$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json) Hash identifier: mlzw0q6kpX5gP8exJc+Le1Rc+ZfbqF+G/6eNUBLopp4= Subject key identifier: D4:EF:CC:E0:F2:57:16:B1:9B:C5:8E:45:30:35:0F:BE:B9:CA:AB:DE Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D Certificate serial: 5EF046151448F1CC946F257425EE0B77B7939232 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 21:01:36 +0000 Manifest this update: Fri 25 Sep 2026 20:56:36 +0000 Manifest next update: Sat 26 Sep 2026 23:32:36 +0000 Files and hashes: 1: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: fEifi4J9XoxRB/IODoqQW+evJ7cl3fqNxc5r0efLmEY=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f0:46:15:14:48:f1:cc:94:6f:25:74:25:ee:0b:77:b7:93:92:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D Validity Not Before: Sep 25 20:56:36 2026 GMT Not After : Sep 26 23:32:36 2026 GMT Subject: CN=D4EFCCE0F25716B19BC58E4530350FBEB9CAABDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:5b:f2:f2:48:fa:49:d2:59:e6:c1:f3:a6: d7:e1:3b:9e:49:12:83:67:4b:6b:fd:a4:14:bb:f3: 1a:80:12:8a:00:7c:54:9a:9b:6b:b7:29:bc:6c:05: bc:30:02:bd:f6:7a:50:46:cf:6d:ca:b4:5e:4e:94: 4e:89:31:a8:8e:d3:6c:17:85:7a:1a:1e:54:7a:e1: e1:5b:6a:7c:b7:26:12:3a:4c:12:05:28:f2:b0:01: a8:85:f3:80:14:f8:68:62:df:e5:cb:bd:3d:73:25: bf:ff:b4:3d:f9:4d:86:ec:92:62:eb:f9:48:49:ab: 65:66:e0:b9:2c:ad:69:60:89:96:6e:ab:07:b5:51: 15:6a:9e:bd:38:f2:34:fe:04:0f:f2:4a:62:13:02: 02:37:ba:e4:6b:6e:af:9f:60:e3:4f:4e:2f:d7:e6: 0f:9d:7a:c1:6a:75:ae:bb:3d:3a:c8:52:bb:9b:bf: ee:be:5b:1a:87:8f:23:1c:9c:37:29:82:5a:7d:07: 1b:dc:78:67:b0:9a:82:da:61:5f:79:1d:ee:2a:d6: f6:0c:4b:9a:43:4f:f4:4e:17:ea:b0:70:04:b3:ce: 71:2d:3f:7e:40:98:7c:c0:62:af:47:f3:dd:b4:bf: 4c:c1:e5:1e:2a:7e:01:f1:74:75:99:a1:45:96:a8: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:CC:E0:F2:57:16:B1:9B:C5:8E:45:30:35:0F:BE:B9:CA:AB:DE X509v3 Authority Key Identifier: keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9f:a0:ca:aa:86:b9:b8:e5:3d:3c:e4:5d:a9:b6:45:72:f1: 7e:c3:8e:57:e7:c1:99:be:e4:75:41:ca:8e:1c:f1:a7:58:38: f4:2d:ac:08:28:4d:95:dc:22:8d:79:da:f0:9d:bb:01:40:14: 96:0f:6d:60:22:65:96:26:77:99:13:00:3b:d1:76:1c:06:59: 1b:c3:3e:71:2e:2c:ee:81:80:de:a3:42:76:35:fd:ec:a2:ab: 24:0d:57:f6:01:35:ce:61:ec:3c:b7:04:ca:f3:fc:f9:58:03: 2a:5d:91:df:01:3b:a3:5f:4a:e1:a9:bc:e6:a5:ad:7e:ae:59: b1:24:82:57:e5:a3:f9:fc:d1:e4:cc:08:83:11:43:8f:25:93: fc:39:09:c8:e4:ad:b1:8e:4c:2c:d1:bf:ad:4a:b8:c4:7e:a5: 48:f1:19:e2:ef:ce:a3:3a:e8:80:75:2c:1d:c4:14:fd:e8:c2: 13:fd:fd:74:d0:82:bd:bf:9c:39:a3:f8:e9:94:61:e2:e6:e2: 50:f0:e8:1d:54:f8:9d:0c:68:e4:78:f5:8e:02:1a:76:a7:44: 46:0d:3d:5d:b5:59:0f:ba:1a:1a:1f:cd:31:db:d4:3a:19:93: 9d:53:07:4c:eb:27:d9:9b:56:25:c0:c2:71:a2:b8:23:9d:56: a0:09:08:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvBGFRRI8cyUbyV0Je4Ld7eTkjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZF NzAzQjI4RDAeFw0yNjA5MjUyMDU2MzZaFw0yNjA5MjYyMzMyMzZaMDMxMTAvBgNV BAMTKEQ0RUZDQ0UwRjI1NzE2QjE5QkM1OEU0NTMwMzUwRkJFQjlDQUFCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN81vy8kj6SdJZ5sHzptfhO55J EoNnS2v9pBS78xqAEooAfFSam2u3KbxsBbwwAr32elBGz23KtF5OlE6JMaiO02wX hXoaHlR64eFbany3JhI6TBIFKPKwAaiF84AU+Ghi3+XLvT1zJb//tD35TYbskmLr +UhJq2Vm4LksrWlgiZZuqwe1URVqnr048jT+BA/ySmITAgI3uuRrbq+fYONPTi/X 5g+desFqda67PTrIUrubv+6+WxqHjyMcnDcpglp9BxvceGewmoLaYV95He4q1vYM S5pDT/ROF+qwcASzznEtP35AmHzAYq9H8920v0zB5R4qfgHxdHWZoUWWqCl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1O/M4PJXFrGbxY5FMDUPvrnKq94wHwYDVR0j BBgwFoAUEgmdE3UM4HBPXYfCVeSwVucDso0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdlZjI4YWYtYTlhZS00YzMzLThjOTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3 NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZFNzAzQjI4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjA5OUQxMzc1MENFMDcwNEY1RDg3QzI1NUU0QjA1NkU3MDNC MjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIw NTZFNzAzQjI4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSfoMqqhrm45T085F2ptkVy8X7DjlfnwZm+ 5HVByo4c8adYOPQtrAgoTZXcIo152vCduwFAFJYPbWAiZZYmd5kTADvRdhwGWRvD PnEuLO6BgN6jQnY1/eyiqyQNV/YBNc5h7Dy3BMrz/PlYAypdkd8BO6NfSuGpvOal rX6uWbEkglflo/n80eTMCIMRQ48lk/w5CcjkrbGOTCzRv61KuMR+pUjxGeLvzqM6 6IB1LB3EFP3owhP9/XTQgr2/nDmj+OmUYeLm4lDw6B1U+J0MaOR49Y4CGnanREYN PV21WQ+6GhofzTHb1DoZk51TB0zrJ9mbViXAwnGiuCOdVqAJCIU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:55:24 2026 by rpki-client