$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: 7FFy5tiZIWOLD3FOuJ6PhK6DAJNhFCY8AygEAlvA8o4= Subject key identifier: E1:D1:A0:BE:9B:92:1D:7C:C1:CD:C9:9E:65:FE:8D:E2:E7:12:CC:CD Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 3220696C422856727A58022261515E4E5C9AA30D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 13:41:02 +0000 Manifest this update: Wed 16 Sep 2026 13:36:02 +0000 Manifest next update: Thu 17 Sep 2026 15:33:02 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: 1ETsUF6YZFQdjZtfN+2NHBQd2UV17ughXgwRMc5Kmho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:20:69:6c:42:28:56:72:7a:58:02:22:61:51:5e:4e:5c:9a:a3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Sep 16 13:36:02 2026 GMT Not After : Sep 17 15:33:02 2026 GMT Subject: CN=E1D1A0BE9B921D7CC1CDC99E65FE8DE2E712CCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b2:76:b4:fe:72:dc:a1:b6:33:5b:2d:7b:d1: a5:17:d2:70:90:2c:e5:28:81:e1:d4:51:8a:41:ed: 6a:ce:89:f1:28:2e:df:ca:25:a6:69:29:36:d7:da: 82:a6:e0:9b:dc:91:a4:02:b9:3c:5d:5f:04:94:6e: 7d:18:83:78:67:c0:44:02:54:0c:e8:6d:6b:94:6b: 88:9e:53:27:37:1f:a4:a6:f2:e6:85:5a:06:61:ac: 2a:e3:ac:c0:54:aa:02:90:c8:b5:18:c8:e4:42:98: 47:ae:dd:96:71:07:58:02:ef:e4:be:f6:f9:46:da: f0:9b:ec:23:42:b9:bf:3a:41:c5:3b:d2:12:24:4d: 43:d1:44:07:4c:21:5f:2e:7f:3a:8d:af:c8:03:6c: 36:b2:6a:60:5b:d1:48:6f:9f:ff:94:e7:86:0b:a5: b6:65:60:a7:5b:31:dc:60:57:c4:ad:cb:86:13:07: eb:cc:89:75:be:27:5d:24:68:63:4f:5c:63:66:88: 56:9f:ee:9a:6b:8a:98:10:5e:39:a6:2a:89:77:f2: 27:22:dc:c1:3c:e4:8e:82:ab:cc:68:db:ac:16:4d: 6c:0e:90:a4:ae:88:e6:26:01:91:ba:2d:85:17:78: d9:c8:e6:eb:29:f8:ef:53:60:86:cf:a3:94:c2:57: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:A0:BE:9B:92:1D:7C:C1:CD:C9:9E:65:FE:8D:E2:E7:12:CC:CD X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:87:a4:c1:84:db:3b:02:1b:fd:ac:8b:9a:4f:ea:17:a8: ad:76:f3:fe:b6:61:c4:65:a0:48:a9:63:75:08:65:1d:0d:32: 92:c2:bf:01:16:44:d9:a7:12:4f:6c:a1:0b:89:e9:56:9a:c9: 3b:f2:61:72:ab:9c:8e:e4:3d:16:47:d1:37:66:e6:9f:86:1b: 86:b9:47:54:fa:8a:fe:2d:ff:12:36:bd:98:bd:90:2d:8a:1d: b0:2c:fa:6b:78:66:a3:10:3c:75:00:af:78:bd:b5:22:c7:2f: 82:d4:97:ab:ee:6a:63:68:b9:42:2e:5a:b0:03:c1:2c:a0:36: fd:e3:a5:a0:dd:38:5d:dd:7b:60:17:cf:21:df:f5:94:47:99: f4:30:34:2b:81:83:29:fe:fb:43:43:bd:44:99:23:86:62:02: d6:4b:ff:3b:d9:98:ce:a4:ca:b8:86:e8:9c:88:97:11:5d:68: 7b:9a:b5:a9:de:00:c4:ff:78:9d:f8:3d:95:b1:31:f4:16:39: 9c:25:b0:c0:b5:db:38:e6:4f:ff:1a:de:79:84:b5:d7:f3:17: 0a:c3:f9:82:b0:dd:50:8f:00:d7:16:a3:1d:49:2e:50:f3:ca: 7a:e3:56:2c:22:83:1e:50:7c:0b:b3:eb:ad:ed:d8:4e:c2:5b: 16:1e:e2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiBpbEIoVnJ6WAIiYVFeTlyaow0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA5MTYxMzM2MDJaFw0yNjA5MTcxNTMzMDJaMDMxMTAvBgNV BAMTKEUxRDFBMEJFOUI5MjFEN0NDMUNEQzk5RTY1RkU4REUyRTcxMkNDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtsna0/nLcobYzWy170aUX0nCQ LOUogeHUUYpB7WrOifEoLt/KJaZpKTbX2oKm4JvckaQCuTxdXwSUbn0Yg3hnwEQC VAzobWuUa4ieUyc3H6Sm8uaFWgZhrCrjrMBUqgKQyLUYyORCmEeu3ZZxB1gC7+S+ 9vlG2vCb7CNCub86QcU70hIkTUPRRAdMIV8ufzqNr8gDbDayamBb0Uhvn/+U54YL pbZlYKdbMdxgV8Sty4YTB+vMiXW+J10kaGNPXGNmiFaf7ppripgQXjmmKol38ici 3ME85I6Cq8xo26wWTWwOkKSuiOYmAZG6LYUXeNnI5usp+O9TYIbPo5TCV7T9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dGgvpuSHXzBzcmeZf6N4ucSzM0wHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFHh6TBhNs7Ahv9rIuaT+oXqK128/62YcRl oEipY3UIZR0NMpLCvwEWRNmnEk9soQuJ6VaayTvyYXKrnI7kPRZH0Tdm5p+GG4a5 R1T6iv4t/xI2vZi9kC2KHbAs+mt4ZqMQPHUAr3i9tSLHL4LUl6vuamNouUIuWrAD wSygNv3jpaDdOF3de2AXzyHf9ZRHmfQwNCuBgyn++0NDvUSZI4ZiAtZL/zvZmM6k yriG6JyIlxFdaHuataneAMT/eJ34PZWxMfQWOZwlsMC12zjmT/8a3nmEtdfzFwrD +YKw3VCPANcWox1JLlDzynrjViwigx5QfAuz663t2E7CWxYe4mI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:27:31 2026 by rpki-client