$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json) Hash identifier: Y130PdG8GmRuzU3jw9D7kShlhPb2ys2NtklkxRw2saE= Subject key identifier: 82:0C:FC:EB:7C:35:56:FD:29:5E:D5:27:01:B3:B1:0F:70:C0:4A:32 Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Certificate serial: 70AD0848727E54B4055FD71B78F6BD9D97FE6C0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:12:58 +0000 Manifest this update: Wed 16 Sep 2026 19:07:58 +0000 Manifest next update: Thu 17 Sep 2026 20:20:58 +0000 Files and hashes: 1: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: EQ1tZZ1PBHvqwMy08YlNSeOwY8cd5HRSZUl0/ajGc5k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ad:08:48:72:7e:54:b4:05:5f:d7:1b:78:f6:bd:9d:97:fe:6c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92 Validity Not Before: Sep 16 19:07:58 2026 GMT Not After : Sep 17 20:20:58 2026 GMT Subject: CN=820CFCEB7C3556FD295ED52701B3B10F70C04A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:8c:29:3c:10:14:52:1b:65:e3:d0:27:6d: 65:ec:e3:97:0c:6b:38:76:d3:e2:e9:37:2d:77:7f: 38:39:ad:61:51:1d:ce:a2:88:0f:10:12:c4:76:96: 55:59:38:51:06:af:d5:b1:74:33:41:4e:2f:98:d1: ce:09:b5:02:4c:1d:18:78:cb:b9:ba:cc:09:84:ea: da:79:de:bd:23:db:b8:d1:dc:c5:a2:4f:2f:86:6c: 3b:46:52:85:e1:7d:ab:d1:13:40:6a:46:64:ea:5f: ce:81:8d:c7:f4:d9:e1:cf:c5:bb:41:f3:61:d7:0a: 6c:3b:9f:8b:d0:ff:1e:83:be:8f:91:91:31:5b:ae: 68:ff:9b:f3:8d:ed:ce:4f:12:86:0c:36:5f:58:d0: d1:3d:60:bd:c1:7c:bd:26:6b:38:a4:ec:fe:ba:4c: a8:25:b2:cb:19:b3:72:6c:36:df:9d:6b:28:b6:22: 73:59:a9:1b:2f:01:f7:68:c6:9a:99:b3:a8:62:7b: 9d:8b:9f:24:19:69:cf:33:e6:4d:07:bc:80:bf:2e: d4:fe:1a:cc:fc:4d:7c:54:d1:85:6e:d7:79:da:d1: 18:47:38:09:b4:08:11:25:9f:bf:ae:7f:c7:cc:b1: e2:e3:4b:03:57:16:09:9a:74:44:e1:70:ba:56:be: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:FC:EB:7C:35:56:FD:29:5E:D5:27:01:B3:B1:0F:70:C0:4A:32 X509v3 Authority Key Identifier: keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:d6:33:c2:70:e8:a3:4f:87:c5:fa:32:cc:79:fa:28:18: 36:7c:35:63:4e:e9:01:07:fa:55:33:54:4a:89:d8:41:ad:f1: bb:15:e4:15:59:f7:88:f1:0a:39:bd:34:8a:7f:ef:f2:0b:57: 95:88:0f:20:4f:d1:b5:72:98:bb:6a:01:46:87:60:23:20:02: b5:e9:ba:8b:a7:b9:84:c3:64:42:32:39:d7:8a:2c:8b:8f:fb: 50:08:0a:cf:1f:17:89:d7:61:1a:f7:5e:0f:6e:e6:3c:b0:c9: 6b:9d:bf:11:4b:ba:7a:07:e3:89:a5:cf:77:bb:8a:6b:f7:8f: d0:83:f7:71:87:67:ad:77:ff:10:fe:3c:88:55:45:49:fb:cc: 7e:96:b0:4f:af:7b:80:d9:77:7b:c6:f9:73:33:b9:94:81:ea: 18:93:7c:a0:b5:47:b5:28:98:2e:d2:f7:0b:4d:bc:c1:fa:b1: 7e:03:ec:74:2f:0f:f7:2f:38:6e:a8:b3:b8:87:95:ca:84:06: c1:c0:de:a1:67:8f:9d:9f:de:4c:43:5a:c5:b9:28:8b:af:de: ef:f7:f3:82:9f:6e:e7:26:20:b5:5d:59:01:ab:92:7a:59:36: 8f:25:37:3e:40:c5:2b:0f:c5:63:99:9a:16:4d:90:e5:b1:22: cb:44:16:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcK0ISHJ+VLQFX9cbePa9nZf+bA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVCMjQy OUM5MkY5MjAeFw0yNjA5MTYxOTA3NThaFw0yNjA5MTcyMDIwNThaMDMxMTAvBgNV BAMTKDgyMENGQ0VCN0MzNTU2RkQyOTVFRDUyNzAxQjNCMTBGNzBDMDRBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmYwpPBAUUhtl49AnbWXs45cM azh20+LpNy13fzg5rWFRHc6iiA8QEsR2llVZOFEGr9WxdDNBTi+Y0c4JtQJMHRh4 y7m6zAmE6tp53r0j27jR3MWiTy+GbDtGUoXhfavRE0BqRmTqX86Bjcf02eHPxbtB 82HXCmw7n4vQ/x6Dvo+RkTFbrmj/m/ON7c5PEoYMNl9Y0NE9YL3BfL0mazik7P66 TKglsssZs3JsNt+dayi2InNZqRsvAfdoxpqZs6hie52LnyQZac8z5k0HvIC/LtT+ Gsz8TXxU0YVu13na0RhHOAm0CBEln7+uf8fMseLjSwNXFgmadEThcLpWvu4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggz863w1Vv0pXtUnAbOxD3DASjIwHwYDVR0j BBgwFoAU+W5rPyyM3taEY/XyTHnrJCnJL5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGI2YWQyYjQtZWJlNS00Y2MyLTlkMDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0Yy QzhDREVENjg0NjNGNUYyNEM3OUVCMjQyOUM5MkY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTZFNkIzRjJDOENERUQ2ODQ2M0Y1RjI0Qzc5RUIyNDI5Qzky RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvRjk2RTZCM0YyQzhDREVENjg0NjNGNUYyNEM3OUVC MjQyOUM5MkY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOj1jPCcOijT4fF+jLMefooGDZ8NWNO6QEH +lUzVEqJ2EGt8bsV5BVZ94jxCjm9NIp/7/ILV5WIDyBP0bVymLtqAUaHYCMgArXp uounuYTDZEIyOdeKLIuP+1AICs8fF4nXYRr3Xg9u5jywyWudvxFLunoH44mlz3e7 imv3j9CD93GHZ613/xD+PIhVRUn7zH6WsE+ve4DZd3vG+XMzuZSB6hiTfKC1R7Uo mC7S9wtNvMH6sX4D7HQvD/cvOG6os7iHlcqEBsHA3qFnj52f3kxDWsW5KIuv3u/3 84KfbucmILVdWQGrknpZNo8lNz5AxSsPxWOZmhZNkOWxIstEFks= -----END CERTIFICATE-----Generated at Thu Sep 17 09:12:15 2026 by rpki-client