQTQ3RjhGNTJDQ0I2MkU0QTA3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsNed6NI1S3Ud0Ms4kgKR2C2j KvvKW9RUhoFlb/VMd9r8NBj//DB5v2c5i4t4OhcWcj9r7DQvUGd+xHeE2AupML2u up5GHiMeAzlRD5KoMuANrLv8aJUfCkoAm2pd40mzTq3JXJlJ9PxbNQsJaaG5Wbpc ZWdrak73NntfmGdc5ezNKuw4rs5+jodJjeZEuwfjLKrsJ4hBeAWU95gP7JcBgQOP 9ogMOnIkrPvwOwN0IWni+f8/jkhVVRVHblv2VcfhlbWflnJTSyeEyfWbmJKQyY1q ct9KUce5bkq/R6DqFivsjqfPYLhFPeWj27hysjev9nbP6ld17uEpGjHvJpAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE7ZDNj9wI2P+Q6R/j1LMti5KBxgwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+sH1OgVFHsATypFbEmj8YyQUU0PX4kKulp jwqTWoVEANB0U8ADWWbX5rjo0InHMtoANz8GjcoWYZT0wC3BdIG+eakM+CTFyokP Zu2eK0Z9ZhicaUyFplKTwr4+YyOOrDPGjoXGKzmrJZzXn22Vhvdbp/2exc9z5W+z F8lMnhFtCnFWdh3THsfR2OE9otU50v/2yUfJmHP/YlWt/027wAZyfi3rIeJ5dLLW MdPmiiYlJzu4xXI/3KRwS4EOiW96WIGaYZvrRGt04RbywY2MXAMm3lbnBvbpUQ63 1IQ6eJ3WmagDVfFP0pZ2fP6j18hzMSj7MeippqZZ73A7CCM7mTY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:53:38 2026 by rpki-client