$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: ryMx1ZkfMhfevOk3yJcexv+fP9O7VIjUa6XYk7fTLvY= Subject key identifier: 2C:E5:00:E3:5D:56:D2:DF:3B:F4:AE:68:06:24:FA:99:3C:88:1E:A6 Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 3AB7C414D8FB9C0F2E95A50D8A859C793D3EC268 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 20:24:20 +0000 Manifest this update: Wed 16 Sep 2026 20:19:20 +0000 Manifest next update: Thu 17 Sep 2026 22:02:20 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: FrrabU2HLe2pb39lpIlEeij6zS1uGp7OkRKkK5MBvLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:c4:14:d8:fb:9c:0f:2e:95:a5:0d:8a:85:9c:79:3d:3e:c2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Sep 16 20:19:20 2026 GMT Not After : Sep 17 22:02:20 2026 GMT Subject: CN=2CE500E35D56D2DF3BF4AE680624FA993C881EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:ae:0f:4e:43:44:14:d8:94:0b:6a:fd:7e: 2b:03:a2:68:74:1d:00:d0:76:88:68:1a:64:42:e0: b0:32:37:d3:0d:c1:d5:dc:ac:f3:97:ec:53:38:9b: 07:d2:55:b8:8a:e2:6b:34:d0:db:f9:a7:43:f5:0f: 8d:99:66:6d:9e:4a:4b:1a:33:d1:64:66:04:45:a7: 75:4a:d1:a2:42:05:85:f3:20:2f:f4:a6:ac:f6:ee: 84:ed:91:9e:0f:64:29:99:47:b8:17:0d:8e:81:2c: 42:f9:60:af:99:e0:04:76:6d:3e:dd:93:27:09:b5: 2f:5e:72:4a:8e:8f:fb:04:08:bd:51:51:c8:f7:05: 0b:3d:c6:ee:bb:0d:7d:b0:f2:23:19:b7:c1:ef:0a: 6a:d9:f8:bc:1a:41:fb:b2:41:32:33:a4:99:bd:02: 89:b8:d6:ef:9f:1b:04:0e:f6:35:82:40:eb:29:b4: a3:7e:6a:fc:5f:4a:27:e8:41:11:00:67:66:7a:dc: 30:c1:83:05:13:3b:e4:50:bc:2f:8f:1c:45:12:46: 2f:9d:4e:f0:45:1d:9b:75:3c:da:81:fa:f3:d3:2e: 26:57:54:0b:ac:f7:04:e2:84:78:44:0c:c1:9d:c1: 55:da:24:84:74:25:4a:97:66:52:8d:77:51:a7:c0: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:00:E3:5D:56:D2:DF:3B:F4:AE:68:06:24:FA:99:3C:88:1E:A6 X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a4:1e:d3:e8:0a:b8:79:14:18:60:04:0f:4e:a7:5c:43:27: 24:89:9c:a8:fa:4f:81:1f:b1:38:4f:18:96:a9:ef:4b:c3:a8: 89:6c:e2:24:f4:13:4e:09:71:aa:7a:23:2d:34:ee:3c:9c:a1: 56:7c:42:4a:c2:62:8c:0e:24:18:69:c8:54:e4:cf:80:e7:22: 59:4e:5b:d9:c7:49:6e:dd:a1:06:81:49:84:e1:f7:95:bb:40: 23:f0:e0:c9:17:b1:f0:65:46:c0:6c:90:9c:97:21:1a:c2:01: 76:de:b0:1b:9f:62:c5:17:1d:46:9e:e4:c3:82:f0:26:31:bd: fa:76:0a:3c:e8:9f:b0:f4:dc:5a:01:23:63:9b:77:a1:85:12: b2:a5:02:b2:87:07:b6:ab:28:81:37:a3:35:0f:39:d0:56:29: eb:55:3f:7a:bb:64:42:04:d8:56:3e:b3:d3:61:55:6f:41:ea: 21:65:e0:6b:a5:80:3b:e5:c3:cf:53:9f:24:58:1c:8f:6d:b5: 67:06:cc:17:f5:82:f5:56:49:4d:6e:09:4f:92:af:03:35:5b: 1b:ca:b6:79:db:82:e8:3e:7d:eb:57:11:5e:4d:58:07:b9:03: 08:3d:9f:a8:6b:54:6e:6a:53:07:51:72:c6:3b:42:6e:43:d0: eb:a3:2e:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrfEFNj7nA8ulaUNioWceT0+wmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA5MTYyMDE5MjBaFw0yNjA5MTcyMjAyMjBaMDMxMTAvBgNV BAMTKDJDRTUwMEUzNUQ1NkQyREYzQkY0QUU2ODA2MjRGQTk5M0M4ODFFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxd64PTkNEFNiUC2r9fisDomh0 HQDQdohoGmRC4LAyN9MNwdXcrPOX7FM4mwfSVbiK4ms00Nv5p0P1D42ZZm2eSksa M9FkZgRFp3VK0aJCBYXzIC/0pqz27oTtkZ4PZCmZR7gXDY6BLEL5YK+Z4AR2bT7d kycJtS9eckqOj/sECL1RUcj3BQs9xu67DX2w8iMZt8HvCmrZ+LwaQfuyQTIzpJm9 Aom41u+fGwQO9jWCQOsptKN+avxfSifoQREAZ2Z63DDBgwUTO+RQvC+PHEUSRi+d TvBFHZt1PNqB+vPTLiZXVAus9wTihHhEDMGdwVXaJIR0JUqXZlKNd1GnwBAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOUA411W0t879K5oBiT6mTyIHqYwHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqkHtPoCrh5FBhgBA9Op1xDJySJnKj6T4Ef sThPGJap70vDqIls4iT0E04Jcap6Iy007jycoVZ8QkrCYowOJBhpyFTkz4DnIllO W9nHSW7doQaBSYTh95W7QCPw4MkXsfBlRsBskJyXIRrCAXbesBufYsUXHUae5MOC 8CYxvfp2Cjzon7D03FoBI2Obd6GFErKlArKHB7arKIE3ozUPOdBWKetVP3q7ZEIE 2FY+s9NhVW9B6iFl4GulgDvlw89TnyRYHI9ttWcGzBf1gvVWSU1uCU+SrwM1WxvK tnnbgug+fetXEV5NWAe5Awg9n6hrVG5qUwdRcsY7Qm5D0OujLik= -----END CERTIFICATE-----Generated at Thu Sep 17 13:52:09 2026 by rpki-client