$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json) Hash identifier: ftRnfxAHVyXQPRVnys3sijidRoPc2Ggu+DsR8W/Wg9M= Subject key identifier: 5C:EC:C2:AD:F1:E7:63:1E:4A:57:DE:F1:7D:57:34:0E:06:85:A0:B6 Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Certificate serial: 2A205FA048490BF5979EB15EEB2AD424FCD01F45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft Manifest number: BD Signing time: Mon 21 Sep 2026 16:42:14 +0000 Manifest this update: Mon 21 Sep 2026 16:37:14 +0000 Manifest next update: Tue 22 Sep 2026 17:38:14 +0000 Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: qHb9dRpmAYFyWqNKM4pDWaXBcEwNaJaxYC+L+LvwOMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:20:5f:a0:48:49:0b:f5:97:9e:b1:5e:eb:2a:d4:24:fc:d0:1f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Validity Not Before: Sep 21 16:37:14 2026 GMT Not After : Sep 22 17:38:14 2026 GMT Subject: CN=5CECC2ADF1E7631E4A57DEF17D57340E0685A0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:07:4a:77:7c:18:43:ef:4e:95:a1:b4:fb:ec: d1:42:3f:45:83:2c:e2:c0:c3:94:38:f9:0c:1b:ac: de:3e:c6:75:f5:2b:97:c2:44:41:35:87:57:54:02: da:4f:51:8f:81:a4:a0:15:de:fc:36:f9:62:88:9f: 29:de:aa:7b:ad:5c:68:6c:fd:74:dc:29:b6:3a:3c: 58:b4:f8:db:76:88:60:34:6f:9d:a0:5f:9d:f7:5a: 12:76:e8:dc:72:43:88:94:a3:a4:2d:98:a0:0d:37: 83:f5:96:2e:fe:16:55:c3:f1:77:82:92:56:bc:61: 19:31:da:f1:4a:f2:cd:71:a4:ab:b5:cc:a1:80:41: fe:2f:28:ee:49:71:46:cb:14:3c:26:4e:e3:46:5a: ab:24:0c:e5:da:48:ae:d4:96:f9:fa:a8:67:d5:7a: 59:b0:72:53:a6:c3:bf:93:b3:87:33:21:f2:1e:86: b1:b1:49:05:0a:2c:dd:28:aa:6a:ee:eb:07:55:07: 3f:6e:59:ba:ef:7d:6d:fc:9b:83:bc:22:2f:1b:f8: 28:b0:9f:c8:d6:ac:71:87:22:82:d0:ab:a6:4d:07: a0:de:42:09:9a:84:f4:fe:87:51:a3:c5:1e:7f:0f: f0:c3:cb:65:8f:3d:42:22:5f:78:b1:0e:d4:7c:39: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:C2:AD:F1:E7:63:1E:4A:57:DE:F1:7D:57:34:0E:06:85:A0:B6 X509v3 Authority Key Identifier: keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b4:60:1e:1f:f0:9a:e0:1b:6d:52:2f:8b:ac:ed:c6:64:4c: 63:f1:3b:d2:12:31:c3:29:68:4e:29:88:a2:dd:f0:a1:7c:38: 35:66:60:f4:b1:38:46:f8:c5:75:0b:69:f4:7e:04:8e:a0:59: 67:89:c6:e1:8d:c0:e7:68:db:f2:9e:2d:9b:f3:67:22:d3:e5: e9:b4:63:8a:6f:e7:1f:f6:eb:ef:13:fd:8a:b5:0d:91:b9:82: 2f:a2:ee:8b:9a:27:31:19:e6:b8:3e:b8:c2:12:06:d9:8a:e1: a1:8d:4f:da:43:52:73:fa:e9:34:1c:05:f3:de:2d:e9:2e:45: ea:50:e9:f2:0f:9c:a8:9c:99:2b:95:84:08:23:c6:8c:26:dc: db:d0:de:3f:c3:ad:04:df:bb:21:2e:f6:7e:5d:bb:42:b4:42: 6e:14:fa:a5:d0:08:2f:41:b4:0c:d1:7c:dd:35:70:b4:76:90: 08:b4:9a:11:2e:3c:21:93:97:d3:5a:8b:54:20:30:44:42:19: 5c:1a:a3:a1:16:44:16:8f:2d:c9:ef:fa:06:7b:b9:90:6f:2a: 86:d4:e4:67:d1:a3:44:2b:1a:03:5e:97:74:c6:6a:66:fd:3e: 93:b4:f3:97:b3:cc:98:53:87:49:00:4e:28:20:03:dc:5d:d1: d9:a6:34:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiBfoEhJC/WXnrFe6yrUJPzQH0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJCNjdC Nzc0RUM5NzAeFw0yNjA5MjExNjM3MTRaFw0yNjA5MjIxNzM4MTRaMDMxMTAvBgNV BAMTKDVDRUNDMkFERjFFNzYzMUU0QTU3REVGMTdENTczNDBFMDY4NUEwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1B0p3fBhD706VobT77NFCP0WD LOLAw5Q4+QwbrN4+xnX1K5fCREE1h1dUAtpPUY+BpKAV3vw2+WKInyneqnutXGhs /XTcKbY6PFi0+Nt2iGA0b52gX533WhJ26NxyQ4iUo6QtmKANN4P1li7+FlXD8XeC kla8YRkx2vFK8s1xpKu1zKGAQf4vKO5JcUbLFDwmTuNGWqskDOXaSK7Ulvn6qGfV elmwclOmw7+Ts4czIfIehrGxSQUKLN0oqmru6wdVBz9uWbrvfW38m4O8Ii8b+Ciw n8jWrHGHIoLQq6ZNB6DeQgmahPT+h1GjxR5/D/DDy2WPPUIiX3ixDtR8OWpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOzCrfHnYx5KV97xfVc0DgaFoLYwHwYDVR0j BBgwFoAUAA8rIbxcAEdeaYuhiIC7Z7d07JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI2MjViZjItZjNiNi00ZTljLTg1YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFC QzVDMDA0NzVFNjk4QkExODg4MEJCNjdCNzc0RUM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBGMkIyMUJDNUMwMDQ3NUU2OThCQTE4ODgwQkI2N0I3NzRF Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJC NjdCNzc0RUM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL20YB4f8JrgG21SL4us7cZkTGPxO9ISMcMp aE4piKLd8KF8ODVmYPSxOEb4xXULafR+BI6gWWeJxuGNwOdo2/KeLZvzZyLT5em0 Y4pv5x/26+8T/Yq1DZG5gi+i7ouaJzEZ5rg+uMISBtmK4aGNT9pDUnP66TQcBfPe LekuRepQ6fIPnKicmSuVhAgjxowm3NvQ3j/DrQTfuyEu9n5du0K0Qm4U+qXQCC9B tAzRfN01cLR2kAi0mhEuPCGTl9Nai1QgMERCGVwao6EWRBaPLcnv+gZ7uZBvKobU 5GfRo0QrGgNel3TGamb9PpO085ezzJhTh0kATiggA9xd0dmmNB8= -----END CERTIFICATE-----Generated at Tue Sep 22 11:42:28 2026 by rpki-client