$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft File: 947970103FC7D5D4259EE8037681B9B77A2850FE.mft (raw, json) Hash identifier: f+cjJFYEo67gvS7uX/XtNrzPUOnKgiWHJ4+2rVjDTQ0= Subject key identifier: B6:69:E2:20:A0:53:85:7E:9D:D3:BD:89:9F:9F:25:FE:28:15:21:01 Authority key identifier: 94:79:70:10:3F:C7:D5:D4:25:9E:E8:03:76:81:B9:B7:7A:28:50:FE Certificate issuer: /CN=947970103FC7D5D4259EE8037681B9B77A2850FE Certificate serial: 22F142EC99617C38F5A0B6FF5F3C6CACF46BB66E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/947970103FC7D5D4259EE8037681B9B77A2850FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft Manifest number: 1B Signing time: Tue 13 Oct 2026 14:54:31 +0000 Manifest this update: Tue 13 Oct 2026 14:49:31 +0000 Manifest next update: Wed 14 Oct 2026 18:32:31 +0000 Files and hashes: 1: 947970103FC7D5D4259EE8037681B9B77A2850FE.crl (hash: WGBSR9MNq/6z3cRH+e4MZ5RODxoo+3hpkJ5Nj0MvWS4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.crl rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/947970103FC7D5D4259EE8037681B9B77A2850FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 18:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f1:42:ec:99:61:7c:38:f5:a0:b6:ff:5f:3c:6c:ac:f4:6b:b6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947970103FC7D5D4259EE8037681B9B77A2850FE Validity Not Before: Oct 13 14:49:31 2026 GMT Not After : Oct 14 18:32:31 2026 GMT Subject: CN=B669E220A053857E9DD3BD899F9F25FE28152101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:21:e0:cb:e0:93:8d:c9:0c:40:5b:bc:60: f1:cc:85:a7:dc:7b:d9:3d:3f:11:d8:28:a4:09:5c: b4:57:ac:08:e2:e9:c5:42:1e:16:a8:de:4b:6e:99: 9d:37:ab:39:6e:09:f8:69:68:3c:a9:d8:af:91:13: ce:e1:23:e3:fc:94:5d:59:0e:6b:10:02:3e:a6:20: 97:4d:96:54:83:94:36:68:5e:a0:32:61:a7:4c:5a: cb:d4:1f:cd:27:fc:61:fc:9b:74:99:29:86:5d:08: 6c:97:2d:fc:04:10:f8:bc:1e:5b:f7:44:57:ff:a8: 53:68:eb:3e:39:66:31:4e:39:80:7d:b7:5e:08:1d: 82:2c:2d:28:20:19:2d:4e:54:77:d7:49:71:4f:31: 04:1f:81:7f:a8:5e:53:f7:05:9e:c3:f3:c0:0e:af: 01:86:d9:1d:ce:d1:03:6f:a7:fb:08:37:06:af:de: 14:5a:1a:72:03:02:57:1e:8e:15:7d:a6:b6:0a:84: 81:d1:00:e0:3a:73:cf:21:ff:9b:b7:06:a5:9d:ac: 75:65:92:0c:15:db:de:a3:d5:49:80:b6:88:30:a2: d2:91:a1:2b:d9:3f:43:79:39:c9:f3:f6:f5:dd:9c: 05:aa:a2:9e:1f:d1:b8:0c:43:84:ea:44:17:12:0d: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:69:E2:20:A0:53:85:7E:9D:D3:BD:89:9F:9F:25:FE:28:15:21:01 X509v3 Authority Key Identifier: keyid:94:79:70:10:3F:C7:D5:D4:25:9E:E8:03:76:81:B9:B7:7A:28:50:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/947970103FC7D5D4259EE8037681B9B77A2850FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb7d27-6b6c-45ac-b37d-49ff95d3fcc8/0/947970103FC7D5D4259EE8037681B9B77A2850FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:75:c4:58:b5:7f:6f:5e:c7:f0:77:ac:0a:74:85:0a:77:a2: b7:47:cc:64:24:eb:27:e2:ba:d6:77:0a:0c:5e:ab:e2:2c:35: 36:b6:5e:e0:bc:fd:04:0c:41:52:1c:ea:5e:14:6e:32:64:b9: be:b4:85:db:28:ad:0a:66:25:7e:f8:d8:9c:c4:16:9f:f9:d5: ac:6e:97:8e:4d:2a:4a:78:ea:e1:11:0c:4b:f9:d7:87:eb:c0: 4a:3b:a5:c9:db:2c:c1:17:d3:2a:59:dd:a8:fd:25:91:74:c9: bd:40:8b:9a:66:23:71:ef:d7:be:9f:1b:02:b9:34:95:67:ce: 18:cb:97:30:13:36:d8:c8:22:de:6a:58:a4:e8:40:69:0a:c9: 26:e7:26:16:f1:3c:81:de:b3:8a:0c:c5:ed:36:85:74:ff:a3: 99:97:e1:95:21:1d:87:31:07:64:1e:d3:ef:cf:c2:63:f3:49: 13:6d:a0:90:f5:4b:7f:fd:06:9b:28:42:da:21:02:72:1e:1e: 93:bd:f0:39:5d:a6:09:26:7a:1b:fb:8e:d8:09:64:07:09:ea: ce:82:2b:6d:97:d8:51:44:59:86:75:e4:e6:d8:10:35:9d:0a: 2f:2a:9f:16:6e:92:07:b0:87:0a:12:77:68:9d:5b:01:42:0f: e5:9c:0c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvFC7JlhfDj1oLb/XzxsrPRrtm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OTcwMTAzRkM3RDVENDI1OUVFODAzNzY4MUI5Qjc3 QTI4NTBGRTAeFw0yNjEwMTMxNDQ5MzFaFw0yNjEwMTQxODMyMzFaMDMxMTAvBgNV BAMTKEI2NjlFMjIwQTA1Mzg1N0U5REQzQkQ4OTlGOUYyNUZFMjgxNTIxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3iHgy+CTjckMQFu8YPHMhafc e9k9PxHYKKQJXLRXrAji6cVCHhao3ktumZ03qzluCfhpaDyp2K+RE87hI+P8lF1Z DmsQAj6mIJdNllSDlDZoXqAyYadMWsvUH80n/GH8m3SZKYZdCGyXLfwEEPi8Hlv3 RFf/qFNo6z45ZjFOOYB9t14IHYIsLSggGS1OVHfXSXFPMQQfgX+oXlP3BZ7D88AO rwGG2R3O0QNvp/sINwav3hRaGnIDAlcejhV9prYKhIHRAOA6c88h/5u3BqWdrHVl kgwV296j1UmAtogwotKRoSvZP0N5Ocnz9vXdnAWqop4f0bgMQ4TqRBcSDcetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmniIKBThX6d072Jn58l/igVIQEwHwYDVR0j BBgwFoAUlHlwED/H1dQlnugDdoG5t3ooUP4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjdkMjctNmI2Yy00NWFjLWIzN2QtNDlmZjk1ZDNmY2M4LzAvOTQ3OTcwMTAz RkM3RDVENDI1OUVFODAzNzY4MUI5Qjc3QTI4NTBGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy85NDc5NzAxMDNGQzdENUQ0MjU5RUU4MDM3NjgxQjlCNzdBMjg1 MEZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjdkMjctNmI2Yy00NWFjLWIz N2QtNDlmZjk1ZDNmY2M4LzAvOTQ3OTcwMTAzRkM3RDVENDI1OUVFODAzNzY4MUI5 Qjc3QTI4NTBGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd1xFi1f29ex/B3rAp0hQp3ordHzGQk6yfi utZ3Cgxeq+IsNTa2XuC8/QQMQVIc6l4UbjJkub60hdsorQpmJX742JzEFp/51axu l45NKkp46uERDEv514frwEo7pcnbLMEX0ypZ3aj9JZF0yb1Ai5pmI3Hv176fGwK5 NJVnzhjLlzATNtjIIt5qWKToQGkKySbnJhbxPIHes4oMxe02hXT/o5mX4ZUhHYcx B2Qe0+/PwmPzSRNtoJD1S3/9BpsoQtohAnIeHpO98Dldpgkmehv7jtgJZAcJ6s6C K22X2FFEWYZ15ObYEDWdCi8qnxZukgewhwoSd2idWwFCD+WcDCA= -----END CERTIFICATE-----Generated at Wed Oct 14 08:47:52 2026 by rpki-client