$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft File: 0F839E8933417407BE7F5816D8EA6AF790E1362D.mft (raw, json) Hash identifier: MWuoWF/YBbOjo+6a4KeJpeQB4S0Sh/tfqJi9+8jTBNg= Subject key identifier: FE:D5:6F:96:75:C7:EF:7B:63:21:84:A8:F2:61:B7:6D:2E:F3:74:47 Authority key identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D Certificate issuer: /CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Certificate serial: 5961552B3C722887826F9B4C3E2CCA215AAFCE7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:54:22 +0000 Manifest this update: Wed 23 Sep 2026 18:49:22 +0000 Manifest next update: Thu 24 Sep 2026 19:35:22 +0000 Files and hashes: 1: 0F839E8933417407BE7F5816D8EA6AF790E1362D.crl (hash: PqPIRDIIUvsU2qXpWWSzdpZrLGGIVKUEA7GVzX/mHvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:61:55:2b:3c:72:28:87:82:6f:9b:4c:3e:2c:ca:21:5a:af:ce:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Validity Not Before: Sep 23 18:49:22 2026 GMT Not After : Sep 24 19:35:22 2026 GMT Subject: CN=FED56F9675C7EF7B632184A8F261B76D2EF37447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:5f:bb:ae:fc:84:04:8f:ef:60:29:e3:41: 53:c1:5d:d9:c3:ee:a9:ba:96:b6:2a:72:40:6e:f7: 58:25:1b:f7:80:ea:56:45:fd:42:4a:ff:00:3b:01: 64:30:ad:05:c3:74:f4:8b:8c:82:b2:5f:2e:75:5c: 53:0c:45:e9:29:39:8a:cc:d0:e4:9a:c4:a8:a5:88: 6e:35:36:80:09:c4:ef:58:94:75:f9:da:da:da:e7: 60:ab:6d:33:1b:5c:45:9b:1d:e5:d5:1c:6f:20:4f: db:7b:ac:ca:ef:a1:36:8c:09:aa:6a:7f:c2:ca:29: 88:77:e3:eb:c2:fe:42:64:8f:8d:f6:b1:79:5c:a1: c9:8f:8f:3a:7b:b7:60:87:34:3b:88:5f:be:07:40: 92:66:a5:7e:1d:4c:5d:d0:8d:78:b2:9a:a8:2e:0a: 1a:95:b9:e9:fd:82:aa:79:58:08:3c:c6:f7:f7:22: 91:fb:26:6c:7e:ed:18:92:9b:8f:f8:f6:4b:19:74: e8:e0:ab:ac:e6:dc:d8:88:5d:c6:d0:8b:2e:65:8a: 1d:c0:2f:4e:b6:4f:7e:29:f6:1a:f0:7c:8b:da:e5: b8:38:69:4b:81:6b:fc:ff:cf:55:da:ab:d5:42:8a: ee:64:5a:e9:56:98:ed:30:9c:dd:b7:bb:3b:99:76: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D5:6F:96:75:C7:EF:7B:63:21:84:A8:F2:61:B7:6D:2E:F3:74:47 X509v3 Authority Key Identifier: keyid:0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3d:42:77:f0:9c:5f:88:7e:6f:6a:e4:b4:aa:12:c0:c5:da: 06:1d:c1:26:59:18:bb:17:12:c0:0c:9d:79:f1:16:31:eb:a2: d6:7c:40:3e:4a:ac:68:dc:f8:89:99:50:2a:a3:0b:2d:cf:ec: f9:c5:58:9d:af:30:9b:48:d5:6d:c7:bd:44:0e:5d:b0:bf:97: 37:6d:11:8e:fb:0e:18:a8:d8:30:fb:cf:7c:5f:7e:a4:ed:c3: 20:4e:27:fc:7c:99:1e:cc:ab:44:f5:6f:cb:b5:86:00:ff:c5: 0c:cb:71:71:db:fc:2c:cd:c8:89:9d:9a:7e:53:fb:c1:8b:20: b8:e2:06:92:d1:f2:1e:8d:64:ae:73:16:4e:79:54:ef:be:1f: 93:01:75:9d:38:a1:05:91:4e:8b:13:f7:a0:49:84:02:ab:c3: 72:e3:dd:02:33:5b:74:6a:34:99:50:60:98:3f:da:26:18:5b: fb:85:6a:bd:c4:19:25:04:0a:24:55:b9:ca:18:33:01:50:f0: d0:d4:f1:37:e7:71:0c:0d:fe:c3:29:2f:c5:6c:0f:c1:fd:41: ed:0d:1c:e3:d0:68:62:e2:31:e5:c9:0e:72:c9:f5:a2:70:ca: 42:41:02:bf:b8:cc:c7:dc:ae:9f:fb:44:b5:66:a9:cd:7c:fa: ef:38:c2:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWFVKzxyKIeCb5tMPizKIVqvznowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5 MEUxMzYyRDAeFw0yNjA5MjMxODQ5MjJaFw0yNjA5MjQxOTM1MjJaMDMxMTAvBgNV BAMTKEZFRDU2Rjk2NzVDN0VGN0I2MzIxODRBOEYyNjFCNzZEMkVGMzc0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChal+7rvyEBI/vYCnjQVPBXdnD 7qm6lrYqckBu91glG/eA6lZF/UJK/wA7AWQwrQXDdPSLjIKyXy51XFMMRekpOYrM 0OSaxKiliG41NoAJxO9YlHX52tra52CrbTMbXEWbHeXVHG8gT9t7rMrvoTaMCapq f8LKKYh34+vC/kJkj432sXlcocmPjzp7t2CHNDuIX74HQJJmpX4dTF3QjXiymqgu ChqVuen9gqp5WAg8xvf3IpH7Jmx+7RiSm4/49ksZdOjgq6zm3NiIXcbQiy5lih3A L062T34p9hrwfIva5bg4aUuBa/z/z1Xaq9VCiu5kWulWmO0wnN23uzuZdi15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tVvlnXH73tjIYSo8mG3bS7zdEcwHwYDVR0j BBgwFoAUD4OeiTNBdAe+f1gW2Opq95DhNi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc0ZDIwYTMtM2Q4My00YzRmLTkxMzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkz MzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5MEUxMzYyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjgzOUU4OTMzNDE3NDA3QkU3RjU4MTZEOEVBNkFGNzkwRTEz NjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZB Rjc5MEUxMzYyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo9QnfwnF+Ifm9q5LSqEsDF2gYdwSZZGLsX EsAMnXnxFjHrotZ8QD5KrGjc+ImZUCqjCy3P7PnFWJ2vMJtI1W3HvUQOXbC/lzdt EY77Dhio2DD7z3xffqTtwyBOJ/x8mR7Mq0T1b8u1hgD/xQzLcXHb/CzNyImdmn5T +8GLILjiBpLR8h6NZK5zFk55VO++H5MBdZ04oQWRTosT96BJhAKrw3Lj3QIzW3Rq NJlQYJg/2iYYW/uFar3EGSUECiRVucoYMwFQ8NDU8TfncQwN/sMpL8VsD8H9Qe0N HOPQaGLiMeXJDnLJ9aJwykJBAr+4zMfcrp/7RLVmqc18+u84wkg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:59:03 2026 by rpki-client