$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: 9lxbcJoH0BrJ3EAqm1mj8W/xyQylnz7WPWfanzH4fVI= Subject key identifier: 9F:12:53:83:1A:2B:E2:C2:1A:F4:F9:3A:5D:DD:3C:D2:7A:79:53:B1 Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 30114BB8CE16803A27FCB3DB985A0446462631D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:07:19 +0000 Manifest this update: Thu 17 Sep 2026 03:02:19 +0000 Manifest next update: Fri 18 Sep 2026 05:39:19 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: cZKplqyItOyj6EHxRWGl2U6TbkBYnGGlwzLja8XAAXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:11:4b:b8:ce:16:80:3a:27:fc:b3:db:98:5a:04:46:46:26:31:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Sep 17 03:02:19 2026 GMT Not After : Sep 18 05:39:19 2026 GMT Subject: CN=9F1253831A2BE2C21AF4F93A5DDD3CD27A7953B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:25:b6:fc:48:db:14:eb:29:73:7b:e1:e0:a9: 07:fe:a3:92:ba:18:86:30:71:9b:70:65:31:2f:6f: e7:44:03:1f:d1:5e:bf:b6:fc:35:49:0d:5a:b8:54: 33:ff:ad:69:eb:0c:60:75:c5:d1:25:05:de:36:e3: 5d:d2:0e:bf:c3:5f:62:98:09:f9:0f:0f:2a:b0:67: 08:65:d3:c1:70:4f:bb:8f:7a:21:89:c0:d7:ed:09: 4b:80:65:b9:b3:50:f9:14:f5:b8:af:22:0d:9f:60: ca:ff:db:cd:3f:44:1f:a7:a8:3a:ac:62:29:e5:a8: e1:b8:8d:4b:92:6c:4c:b3:8f:8b:3b:28:45:fd:c7: 37:b8:22:d8:03:fc:5b:18:52:4f:21:16:a8:4a:c4: e1:b7:3e:d3:fa:3c:e9:47:3d:75:98:36:4a:d2:6a: be:e9:c4:d3:24:5a:27:0d:83:50:c3:bb:85:27:da: a6:ce:f3:b0:70:79:3a:06:7c:88:9f:c0:ca:8d:fd: 17:95:e8:c7:0b:cb:c0:1c:c3:57:71:fb:ca:a1:d0: d8:19:40:bf:a7:48:1c:6f:b3:a7:93:f9:44:80:84: 7c:8f:83:42:d8:ff:4c:d2:6b:0f:ec:90:f8:d9:12: 69:12:33:9c:cd:93:13:fa:04:43:31:5c:74:a6:da: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:12:53:83:1A:2B:E2:C2:1A:F4:F9:3A:5D:DD:3C:D2:7A:79:53:B1 X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:99:76:c5:b3:88:c6:27:4a:4e:d1:83:7c:5e:92:8e:d6:db: 7c:b3:b5:29:ce:e3:28:8d:9e:4e:68:19:c5:ad:7a:87:bb:43: c5:8b:5e:74:03:5e:99:c3:ab:06:1a:cd:45:7b:35:17:76:9b: 00:90:fe:74:cf:ee:db:29:87:71:2d:3e:4f:76:05:24:71:e6: 58:ae:90:ca:7d:48:8f:a0:91:2e:7c:15:1e:0f:b9:e9:e7:f4: 05:b1:8f:2e:08:b0:b5:dc:2a:b4:f6:b8:1b:7c:69:f9:44:b5: b8:23:ce:73:7e:13:df:c5:10:16:53:72:bb:db:de:7d:36:9d: a4:21:7b:b5:ec:2c:fc:6b:83:a1:47:0d:25:fd:92:dc:35:e5: a8:63:44:42:68:64:ce:33:74:6c:38:6c:00:9f:8d:8d:d6:03: 71:ae:21:81:af:16:bf:b8:80:da:e9:f9:4f:8b:1b:b2:f6:75: c3:46:dc:94:0e:25:f1:3b:e7:e5:22:3f:82:d1:0c:84:1c:bc: 84:e8:06:cd:26:ea:f2:e5:8e:5f:77:20:2a:af:95:60:52:cc: f0:0f:86:28:f8:92:6e:7e:d6:d0:0a:fb:ab:23:1c:6b:81:62: 4a:4a:e1:48:c8:95:97:00:2a:7b:d0:f2:d1:da:1f:03:25:34: bb:30:1f:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBFLuM4WgDon/LPbmFoERkYmMdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA5MTcwMzAyMTlaFw0yNjA5MTgwNTM5MTlaMDMxMTAvBgNV BAMTKDlGMTI1MzgzMUEyQkUyQzIxQUY0RjkzQTVEREQzQ0QyN0E3OTUzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJbb8SNsU6ylze+HgqQf+o5K6 GIYwcZtwZTEvb+dEAx/RXr+2/DVJDVq4VDP/rWnrDGB1xdElBd42413SDr/DX2KY CfkPDyqwZwhl08FwT7uPeiGJwNftCUuAZbmzUPkU9bivIg2fYMr/280/RB+nqDqs YinlqOG4jUuSbEyzj4s7KEX9xze4ItgD/FsYUk8hFqhKxOG3PtP6POlHPXWYNkrS ar7pxNMkWicNg1DDu4Un2qbO87BweToGfIifwMqN/ReV6McLy8Acw1dx+8qh0NgZ QL+nSBxvs6eT+USAhHyPg0LY/0zSaw/skPjZEmkSM5zNkxP6BEMxXHSm2q//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxJTgxor4sIa9Pk6Xd080np5U7EwHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiZdsWziMYnSk7Rg3xeko7W23yztSnO4yiN nk5oGcWteoe7Q8WLXnQDXpnDqwYazUV7NRd2mwCQ/nTP7tsph3EtPk92BSRx5liu kMp9SI+gkS58FR4Puenn9AWxjy4IsLXcKrT2uBt8aflEtbgjznN+E9/FEBZTcrvb 3n02naQhe7XsLPxrg6FHDSX9ktw15ahjREJoZM4zdGw4bACfjY3WA3GuIYGvFr+4 gNrp+U+LG7L2dcNG3JQOJfE75+UiP4LRDIQcvIToBs0m6vLljl93ICqvlWBSzPAP hij4km5+1tAK+6sjHGuBYkpK4UjIlZcAKnvQ8tHaHwMlNLswH6A= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:19 2026 by rpki-client