$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft (raw, json) Hash identifier: MWZGCwZvEnf4b9XPWVIJItu6uqakhY3L2s35HWqcBc4= Subject key identifier: 0D:3A:14:E1:FC:B3:11:D5:C5:47:5A:BF:AC:AC:15:E3:9F:30:69:39 Authority key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Certificate issuer: /CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Certificate serial: 20569DBC6563992CB3E66014B1729A7195D8D8E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:10:52 +0000 Manifest this update: Thu 24 Sep 2026 00:05:52 +0000 Manifest next update: Fri 25 Sep 2026 04:08:52 +0000 Files and hashes: 1: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl (hash: 5mCaWrhIRMoQz9SjgQMArKjwpR+D+7woD71/RVx0jVg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:56:9d:bc:65:63:99:2c:b3:e6:60:14:b1:72:9a:71:95:d8:d8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Validity Not Before: Sep 24 00:05:52 2026 GMT Not After : Sep 25 04:08:52 2026 GMT Subject: CN=0D3A14E1FCB311D5C5475ABFACAC15E39F306939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:68:f7:09:43:01:5b:61:26:c8:1f:e7:4f: 03:f0:1e:19:8a:22:83:8f:31:3b:bb:7b:0f:44:b2: 69:4a:5e:51:ad:12:c6:9e:dd:e9:f5:e1:2e:b0:68: 9b:26:b9:ef:d7:01:91:83:12:4b:1d:92:0e:a3:2f: fd:5b:eb:29:36:ba:0e:74:ac:5a:8b:78:43:a6:68: f2:bf:b6:1d:12:f9:4c:9f:c3:46:64:90:50:3e:d2: c3:66:4a:7e:63:1d:62:61:c8:85:51:4d:0b:44:f0: 7c:9a:b8:e3:71:f8:04:40:f8:53:1a:77:d0:20:4a: 78:6a:04:6d:11:a9:df:4b:49:ac:fc:ff:6a:6d:08: fa:7e:25:b7:07:d7:df:82:3a:a0:4a:bf:a2:ce:3a: 92:16:e9:f0:37:ec:a2:fd:25:02:40:0c:cc:a6:24: 29:95:76:d3:27:6a:8c:9b:e6:3a:a3:42:92:7b:32: cc:e2:6c:b9:99:5d:66:d0:19:fc:02:c7:30:cb:d4: 07:d7:ba:e2:7c:ca:66:e4:c9:27:98:13:bd:c6:8f: 53:e2:0a:eb:b2:59:e4:ff:9a:a6:a3:8e:7c:4a:80: 6a:b6:2d:fd:bd:df:96:6a:cf:29:39:93:3a:cb:36: 8d:49:26:15:1f:ab:c3:3e:b5:09:6b:ec:66:4d:65: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3A:14:E1:FC:B3:11:D5:C5:47:5A:BF:AC:AC:15:E3:9F:30:69:39 X509v3 Authority Key Identifier: keyid:F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7d:e2:b2:99:33:d8:88:cf:5f:88:a3:77:ba:67:65:f0:ad: 69:d6:88:54:88:68:af:1d:b2:88:cc:bb:f0:47:38:0c:4b:a7: 1a:79:ec:2e:d4:bb:8f:68:28:9f:b0:36:93:4b:46:65:41:48: fa:33:74:78:f5:69:3f:10:91:7a:53:62:85:cf:68:37:8a:ef: 97:2f:cb:cb:63:aa:6b:7e:0f:fb:e3:96:90:3f:16:3f:7c:4d: 9b:9f:1f:91:57:99:cb:e8:7a:14:cc:89:ff:61:00:96:85:87: 51:80:8d:16:0b:21:ba:20:1a:81:d8:67:39:47:7b:be:55:36: f1:39:c6:56:69:04:c9:0c:22:55:26:f0:42:3b:c4:39:b3:08: 52:f7:9f:20:25:35:bb:e7:0b:4f:19:e8:61:11:08:b2:94:8a: 63:b2:dd:d4:cc:2a:44:f9:54:ab:84:b0:30:e4:9b:5c:55:36: a9:ea:61:2e:52:4e:c3:f0:65:a2:42:0f:45:29:1f:76:bc:b3: 45:37:41:f7:ff:ae:2c:b7:15:58:b4:d4:be:32:ad:f3:f6:5b: b0:22:ce:82:ae:bf:fb:9d:7c:70:6d:eb:b8:21:7a:8e:af:fa: f9:ff:f0:03:84:e2:f7:3a:44:fe:63:01:40:0b:47:de:b6:57: 70:80:bd:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFadvGVjmSyz5mAUsXKacZXY2OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYw MzYxMEREQjAeFw0yNjA5MjQwMDA1NTJaFw0yNjA5MjUwNDA4NTJaMDMxMTAvBgNV BAMTKDBEM0ExNEUxRkNCMzExRDVDNTQ3NUFCRkFDQUMxNUUzOUYzMDY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CGj3CUMBW2EmyB/nTwPwHhmK IoOPMTu7ew9EsmlKXlGtEsae3en14S6waJsmue/XAZGDEksdkg6jL/1b6yk2ug50 rFqLeEOmaPK/th0S+Uyfw0ZkkFA+0sNmSn5jHWJhyIVRTQtE8HyauONx+ARA+FMa d9AgSnhqBG0Rqd9LSaz8/2ptCPp+JbcH19+COqBKv6LOOpIW6fA37KL9JQJADMym JCmVdtMnaoyb5jqjQpJ7MszibLmZXWbQGfwCxzDL1AfXuuJ8ymbkySeYE73Gj1Pi CuuyWeT/mqajjnxKgGq2Lf2935Zqzyk5kzrLNo1JJhUfq8M+tQlr7GZNZZiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDToU4fyzEdXFR1q/rKwV458waTkwHwYDVR0j BBgwFoAU+SScHu/pl/BvqiMj0q4H7wNhDdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc4Mzc2MmUtMmIyNi00Mzc0LWFlNjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVF RkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYwMzYxMEREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTI0OUMxRUVGRTk5N0YwNkZBQTIzMjNEMkFFMDdFRjAzNjEw RERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3 RUYwMzYxMEREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx94rKZM9iIz1+Io3e6Z2XwrWnWiFSIaK8d sojMu/BHOAxLpxp57C7Uu49oKJ+wNpNLRmVBSPozdHj1aT8QkXpTYoXPaDeK75cv y8tjqmt+D/vjlpA/Fj98TZufH5FXmcvoehTMif9hAJaFh1GAjRYLIbogGoHYZzlH e75VNvE5xlZpBMkMIlUm8EI7xDmzCFL3nyAlNbvnC08Z6GERCLKUimOy3dTMKkT5 VKuEsDDkm1xVNqnqYS5STsPwZaJCD0UpH3a8s0U3Qff/riy3FVi01L4yrfP2W7Ai zoKuv/udfHBt67gheo6v+vn/8AOE4vc6RP5jAUALR962V3CAvUU= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:42 2026 by rpki-client