$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: eamatetZhbG2Vve12Ur5LDzOgybMiFCJSKhiMXI+k2g= Subject key identifier: 2A:85:5D:51:A6:5D:EC:E6:84:13:B0:2A:1B:94:9F:51:F0:5D:01:06 Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 644BC2F602A710D3B60C9E98A3CF854FA729B444 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:39:40 +0000 Manifest this update: Mon 21 Sep 2026 14:34:40 +0000 Manifest next update: Tue 22 Sep 2026 15:04:40 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: D9Tq8gGR6/HzZrgRfwgm71g6NnM/F5NAxztU2QutVYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4b:c2:f6:02:a7:10:d3:b6:0c:9e:98:a3:cf:85:4f:a7:29:b4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Sep 21 14:34:40 2026 GMT Not After : Sep 22 15:04:40 2026 GMT Subject: CN=2A855D51A65DECE68413B02A1B949F51F05D0106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:28:db:f7:d1:a8:79:a3:e8:a8:01:52:96: 32:58:26:cb:d2:57:2f:8d:ea:a8:f4:da:79:57:05: 68:41:9c:6f:b1:f6:fc:4b:89:87:9a:68:df:0e:2d: 27:93:f3:36:27:d7:13:cb:a9:ef:e9:4c:6f:6a:3f: 8c:0f:48:bc:7a:39:82:34:79:a0:48:e4:2b:22:da: bf:77:68:57:b0:07:40:63:43:6b:06:b4:de:41:d9: 91:f9:49:6c:9f:5c:bb:ff:c1:77:2f:c0:0f:fe:23: 70:84:a8:a3:13:1a:ee:1d:32:64:5d:36:9a:50:83: 49:97:01:25:b4:63:f9:f7:9f:f2:4c:c3:0b:3d:3b: 03:c4:a1:33:fa:98:8a:cc:44:d3:9d:6b:9b:ea:a9: ac:a0:ef:20:92:f4:3f:6a:51:6d:6d:24:84:3e:f2: 31:74:e7:0e:61:60:2f:b5:ec:03:cd:4f:67:ff:7e: fd:c8:7c:54:11:cf:35:89:b2:f4:04:25:96:71:47: 72:33:98:ce:83:fd:ca:21:58:93:f4:1a:27:31:39: 2c:e9:f3:60:42:47:c8:fc:45:e9:c1:3a:22:62:be: 53:8e:a7:2b:99:9e:7e:a4:71:9b:83:bb:a4:ed:98: 97:5b:17:0d:0e:76:f0:4e:27:59:25:b6:d6:04:36: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:85:5D:51:A6:5D:EC:E6:84:13:B0:2A:1B:94:9F:51:F0:5D:01:06 X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:35:8c:10:a1:35:2e:1d:3e:13:b4:b7:bb:08:1a:cc:4c:8b: a6:cd:8b:e8:ac:a0:19:1a:77:54:0a:da:77:99:d4:51:fb:79: 08:95:72:62:b4:dc:6e:5a:33:16:bb:de:b7:69:ed:95:44:51: 0c:bc:ff:df:56:ed:9b:c3:dc:80:1d:da:1a:4a:03:c6:2a:69: 0d:28:dc:66:38:00:9b:84:50:2a:a8:75:c6:2b:b2:91:6d:91: 90:1f:9f:a1:f8:76:de:70:a7:cf:9e:57:89:8e:63:70:fe:3d: 8b:d9:bf:56:1a:57:7a:4e:4a:ca:4e:2a:76:3d:b4:ed:1b:d1: 0e:69:db:d7:30:3d:21:cf:e5:ef:6c:b4:75:77:1f:63:07:0b: de:a1:07:05:0c:b7:ae:df:d6:4a:d7:42:f1:4b:08:23:b3:14: 61:27:eb:06:93:b9:41:af:3d:0f:fb:ae:aa:78:1c:7b:53:ff: 58:ad:2f:f4:5c:73:a6:2f:dc:e4:19:44:f2:88:6a:b0:1d:70: 7a:76:9b:53:10:76:2b:00:a7:8c:23:4d:92:5f:64:4f:8d:41: 4b:b3:d8:b2:78:c1:1d:19:7c:f9:32:71:3c:b6:98:dd:a5:8f: 85:a1:fa:1a:c9:dc:e7:40:c6:38:bc:38:46:0d:2b:8f:b4:29: c7:e8:42:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEvC9gKnENO2DJ6Yo8+FT6cptEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA5MjExNDM0NDBaFw0yNjA5MjIxNTA0NDBaMDMxMTAvBgNV BAMTKDJBODU1RDUxQTY1REVDRTY4NDEzQjAyQTFCOTQ5RjUxRjA1RDAxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TSjb99GoeaPoqAFSljJYJsvS Vy+N6qj02nlXBWhBnG+x9vxLiYeaaN8OLSeT8zYn1xPLqe/pTG9qP4wPSLx6OYI0 eaBI5Csi2r93aFewB0BjQ2sGtN5B2ZH5SWyfXLv/wXcvwA/+I3CEqKMTGu4dMmRd NppQg0mXASW0Y/n3n/JMwws9OwPEoTP6mIrMRNOda5vqqayg7yCS9D9qUW1tJIQ+ 8jF05w5hYC+17APNT2f/fv3IfFQRzzWJsvQEJZZxR3IzmM6D/cohWJP0GicxOSzp 82BCR8j8RenBOiJivlOOpyuZnn6kcZuDu6TtmJdbFw0OdvBOJ1klttYENgJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoVdUaZd7OaEE7AqG5SfUfBdAQYwHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg1jBChNS4dPhO0t7sIGsxMi6bNi+isoBka d1QK2neZ1FH7eQiVcmK03G5aMxa73rdp7ZVEUQy8/99W7ZvD3IAd2hpKA8YqaQ0o 3GY4AJuEUCqodcYrspFtkZAfn6H4dt5wp8+eV4mOY3D+PYvZv1YaV3pOSspOKnY9 tO0b0Q5p29cwPSHP5e9stHV3H2MHC96hBwUMt67f1krXQvFLCCOzFGEn6waTuUGv PQ/7rqp4HHtT/1itL/Rcc6Yv3OQZRPKIarAdcHp2m1MQdisAp4wjTZJfZE+NQUuz 2LJ4wR0ZfPkycTy2mN2lj4Wh+hrJ3OdAxji8OEYNK4+0KcfoQrs= -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:16 2026 by rpki-client