$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: ZGFVmujN90qqveWMCYE6GfTgMVRhpOvWBfxvu30o668= Subject key identifier: 56:25:C5:FB:AB:86:1F:27:D8:47:22:B3:B5:98:EE:3F:E8:75:59:2A Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 13388ACE465426D4FE671DC49686134FFE9BE524 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:23:31 +0000 Manifest this update: Thu 24 Sep 2026 10:18:31 +0000 Manifest next update: Fri 25 Sep 2026 12:14:31 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: tW9Iq0qK8XqWKNnCUoE81IyP1/0pMN1zbzf8sc9E0wA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:8a:ce:46:54:26:d4:fe:67:1d:c4:96:86:13:4f:fe:9b:e5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Sep 24 10:18:31 2026 GMT Not After : Sep 25 12:14:31 2026 GMT Subject: CN=5625C5FBAB861F27D84722B3B598EE3FE875592A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:3b:27:b8:3b:9b:50:03:21:81:dd:73:5c: 34:f6:9e:4a:c3:f6:36:50:41:b1:80:a7:31:2a:0f: 5f:fa:da:06:c8:29:ba:af:e9:bd:9d:63:11:4a:00: 81:70:cb:ec:5b:bb:61:41:23:43:ff:53:f7:a5:ed: 6b:bf:fb:e7:62:a9:b7:76:c1:26:e9:40:1d:fb:04: fe:60:c1:8a:03:49:f4:c7:3d:1b:5f:28:df:91:ed: 01:9e:7f:44:91:23:42:79:cb:40:1f:21:f3:7a:3a: f1:54:07:9b:99:a4:58:71:f0:82:8d:82:9f:db:90: fa:63:68:0e:6c:bc:e9:9a:5d:3a:3a:5d:73:bc:81: 10:1b:63:1e:bd:ee:f1:06:be:6a:d8:4b:d3:fa:fd: a5:96:82:88:d0:c9:9f:fe:10:6f:40:0a:f9:a2:37: 72:91:9f:90:e3:ee:91:73:82:37:f3:75:93:fa:9c: fa:e4:9e:3b:20:fc:4c:c3:d0:de:f9:a4:71:ce:a6: 08:f7:8b:8b:d1:6b:45:28:b9:b2:6e:f1:6c:8b:a2: 9f:72:4c:c1:ae:70:e9:9b:25:a1:62:fe:d2:cd:28: 67:5c:6c:15:a1:4b:1a:0f:f2:ac:ea:c7:9e:89:0c: ef:a0:81:f5:a3:64:62:8d:3c:0c:34:4f:14:00:03: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:C5:FB:AB:86:1F:27:D8:47:22:B3:B5:98:EE:3F:E8:75:59:2A X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:91:ea:67:31:2e:1c:31:72:04:55:b2:19:f6:ba:fe:09: 4d:4a:9d:4f:ac:50:25:18:e6:22:e4:5e:91:58:0e:6b:3f:9e: 68:2f:14:43:8a:cd:fd:b5:2f:57:4d:84:9a:8a:8c:2b:3e:09: f8:00:0d:d6:e4:60:86:16:39:65:11:1a:4d:d4:71:42:b3:3a: 86:33:25:52:0c:3f:73:30:99:9a:db:81:77:95:38:cf:a0:97: 3b:7b:b3:4a:f5:fa:82:f1:f3:2a:06:31:2e:6e:8c:d9:a6:79: 33:ad:f9:0d:b5:47:fb:35:ba:03:10:6d:18:65:37:4b:4e:e5: 53:fa:04:7e:2a:e8:cc:a2:c0:be:ae:2b:7f:49:a2:99:78:74: 92:c0:db:90:5e:43:51:63:4f:b3:1b:2d:6d:30:47:5c:3b:0d: 24:67:eb:de:c1:55:08:76:9c:eb:ca:78:7b:02:5a:54:4d:10: 80:5f:56:37:b6:4f:f3:04:27:eb:bd:bd:df:86:01:d4:9f:76: 57:2a:55:22:6d:ff:7f:2c:28:f0:7e:63:2c:bb:b7:c3:1c:84: dd:4b:81:82:55:fc:5d:d9:08:f3:4d:b1:e8:2a:75:10:9d:8d: 24:97:be:2d:85:8f:01:d7:92:08:64:e9:5b:0c:97:1c:bc:03: 28:1a:cf:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEziKzkZUJtT+Zx3EloYTT/6b5SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA5MjQxMDE4MzFaFw0yNjA5MjUxMjE0MzFaMDMxMTAvBgNV BAMTKDU2MjVDNUZCQUI4NjFGMjdEODQ3MjJCM0I1OThFRTNGRTg3NTU5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3TsnuDubUAMhgd1zXDT2nkrD 9jZQQbGApzEqD1/62gbIKbqv6b2dYxFKAIFwy+xbu2FBI0P/U/el7Wu/++diqbd2 wSbpQB37BP5gwYoDSfTHPRtfKN+R7QGef0SRI0J5y0AfIfN6OvFUB5uZpFhx8IKN gp/bkPpjaA5svOmaXTo6XXO8gRAbYx697vEGvmrYS9P6/aWWgojQyZ/+EG9ACvmi N3KRn5Dj7pFzgjfzdZP6nPrknjsg/EzD0N75pHHOpgj3i4vRa0UoubJu8WyLop9y TMGucOmbJaFi/tLNKGdcbBWhSxoP8qzqx56JDO+ggfWjZGKNPAw0TxQAA459AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViXF+6uGHyfYRyKztZjuP+h1WSowHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3xkepnMS4cMXIEVbIZ9rr+CU1KnU+sUCUY 5iLkXpFYDms/nmgvFEOKzf21L1dNhJqKjCs+CfgADdbkYIYWOWURGk3UcUKzOoYz JVIMP3MwmZrbgXeVOM+glzt7s0r1+oLx8yoGMS5ujNmmeTOt+Q21R/s1ugMQbRhl N0tO5VP6BH4q6MyiwL6uK39Jopl4dJLA25BeQ1FjT7MbLW0wR1w7DSRn697BVQh2 nOvKeHsCWlRNEIBfVje2T/MEJ+u9vd+GAdSfdlcqVSJt/38sKPB+Yyy7t8MchN1L gYJV/F3ZCPNNsegqdRCdjSSXvi2FjwHXkghk6VsMlxy8Aygaz5E= -----END CERTIFICATE-----Generated at Thu Sep 24 22:48:36 2026 by rpki-client