$ rpki-client -vvvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: Q48Rh1sgAugbDI0tgLR1vTSRp6PU6lwtKUHXXAvyVt4= Subject key identifier: 95:51:33:5E:0B:23:C0:D1:6A:0D:51:94:9E:F1:E3:96:1C:38:8E:C8 Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 3FDD68F6B64BDC857FBB6BF87386703AC58964 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:02:37 +0000 Manifest this update: Mon 21 Sep 2026 08:57:37 +0000 Manifest next update: Tue 22 Sep 2026 09:44:37 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: wz4PC60/ubmXoeoW0SVVUdWh03v3fGT9IE/WChmKaxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dd:68:f6:b6:4b:dc:85:7f:bb:6b:f8:73:86:70:3a:c5:89:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Sep 21 08:57:37 2026 GMT Not After : Sep 22 09:44:37 2026 GMT Subject: CN=9551335E0B23C0D16A0D51949EF1E3961C388EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:c9:c4:0d:f1:26:84:95:a7:4d:bf:e4:6d: df:c0:f4:cb:24:22:a4:cb:88:fb:46:f1:4b:93:23: 52:57:65:c9:91:4d:9c:62:55:1b:9b:cb:2e:5e:b5: b6:57:5a:e3:ab:91:cd:c3:c8:53:c1:eb:dc:09:a4: 45:5b:df:6a:d0:a1:83:0c:38:98:ad:9c:6b:00:8d: 45:62:39:01:2b:96:22:55:06:57:53:97:cc:11:2a: f3:18:33:ed:ed:c3:c8:8c:88:ab:f1:ad:bc:30:6d: 6f:6e:77:cf:64:34:b2:fe:7d:30:9b:26:17:12:bd: 9b:d8:b0:d6:4d:c4:3b:96:40:cd:9d:09:24:5c:92: 06:da:18:f2:7f:db:0f:a5:37:0d:83:98:7e:0a:6d: e2:d6:1c:32:25:77:ae:dd:2f:5e:d3:58:d0:b6:3b: 54:fc:05:09:a8:76:5a:25:f9:54:51:ea:55:44:62: ff:ba:96:54:71:3a:1c:c7:01:82:15:45:a3:85:05: 0a:b1:86:52:0e:b0:0f:95:f0:3d:02:54:7b:de:93: 85:6a:8a:ff:fb:75:44:1c:67:8c:af:89:7a:c4:70: ea:88:31:a8:16:7e:d5:9d:0c:7f:39:5a:9c:f0:1b: b1:8f:cd:76:09:9c:23:7b:fb:ad:a3:b8:ff:6b:dc: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:33:5E:0B:23:C0:D1:6A:0D:51:94:9E:F1:E3:96:1C:38:8E:C8 X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:59:97:96:13:ca:76:7b:c7:93:69:9b:e4:bc:66:48:d5:28: d2:11:8b:3f:03:83:37:be:56:8f:b4:9a:de:a9:7b:c2:d5:ae: 36:4f:4a:95:03:dd:34:e8:95:3c:90:77:1c:13:fa:80:4d:bd: 8e:18:af:8d:e7:8d:39:f3:e6:02:93:6d:86:48:c7:0e:27:b6: 0a:fb:d0:22:78:c1:11:5b:12:0b:cf:f5:b5:fb:4b:5d:a3:6a: 4c:24:28:de:16:fa:b6:f6:a6:ce:72:21:af:7a:fe:51:05:7d: 25:70:41:b4:08:78:0f:72:cc:cd:f3:26:c2:30:f8:9e:1a:ec: ab:b4:ac:f5:57:c9:f2:7b:75:12:d3:de:62:24:f6:17:f7:d1: 41:62:9c:5d:0a:3c:88:b3:4f:17:d1:85:a1:87:b6:e2:63:81: 17:78:83:dd:6e:71:da:4a:f4:ba:27:a0:be:eb:00:b0:dc:71: e0:37:9c:f0:a5:4d:b3:ab:7d:6e:aa:cc:5f:98:11:45:86:e5: 3b:6a:02:6b:1c:d7:6a:4b:3a:2a:a9:55:40:80:fb:41:56:4f: 19:e3:29:86:05:f2:0b:a1:25:ae:dd:ff:26:49:15:26:d1:65: 94:95:cc:62:58:1d:29:22:a9:12:05:5d:54:b1:5f:ab:3a:b2: d2:06:64:b1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITP91o9rZL3IV/u2v4c4ZwOsWJZDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMw NjEyRDkxMB4XDTI2MDkyMTA4NTczN1oXDTI2MDkyMjA5NDQzN1owMzExMC8GA1UE AxMoOTU1MTMzNUUwQjIzQzBEMTZBMEQ1MTk0OUVGMUUzOTYxQzM4OEVDODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANdTycQN8SaEladNv+Rt38D0yyQi pMuI+0bxS5MjUldlyZFNnGJVG5vLLl61tlda46uRzcPIU8Hr3AmkRVvfatChgww4 mK2cawCNRWI5ASuWIlUGV1OXzBEq8xgz7e3DyIyIq/GtvDBtb253z2Q0sv59MJsm FxK9m9iw1k3EO5ZAzZ0JJFySBtoY8n/bD6U3DYOYfgpt4tYcMiV3rt0vXtNY0LY7 VPwFCah2WiX5VFHqVURi/7qWVHE6HMcBghVFo4UFCrGGUg6wD5XwPQJUe96ThWqK //t1RBxnjK+JesRw6ogxqBZ+1Z0MfzlanPAbsY/NdgmcI3v7raO4/2vc8S0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSVUTNeCyPA0WoNUZSe8eOWHDiOyDAfBgNVHSME GDAWgBT5rfWd/AcC6x48yPnVY8qkwGEtkTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9GOUFERjU5REZD MDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEyRDkxLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0Y5QURGNTlERkMwNzAyRUIxRTNDQzhGOUQ1NjNDQUE0QzA2MTJE OTEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OTdiOGY0YS0zMTEwLTQwYjctOTAz Mi0wZjAyMjE1YTBiNmEvMC9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FB NEMwNjEyRDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEASFmXlhPKdnvHk2mb5LxmSNUo0hGLPwODN75W j7Sa3ql7wtWuNk9KlQPdNOiVPJB3HBP6gE29jhivjeeNOfPmApNthkjHDie2CvvQ InjBEVsSC8/1tftLXaNqTCQo3hb6tvamznIhr3r+UQV9JXBBtAh4D3LMzfMmwjD4 nhrsq7Ss9VfJ8nt1EtPeYiT2F/fRQWKcXQo8iLNPF9GFoYe24mOBF3iD3W5x2kr0 uiegvusAsNxx4Dec8KVNs6t9bqrMX5gRRYblO2oCaxzXaks6KqlVQID7QVZPGeMp hgXyC6Elrt3/JkkVJtFllJXMYlgdKSKpEgVdVLFfqzqy0gZksQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:36 2026 by rpki-client