$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: ON+GKVh+pucksWqNr5V/b31d4LCALnqXkPatAMkxelE= Subject key identifier: 47:14:5A:23:7A:DB:DB:E7:35:FE:82:0A:88:63:0A:CD:B1:83:23:80 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 76B2A8AD9F94855B0FB3570A2B94C21F4CF5BA60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:48:08 +0000 Manifest this update: Thu 17 Sep 2026 07:43:08 +0000 Manifest next update: Fri 18 Sep 2026 09:37:08 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: vVkJZ/EehQCos9Ww2raoOwVCLsZh3wDXCNFj31jLGtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b2:a8:ad:9f:94:85:5b:0f:b3:57:0a:2b:94:c2:1f:4c:f5:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Sep 17 07:43:08 2026 GMT Not After : Sep 18 09:37:08 2026 GMT Subject: CN=47145A237ADBDBE735FE820A88630ACDB1832380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:31:e1:9d:ee:ef:85:c6:8e:af:bc:14:07: fa:f2:54:8f:41:34:d4:10:f5:3b:eb:4b:3e:5c:44: 4b:c5:3e:59:c0:17:70:8e:e8:a9:c3:f5:91:06:42: 27:88:7c:16:fe:4a:5a:4f:80:fe:3e:a9:aa:2f:b8: 40:3e:50:54:c1:fe:15:02:d6:c5:9e:94:85:61:b7: 32:b6:66:96:ea:2a:79:ce:06:ee:3f:5a:6f:e4:ea: 3b:74:ab:e0:a7:8f:74:c7:90:c4:b7:cc:47:2e:2c: 16:5b:0d:32:c0:34:82:c2:8e:79:2b:21:8d:64:33: 6a:fb:35:af:37:d9:fb:78:a2:89:09:e5:30:d4:1e: 36:f5:a2:66:68:d7:ce:d2:3e:24:08:20:ae:3c:bf: f0:ce:7e:c7:06:29:07:0a:1e:e9:26:bb:2b:9e:54: a0:cc:19:51:72:31:de:19:1d:2a:bd:ae:8f:96:fe: 2f:08:1b:32:82:36:4f:a1:dc:d1:b9:b8:a9:23:f2: a2:39:57:5d:59:de:a0:a9:51:90:29:5e:f0:66:7e: a0:a6:4a:9b:f1:dc:f0:5d:e4:f0:74:09:01:c5:f6: 7c:2d:a8:bb:da:92:94:e4:5c:55:1f:12:67:28:0a: 7e:46:9c:8b:c4:6d:4c:1a:01:20:78:08:a1:83:ac: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:5A:23:7A:DB:DB:E7:35:FE:82:0A:88:63:0A:CD:B1:83:23:80 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0d:ab:44:26:d5:99:dd:0a:d3:c6:4f:90:25:cc:87:41:d6: 03:13:1e:22:8d:13:4b:a6:36:88:7d:ca:a1:0b:c7:7c:46:6b: 27:93:1f:93:9f:a7:84:e4:a6:e5:45:fa:d2:0d:25:c6:6f:1e: 8d:e3:a5:78:e6:21:91:68:9b:f6:84:dd:79:1e:d1:97:14:fb: 42:88:26:2b:ce:b0:3c:3e:ea:e7:46:48:60:a5:e1:3a:63:93: 51:d5:8e:c0:69:17:62:08:fc:e2:9c:ac:e4:aa:20:06:ca:3d: 8e:57:73:f5:37:9f:53:dc:f7:10:94:b8:47:02:b5:7f:49:71: af:33:c7:09:c9:38:bc:f6:77:f0:e8:1e:b1:17:82:7b:1f:dc: e6:58:78:ca:0f:b0:6b:1d:e9:57:ed:e4:0b:61:76:db:0d:59: 1f:78:1a:7e:6e:c7:a2:ec:52:53:ef:07:f9:27:bd:74:e7:1e: 65:34:23:db:98:86:d2:d9:67:91:59:b6:11:b2:46:0b:f2:cc: 39:9a:0a:e2:fe:4d:2b:cd:03:7e:6f:a6:bd:d4:3f:2f:cd:1a: de:d4:c2:fb:4f:0e:82:06:e0:d2:10:15:29:6c:a2:82:22:6c: ed:70:11:df:12:60:f9:01:ed:35:6c:42:64:65:7f:64:7f:37: bf:ee:d0:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrKorZ+UhVsPs1cKK5TCH0z1umAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA5MTcwNzQzMDhaFw0yNjA5MTgwOTM3MDhaMDMxMTAvBgNV BAMTKDQ3MTQ1QTIzN0FEQkRCRTczNUZFODIwQTg4NjMwQUNEQjE4MzIzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5jHhne7vhcaOr7wUB/ryVI9B NNQQ9TvrSz5cREvFPlnAF3CO6KnD9ZEGQieIfBb+SlpPgP4+qaovuEA+UFTB/hUC 1sWelIVhtzK2ZpbqKnnOBu4/Wm/k6jt0q+Cnj3THkMS3zEcuLBZbDTLANILCjnkr IY1kM2r7Na832ft4ookJ5TDUHjb1omZo187SPiQIIK48v/DOfscGKQcKHukmuyue VKDMGVFyMd4ZHSq9ro+W/i8IGzKCNk+h3NG5uKkj8qI5V11Z3qCpUZApXvBmfqCm Spvx3PBd5PB0CQHF9nwtqLvakpTkXFUfEmcoCn5GnIvEbUwaASB4CKGDrI6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxRaI3rb2+c1/oIKiGMKzbGDI4AwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsNq0Qm1ZndCtPGT5AlzIdB1gMTHiKNE0um Noh9yqELx3xGayeTH5Ofp4TkpuVF+tINJcZvHo3jpXjmIZFom/aE3Xke0ZcU+0KI JivOsDw+6udGSGCl4Tpjk1HVjsBpF2II/OKcrOSqIAbKPY5Xc/U3n1Pc9xCUuEcC tX9Jca8zxwnJOLz2d/DoHrEXgnsf3OZYeMoPsGsd6Vft5AthdtsNWR94Gn5ux6Ls UlPvB/knvXTnHmU0I9uYhtLZZ5FZthGyRgvyzDmaCuL+TSvNA35vpr3UPy/NGt7U wvtPDoIG4NIQFSlsooIibO1wEd8SYPkB7TVsQmRlf2R/N7/u0CQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:29 2026 by rpki-client