$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json) Hash identifier: qNchNrksH8ukzKvnYO3yy1HxQ17cH83vBOiTH6eH79U= Subject key identifier: 2D:7B:C0:AA:0B:B2:12:38:11:5C:B8:92:EE:CD:FA:9B:46:89:84:CA Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D Certificate serial: 313543EA904321D108A2BD984B4E27043911247A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:25:53 +0000 Manifest this update: Mon 21 Sep 2026 07:20:53 +0000 Manifest next update: Tue 22 Sep 2026 11:04:53 +0000 Files and hashes: 1: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: ohp9wAH1lgGryzJrNhaKZc9XT6EtMBIXty12ktABfcU=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:35:43:ea:90:43:21:d1:08:a2:bd:98:4b:4e:27:04:39:11:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D Validity Not Before: Sep 21 07:20:53 2026 GMT Not After : Sep 22 11:04:53 2026 GMT Subject: CN=2D7BC0AA0BB21238115CB892EECDFA9B468984CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:c9:88:e3:9a:6b:74:22:0e:2a:b4:73:31: 68:68:a8:2f:56:6c:4e:c3:37:dd:52:0c:f9:8b:9c: 66:9a:63:8f:10:cf:82:8d:c9:7f:72:16:64:8e:86: 13:14:cd:5a:18:80:9e:fc:b5:42:57:e6:1a:22:23: 77:f5:05:a6:35:0c:10:8b:cc:f8:ea:a6:ab:0b:8e: 40:1b:c7:5e:3f:e7:7b:9c:54:5e:7d:1b:77:55:c9: a5:a2:16:c9:e9:2b:a0:ee:af:0f:9d:b2:8b:c8:ea: c8:e9:50:6f:a0:c2:62:8a:82:26:72:5e:f0:f1:41: 87:c8:58:fd:80:93:64:19:f3:08:ec:c7:0a:5a:7c: 50:8f:50:1f:ca:9f:51:ff:e1:33:0f:96:db:4d:35: 66:82:b5:83:4c:6f:52:3f:50:27:27:8d:d9:57:41: cf:7f:97:b7:a3:20:e1:e0:bd:13:4f:54:8c:3a:fc: cc:ff:f8:7d:18:fc:65:ef:69:71:9d:c5:3d:f2:ac: 77:cb:4b:aa:d3:16:2c:9d:fc:9c:00:bb:03:b6:a1: 6a:8c:fe:73:fb:d5:f4:35:48:37:c5:2f:c4:11:2f: a5:f0:19:50:21:f8:39:77:a4:ed:74:48:49:8e:07: 2c:1f:67:42:27:ac:b2:4e:39:91:e3:6a:a4:14:30: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7B:C0:AA:0B:B2:12:38:11:5C:B8:92:EE:CD:FA:9B:46:89:84:CA X509v3 Authority Key Identifier: keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8c:a3:9d:eb:41:ba:53:02:35:01:42:36:f1:0f:3a:6d:ab: 05:77:8e:82:0b:c1:a5:bf:0d:7d:03:5d:e1:f5:9b:8e:9e:d1: f2:40:5f:b7:a4:cf:a6:62:66:b0:0c:ec:0f:50:81:1c:2a:70: 30:03:a9:bf:bd:6e:9b:7b:4d:f0:22:84:d9:42:c8:b1:a8:10: 39:f7:d2:ce:02:d0:cb:79:9e:c5:01:87:ea:eb:96:44:ec:83: 25:cd:2e:e3:3e:4d:39:39:9a:58:01:c7:47:e2:81:3d:8a:f2: 45:55:2c:de:7c:68:19:a2:3c:7d:75:61:c3:f6:09:62:c3:f9: 81:cb:73:8e:d9:94:23:5e:cd:87:1b:a8:a6:97:cc:07:b0:7c: f2:f8:94:21:09:34:1f:f1:58:2a:6f:e8:e3:55:af:3a:5a:11: a1:35:48:b5:81:df:c4:17:e6:ab:58:bb:dc:c2:77:fd:e9:fb: f1:46:e0:59:63:be:d7:74:f6:83:d8:05:80:fe:34:cf:a2:bc: d7:e7:ed:40:ed:86:16:9c:31:de:cf:7e:8f:02:d5:5b:22:a8: 6e:05:bc:48:9e:eb:87:bd:12:37:c6:44:5d:89:cd:eb:15:76: af:3e:b2:f8:eb:5e:2c:96:a9:2f:36:73:3a:ed:98:35:6c:64: be:b9:30:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTVD6pBDIdEIor2YS04nBDkRJHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZF NzAzQjI4RDAeFw0yNjA5MjEwNzIwNTNaFw0yNjA5MjIxMTA0NTNaMDMxMTAvBgNV BAMTKDJEN0JDMEFBMEJCMjEyMzgxMTVDQjg5MkVFQ0RGQTlCNDY4OTg0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3c8mI45prdCIOKrRzMWhoqC9W bE7DN91SDPmLnGaaY48Qz4KNyX9yFmSOhhMUzVoYgJ78tUJX5hoiI3f1BaY1DBCL zPjqpqsLjkAbx14/53ucVF59G3dVyaWiFsnpK6Durw+dsovI6sjpUG+gwmKKgiZy XvDxQYfIWP2Ak2QZ8wjsxwpafFCPUB/Kn1H/4TMPlttNNWaCtYNMb1I/UCcnjdlX Qc9/l7ejIOHgvRNPVIw6/Mz/+H0Y/GXvaXGdxT3yrHfLS6rTFiyd/JwAuwO2oWqM /nP71fQ1SDfFL8QRL6XwGVAh+Dl3pO10SEmOBywfZ0InrLJOOZHjaqQUMOIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULXvAqguyEjgRXLiS7s36m0aJhMowHwYDVR0j BBgwFoAUEgmdE3UM4HBPXYfCVeSwVucDso0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdlZjI4YWYtYTlhZS00YzMzLThjOTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3 NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZFNzAzQjI4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjA5OUQxMzc1MENFMDcwNEY1RDg3QzI1NUU0QjA1NkU3MDNC MjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIw NTZFNzAzQjI4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Mo53rQbpTAjUBQjbxDzptqwV3joILwaW/ DX0DXeH1m46e0fJAX7ekz6ZiZrAM7A9QgRwqcDADqb+9bpt7TfAihNlCyLGoEDn3 0s4C0Mt5nsUBh+rrlkTsgyXNLuM+TTk5mlgBx0figT2K8kVVLN58aBmiPH11YcP2 CWLD+YHLc47ZlCNezYcbqKaXzAewfPL4lCEJNB/xWCpv6ONVrzpaEaE1SLWB38QX 5qtYu9zCd/3p+/FG4Fljvtd09oPYBYD+NM+ivNfn7UDthhacMd7Pfo8C1VsiqG4F vEie64e9EjfGRF2JzesVdq8+svjrXiyWqS82czrtmDVsZL65MNg= -----END CERTIFICATE-----Generated at Tue Sep 22 01:16:24 2026 by rpki-client