$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: 46kKkqi1SQ6od/yLfwh4ktTUPhr1uW1uB6MHX/DIM8s= Subject key identifier: 79:77:B1:88:EE:AD:03:60:0F:49:45:98:63:5A:47:2F:74:3C:B4:D8 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 767FC8FE6E3B4D9DCB849C60E5EA262814BB3C7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:08:40 +0000 Manifest this update: Thu 17 Sep 2026 04:03:40 +0000 Manifest next update: Fri 18 Sep 2026 04:56:40 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: 8FTKFP/f5ieAjvaTjMBp2JmrXXBb7l+P/wNEWXufijA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7f:c8:fe:6e:3b:4d:9d:cb:84:9c:60:e5:ea:26:28:14:bb:3c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Sep 17 04:03:40 2026 GMT Not After : Sep 18 04:56:40 2026 GMT Subject: CN=7977B188EEAD03600F494598635A472F743CB4D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:44:28:fc:42:5f:c4:7c:3e:9b:3a:67:c8: 72:1b:2c:3a:fe:95:84:38:cb:ac:73:34:1a:9d:0d: ae:f1:e3:72:e1:d0:c1:b2:60:12:0a:f3:02:41:29: b4:8e:3d:4f:64:54:62:fd:a3:5f:b4:1c:b7:03:80: 16:2a:85:4a:ec:e8:f9:ed:02:fd:df:ef:97:3c:6c: b0:d2:74:79:39:7b:60:7c:0b:30:ec:46:79:66:9f: ab:66:97:cf:82:45:72:c3:19:a2:f7:44:00:1f:5a: 7e:a1:8c:db:ef:fc:54:20:c2:c6:a3:b9:41:3b:7e: c3:7f:51:d2:b5:fc:bb:3d:82:dc:d9:67:a7:c5:05: f3:1a:32:ab:e7:10:75:f4:ea:67:6d:bf:b7:64:79: 7b:7c:e7:52:b6:10:97:9f:03:b3:c7:82:5b:41:ee: 91:32:d8:27:f7:ba:f9:e6:c0:44:8c:7e:e2:b2:31: a0:26:e6:eb:f3:74:c9:d2:1d:e0:45:02:4f:07:4d: 9a:81:8f:4d:7d:ca:29:bc:bc:91:1a:e0:3c:3b:b0: 26:37:74:b0:8d:fd:ce:ea:92:49:a8:35:98:fe:7e: a2:81:7a:86:2e:b5:77:ad:0a:b4:3b:2b:3d:eb:4a: 92:f2:bc:91:d2:ea:d9:cb:06:23:0f:26:af:a3:f8: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:77:B1:88:EE:AD:03:60:0F:49:45:98:63:5A:47:2F:74:3C:B4:D8 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f0:30:f8:b6:45:6b:f5:7b:bf:2a:7c:c1:ef:e9:63:30:22: fc:4c:88:47:77:e2:b2:9e:2e:ca:48:4c:1a:40:02:d1:e2:0a: 4f:06:cf:86:d5:98:d9:ab:f3:31:f7:7c:9e:bc:ee:e8:45:d3: de:3b:a8:f2:d8:85:c2:fb:fd:cd:01:b0:ed:22:2c:2e:a1:cd: f7:ff:35:81:90:c8:8b:4c:49:51:a8:a0:f2:30:8a:84:46:d6: 97:fb:51:8e:9f:42:e3:0b:64:6b:82:6e:9f:b4:b0:49:86:bb: 6f:c2:dc:a6:fa:99:0c:3b:1e:96:50:79:bc:e8:ca:24:1b:40: 44:6f:f6:1b:c8:62:96:0d:42:d6:d7:62:e7:8b:8a:43:31:a7: a3:8d:40:eb:f0:a6:72:5a:aa:43:ff:07:6b:66:75:51:13:8a: 8e:11:73:48:da:db:23:9a:45:fc:28:67:8d:35:33:1b:ff:25: 62:2b:32:f4:72:a9:20:a6:87:ec:cf:21:4d:d2:99:38:67:2e: 5c:4d:2b:f5:4f:62:ea:1c:dc:e8:6a:9c:1e:91:6f:1d:9f:a6: b9:9d:e4:93:4c:9f:14:2a:5f:ea:ca:26:e7:2e:16:a3:90:d1: 5a:86:29:18:8b:a4:3b:75:4f:28:c6:50:64:61:29:4d:0a:6c: 2f:99:da:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdn/I/m47TZ3LhJxg5eomKBS7PHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA5MTcwNDAzNDBaFw0yNjA5MTgwNDU2NDBaMDMxMTAvBgNV BAMTKDc5NzdCMTg4RUVBRDAzNjAwRjQ5NDU5ODYzNUE0NzJGNzQzQ0I0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI70Qo/EJfxHw+mzpnyHIbLDr+ lYQ4y6xzNBqdDa7x43Lh0MGyYBIK8wJBKbSOPU9kVGL9o1+0HLcDgBYqhUrs6Pnt Av3f75c8bLDSdHk5e2B8CzDsRnlmn6tml8+CRXLDGaL3RAAfWn6hjNvv/FQgwsaj uUE7fsN/UdK1/Ls9gtzZZ6fFBfMaMqvnEHX06mdtv7dkeXt851K2EJefA7PHgltB 7pEy2Cf3uvnmwESMfuKyMaAm5uvzdMnSHeBFAk8HTZqBj019yim8vJEa4Dw7sCY3 dLCN/c7qkkmoNZj+fqKBeoYutXetCrQ7Kz3rSpLyvJHS6tnLBiMPJq+j+FFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXexiO6tA2APSUWYY1pHL3Q8tNgwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzwMPi2RWv1e78qfMHv6WMwIvxMiEd34rKe LspITBpAAtHiCk8Gz4bVmNmr8zH3fJ687uhF0947qPLYhcL7/c0BsO0iLC6hzff/ NYGQyItMSVGooPIwioRG1pf7UY6fQuMLZGuCbp+0sEmGu2/C3Kb6mQw7HpZQebzo yiQbQERv9hvIYpYNQtbXYueLikMxp6ONQOvwpnJaqkP/B2tmdVETio4Rc0ja2yOa RfwoZ401Mxv/JWIrMvRyqSCmh+zPIU3SmThnLlxNK/VPYuoc3OhqnB6Rbx2fprmd 5JNMnxQqX+rKJucuFqOQ0VqGKRiLpDt1TyjGUGRhKU0KbC+Z2jA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:26 2026 by rpki-client