$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft File: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json) Hash identifier: piCZ1MEIqto2xk1gIvQjT9/8Yc6CnWob9qcefR3SWbU= Subject key identifier: 47:77:94:8D:36:0E:46:DD:D9:B5:5B:BE:01:30:E4:5E:CB:0F:71:4F Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Certificate serial: 3F1A48936D87AC787FBB096C8E90752D84B5EC9D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft Manifest number: 0140 Signing time: Sun 11 Oct 2026 12:07:23 +0000 Manifest this update: Sun 11 Oct 2026 12:02:23 +0000 Manifest next update: Mon 12 Oct 2026 13:30:23 +0000 Files and hashes: 1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: OrCX6eU3aQOzz8YNYAoNnJcIClUyPMjINOw7b2VJWHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 13:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1a:48:93:6d:87:ac:78:7f:bb:09:6c:8e:90:75:2d:84:b5:ec:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Validity Not Before: Oct 11 12:02:23 2026 GMT Not After : Oct 12 13:30:23 2026 GMT Subject: CN=4777948D360E46DDD9B55BBE0130E45ECB0F714F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:2a:07:15:04:7c:29:7f:33:b1:4d:c2:8e: d0:23:4a:91:33:fd:5f:01:4e:32:44:d9:1f:b6:68: 7d:a4:d6:09:c0:16:a6:a6:d3:f6:3e:25:2f:7d:c7: d0:88:92:36:74:39:a2:3b:cf:f2:1e:22:80:aa:16: 0a:31:dd:9e:93:7b:ae:c3:4c:28:9d:29:c6:1a:d0: f2:b9:2d:a3:bc:75:c7:22:f1:23:be:77:2c:55:46: 70:be:03:f1:f4:12:b8:9c:73:a7:99:1e:32:c8:66: a7:51:e4:6f:c2:16:cd:9b:07:88:1a:cd:af:6b:2f: dd:b0:f8:19:b9:79:fa:b7:ed:61:1c:eb:52:d5:2e: e7:4e:cc:63:f5:d3:68:07:26:73:cf:f8:7f:13:7e: 48:3e:7f:c7:fa:17:24:09:07:e9:35:ee:b0:e1:f6: a1:65:45:67:55:86:b1:a3:ae:82:7f:2d:47:d6:03: 7a:ec:50:82:2b:bf:12:29:e4:4c:05:7c:c5:fd:1d: b7:10:8b:3b:f0:e6:1f:22:62:b4:52:48:40:33:6b: fe:e5:5a:7e:50:6b:dc:8c:82:a1:2b:23:a4:bb:76: 31:92:70:96:83:75:dd:58:1a:37:0c:1c:aa:5a:7a: 45:17:14:99:7f:96:25:5f:85:db:e3:16:9b:7e:18: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:77:94:8D:36:0E:46:DD:D9:B5:5B:BE:01:30:E4:5E:CB:0F:71:4F X509v3 Authority Key Identifier: keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7a:01:ba:8b:72:3f:f4:48:ca:6b:6d:68:ac:14:dc:e5:da: a6:13:63:5e:74:a2:d9:96:ba:22:c2:0f:8a:bd:1a:ac:87:75: f3:ab:d0:77:a8:25:ea:3e:7f:4c:11:d9:a5:72:4d:af:2d:af: ff:f3:8f:6e:c2:35:5f:a4:4c:4b:35:4c:1a:5c:8f:79:72:70: 64:8a:53:e0:e5:84:c7:36:0e:6b:83:fc:c3:24:2a:12:9c:35: 9f:6e:f0:ef:fc:ed:dd:3a:b7:61:d3:b1:6f:4c:f5:ea:c6:70: 64:49:69:09:51:14:c1:d8:2f:a2:89:46:27:40:e6:24:83:60: a3:33:60:7d:e0:47:91:4c:2e:5e:0e:10:62:eb:e4:02:46:8a: 34:a5:f4:2d:af:ec:39:e0:f2:01:33:f4:a2:54:ca:a0:5f:c1: 4b:46:f6:8d:f8:cf:98:92:8f:75:ce:8e:e1:b5:7c:b3:e7:b1: 25:11:75:c4:e1:be:df:41:9a:38:2d:33:47:c0:cb:3a:c4:c2: e7:26:8f:19:65:a6:34:53:6d:75:c8:07:69:65:03:62:ef:a2: 03:7e:6a:d5:8b:6e:0a:0b:19:45:8c:fc:d0:ca:78:20:2f:8b: c7:9a:82:c1:84:91:6e:54:e9:0c:aa:97:8a:45:d5:3f:54:49: 6b:23:94:15 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUPxpIk22HrHh/uwlsjpB1LYS17J0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjQyMDRCQTk1 ODJENUExM0ZEMjBGOUVEMDE3NEFGMkQ1MTc0N0U3MB4XDTI2MTAxMTEyMDIyM1oX DTI2MTAxMjEzMzAyM1owMzExMC8GA1UEAxMoNDc3Nzk0OEQzNjBFNDZEREQ5QjU1 QkJFMDEzMEU0NUVDQjBGNzE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpTKgcVBHwpfzOxTcKO0CNKkTP9XwFOMkTZH7ZofaTWCcAWpqbT9j4lL33H 0IiSNnQ5ojvP8h4igKoWCjHdnpN7rsNMKJ0pxhrQ8rkto7x1xyLxI753LFVGcL4D 8fQSuJxzp5keMshmp1Hkb8IWzZsHiBrNr2sv3bD4Gbl5+rftYRzrUtUu507MY/XT aAcmc8/4fxN+SD5/x/oXJAkH6TXusOH2oWVFZ1WGsaOugn8tR9YDeuxQgiu/Eink TAV8xf0dtxCLO/DmHyJitFJIQDNr/uVaflBr3IyCoSsjpLt2MZJwloN13VgaNwwc qlp6RRcUmX+WJV+F2+MWm34Yay8CAwEAAaOCAgUwggIBMB0GA1UdDgQWBBRHd5SN Ng5G3dm1W74BMOReyw9xTzAfBgNVHSMEGDAWgBQSQgS6lYLVoT/SD57QF0ry1RdH 5zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzQvMTI0MjA0QkE5NTgyRDVBMTNG RDIwRjlFRDAxNzRBRjJENTE3NDdFNy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2 MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvRWtJRXVwV0MxYUVfMGctZTBCZEs4 dFVYUi1jLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy80LzEyNDIwNEJBOTU4MkQ1 QTEzRkQyMEY5RUQwMTc0QUYyRDUxNzQ3RTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqegG6i3I/9EjK a21orBTc5dqmE2NedKLZlroiwg+KvRqsh3Xzq9B3qCXqPn9MEdmlck2vLa//849u wjVfpExLNUwaXI95cnBkilPg5YTHNg5rg/zDJCoSnDWfbvDv/O3dOrdh07FvTPXq xnBkSWkJURTB2C+iiUYnQOYkg2CjM2B94EeRTC5eDhBi6+QCRoo0pfQtr+w54PIB M/SiVMqgX8FLRvaN+M+Yko91zo7htXyz57ElEXXE4b7fQZo4LTNHwMs6xMLnJo8Z ZaY0U211yAdpZQNi76IDfmrVi24KCxlFjPzQynggL4vHmoLBhJFuVOkMqpeKRdU/ VElrI5QV -----END CERTIFICATE-----Generated at Sun Oct 11 23:12:10 2026 by rpki-client