$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json) Hash identifier: /jIaPL1REsKnZE1lDxZsblEjyaSBh/Ae+iw1kvlsWaM= Subject key identifier: 51:E1:4D:46:DE:03:49:47:9C:17:FA:FA:03:57:B0:8B:9B:36:AB:79 Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Certificate serial: 1E4EBA41CD8378D6B5DE201863DA3869CABB2CE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:06:00 +0000 Manifest this update: Thu 17 Sep 2026 06:01:00 +0000 Manifest next update: Fri 18 Sep 2026 08:09:00 +0000 Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: eELvSzl+u41U1l7G4JOLUOaU67sLQdaHwRCJOxqZnjk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4e:ba:41:cd:83:78:d6:b5:de:20:18:63:da:38:69:ca:bb:2c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Validity Not Before: Sep 17 06:01:00 2026 GMT Not After : Sep 18 08:09:00 2026 GMT Subject: CN=51E14D46DE0349479C17FAFA0357B08B9B36AB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:93:d8:4a:de:33:6d:bb:2d:00:55:ec:f1: 1d:b0:c4:61:95:bf:1c:13:67:5b:f6:03:da:e4:1c: 4f:80:8a:0b:4a:2a:42:48:d7:97:73:b3:77:67:20: a5:dc:11:c2:02:af:0a:9e:da:67:33:5a:34:b4:2b: a5:a6:fc:60:4f:fa:10:5d:25:4e:a5:36:20:04:40: 7e:86:f7:7e:14:ed:55:d2:f6:54:87:f8:54:a9:ef: be:8a:36:ff:2c:ac:5a:27:35:1c:5e:c6:f4:71:d9: 7e:c2:73:5f:aa:ef:e3:b4:8e:3c:a3:98:bb:ff:71: 32:cf:2a:69:a9:04:10:9c:10:dd:db:3e:f5:c7:fa: 26:65:dd:02:01:4f:bb:eb:38:12:d6:d2:4e:40:90: db:0a:32:45:ff:e7:06:29:aa:fa:31:d8:0e:31:46: 59:7b:b3:4e:9b:5d:fa:1a:d8:f6:5d:f7:37:31:8b: 19:ed:3f:de:36:9f:30:33:b7:91:81:fa:f5:fb:f6: 08:01:64:80:54:f3:55:37:04:a4:87:1c:5f:56:c3: 31:c9:07:fd:bf:a7:4d:e1:b7:a6:65:22:9b:73:6f: 9f:79:86:52:1e:61:74:b2:20:01:9d:d6:fa:c7:97: 87:51:85:f4:e6:42:0b:6d:bf:9a:7d:55:46:81:31: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:4D:46:DE:03:49:47:9C:17:FA:FA:03:57:B0:8B:9B:36:AB:79 X509v3 Authority Key Identifier: keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:38:01:06:a1:40:9d:34:ca:a3:9f:17:7f:58:92:05:7e:31: ee:0b:b8:72:7f:a9:45:3d:ad:ae:9c:4f:12:f3:8a:48:de:f3: 60:ab:f6:3b:43:c2:a0:38:c8:9b:b0:c1:d0:40:7a:14:31:7b: e5:20:d8:e3:84:cf:b1:dc:58:28:21:63:78:de:28:1a:b1:2a: 67:20:ef:ec:fa:a6:cf:b4:db:fd:f1:ca:99:e9:42:16:43:10: 2b:3e:eb:cc:5a:11:00:97:39:64:be:d4:1c:48:4e:a5:ac:ad: 69:f4:e4:b8:fa:fb:81:9a:0d:9a:7c:3c:1a:b4:fa:d6:59:90: ed:36:4c:b2:1b:af:63:19:9a:56:9c:97:30:f1:d2:06:51:b1: f8:45:62:d1:47:8f:4f:2f:2e:4f:46:d1:5c:6f:28:6e:fa:b8: e4:33:3c:04:e6:2f:97:6e:8e:f3:5d:15:57:1d:c4:f1:ca:4e: 36:44:a7:b7:d1:34:cb:16:e4:b7:67:38:b4:e0:bb:d6:ee:49: 4c:42:b1:8c:df:9b:08:1f:d0:68:20:39:30:9b:aa:89:fa:7c: 89:43:d3:53:49:1f:7e:73:63:10:90:3d:9a:c6:a0:ab:88:ea: ac:d0:70:28:ea:4d:4f:f7:ca:74:79:cf:78:d0:7f:1a:32:53: d9:18:4a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHk66Qc2DeNa13iAYY9o4acq7LOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJCNjdC Nzc0RUM5NzAeFw0yNjA5MTcwNjAxMDBaFw0yNjA5MTgwODA5MDBaMDMxMTAvBgNV BAMTKDUxRTE0RDQ2REUwMzQ5NDc5QzE3RkFGQTAzNTdCMDhCOUIzNkFCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qZPYSt4zbbstAFXs8R2wxGGV vxwTZ1v2A9rkHE+AigtKKkJI15dzs3dnIKXcEcICrwqe2mczWjS0K6Wm/GBP+hBd JU6lNiAEQH6G934U7VXS9lSH+FSp776KNv8srFonNRxexvRx2X7Cc1+q7+O0jjyj mLv/cTLPKmmpBBCcEN3bPvXH+iZl3QIBT7vrOBLW0k5AkNsKMkX/5wYpqvox2A4x Rll7s06bXfoa2PZd9zcxixntP942nzAzt5GB+vX79ggBZIBU81U3BKSHHF9WwzHJ B/2/p03ht6ZlIptzb595hlIeYXSyIAGd1vrHl4dRhfTmQgttv5p9VUaBMdIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeFNRt4DSUecF/r6A1ewi5s2q3kwHwYDVR0j BBgwFoAUAA8rIbxcAEdeaYuhiIC7Z7d07JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI2MjViZjItZjNiNi00ZTljLTg1YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFC QzVDMDA0NzVFNjk4QkExODg4MEJCNjdCNzc0RUM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBGMkIyMUJDNUMwMDQ3NUU2OThCQTE4ODgwQkI2N0I3NzRF Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJC NjdCNzc0RUM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL84AQahQJ00yqOfF39YkgV+Me4LuHJ/qUU9 ra6cTxLzikje82Cr9jtDwqA4yJuwwdBAehQxe+Ug2OOEz7HcWCghY3jeKBqxKmcg 7+z6ps+02/3xypnpQhZDECs+68xaEQCXOWS+1BxITqWsrWn05Lj6+4GaDZp8PBq0 +tZZkO02TLIbr2MZmlaclzDx0gZRsfhFYtFHj08vLk9G0VxvKG76uOQzPATmL5du jvNdFVcdxPHKTjZEp7fRNMsW5LdnOLTgu9buSUxCsYzfmwgf0GggOTCbqon6fIlD 01NJH35zYxCQPZrGoKuI6qzQcCjqTU/3ynR5z3jQfxoyU9kYSko= -----END CERTIFICATE-----Generated at Thu Sep 17 10:55:24 2026 by rpki-client