$ rpki-client -vvf rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft (raw, json) Hash identifier: 9gYA1Vl43Nq0su3uBeEgoggJxuXvW5WcFVFLCyPx1Ew= Subject key identifier: B6:2F:AB:EE:CE:A4:30:5B:19:1D:73:BB:19:AE:D7:D0:FE:99:64:16 Authority key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Certificate issuer: /CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Certificate serial: 242B76176A121DE8A232709EBC63063A6F3E5209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:32:21 +0000 Manifest this update: Tue 12 May 2026 17:27:21 +0000 Manifest next update: Wed 13 May 2026 20:20:21 +0000 Files and hashes: 1: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl (hash: 2rPG8wce5A0yWqhzuPfXQr/2Y6g0JYVaOmc3jtz+cYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2b:76:17:6a:12:1d:e8:a2:32:70:9e:bc:63:06:3a:6f:3e:52:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Validity Not Before: May 12 17:27:21 2026 GMT Not After : May 13 20:20:21 2026 GMT Subject: CN=B62FABEECEA4305B191D73BB19AED7D0FE996416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:16:85:e7:4d:79:f7:63:7f:9a:f8:eb:b9: 42:8c:53:56:08:7c:ec:84:8f:05:d9:3a:d8:ca:a7: 02:4c:2d:7c:f5:1b:eb:4c:30:db:99:fa:68:3f:47: 58:1c:cd:1f:6d:2d:a1:24:56:f5:df:79:e1:53:27: 3f:c0:c5:78:9a:c7:7d:cf:7a:e0:e5:e8:4e:c0:f6: 42:86:2c:f1:08:b3:41:23:d2:5a:c3:34:d5:8c:9e: 5a:77:03:fd:ce:64:e5:df:86:2c:69:c6:02:2f:8c: 9a:81:b6:41:74:9b:7c:fe:7a:a4:0b:45:ae:0c:39: b0:63:2b:a2:85:3a:33:22:60:2e:ff:7b:e4:59:2e: 24:ef:ac:87:59:36:60:f9:54:84:50:f7:49:6a:f1: 90:df:c9:8f:d0:99:55:de:18:ee:f1:89:a1:15:db: 33:2c:e3:0c:c8:b1:0a:9f:4f:d0:03:ca:08:5d:66: b6:a1:86:2d:d8:ec:c5:e6:cb:57:9d:ba:80:fc:70: 3d:08:72:cd:60:45:0b:19:b6:bb:df:ff:ce:7b:c6: fc:b2:55:a0:02:3b:96:09:a1:5d:b2:c6:69:61:00: 42:cf:78:ac:f2:5f:87:bb:5e:8e:62:8c:59:ab:ca: be:57:cb:6f:bf:24:5f:38:ef:05:03:a4:05:0d:f6: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:AB:EE:CE:A4:30:5B:19:1D:73:BB:19:AE:D7:D0:FE:99:64:16 X509v3 Authority Key Identifier: keyid:F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4e:73:62:4f:1c:a8:0f:a4:71:3b:af:74:ac:7b:04:06:03: cb:40:db:11:3f:ac:80:7d:50:95:18:fe:23:3b:6e:cd:ea:79: e3:30:ba:0f:11:de:32:ce:bf:f2:48:e8:52:05:0f:68:04:f4: 9c:65:32:ef:47:15:48:94:f7:2e:8d:3c:d3:74:da:a7:1f:a8: 02:33:13:24:68:80:bd:d0:ec:a8:53:e6:94:ea:a0:7b:fa:b9: 26:cb:6d:a6:db:4c:73:80:ad:11:ea:6a:8d:15:76:ae:d1:15: 1d:80:65:a1:f9:36:24:cc:fa:bb:37:1c:8d:b7:79:8d:d4:08: 40:f7:50:b5:d1:fc:18:99:be:36:1a:e9:5a:ef:90:76:bc:19: 3e:25:32:7f:11:05:c0:d3:78:5b:69:c8:8a:25:80:3f:b0:f9: b7:5a:75:d1:9b:3c:31:55:e1:1c:d8:5d:38:61:a3:f9:e4:04: ff:39:e8:b7:3d:a4:12:72:8e:9b:02:3d:1c:f1:c8:4f:5e:ad: 03:32:5f:94:70:e5:de:d1:31:be:1a:27:0a:39:7d:b0:70:c9: 22:e6:c7:7f:f4:be:78:67:b6:61:07:08:48:a5:27:b0:1d:7c: 0f:d0:8a:3c:01:d9:8a:e0:71:5b:65:fb:c6:22:fb:f2:3e:f3: 39:09:ab:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCt2F2oSHeiiMnCevGMGOm8+UgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYw MzYxMEREQjAeFw0yNjA1MTIxNzI3MjFaFw0yNjA1MTMyMDIwMjFaMDMxMTAvBgNV BAMTKEI2MkZBQkVFQ0VBNDMwNUIxOTFENzNCQjE5QUVEN0QwRkU5OTY0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirRaF501592N/mvjruUKMU1YI fOyEjwXZOtjKpwJMLXz1G+tMMNuZ+mg/R1gczR9tLaEkVvXfeeFTJz/AxXiax33P euDl6E7A9kKGLPEIs0Ej0lrDNNWMnlp3A/3OZOXfhixpxgIvjJqBtkF0m3z+eqQL Ra4MObBjK6KFOjMiYC7/e+RZLiTvrIdZNmD5VIRQ90lq8ZDfyY/QmVXeGO7xiaEV 2zMs4wzIsQqfT9ADyghdZrahhi3Y7MXmy1eduoD8cD0Ics1gRQsZtrvf/857xvyy VaACO5YJoV2yxmlhAELPeKzyX4e7Xo5ijFmryr5Xy2+/JF847wUDpAUN9vflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUti+r7s6kMFsZHXO7Ga7X0P6ZZBYwHwYDVR0j BBgwFoAU+SScHu/pl/BvqiMj0q4H7wNhDdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc4Mzc2MmUtMmIyNi00Mzc0LWFlNjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVF RkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYwMzYxMEREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTI0OUMxRUVGRTk5N0YwNkZBQTIzMjNEMkFFMDdFRjAzNjEw RERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3 RUYwMzYxMEREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1Oc2JPHKgPpHE7r3SsewQGA8tA2xE/rIB9 UJUY/iM7bs3qeeMwug8R3jLOv/JI6FIFD2gE9JxlMu9HFUiU9y6NPNN02qcfqAIz EyRogL3Q7KhT5pTqoHv6uSbLbabbTHOArRHqao0Vdq7RFR2AZaH5NiTM+rs3HI23 eY3UCED3ULXR/BiZvjYa6VrvkHa8GT4lMn8RBcDTeFtpyIolgD+w+bdaddGbPDFV 4RzYXThho/nkBP856Lc9pBJyjpsCPRzxyE9erQMyX5Rw5d7RMb4aJwo5fbBwySLm x3/0vnhntmEHCEilJ7AdfA/QijwB2YrgcVtl+8Yi+/I+8zkJq5M= -----END CERTIFICATE-----Generated at Tue May 12 22:20:18 2026 by rpki-client