$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json) Hash identifier: tjb5DyHPXRIcAF+b7JfFUs+rGbZEDSr91lAbkhqAapY= Subject key identifier: DF:F8:21:BE:C7:69:11:09:2E:DD:9E:50:9E:31:54:45:F2:65:2F:C3 Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Certificate serial: 6545926B745BEE1C5A9C567DC00DA12E05095F05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:20:07 +0000 Manifest this update: Wed 23 Sep 2026 15:15:07 +0000 Manifest next update: Thu 24 Sep 2026 17:44:07 +0000 Files and hashes: 1: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: 9iS4Jge9OERtUyC5Ey+EABJIz8+ORpHH1XgNWIFhruM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:45:92:6b:74:5b:ee:1c:5a:9c:56:7d:c0:0d:a1:2e:05:09:5f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Validity Not Before: Sep 23 15:15:07 2026 GMT Not After : Sep 24 17:44:07 2026 GMT Subject: CN=DFF821BEC76911092EDD9E509E315445F2652FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:ed:19:5c:da:8c:a0:4e:68:02:28:48:e5: 99:df:bd:5c:fa:5c:0b:3c:b1:d6:4e:0d:6e:64:98: aa:23:7a:e6:2e:76:56:e6:85:4e:1e:46:82:92:68: 72:1f:5d:fd:1f:09:0d:fc:66:ca:6b:da:d0:1f:bc: 15:82:17:39:d5:43:76:16:6e:59:d9:03:b7:4d:70: 61:35:fa:42:2f:12:c0:c7:bf:36:a4:b8:39:ee:05: f5:d0:08:09:cb:f5:3a:4a:84:0c:da:85:7f:c2:6b: 58:08:0e:f2:d3:fd:7e:b6:fc:cc:f8:27:6b:f0:ae: ed:9f:5b:ec:c2:c3:f2:5c:d3:f0:73:6e:e4:bd:a3: 8e:e5:dd:ed:f6:c6:e7:59:f7:db:6b:0c:f6:23:90: 97:7d:03:49:5e:c9:84:90:ab:85:09:51:08:cc:f6: a5:71:04:bd:f5:e9:97:a0:da:8b:4a:9d:8b:0f:de: b4:4c:26:2b:b1:51:0f:d6:4b:e7:e5:e7:c7:fe:e2: 18:71:be:1d:d8:e4:71:3d:37:36:55:0c:c8:17:91: 22:0d:a6:af:d1:98:d1:ca:c9:e3:af:28:eb:b5:f5: 22:4e:06:6e:74:9f:5e:cb:fd:8c:26:79:35:f6:ca: 7e:8b:19:81:d8:23:f3:d9:f5:41:94:44:a0:2c:34: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:21:BE:C7:69:11:09:2E:DD:9E:50:9E:31:54:45:F2:65:2F:C3 X509v3 Authority Key Identifier: keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:20:59:07:a7:d6:02:ba:59:ea:34:ed:9e:3c:f9:a2:08:87: 3c:a6:76:ee:91:67:e4:ea:e9:d2:e5:3b:53:ae:59:b5:6b:11: 49:7e:1e:1c:57:d9:f7:0b:3f:41:5a:64:3b:88:38:92:b1:55: b4:d0:6a:31:2c:7e:3e:80:d7:b9:e0:32:9d:3d:75:fd:eb:e1: a8:62:70:17:3b:f6:ff:01:c8:80:8a:02:3d:46:8d:8c:a0:b6: 0b:2a:eb:3e:fb:f9:d5:1f:59:e4:d8:c1:b9:b3:08:6c:e4:c6: 34:92:c2:81:be:eb:5d:fd:34:37:45:ba:46:2d:92:88:ce:01: b0:5b:eb:d0:24:97:2f:2c:43:ae:54:aa:6c:8b:6f:58:0e:79: 5c:f9:59:11:00:c1:69:69:13:78:72:bb:76:7c:6c:28:9c:0e: 48:7a:dd:fd:c6:4c:19:a4:5e:47:68:1a:3e:c2:01:a4:ab:3b: 00:d0:d8:52:43:6a:16:c3:c7:fb:50:7f:7b:ce:c9:cd:d4:1a: 33:4f:02:0a:e2:53:6d:77:ea:cb:b1:a2:2d:04:5b:01:50:15: 49:fa:59:98:64:6b:fe:ca:05:06:b7:ef:96:24:60:ba:08:01: 73:18:3a:ba:73:bc:fa:d2:72:da:0d:12:80:9b:cd:48:1f:42: e0:85:c1:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUWSa3Rb7hxanFZ9wA2hLgUJXwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVCMjQy OUM5MkY5MjAeFw0yNjA5MjMxNTE1MDdaFw0yNjA5MjQxNzQ0MDdaMDMxMTAvBgNV BAMTKERGRjgyMUJFQzc2OTExMDkyRUREOUU1MDlFMzE1NDQ1RjI2NTJGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1e0ZXNqMoE5oAihI5ZnfvVz6 XAs8sdZODW5kmKojeuYudlbmhU4eRoKSaHIfXf0fCQ38Zspr2tAfvBWCFznVQ3YW blnZA7dNcGE1+kIvEsDHvzakuDnuBfXQCAnL9TpKhAzahX/Ca1gIDvLT/X62/Mz4 J2vwru2fW+zCw/Jc0/BzbuS9o47l3e32xudZ99trDPYjkJd9A0leyYSQq4UJUQjM 9qVxBL316Zeg2otKnYsP3rRMJiuxUQ/WS+fl58f+4hhxvh3Y5HE9NzZVDMgXkSIN pq/RmNHKyeOvKOu19SJOBm50n17L/YwmeTX2yn6LGYHYI/PZ9UGURKAsNB3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/ghvsdpEQku3Z5QnjFURfJlL8MwHwYDVR0j BBgwFoAU+W5rPyyM3taEY/XyTHnrJCnJL5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGI2YWQyYjQtZWJlNS00Y2MyLTlkMDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0Yy QzhDREVENjg0NjNGNUYyNEM3OUVCMjQyOUM5MkY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTZFNkIzRjJDOENERUQ2ODQ2M0Y1RjI0Qzc5RUIyNDI5Qzky RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVC MjQyOUM5MkY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIgWQen1gK6Weo07Z48+aIIhzymdu6RZ+Tq 6dLlO1OuWbVrEUl+HhxX2fcLP0FaZDuIOJKxVbTQajEsfj6A17ngMp09df3r4ahi cBc79v8ByICKAj1GjYygtgsq6z77+dUfWeTYwbmzCGzkxjSSwoG+6139NDdFukYt kojOAbBb69Akly8sQ65UqmyLb1gOeVz5WREAwWlpE3hyu3Z8bCicDkh63f3GTBmk XkdoGj7CAaSrOwDQ2FJDahbDx/tQf3vOyc3UGjNPAgriU2136suxoi0EWwFQFUn6 WZhka/7KBQa375YkYLoIAXMYOrpzvPrSctoNEoCbzUgfQuCFwd0= -----END CERTIFICATE-----Generated at Thu Sep 24 08:31:03 2026 by rpki-client