$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft File: 0364E5E1741E1D920A287362374F4F8FC981377D.mft (raw, json) Hash identifier: ggxJh6pmWJYc6/YxV2F8Dthe40Wk8kFSSbBtKZWHobs= Subject key identifier: B9:93:FD:23:BF:1E:E9:93:73:B7:CD:CD:FA:2E:07:3E:6B:8E:6D:86 Authority key identifier: 03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D Certificate issuer: /CN=0364E5E1741E1D920A287362374F4F8FC981377D Certificate serial: 6707080CB0C7E8D723EE4E5625DA3271D499AE54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:32:50 +0000 Manifest this update: Thu 17 Sep 2026 07:27:50 +0000 Manifest next update: Fri 18 Sep 2026 09:32:50 +0000 Files and hashes: 1: 0364E5E1741E1D920A287362374F4F8FC981377D.crl (hash: PzATuD+PhXIijNJ7FGelGPwVXWfhEtgjh1ezqpkSUs8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:07:08:0c:b0:c7:e8:d7:23:ee:4e:56:25:da:32:71:d4:99:ae:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0364E5E1741E1D920A287362374F4F8FC981377D Validity Not Before: Sep 17 07:27:50 2026 GMT Not After : Sep 18 09:32:50 2026 GMT Subject: CN=B993FD23BF1EE99373B7CDCDFA2E073E6B8E6D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:79:16:7d:63:95:16:5a:05:24:18:12:9f: ed:f3:1b:28:d3:7a:b0:e1:79:ca:77:74:9f:ae:56: 92:e2:b7:2d:63:94:64:5b:d4:c9:e5:18:2c:ca:ce: 46:46:dc:d7:ca:2c:63:9c:4f:8b:e1:f5:50:0a:56: 10:44:61:45:c8:4c:06:a3:a9:dc:43:58:c6:b6:28: 83:5a:42:94:01:c7:12:e5:b4:6a:3b:9a:86:52:6f: e4:cd:fd:37:4c:a7:75:cd:12:9d:01:6a:2d:ba:44: b1:61:e7:4d:d8:28:36:05:4f:04:84:56:79:3e:1a: 0b:55:4d:57:11:59:6a:34:f9:9b:be:37:ea:b0:5b: 72:72:41:00:82:14:37:86:99:e0:bd:57:dd:1f:39: c6:bd:19:9b:9f:81:74:7c:03:73:cc:d1:7a:9e:74: 59:cb:9f:32:9f:72:84:68:92:b9:85:63:74:4f:03: ba:9d:46:0b:ba:22:a9:c3:79:7e:dd:61:09:b8:ef: a9:fc:b2:cf:d6:46:f6:da:68:a1:83:43:18:d9:04: 58:3e:33:10:0e:11:f3:67:8a:a6:d2:71:76:3d:32: 1f:f2:9f:8b:24:88:78:60:96:13:43:dd:73:cc:1c: 8f:b2:3f:ac:e7:e2:d1:4d:ba:da:db:6a:98:af:23: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:FD:23:BF:1E:E9:93:73:B7:CD:CD:FA:2E:07:3E:6B:8E:6D:86 X509v3 Authority Key Identifier: keyid:03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d4:58:e0:ef:7b:b8:fc:c4:70:68:17:e9:d0:5d:51:ca:87: ad:5f:1a:7d:0c:2a:b5:ef:d1:b3:87:66:d3:4a:41:b7:80:ea: 75:fa:8c:e8:f8:75:31:e0:1a:91:fa:72:6c:cc:9a:0a:32:69: b0:a9:1f:fd:a6:57:67:96:a0:71:88:c5:9f:10:14:83:65:4d: 35:8b:a6:76:31:e8:86:48:97:53:58:b6:cb:dc:f5:da:8b:2d: 76:0a:dd:dc:55:f0:47:6b:8a:69:79:dc:43:f0:18:ce:d2:a3: f2:77:b4:ab:88:65:db:d5:04:e7:63:0a:e8:d5:d7:6c:e7:8d: 3c:0d:64:f7:eb:1a:f5:36:ea:da:29:ee:09:96:0e:78:09:41: 33:2f:70:e0:51:63:0d:1f:e5:52:d2:52:cf:db:bc:a9:60:9c: 72:56:64:58:1a:d1:00:a9:66:46:fd:37:75:c6:b8:81:40:bb: 83:eb:7d:a8:63:9c:36:ae:93:d9:9f:d7:4f:a1:5a:5d:2d:98: 98:89:44:09:0c:a6:24:b2:61:d1:64:db:6a:00:86:5b:b3:f3: 90:24:6a:55:3a:d8:eb:36:ac:57:5b:de:7a:0d:d7:16:93:e9: 75:04:6c:58:46:89:c8:c7:64:61:f2:91:a2:73:d7:8d:69:4f: d1:d0:cb:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwcIDLDH6Ncj7k5WJdoycdSZrlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZD OTgxMzc3RDAeFw0yNjA5MTcwNzI3NTBaFw0yNjA5MTgwOTMyNTBaMDMxMTAvBgNV BAMTKEI5OTNGRDIzQkYxRUU5OTM3M0I3Q0RDREZBMkUwNzNFNkI4RTZEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAHkWfWOVFloFJBgSn+3zGyjT erDhecp3dJ+uVpLity1jlGRb1MnlGCzKzkZG3NfKLGOcT4vh9VAKVhBEYUXITAaj qdxDWMa2KINaQpQBxxLltGo7moZSb+TN/TdMp3XNEp0Bai26RLFh503YKDYFTwSE Vnk+GgtVTVcRWWo0+Zu+N+qwW3JyQQCCFDeGmeC9V90fOca9GZufgXR8A3PM0Xqe dFnLnzKfcoRokrmFY3RPA7qdRgu6IqnDeX7dYQm476n8ss/WRvbaaKGDQxjZBFg+ MxAOEfNniqbScXY9Mh/yn4skiHhglhND3XPMHI+yP6zn4tFNutrbapivIzDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZP9I78e6ZNzt83N+i4HPmuObYYwHwYDVR0j BBgwFoAUA2Tl4XQeHZIKKHNiN09Pj8mBN30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhkYjczNzUtMTJkMS00OTM1LWJlZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3 NDFFMUQ5MjBBMjg3MzYyMzc0RjRGOEZDOTgxMzc3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzY0RTVFMTc0MUUxRDkyMEEyODczNjIzNzRGNEY4RkM5ODEz NzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvMDM2NEU1RTE3NDFFMUQ5MjBBMjg3MzYyMzc0RjRG OEZDOTgxMzc3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTUWODve7j8xHBoF+nQXVHKh61fGn0MKrXv 0bOHZtNKQbeA6nX6jOj4dTHgGpH6cmzMmgoyabCpH/2mV2eWoHGIxZ8QFINlTTWL pnYx6IZIl1NYtsvc9dqLLXYK3dxV8Edriml53EPwGM7So/J3tKuIZdvVBOdjCujV 12znjTwNZPfrGvU26top7gmWDngJQTMvcOBRYw0f5VLSUs/bvKlgnHJWZFga0QCp Zkb9N3XGuIFAu4PrfahjnDauk9mf10+hWl0tmJiJRAkMpiSyYdFk22oAhluz85Ak alU62Os2rFdb3noN1xaT6XUEbFhGicjHZGHykaJz141pT9HQy1I= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:48 2026 by rpki-client