$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json) Hash identifier: VpcsUimQfKsY9RYdFbspSjBJnLA6luLfUnHc52Mkh8s= Subject key identifier: 14:F1:53:33:3B:42:A6:95:BE:6A:55:3C:23:21:3F:8A:9D:B4:1E:CD Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Certificate serial: 1C12141CFF000D3A104834C3419FCB829486169A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:32:07 +0000 Manifest this update: Mon 21 Sep 2026 08:27:07 +0000 Manifest next update: Tue 22 Sep 2026 10:59:07 +0000 Files and hashes: 1: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: b5lGbZ4CoU0m94Az6uiAo9OO9nNuuv7m3v8znTNYUPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:12:14:1c:ff:00:0d:3a:10:48:34:c3:41:9f:cb:82:94:86:16:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Validity Not Before: Sep 21 08:27:07 2026 GMT Not After : Sep 22 10:59:07 2026 GMT Subject: CN=14F153333B42A695BE6A553C23213F8A9DB41ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:3b:23:7a:8e:c0:04:1b:5d:0e:51:09:4f: 79:c3:60:15:96:6a:0f:c4:d2:3f:02:7e:86:b1:5f: c9:8d:4c:ae:07:56:7c:9b:81:c4:15:ab:a0:41:19: e3:90:62:8d:d1:5b:a7:d3:bf:d5:08:02:c4:2e:7f: 87:51:b2:88:bf:b7:7a:6f:0b:c7:89:d6:ff:ff:74: 1f:1e:38:fa:56:60:c8:b2:2d:fd:d2:5f:73:b9:09: 55:5e:9d:f3:23:54:71:e2:85:45:4b:ee:17:0f:73: bd:b5:35:e2:a8:f9:38:de:30:37:ab:4f:a2:6f:bb: 29:3b:5e:35:0e:68:2c:9a:63:c1:b9:cd:73:8f:6e: cc:45:79:f2:85:64:33:cf:f2:27:a8:92:10:01:71: 9a:dc:1b:6a:67:7e:46:1a:d0:7e:25:66:91:49:b9: 46:df:3c:a3:ab:e1:35:e1:e2:db:92:52:09:13:4a: bf:6e:35:93:21:c8:12:ae:a3:1f:4c:76:9a:3d:d0: 49:89:dd:08:94:86:88:c4:2d:49:9e:b8:02:7a:3f: f2:0d:14:34:4d:d9:96:3e:9d:63:f2:08:e6:3f:cc: 3f:13:45:7e:8b:12:01:20:4b:34:f6:8f:66:b9:7e: 38:85:b4:63:6e:5b:6b:19:5f:39:e9:96:a4:d2:2c: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F1:53:33:3B:42:A6:95:BE:6A:55:3C:23:21:3F:8A:9D:B4:1E:CD X509v3 Authority Key Identifier: keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:20:d3:1f:4e:33:71:25:01:c8:7d:14:bc:6a:a4:42:ec:1c: 6e:f9:f2:66:50:df:77:2d:98:60:7f:8e:10:b3:3f:97:a8:9a: 7a:eb:37:f9:74:36:20:e0:0e:7a:76:9e:be:6f:fb:72:a4:ad: 16:71:5f:e7:45:64:04:10:53:b4:fc:86:62:0d:90:00:23:ac: 1c:3c:b2:a3:c5:b7:b9:00:15:8f:da:95:f3:25:3d:a8:83:00: 3c:b9:42:1a:5d:59:35:50:90:bc:80:5c:0d:9b:20:96:b1:a7: 2c:ab:d0:4f:17:8b:08:7a:4e:f6:9c:e2:ab:71:6d:9f:de:8e: 4e:92:3f:af:9e:4b:db:8b:70:40:92:45:b9:55:42:57:3d:e4: 64:ca:3e:2c:9d:ce:b7:57:24:f3:d6:09:3f:8c:20:b5:8b:9e: 0c:72:58:31:41:05:4b:ba:16:3b:35:5a:10:70:38:0b:fb:48: 22:e9:d0:a4:2b:9a:b7:ac:35:84:78:4a:dd:4e:0d:d0:b5:34: ce:2b:bb:16:58:aa:59:e0:b2:cf:02:72:e0:c8:66:80:7e:1e: 05:76:89:bd:6c:ae:1c:89:71:b2:83:cc:aa:79:11:31:94:11: 70:50:48:c0:22:5c:5c:68:54:91:be:c1:7b:9f:07:10:10:2a: c1:8b:67:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBIUHP8ADToQSDTDQZ/LgpSGFpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVCMjQy OUM5MkY5MjAeFw0yNjA5MjEwODI3MDdaFw0yNjA5MjIxMDU5MDdaMDMxMTAvBgNV BAMTKDE0RjE1MzMzM0I0MkE2OTVCRTZBNTUzQzIzMjEzRjhBOURCNDFFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YDsjeo7ABBtdDlEJT3nDYBWW ag/E0j8CfoaxX8mNTK4HVnybgcQVq6BBGeOQYo3RW6fTv9UIAsQuf4dRsoi/t3pv C8eJ1v//dB8eOPpWYMiyLf3SX3O5CVVenfMjVHHihUVL7hcPc721NeKo+TjeMDer T6Jvuyk7XjUOaCyaY8G5zXOPbsxFefKFZDPP8ieokhABcZrcG2pnfkYa0H4lZpFJ uUbfPKOr4TXh4tuSUgkTSr9uNZMhyBKuox9Mdpo90EmJ3QiUhojELUmeuAJ6P/IN FDRN2ZY+nWPyCOY/zD8TRX6LEgEgSzT2j2a5fjiFtGNuW2sZXznplqTSLNEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPFTMztCppW+alU8IyE/ip20Hs0wHwYDVR0j BBgwFoAU+W5rPyyM3taEY/XyTHnrJCnJL5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGI2YWQyYjQtZWJlNS00Y2MyLTlkMDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0Yy QzhDREVENjg0NjNGNUYyNEM3OUVCMjQyOUM5MkY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTZFNkIzRjJDOENERUQ2ODQ2M0Y1RjI0Qzc5RUIyNDI5Qzky RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVC MjQyOUM5MkY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0g0x9OM3ElAch9FLxqpELsHG758mZQ33ct mGB/jhCzP5eomnrrN/l0NiDgDnp2nr5v+3KkrRZxX+dFZAQQU7T8hmINkAAjrBw8 sqPFt7kAFY/alfMlPaiDADy5QhpdWTVQkLyAXA2bIJaxpyyr0E8Xiwh6Tvac4qtx bZ/ejk6SP6+eS9uLcECSRblVQlc95GTKPiydzrdXJPPWCT+MILWLngxyWDFBBUu6 Fjs1WhBwOAv7SCLp0KQrmresNYR4St1ODdC1NM4ruxZYqlngss8CcuDIZoB+HgV2 ib1srhyJcbKDzKp5ETGUEXBQSMAiXFxoVJG+wXufBxAQKsGLZ9k= -----END CERTIFICATE-----Generated at Mon Sep 21 16:23:37 2026 by rpki-client