$ rpki-client -vvvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: kFmKWpHZZOS4TfjRDiKXp6vFZ5dxLjnsGXmjJQx37Go= Subject key identifier: 3F:70:56:06:98:1D:09:4D:2B:65:F7:1B:7B:A9:D2:40:B0:2F:24:16 Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 1AC34FF490CDC762F0C7E766DC959CF12A9DBAC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:54:16 +0000 Manifest this update: Thu 24 Sep 2026 06:49:16 +0000 Manifest next update: Fri 25 Sep 2026 08:46:16 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: 79BNrOEdAU9+4D1XygGLYXKRtOvFTIPYlnhK4gUSs+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:4f:f4:90:cd:c7:62:f0:c7:e7:66:dc:95:9c:f1:2a:9d:ba:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Sep 24 06:49:16 2026 GMT Not After : Sep 25 08:46:16 2026 GMT Subject: CN=3F705606981D094D2B65F71B7BA9D240B02F2416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:54:63:2c:61:54:0b:00:8f:c9:94:0d:68: 00:d4:c2:25:54:26:38:67:87:14:a9:91:23:3e:94: e4:12:12:95:0a:88:42:36:5a:96:d7:17:f1:e7:29: a2:63:85:10:dd:81:03:e5:0c:73:1a:ce:5e:75:05: f8:cb:ca:da:2d:b5:33:82:a3:56:6a:22:bb:ba:4b: 94:01:97:bf:1d:ac:ec:4f:9d:a4:33:9c:f2:90:ee: a8:9d:3c:eb:38:4b:82:0a:33:ec:46:d7:e7:e6:e0: 80:b1:e0:60:8a:73:9d:a2:8b:21:51:4e:97:b9:f2: 93:12:7e:60:7f:33:8b:15:78:cf:f0:7c:50:b9:26: 3c:a9:51:38:68:57:8a:7d:79:02:ed:ed:6f:4c:16: 12:20:00:d9:12:8a:14:af:11:88:d4:94:5c:ee:66: 3f:58:22:54:b7:1e:67:ec:c2:71:2a:19:80:2d:a1: 2a:5c:fb:85:e2:67:e5:a7:21:6d:fe:a2:64:e8:f8: 3c:6f:b6:51:74:58:d3:25:cc:a7:c0:07:6d:de:dc: 22:9d:0e:fd:94:ba:f8:4d:6b:0a:88:99:62:b2:0d: dc:29:84:28:3a:a7:9b:47:9a:f4:c2:fb:e7:21:d5: 87:bf:67:88:75:ab:60:5d:2f:68:7e:78:1f:d1:fe: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:56:06:98:1D:09:4D:2B:65:F7:1B:7B:A9:D2:40:B0:2F:24:16 X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:94:61:a2:61:40:a0:be:34:cb:df:79:51:31:04:c7:2b:8f: 61:2b:56:49:9c:d0:95:a7:71:a0:d0:85:02:06:34:29:67:38: ae:b9:f1:ef:ea:02:d5:75:3a:10:5d:4e:d9:e9:46:4f:75:09: 02:89:ee:4f:f4:07:ad:6a:4f:f3:c4:50:f7:60:a7:02:ec:3a: 07:06:6d:d5:5d:2b:51:74:64:94:d5:d9:f0:a1:9b:5b:27:53: 35:01:c7:96:e8:ae:4e:02:8c:47:a7:fc:87:49:59:c5:b0:82: 88:15:84:2f:32:7d:2c:f1:9d:e7:04:ab:be:85:01:2c:5d:05: a2:20:66:e5:8c:da:12:14:2b:17:e1:0a:0d:fe:fe:21:83:c1: 9a:b4:44:28:de:7c:af:1f:c1:2b:68:a3:1d:e8:4d:c0:bb:1d: 3d:2b:f9:88:07:14:1c:dc:e0:ba:de:b5:af:f4:01:62:0a:72: 52:0e:f2:e4:0c:cd:2f:91:93:ad:f5:bc:03:9b:ce:3a:b7:67: 99:14:b2:7f:4c:ee:ac:05:2a:21:12:50:06:57:89:2e:ce:1f: 52:00:52:1f:b1:aa:0e:48:d1:24:92:98:d3:4d:4f:87:66:1c: 85:62:73:1d:a5:de:2c:92:ca:2d:c0:e7:44:fa:8c:9d:67:e0: 25:02:eb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsNP9JDNx2Lwx+dm3JWc8SqdusgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjA5MjQwNjQ5MTZaFw0yNjA5MjUwODQ2MTZaMDMxMTAvBgNV BAMTKDNGNzA1NjA2OTgxRDA5NEQyQjY1RjcxQjdCQTlEMjQwQjAyRjI0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOM1RjLGFUCwCPyZQNaADUwiVU JjhnhxSpkSM+lOQSEpUKiEI2WpbXF/HnKaJjhRDdgQPlDHMazl51BfjLytottTOC o1ZqIru6S5QBl78drOxPnaQznPKQ7qidPOs4S4IKM+xG1+fm4ICx4GCKc52iiyFR Tpe58pMSfmB/M4sVeM/wfFC5JjypUThoV4p9eQLt7W9MFhIgANkSihSvEYjUlFzu Zj9YIlS3HmfswnEqGYAtoSpc+4XiZ+WnIW3+omTo+DxvtlF0WNMlzKfAB23e3CKd Dv2UuvhNawqImWKyDdwphCg6p5tHmvTC++ch1Ye/Z4h1q2BdL2h+eB/R/jLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3BWBpgdCU0rZfcbe6nSQLAvJBYwHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO+UYaJhQKC+NMvfeVExBMcrj2ErVkmc0JWn caDQhQIGNClnOK658e/qAtV1OhBdTtnpRk91CQKJ7k/0B61qT/PEUPdgpwLsOgcG bdVdK1F0ZJTV2fChm1snUzUBx5bork4CjEen/IdJWcWwgogVhC8yfSzxnecEq76F ASxdBaIgZuWM2hIUKxfhCg3+/iGDwZq0RCjefK8fwStoox3oTcC7HT0r+YgHFBzc 4Lreta/0AWIKclIO8uQMzS+Rk631vAObzjq3Z5kUsn9M7qwFKiESUAZXiS7OH1IA Uh+xqg5I0SSSmNNNT4dmHIVicx2l3iySyi3A50T6jJ1n4CUC60I= -----END CERTIFICATE-----Generated at Thu Sep 24 10:18:52 2026 by rpki-client