$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: iyT1Ssn5cizZjO4H7etvQ/LUdVn/PEMRZ+50J0t++HE= Subject key identifier: C4:C1:B5:38:2A:2E:5C:71:2B:87:90:4C:FE:5A:D6:00:30:69:47:58 Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 45A3CCFC5F7759D861B87DF5F47B2FEF33DF8380 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:06:09 +0000 Manifest this update: Thu 17 Sep 2026 02:01:09 +0000 Manifest next update: Fri 18 Sep 2026 03:51:09 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: P+yQDISTYa+f745myqY0wOFj84WGFUTjbCcbCPQxPsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a3:cc:fc:5f:77:59:d8:61:b8:7d:f5:f4:7b:2f:ef:33:df:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Sep 17 02:01:09 2026 GMT Not After : Sep 18 03:51:09 2026 GMT Subject: CN=C4C1B5382A2E5C712B87904CFE5AD60030694758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:01:8c:50:98:6e:61:8e:9d:ad:a0:5d:77: 2d:fe:bc:d1:2d:e0:11:59:f3:84:06:12:22:a6:b1: 99:b7:fd:7d:28:c1:24:11:39:6b:72:ca:3d:03:86: cc:11:34:3d:fe:e3:87:ed:13:6f:9c:59:40:67:df: 48:6f:17:95:3c:2e:4e:62:71:25:1e:12:8a:95:9f: 80:d7:ef:20:b7:b1:7a:05:4f:8c:3d:4d:6e:e7:45: 45:e3:7c:a5:5f:0a:f2:1d:60:12:4c:f0:db:92:87: 49:03:08:0e:8b:75:10:c6:c6:0b:6f:e4:42:1a:60: 43:fa:be:9d:f9:bb:23:b0:15:c7:1f:ae:ac:4f:1d: e5:0e:1a:8a:e9:2f:29:69:4e:b7:f9:d2:63:4c:de: 09:6c:ab:cd:f8:cd:a6:ec:b0:72:0b:02:04:e3:ab: 8e:4e:62:39:36:97:0f:82:39:55:60:48:ea:6f:2d: 54:06:03:dd:56:90:2f:ea:f7:31:82:28:f6:91:c0: 15:c3:58:93:b2:6c:91:c0:d1:18:ca:9b:9d:12:be: 3e:bf:97:44:03:79:2f:8c:e1:b4:25:bd:07:62:1e: 19:48:78:17:6f:62:8e:5c:7b:ff:0e:cb:6a:65:f3: 0c:37:8c:89:89:5e:ef:8e:fc:4a:4c:87:5e:b5:70: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C1:B5:38:2A:2E:5C:71:2B:87:90:4C:FE:5A:D6:00:30:69:47:58 X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:ab:c6:bf:4a:a4:1e:cc:8f:34:9d:db:15:35:ac:ad:f7: c9:b1:fb:1d:16:08:dd:28:10:b4:57:36:58:67:d2:62:6e:3a: 56:2f:57:41:b8:02:b9:5b:61:4f:7b:be:41:27:51:1b:5f:d4: 75:60:f2:da:30:f3:15:91:1d:18:26:d1:2e:3a:1f:e0:86:ab: a2:fb:9c:16:1b:18:f6:e3:f0:29:ba:6a:bb:b4:91:0b:38:47: 50:71:9d:f4:96:e7:8d:cb:a4:9d:b3:b2:f9:74:34:03:01:7d: 81:8b:90:0f:5a:72:de:12:a4:11:f2:73:a8:26:38:c1:7d:ef: 3b:97:99:90:06:65:5f:cb:ad:48:f0:74:5f:28:ca:eb:b8:bc: 73:7f:ff:1e:d9:65:f3:a7:53:5a:f6:9d:cd:24:5d:8c:86:a2: ff:15:40:1d:61:d2:55:5a:b2:5a:e9:49:20:9c:f8:fd:e5:b3: f4:d2:d2:22:4d:07:3c:6c:73:e0:d7:27:43:81:2a:10:77:b0: f1:be:ec:e0:1c:f0:40:25:f5:33:30:cb:4c:79:6d:54:61:3b: d3:fc:43:ac:fa:ac:e2:ff:a7:ce:58:d7:f7:4e:82:5e:c6:70: a9:14:4a:25:c9:25:9a:c1:e2:93:a6:56:de:e4:ca:22:9a:e8: 15:19:62:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaPM/F93WdhhuH319Hsv7zPfg4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA5MTcwMjAxMDlaFw0yNjA5MTgwMzUxMDlaMDMxMTAvBgNV BAMTKEM0QzFCNTM4MkEyRTVDNzEyQjg3OTA0Q0ZFNUFENjAwMzA2OTQ3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YAGMUJhuYY6draBddy3+vNEt 4BFZ84QGEiKmsZm3/X0owSQROWtyyj0DhswRND3+44ftE2+cWUBn30hvF5U8Lk5i cSUeEoqVn4DX7yC3sXoFT4w9TW7nRUXjfKVfCvIdYBJM8NuSh0kDCA6LdRDGxgtv 5EIaYEP6vp35uyOwFccfrqxPHeUOGorpLylpTrf50mNM3glsq834zabssHILAgTj q45OYjk2lw+COVVgSOpvLVQGA91WkC/q9zGCKPaRwBXDWJOybJHA0RjKm50Svj6/ l0QDeS+M4bQlvQdiHhlIeBdvYo5ce/8Oy2pl8ww3jImJXu+O/EpMh161cDPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxMG1OCouXHErh5BM/lrWADBpR1gwHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGFq8a/SqQezI80ndsVNayt98mx+x0WCN0o ELRXNlhn0mJuOlYvV0G4ArlbYU97vkEnURtf1HVg8tow8xWRHRgm0S46H+CGq6L7 nBYbGPbj8Cm6aru0kQs4R1BxnfSW543LpJ2zsvl0NAMBfYGLkA9act4SpBHyc6gm OMF97zuXmZAGZV/LrUjwdF8oyuu4vHN//x7ZZfOnU1r2nc0kXYyGov8VQB1h0lVa slrpSSCc+P3ls/TS0iJNBzxsc+DXJ0OBKhB3sPG+7OAc8EAl9TMwy0x5bVRhO9P8 Q6z6rOL/p85Y1/dOgl7GcKkUSiXJJZrB4pOmVt7kyiKa6BUZYrw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:49:34 2026 by rpki-client