$ rpki-client -vvf rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft (raw, json) Hash identifier: 8/0L1Zxd/9E33S2vP2JB7BWGN/PCxrUzV/099V6NgVg= Subject key identifier: CF:66:A2:60:B0:2C:28:A9:72:0B:EB:B6:81:CC:FB:B4:66:71:D7:F0 Authority key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Certificate issuer: /CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Certificate serial: 7E582DBE8D9535CFA984DA404262794E2C03C9E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 19:03:25 +0000 Manifest this update: Thu 23 Jul 2026 18:58:25 +0000 Manifest next update: Fri 24 Jul 2026 20:45:25 +0000 Files and hashes: 1: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl (hash: tA31dZ4pMOAqOVuenVLAfjIr+owVLdFVD7L/Bpj/dBk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:58:2d:be:8d:95:35:cf:a9:84:da:40:42:62:79:4e:2c:03:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Validity Not Before: Jul 23 18:58:25 2026 GMT Not After : Jul 24 20:45:25 2026 GMT Subject: CN=CF66A260B02C28A9720BEBB681CCFBB46671D7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:97:0c:6c:4d:66:0e:ea:54:ae:43:78:29: 44:be:24:df:0e:31:cd:9f:d6:b7:61:5c:30:be:af: 57:09:dd:8f:ff:fc:b2:ff:b9:18:10:cc:40:05:ae: e1:2e:80:56:83:a9:40:90:3a:33:ee:f9:7f:5a:b3: 5f:c0:be:a3:f5:aa:09:60:cf:d9:3d:36:41:c5:72: 7b:4a:e6:16:e3:86:80:fa:d4:f9:20:19:cb:f0:74: ad:64:53:93:1a:90:43:96:98:db:3b:ba:f1:84:02: 73:c8:70:1d:31:ef:70:9f:0e:92:6d:9d:4b:01:55: 72:4a:dc:05:78:45:e0:a5:41:5e:ad:94:c7:79:c8: 1f:6f:78:f7:dd:af:98:d9:69:2f:46:98:16:30:cf: 40:e6:ff:37:c1:14:3a:d0:94:0e:c7:be:95:e9:f4: 45:59:91:40:58:f1:b0:8b:cd:d4:00:89:3a:86:0a: de:73:0f:ec:7a:b6:c0:5e:94:7b:7e:83:e2:f4:87: 7f:d8:1a:0d:f1:4e:4f:5e:aa:9d:e4:55:dc:7a:b3: e9:55:42:ae:e2:29:b8:f5:de:a8:67:5c:2c:2e:85: b3:91:bd:0b:87:81:db:9f:53:4d:b1:a7:76:c8:63: 36:0d:3b:23:90:22:7b:1f:58:4e:42:c2:ad:04:04: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:66:A2:60:B0:2C:28:A9:72:0B:EB:B6:81:CC:FB:B4:66:71:D7:F0 X509v3 Authority Key Identifier: keyid:F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:53:00:ed:85:e7:40:4f:1c:96:4c:35:b8:c9:25:c2:3f:11: c4:8d:e1:84:46:4c:d4:69:8e:f4:7e:0f:02:4a:7d:39:46:31: af:f0:4f:14:e5:fe:a6:97:f8:03:86:87:c5:b2:ca:ac:a9:e1: cf:5b:af:ca:dc:bb:06:2f:41:88:9e:9f:5e:6d:68:96:ad:ff: 04:dc:72:a7:d8:26:4a:53:19:fa:45:9e:d7:f2:9a:a9:17:7b: cb:b8:e1:e6:bf:d3:0c:6d:5f:f6:6f:ce:04:b9:4b:5f:55:b0: 40:44:c8:15:e8:29:fa:73:55:f0:7c:97:54:87:7e:36:33:34: 1c:d2:6a:97:d3:d0:3d:41:1d:b9:89:d1:8b:e1:d7:f5:76:d1: 19:f3:53:83:13:41:cf:d6:cd:19:05:b4:7a:08:d4:ff:ca:9a: 3b:d0:66:a8:3e:22:b5:1c:9c:66:24:59:85:04:52:ea:67:2f: 98:b4:1a:2b:b1:a9:f2:f3:b7:7c:ec:eb:e2:7a:03:5a:28:0a: d6:e7:76:ca:f4:44:7f:df:a3:07:dc:d1:ec:07:6b:e1:da:14: 49:71:53:d4:dd:7d:7a:f7:f7:5d:3d:0a:1b:19:6b:3e:48:60: 29:27:8a:64:92:76:a2:59:90:fc:ab:f4:24:b7:e1:18:73:b2: e7:15:26:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflgtvo2VNc+phNpAQmJ5TiwDyeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYw MzYxMEREQjAeFw0yNjA3MjMxODU4MjVaFw0yNjA3MjQyMDQ1MjVaMDMxMTAvBgNV BAMTKENGNjZBMjYwQjAyQzI4QTk3MjBCRUJCNjgxQ0NGQkI0NjY3MUQ3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7JcMbE1mDupUrkN4KUS+JN8O Mc2f1rdhXDC+r1cJ3Y///LL/uRgQzEAFruEugFaDqUCQOjPu+X9as1/AvqP1qglg z9k9NkHFcntK5hbjhoD61PkgGcvwdK1kU5MakEOWmNs7uvGEAnPIcB0x73CfDpJt nUsBVXJK3AV4ReClQV6tlMd5yB9vePfdr5jZaS9GmBYwz0Dm/zfBFDrQlA7HvpXp 9EVZkUBY8bCLzdQAiTqGCt5zD+x6tsBelHt+g+L0h3/YGg3xTk9eqp3kVdx6s+lV Qq7iKbj13qhnXCwuhbORvQuHgdufU02xp3bIYzYNOyOQInsfWE5Cwq0EBIgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz2aiYLAsKKlyC+u2gcz7tGZx1/AwHwYDVR0j BBgwFoAU+SScHu/pl/BvqiMj0q4H7wNhDdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc4Mzc2MmUtMmIyNi00Mzc0LWFlNjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVF RkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYwMzYxMEREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTI0OUMxRUVGRTk5N0YwNkZBQTIzMjNEMkFFMDdFRjAzNjEw RERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3 RUYwMzYxMEREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdTAO2F50BPHJZMNbjJJcI/EcSN4YRGTNRp jvR+DwJKfTlGMa/wTxTl/qaX+AOGh8Wyyqyp4c9br8rcuwYvQYien15taJat/wTc cqfYJkpTGfpFntfymqkXe8u44ea/0wxtX/ZvzgS5S19VsEBEyBXoKfpzVfB8l1SH fjYzNBzSapfT0D1BHbmJ0Yvh1/V20RnzU4MTQc/WzRkFtHoI1P/KmjvQZqg+IrUc nGYkWYUEUupnL5i0GiuxqfLzt3zs6+J6A1ooCtbndsr0RH/fowfc0ewHa+HaFElx U9TdfXr39109ChsZaz5IYCknimSSdqJZkPyr9CS34RhzsucVJvM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:45 2026 by rpki-client