$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json) Hash identifier: ZZ7EhlTu+6oLHGPCHTXjx3YrAeybRgJl70JcLaXUumc= Subject key identifier: 09:38:22:EF:72:F9:D0:8C:0A:73:03:E7:70:3A:9D:DE:2D:9A:DC:AA Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Certificate serial: 6B84987CEC9B7BAC8DD682060ED6865FD52101C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:26:14 +0000 Manifest this update: Wed 23 Sep 2026 20:21:14 +0000 Manifest next update: Thu 24 Sep 2026 20:51:14 +0000 Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: g+aCEUQgmhJ497QaJBzH9O9xwJ/jukMiBFPWXd5stEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:84:98:7c:ec:9b:7b:ac:8d:d6:82:06:0e:d6:86:5f:d5:21:01:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Validity Not Before: Sep 23 20:21:14 2026 GMT Not After : Sep 24 20:51:14 2026 GMT Subject: CN=093822EF72F9D08C0A7303E7703A9DDE2D9ADCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:3b:20:94:1c:cb:7f:f6:0c:02:ed:13:98: ac:da:b7:eb:41:65:59:82:ac:bf:7e:1a:71:af:dd: f2:f3:eb:e3:1f:a1:f6:e0:33:0c:78:f1:9b:b5:27: 22:7a:58:93:2c:dc:9a:17:59:a6:60:7c:8d:1a:56: a7:ed:e0:b0:60:87:f7:ee:44:23:50:66:5d:3f:eb: 19:1b:69:3a:0b:3e:50:65:07:55:98:8e:a2:8d:39: bd:44:d8:ae:a6:63:2e:6d:8c:86:8d:18:c0:9a:00: 49:26:1f:df:a2:d7:d2:e0:72:de:27:61:6e:82:0c: 65:32:a5:2b:79:03:6c:6d:ae:81:8f:f2:31:25:3d: 71:2c:7c:87:92:69:69:43:76:3b:f2:e3:2e:5d:82: cd:96:c7:7b:ca:50:47:19:50:55:cf:f9:17:6b:07: 16:01:5a:b4:1e:31:f1:74:c5:a6:65:9c:11:c0:e9: 04:5d:4b:d0:eb:ed:e7:28:23:29:20:30:31:cb:f6: 25:f8:fe:fe:0e:a4:a4:8a:3c:ca:51:05:97:16:31: 17:b5:85:71:e5:87:5f:da:41:11:ea:9b:73:ba:e2: c6:40:d9:f4:98:7e:75:89:7a:a9:78:a4:79:17:83: 2a:87:55:00:98:a2:c3:49:da:62:a1:9e:0e:17:f6: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:22:EF:72:F9:D0:8C:0A:73:03:E7:70:3A:9D:DE:2D:9A:DC:AA X509v3 Authority Key Identifier: keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:b7:4c:98:da:42:2b:b8:d9:3f:f4:ad:c3:22:f1:ce:3e: 32:32:fb:df:78:d0:5e:14:b1:5c:b3:61:12:ca:03:f0:31:7b: b6:98:ec:fc:6c:ba:97:3d:45:e9:a6:d4:df:64:a8:b3:a7:93: 18:12:53:fa:a4:64:dc:8b:49:2d:80:ff:06:4d:60:ed:fd:66: ca:d7:c7:05:8e:0e:b0:1e:9a:6e:d6:77:bb:8e:ee:3e:a1:cf: 30:68:a9:cc:4d:45:0e:f3:1d:67:b3:7e:2c:dd:0a:e2:7c:26: 23:2f:f5:69:fe:4f:5c:d4:1f:f0:5a:51:88:a2:2f:40:bf:81: d3:17:15:04:30:79:b4:33:e6:72:c7:76:1a:c1:65:56:6c:53: ba:e8:54:a4:f1:99:02:ad:c8:fe:91:83:c4:90:a7:71:57:a4: b8:03:4e:ea:0f:7d:e3:36:24:a9:2b:4b:4b:50:45:c1:a9:bb: e5:c2:2a:af:0c:dd:22:9e:0c:2f:ea:1e:9b:56:d0:eb:02:97: ec:e1:8e:db:ff:8b:3c:8f:12:d9:c9:4c:23:4c:97:a6:74:0e: e2:72:68:be:44:04:00:19:b6:d8:40:15:53:60:c3:94:6c:f8: e8:02:3e:cc:0d:02:9a:4b:62:9c:89:1e:b9:ee:66:d9:34:df: 9f:99:6e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4SYfOybe6yN1oIGDtaGX9UhAcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJCNjdC Nzc0RUM5NzAeFw0yNjA5MjMyMDIxMTRaFw0yNjA5MjQyMDUxMTRaMDMxMTAvBgNV BAMTKDA5MzgyMkVGNzJGOUQwOEMwQTczMDNFNzcwM0E5RERFMkQ5QURDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXzsglBzLf/YMAu0TmKzat+tB ZVmCrL9+GnGv3fLz6+MfofbgMwx48Zu1JyJ6WJMs3JoXWaZgfI0aVqft4LBgh/fu RCNQZl0/6xkbaToLPlBlB1WYjqKNOb1E2K6mYy5tjIaNGMCaAEkmH9+i19Lgct4n YW6CDGUypSt5A2xtroGP8jElPXEsfIeSaWlDdjvy4y5dgs2Wx3vKUEcZUFXP+Rdr BxYBWrQeMfF0xaZlnBHA6QRdS9Dr7ecoIykgMDHL9iX4/v4OpKSKPMpRBZcWMRe1 hXHlh1/aQRHqm3O64sZA2fSYfnWJeql4pHkXgyqHVQCYosNJ2mKhng4X9v7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCTgi73L50IwKcwPncDqd3i2a3KowHwYDVR0j BBgwFoAUAA8rIbxcAEdeaYuhiIC7Z7d07JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI2MjViZjItZjNiNi00ZTljLTg1YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFC QzVDMDA0NzVFNjk4QkExODg4MEJCNjdCNzc0RUM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBGMkIyMUJDNUMwMDQ3NUU2OThCQTE4ODgwQkI2N0I3NzRF Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJC NjdCNzc0RUM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcnt0yY2kIruNk/9K3DIvHOPjIy+9940F4U sVyzYRLKA/Axe7aY7Pxsupc9Remm1N9kqLOnkxgSU/qkZNyLSS2A/wZNYO39ZsrX xwWODrAemm7Wd7uO7j6hzzBoqcxNRQ7zHWezfizdCuJ8JiMv9Wn+T1zUH/BaUYii L0C/gdMXFQQwebQz5nLHdhrBZVZsU7roVKTxmQKtyP6Rg8SQp3FXpLgDTuoPfeM2 JKkrS0tQRcGpu+XCKq8M3SKeDC/qHptW0OsCl+zhjtv/izyPEtnJTCNMl6Z0DuJy aL5EBAAZtthAFVNgw5Rs+OgCPswNAppLYpyJHrnuZtk035+ZbsU= -----END CERTIFICATE-----Generated at Thu Sep 24 12:50:32 2026 by rpki-client