$ rpki-client -vvvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: aO0GmOWEZGPk8YOQ8yjG/8KOGrsCajrTgv/+nEYGaq0= Subject key identifier: 1E:44:A1:36:DD:39:E1:B1:5E:DD:B9:38:9D:2C:69:6F:1A:A7:F5:2B Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 052E767953C1314886193A4676FF16127FFBE916 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 13:09:53 +0000 Manifest this update: Thu 17 Sep 2026 13:04:53 +0000 Manifest next update: Fri 18 Sep 2026 13:10:53 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: jZCU3HiXt6mZ1gCep1sH7ss2bOtZCjSrHzkaPxlX93k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2e:76:79:53:c1:31:48:86:19:3a:46:76:ff:16:12:7f:fb:e9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Sep 17 13:04:53 2026 GMT Not After : Sep 18 13:10:53 2026 GMT Subject: CN=1E44A136DD39E1B15EDDB9389D2C696F1AA7F52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:c3:e8:bc:a1:6e:a0:98:0a:59:27:fc:60: d4:a4:75:f3:b7:d9:66:8e:2e:b7:b6:a9:25:55:b0: b1:ff:f1:a0:5c:f1:dc:2e:bc:e6:2b:ae:0e:4d:6e: 6e:12:51:8f:3b:48:7e:3a:f3:9b:8f:ea:03:bf:75: d5:ad:c2:e3:22:28:d7:fb:d4:1c:67:5b:0e:3d:68: 35:0e:b9:2c:7f:04:be:c3:46:f2:7a:34:7a:ef:c7: 02:ad:f9:fc:9c:b0:9f:8d:e1:5e:70:25:87:c3:e6: 1a:fd:52:80:0d:79:31:3a:5e:e0:ad:6c:57:73:ca: 94:87:79:8f:34:0c:f2:34:36:db:84:f8:cd:c3:18: c7:1c:e1:ac:56:5d:cc:27:73:00:b3:25:79:9b:46: 3e:22:e8:e8:d8:f4:3f:4d:1d:75:7e:ff:09:ab:51: 24:fb:6c:38:89:ba:e2:6e:2c:f9:31:57:9b:0f:3c: 03:20:3d:b0:92:15:f1:5d:e0:ca:f5:40:1d:3e:29: 69:a1:42:9c:f6:83:aa:d2:23:0d:6e:c1:cd:e5:ee: 80:a7:88:86:3d:82:24:0b:0e:ef:cd:ca:d4:1a:b6: 64:03:a5:02:8b:71:8a:dc:29:9d:4e:a7:0e:5e:9d: 7f:db:d3:59:69:a0:3e:b6:b4:26:f4:0e:f9:83:7d: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:A1:36:DD:39:E1:B1:5E:DD:B9:38:9D:2C:69:6F:1A:A7:F5:2B X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b1:38:7d:84:82:4a:c8:c1:0d:aa:ed:51:fd:ee:45:3e:2f: a4:3a:a1:00:b1:ac:65:ba:ca:e8:33:b3:ea:c9:7e:0d:1c:f6: 3d:5d:10:1e:02:87:83:cd:06:9a:ce:a6:bf:1d:37:5b:27:6b: 78:89:40:e9:2b:85:85:15:0f:a7:9f:68:54:36:2f:39:21:07: 91:aa:54:af:aa:14:af:36:6c:53:c4:73:c0:96:38:cd:18:12: a5:44:74:3c:61:65:37:15:95:3e:df:8b:46:53:75:ec:16:7d: 12:69:51:56:5d:e8:1f:6a:ec:56:7c:2b:8b:8c:ab:db:08:64: d6:79:89:af:c5:86:fa:ca:96:75:c3:c2:3c:2b:dd:12:44:c7: b7:d8:80:b3:27:d7:9a:dc:64:f2:99:49:47:31:b2:b9:56:5c: dc:df:33:36:a3:d0:3b:b5:08:8e:d0:2a:91:4b:0a:b9:04:ed: 63:1d:1e:68:ee:b1:83:52:ad:a8:2e:63:e6:24:dc:9f:e2:36: fe:c4:d6:0a:7e:80:f7:6c:ef:1d:3d:7f:06:34:0e:b3:e8:a5: c9:87:94:27:db:2b:ba:eb:21:fb:ce:26:73:a8:7e:e1:79:c5: 5f:de:de:5a:0a:6a:05:77:aa:68:70:8b:da:c7:1f:ce:60:b5: d9:da:41:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBS52eVPBMUiGGTpGdv8WEn/76RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA5MTcxMzA0NTNaFw0yNjA5MTgxMzEwNTNaMDMxMTAvBgNV BAMTKDFFNDRBMTM2REQzOUUxQjE1RUREQjkzODlEMkM2OTZGMUFBN0Y1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zcPovKFuoJgKWSf8YNSkdfO3 2WaOLre2qSVVsLH/8aBc8dwuvOYrrg5Nbm4SUY87SH4685uP6gO/ddWtwuMiKNf7 1BxnWw49aDUOuSx/BL7DRvJ6NHrvxwKt+fycsJ+N4V5wJYfD5hr9UoANeTE6XuCt bFdzypSHeY80DPI0NtuE+M3DGMcc4axWXcwncwCzJXmbRj4i6OjY9D9NHXV+/wmr UST7bDiJuuJuLPkxV5sPPAMgPbCSFfFd4Mr1QB0+KWmhQpz2g6rSIw1uwc3l7oCn iIY9giQLDu/NytQatmQDpQKLcYrcKZ1Opw5enX/b01lpoD62tCb0DvmDfdjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkShNt054bFe3bk4nSxpbxqn9SswHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSxOH2EgkrIwQ2q7VH97kU+L6Q6oQCxrGW6 yugzs+rJfg0c9j1dEB4Ch4PNBprOpr8dN1sna3iJQOkrhYUVD6efaFQ2LzkhB5Gq VK+qFK82bFPEc8CWOM0YEqVEdDxhZTcVlT7fi0ZTdewWfRJpUVZd6B9q7FZ8K4uM q9sIZNZ5ia/FhvrKlnXDwjwr3RJEx7fYgLMn15rcZPKZSUcxsrlWXNzfMzaj0Du1 CI7QKpFLCrkE7WMdHmjusYNSraguY+Yk3J/iNv7E1gp+gPds7x09fwY0DrPopcmH lCfbK7rrIfvOJnOofuF5xV/e3loKagV3qmhwi9rHH85gtdnaQYE= -----END CERTIFICATE-----Generated at Thu Sep 17 15:52:13 2026 by rpki-client