$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft File: D76923298A332CDB03F66375CE7D78C12CF624A8.mft (raw, json) Hash identifier: uW5hL8UxxXrNLWAORVwQCEIuDMScoeUFmOA0qGGuHG4= Subject key identifier: 18:D1:A4:EA:F1:A5:CD:FA:38:03:B0:8A:D7:72:07:64:64:0B:EF:B5 Authority key identifier: D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 Certificate issuer: /CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Certificate serial: 1C309E5FD8C4DFE98F40457B439026D3D7BA75AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:58:21 +0000 Manifest this update: Thu 17 Sep 2026 07:53:21 +0000 Manifest next update: Fri 18 Sep 2026 10:41:21 +0000 Files and hashes: 1: D76923298A332CDB03F66375CE7D78C12CF624A8.crl (hash: UgZI5h1rG9S/PhpjU+HUQeKFJkPnYtqXX3wrMRDnRe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:30:9e:5f:d8:c4:df:e9:8f:40:45:7b:43:90:26:d3:d7:ba:75:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76923298A332CDB03F66375CE7D78C12CF624A8 Validity Not Before: Sep 17 07:53:21 2026 GMT Not After : Sep 18 10:41:21 2026 GMT Subject: CN=18D1A4EAF1A5CDFA3803B08AD7720764640BEFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:25:2a:7d:83:64:33:96:27:91:52:de:f5: 15:17:65:4b:84:98:a9:d1:dc:ab:e0:50:8a:31:f3: de:4e:8e:5b:2f:47:6e:6f:77:6f:43:7f:21:1f:8e: 72:a1:fc:8f:28:e0:b7:26:b9:f8:17:fa:3d:66:06: 3e:9f:5e:8d:f3:68:f6:31:62:75:38:d9:cc:b4:24: 2c:45:eb:e2:6c:9d:84:e1:72:0a:00:58:cf:ba:24: 48:25:e4:77:3e:85:65:a3:ca:07:31:ed:82:68:74: 22:62:1a:7b:ef:61:15:74:bd:e8:87:93:8a:fd:d9: 3f:a7:16:39:78:08:31:ac:09:9a:dd:48:bd:1d:a8: 4d:ba:02:41:82:08:a1:e3:ef:7c:b7:37:95:a5:ac: ce:4e:dd:15:86:70:92:84:62:64:45:82:80:f3:73: 7e:31:a1:19:b9:fa:06:c1:0d:0b:59:43:33:bc:3f: 52:80:08:3e:43:60:c9:3e:40:97:99:71:85:52:0d: 51:8c:4b:cc:e0:40:3c:df:28:24:74:17:9f:ce:d1: 15:54:08:20:3d:73:4c:2c:8e:26:21:59:3b:cb:65: 4b:1f:0e:b7:68:a4:34:28:9b:b9:ca:14:77:18:99: b2:bc:9e:cb:15:38:19:d4:0d:95:14:f8:f8:56:10: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D1:A4:EA:F1:A5:CD:FA:38:03:B0:8A:D7:72:07:64:64:0B:EF:B5 X509v3 Authority Key Identifier: keyid:D7:69:23:29:8A:33:2C:DB:03:F6:63:75:CE:7D:78:C1:2C:F6:24:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D76923298A332CDB03F66375CE7D78C12CF624A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/D76923298A332CDB03F66375CE7D78C12CF624A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:73:a5:a2:40:94:9f:db:02:08:64:50:02:84:fe:b0:69: 60:3b:81:76:8b:70:4e:f3:d7:68:51:17:44:48:17:24:90:81: 90:4f:7e:36:89:c9:1b:8c:15:0b:ad:29:ad:dd:60:d0:6b:2e: ba:c5:71:99:c1:56:42:aa:7e:c5:fb:e3:f8:16:04:12:f8:1e: 3d:83:3c:b7:df:ea:73:1e:ba:d1:64:71:8f:da:42:69:b1:60: be:f2:21:e6:eb:35:e3:04:83:dd:09:08:9c:37:20:db:c1:2b: fa:20:00:f3:dc:d2:8a:93:d4:6c:65:c9:6a:62:17:aa:5a:cf: 76:38:1c:6c:40:d5:42:88:6f:f1:c2:80:b6:ef:6c:c2:26:9d: 49:b2:5f:f6:a7:bb:98:cf:89:ed:70:ff:96:86:9f:31:54:52: 8a:9d:f9:b8:2b:c8:01:4c:9e:9d:3b:28:88:91:60:bb:5a:d3: 82:7d:85:cf:ca:9b:7f:c4:13:b5:c9:fa:8b:31:ee:d8:d9:a6: 4d:bf:1d:87:f8:e9:de:0a:51:fc:d8:8f:35:22:01:8f:51:06: bc:97:bc:46:fe:d7:d2:7c:d6:d7:80:0a:c3:a4:38:fc:74:1b: be:cf:59:12:d2:86:ad:c3:4b:0e:7f:b4:c3:65:01:71:f6:e4: 1c:3b:c7:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDCeX9jE3+mPQEV7Q5Am09e6daowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEy Q0Y2MjRBODAeFw0yNjA5MTcwNzUzMjFaFw0yNjA5MTgxMDQxMjFaMDMxMTAvBgNV BAMTKDE4RDFBNEVBRjFBNUNERkEzODAzQjA4QUQ3NzIwNzY0NjQwQkVGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYASUqfYNkM5YnkVLe9RUXZUuE mKnR3KvgUIox895OjlsvR25vd29DfyEfjnKh/I8o4LcmufgX+j1mBj6fXo3zaPYx YnU42cy0JCxF6+JsnYThcgoAWM+6JEgl5Hc+hWWjygcx7YJodCJiGnvvYRV0veiH k4r92T+nFjl4CDGsCZrdSL0dqE26AkGCCKHj73y3N5WlrM5O3RWGcJKEYmRFgoDz c34xoRm5+gbBDQtZQzO8P1KACD5DYMk+QJeZcYVSDVGMS8zgQDzfKCR0F5/O0RVU CCA9c0wsjiYhWTvLZUsfDrdopDQom7nKFHcYmbK8nssVOBnUDZUU+PhWEOk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNGk6vGlzfo4A7CK13IHZGQL77UwHwYDVR0j BBgwFoAU12kjKYozLNsD9mN1zn14wSz2JKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmMzBlMjctYjk1ZS00ZDc1LTk2OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4 QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4QzEyQ0Y2MjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzY5MjMyOThBMzMyQ0RCMDNGNjYzNzVDRTdENzhDMTJDRjYy NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvRDc2OTIzMjk4QTMzMkNEQjAzRjY2Mzc1Q0U3RDc4 QzEyQ0Y2MjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF0c6WiQJSf2wIIZFAChP6waWA7gXaLcE7z 12hRF0RIFySQgZBPfjaJyRuMFQutKa3dYNBrLrrFcZnBVkKqfsX74/gWBBL4Hj2D PLff6nMeutFkcY/aQmmxYL7yIebrNeMEg90JCJw3INvBK/ogAPPc0oqT1GxlyWpi F6paz3Y4HGxA1UKIb/HCgLbvbMImnUmyX/anu5jPie1w/5aGnzFUUoqd+bgryAFM np07KIiRYLta04J9hc/Km3/EE7XJ+osx7tjZpk2/HYf46d4KUfzYjzUiAY9RBryX vEb+19J81teACsOkOPx0G77PWRLShq3DSw5/tMNlAXH25Bw7x28= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:18 2026 by rpki-client