$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: YqsnckjGyoy92gKt6zfq8z2mXOrwnXhjzEaCaM/3wOw= Subject key identifier: A6:46:26:EC:65:5B:7C:10:83:4D:C9:5C:79:33:74:F3:12:70:D3:C3 Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 575258A2FFCFCBF1041483D590BB87EC5FABA603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:29:04 +0000 Manifest this update: Thu 17 Sep 2026 08:24:04 +0000 Manifest next update: Fri 18 Sep 2026 11:19:04 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: T7H2IytE8L8NMupVC85Pl7FIqWJyYo1VSxoA+Rkn45c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:52:58:a2:ff:cf:cb:f1:04:14:83:d5:90:bb:87:ec:5f:ab:a6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Sep 17 08:24:04 2026 GMT Not After : Sep 18 11:19:04 2026 GMT Subject: CN=A64626EC655B7C10834DC95C793374F31270D3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:f4:35:ed:da:1b:49:64:61:1c:9d:29:9e: e7:70:24:86:eb:65:f8:e5:76:68:22:0d:fd:c0:56: 86:4f:13:f9:12:a2:5c:d7:5f:cb:a8:e0:c0:c3:39: f9:03:ef:1b:9f:7d:ff:c8:23:24:82:73:b4:1d:32: c2:0c:b3:d4:f3:38:12:11:fd:44:63:c0:b6:f2:39: 2c:43:fd:1d:0f:f0:c4:35:d1:11:f1:dd:e8:f4:73: 73:c7:df:d9:be:76:ee:44:54:23:38:34:34:64:f8: 43:cc:25:7f:b1:82:41:4e:3e:38:10:f2:53:41:9b: 2d:3b:fa:1d:a4:dc:ac:e3:a6:0b:7e:2f:d0:0e:3a: 9f:5c:5f:c2:e5:5b:5d:1c:90:74:b9:33:fe:70:fb: 99:32:67:f1:e4:f9:0b:29:9f:42:5d:48:31:31:52: dc:80:c5:41:b9:8c:7d:73:09:85:3c:79:93:2c:00: 7f:a6:48:ef:dd:9a:90:d5:ba:1c:40:35:21:cc:de: 4d:fa:97:5b:3b:ed:fc:d5:24:ed:bb:f1:f7:92:03: 11:38:37:77:1e:9e:1a:b2:c2:59:7b:a4:1e:e8:81: 8f:32:69:cd:89:e4:a2:87:9b:9a:84:3e:a0:59:0d: fd:0b:20:6f:e3:48:1d:b1:d5:eb:6c:fa:b8:1f:42: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:26:EC:65:5B:7C:10:83:4D:C9:5C:79:33:74:F3:12:70:D3:C3 X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:49:0e:cd:7a:42:b8:73:50:b5:6d:8d:2a:c1:75:cb:c5:22: 54:ea:f0:4a:c6:05:77:bd:c3:8c:b9:d6:89:61:af:5b:ec:2f: 55:7a:0b:b9:9e:48:67:94:66:de:11:ba:54:d2:1d:b6:51:fe: 6a:5f:de:4b:36:3d:e6:ad:db:51:96:d6:36:c7:60:f4:04:8a: 5c:38:b1:2a:2b:48:a0:38:b1:f6:22:ea:26:c8:ee:fc:10:ca: ae:3a:09:ca:a4:32:e9:42:e2:e1:51:03:e9:da:aa:7e:72:37: 6e:31:7f:04:79:93:b6:a7:35:db:6c:74:cb:78:a2:23:3a:1a: 23:3a:06:b6:c2:0e:4d:c8:a8:2c:12:bd:a2:42:1c:f4:4c:e9: 0e:fe:72:f4:1b:a2:18:3c:af:ab:19:43:e3:21:a3:3d:0b:8c: 48:16:a0:1d:d2:da:f4:90:0d:b0:3b:76:19:ae:ef:7b:03:49: 75:ad:a2:16:62:21:01:6a:b7:26:41:44:1e:a9:54:7a:fa:f2: 15:97:ba:66:aa:73:ed:d5:5b:19:7b:04:74:0a:cb:6a:8f:4f: aa:d3:71:30:35:f6:80:45:17:ef:90:3a:32:8a:a7:44:b9:d7: e4:77:80:88:1e:40:8c:0b:e5:a6:7b:11:2e:08:6e:4f:5e:68: 35:1b:4c:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1JYov/Py/EEFIPVkLuH7F+rpgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA5MTcwODI0MDRaFw0yNjA5MTgxMTE5MDRaMDMxMTAvBgNV BAMTKEE2NDYyNkVDNjU1QjdDMTA4MzREQzk1Qzc5MzM3NEYzMTI3MEQzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTfQ17dobSWRhHJ0pnudwJIbr ZfjldmgiDf3AVoZPE/kSolzXX8uo4MDDOfkD7xufff/IIySCc7QdMsIMs9TzOBIR /URjwLbyOSxD/R0P8MQ10RHx3ej0c3PH39m+du5EVCM4NDRk+EPMJX+xgkFOPjgQ 8lNBmy07+h2k3Kzjpgt+L9AOOp9cX8LlW10ckHS5M/5w+5kyZ/Hk+Qspn0JdSDEx UtyAxUG5jH1zCYU8eZMsAH+mSO/dmpDVuhxANSHM3k36l1s77fzVJO278feSAxE4 N3cenhqywll7pB7ogY8yac2J5KKHm5qEPqBZDf0LIG/jSB2x1ets+rgfQghbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkYm7GVbfBCDTclceTN08xJw08MwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9JDs16QrhzULVtjSrBdcvFIlTq8ErGBXe9 w4y51olhr1vsL1V6C7meSGeUZt4RulTSHbZR/mpf3ks2Peat21GW1jbHYPQEilw4 sSorSKA4sfYi6ibI7vwQyq46CcqkMulC4uFRA+naqn5yN24xfwR5k7anNdtsdMt4 oiM6GiM6BrbCDk3IqCwSvaJCHPRM6Q7+cvQbohg8r6sZQ+Mhoz0LjEgWoB3S2vSQ DbA7dhmu73sDSXWtohZiIQFqtyZBRB6pVHr68hWXumaqc+3VWxl7BHQKy2qPT6rT cTA19oBFF++QOjKKp0S51+R3gIgeQIwL5aZ7ES4Ibk9eaDUbTJg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:02 2026 by rpki-client