$ rpki-client -vvvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: nUJ6U7fu1TuRcVuD1cXieqfYM+FMEQMmlBMVvbLT758= Subject key identifier: F2:CD:56:B8:B3:DD:31:CC:8D:C9:B0:59:6E:51:5F:2E:F4:72:54:07 Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 03F8A37C59A779C4CF4B7E9F082A7F0EF5FC3DAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:35:54 +0000 Manifest this update: Wed 16 Sep 2026 17:30:54 +0000 Manifest next update: Thu 17 Sep 2026 21:15:54 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: Ln58yv1FVxEVWqfT65YPwnUo1skOCBieiiwhtKwOQkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f8:a3:7c:59:a7:79:c4:cf:4b:7e:9f:08:2a:7f:0e:f5:fc:3d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Sep 16 17:30:54 2026 GMT Not After : Sep 17 21:15:54 2026 GMT Subject: CN=F2CD56B8B3DD31CC8DC9B0596E515F2EF4725407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:14:e1:61:94:20:85:1f:ea:f6:6d:ba:f0: ac:53:c1:1d:da:4f:c3:c4:8a:ec:7a:14:1f:37:1f: 44:9a:f8:0f:69:c7:51:fb:20:d7:99:b4:d6:5e:22: 22:c4:b5:83:65:af:a0:26:24:45:62:e6:be:32:8a: 33:22:bb:d6:68:3c:22:09:76:48:9d:14:91:1a:4a: 03:ea:68:5f:04:fc:96:bc:94:af:5f:b9:0e:2e:29: ef:9b:22:ab:5c:89:eb:35:4d:69:80:5e:66:d2:cf: eb:3f:4d:5f:2d:0d:e4:11:02:7e:bd:0a:c2:39:5e: 0c:c3:98:e4:2d:83:64:fb:48:c1:50:9f:48:83:ea: b4:08:30:98:31:fc:6b:af:e0:d1:95:9f:14:e7:7a: 71:fa:43:c2:5d:d6:23:a3:a9:19:66:54:85:5c:5c: 57:c9:7e:95:23:f2:24:a9:d1:c5:1b:38:93:2f:36: 70:26:22:d9:17:7a:ae:4e:0f:c0:8a:cb:b5:a1:d0: 22:d5:09:94:80:02:d1:05:fd:1e:bf:86:d4:2f:5e: 3b:79:f0:11:fc:12:83:05:ac:29:14:be:31:fa:03: 5b:3b:a4:9b:3c:f8:d3:2f:d5:70:0d:4c:ae:1f:50: 3b:f6:3b:43:44:f1:e8:ef:43:be:4f:b1:a7:4a:7b: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:56:B8:B3:DD:31:CC:8D:C9:B0:59:6E:51:5F:2E:F4:72:54:07 X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a7:70:23:71:f5:e5:ea:aa:f4:08:44:25:bc:4e:b6:24:9d: 42:08:fa:d7:b5:49:ba:c0:b5:68:8e:ac:76:56:29:59:5f:ea: ff:54:41:73:30:84:1a:e4:e1:bd:f2:4c:ee:e9:77:51:70:f8: e0:f0:44:22:3c:98:a8:f7:f1:2c:ca:54:02:2f:89:e8:c0:f1: 8a:97:5d:8c:7c:33:ec:a5:47:67:08:fb:16:8e:81:0b:02:e9: e3:22:91:8a:46:df:cf:c2:a7:f9:8b:e6:41:01:18:87:40:01: f2:8f:70:49:8a:ab:97:33:5f:20:b1:d6:4e:f4:2a:3d:1d:0c: 52:44:03:d5:93:42:f8:40:79:0a:9e:bb:65:ee:24:4d:88:eb: 09:a1:a5:3b:f0:35:f4:8b:81:98:ea:86:a5:08:5f:5a:9b:64: 9f:62:53:62:5e:12:d6:76:c6:f0:c4:29:55:47:f9:1b:90:22: 00:01:8f:1f:26:27:f6:26:f5:eb:08:de:5c:7e:01:40:fe:03: c6:58:83:b9:a0:49:9d:72:59:77:98:e6:66:c4:1c:4e:04:76: f8:e9:ea:6a:12:99:9b:6c:48:1d:d7:10:8b:95:a7:fd:ae:9c: ec:48:18:d3:fd:09:94:5b:25:44:35:cd:19:97:eb:fe:30:55: 2b:0b:89:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/ijfFmnecTPS36fCCp/DvX8Pa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjA5MTYxNzMwNTRaFw0yNjA5MTcyMTE1NTRaMDMxMTAvBgNV BAMTKEYyQ0Q1NkI4QjNERDMxQ0M4REM5QjA1OTZFNTE1RjJFRjQ3MjU0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkRThYZQghR/q9m268KxTwR3a T8PEiux6FB83H0Sa+A9px1H7INeZtNZeIiLEtYNlr6AmJEVi5r4yijMiu9ZoPCIJ dkidFJEaSgPqaF8E/Ja8lK9fuQ4uKe+bIqtcies1TWmAXmbSz+s/TV8tDeQRAn69 CsI5XgzDmOQtg2T7SMFQn0iD6rQIMJgx/Guv4NGVnxTnenH6Q8Jd1iOjqRlmVIVc XFfJfpUj8iSp0cUbOJMvNnAmItkXeq5OD8CKy7Wh0CLVCZSAAtEF/R6/htQvXjt5 8BH8EoMFrCkUvjH6A1s7pJs8+NMv1XANTK4fUDv2O0NE8ejvQ75PsadKeyXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8s1WuLPdMcyNybBZblFfLvRyVAcwHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGncCNx9eXqqvQIRCW8TrYknUII+te1SbrA tWiOrHZWKVlf6v9UQXMwhBrk4b3yTO7pd1Fw+ODwRCI8mKj38SzKVAIviejA8YqX XYx8M+ylR2cI+xaOgQsC6eMikYpG38/Cp/mL5kEBGIdAAfKPcEmKq5czXyCx1k70 Kj0dDFJEA9WTQvhAeQqeu2XuJE2I6wmhpTvwNfSLgZjqhqUIX1qbZJ9iU2JeEtZ2 xvDEKVVH+RuQIgABjx8mJ/Ym9esI3lx+AUD+A8ZYg7mgSZ1yWXeY5mbEHE4Edvjp 6moSmZtsSB3XEIuVp/2unOxIGNP9CZRbJUQ1zRmX6/4wVSsLiZU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:23 2026 by rpki-client