$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft File: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json) Hash identifier: eEWdt1g/SFr9Zd/rTpDizRjJefx36a/mqCdnjhdBdtM= Subject key identifier: 02:A7:3A:A1:C1:0B:95:5A:96:6E:11:8E:05:FF:44:48:96:58:88:3B Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Certificate serial: 0C85769D2F256A3896FCA70D2A66C989AB058D63 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft Manifest number: 0A Signing time: Wed 26 Aug 2026 09:12:49 +0000 Manifest this update: Wed 26 Aug 2026 09:07:49 +0000 Manifest next update: Thu 27 Aug 2026 12:10:49 +0000 Files and hashes: 1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: /aHZUx5mPOw5efqldQ++OU2P5p5ReFShkurnliROJa0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 12:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:85:76:9d:2f:25:6a:38:96:fc:a7:0d:2a:66:c9:89:ab:05:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Validity Not Before: Aug 26 09:07:49 2026 GMT Not After : Aug 27 12:10:49 2026 GMT Subject: CN=02A73AA1C10B955A966E118E05FF44489658883B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:e1:87:99:d8:90:cd:de:fd:9d:25:5a:f3: 16:1e:55:41:ec:b1:61:69:68:12:cd:8d:74:8e:a6: 88:f5:e5:11:e3:42:a3:d5:b7:3c:3a:c3:fd:30:dc: e0:00:84:02:69:a6:44:fc:d9:b2:de:38:61:4f:6e: 12:e7:c6:7c:58:a0:0e:9a:9b:f0:4d:bf:de:4e:11: 4e:ef:0e:63:01:17:7f:b1:b9:a9:a1:99:53:f3:cb: 9d:f2:d0:3f:fa:a5:1b:ac:e1:01:b9:a0:44:58:9c: 12:a9:c6:05:07:f3:fe:43:ce:5e:15:59:9f:11:c6: 2a:d6:81:7b:de:c2:dc:93:1e:29:93:20:e9:2c:da: a7:78:a5:2d:3c:5e:f1:28:4c:f5:63:c8:e7:4a:94: 0b:5e:ea:76:a3:73:c6:7c:26:bc:59:a6:39:cf:36: 42:9f:49:b2:dc:5d:99:11:a3:29:f8:c2:83:4f:e4: e4:a6:20:7d:3a:67:5a:36:22:5c:9b:ec:fa:83:d3: 3b:49:c1:b9:c2:70:32:3d:1b:88:e6:d3:d4:79:0c: 62:a8:0e:bc:c1:0a:f2:7c:79:67:94:ab:55:a8:ae: 9c:b8:3e:58:60:e3:89:5a:bd:69:90:e7:df:eb:b9: 83:36:b4:50:fb:d2:5e:f7:e8:b1:58:ef:cd:24:be: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:3A:A1:C1:0B:95:5A:96:6E:11:8E:05:FF:44:48:96:58:88:3B X509v3 Authority Key Identifier: keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:69:a9:82:bf:ad:27:5c:ed:c9:96:b5:16:14:4c:35:32:89: 26:31:cc:b8:e4:e9:0a:f7:ec:90:0c:57:7a:a4:98:af:ad:cf: da:14:69:70:6d:59:b1:76:95:24:10:d5:a3:b1:82:70:e5:90: de:84:08:a9:82:24:d2:a0:a0:d0:1f:cf:a9:b1:1c:c9:58:9e: 8e:25:c6:0e:57:5e:a8:88:04:5b:5d:be:bc:b8:a8:f4:93:b9: 30:66:43:fc:e8:a1:ad:e2:7a:0c:b0:a4:e6:50:53:d0:1e:d3: fb:8d:cd:b9:0f:01:2d:5f:9c:41:e9:90:76:8a:9b:88:7a:c1: 21:57:f2:a9:1d:12:dc:f7:b7:43:69:be:c2:43:54:5f:8c:6c: 12:f4:08:bd:8e:0b:20:59:e1:7e:1c:f8:6a:08:85:8d:07:50: a9:3c:f5:d1:13:e2:1e:9b:27:46:fc:bb:fa:e3:e6:b1:fa:9c: 7a:89:38:f6:ee:e4:05:88:58:7e:82:c6:3e:90:3f:6c:41:1f: 30:af:04:91:24:c1:5e:06:8f:c6:6e:ed:53:6b:e9:3b:74:57: c2:58:ec:9f:b5:3c:3d:85:80:da:72:87:7d:9b:a8:2d:c4:d8: f7:4f:05:61:49:3b:0f:2a:a8:b8:07:e8:3e:7d:a7:fe:44:63: 1f:15:66:d5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUDIV2nS8lajiW/KcNKmbJiasFjWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjQyMDRCQTk1 ODJENUExM0ZEMjBGOUVEMDE3NEFGMkQ1MTc0N0U3MB4XDTI2MDgyNjA5MDc0OVoX DTI2MDgyNzEyMTA0OVowMzExMC8GA1UEAxMoMDJBNzNBQTFDMTBCOTU1QTk2NkUx MThFMDVGRjQ0NDg5NjU4ODgzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtW4YeZ2JDN3v2dJVrzFh5VQeyxYWloEs2NdI6miPXlEeNCo9W3PDrD/TDc 4ACEAmmmRPzZst44YU9uEufGfFigDpqb8E2/3k4RTu8OYwEXf7G5qaGZU/PLnfLQ P/qlG6zhAbmgRFicEqnGBQfz/kPOXhVZnxHGKtaBe97C3JMeKZMg6Szap3ilLTxe 8ShM9WPI50qUC17qdqNzxnwmvFmmOc82Qp9JstxdmRGjKfjCg0/k5KYgfTpnWjYi XJvs+oPTO0nBucJwMj0biObT1HkMYqgOvMEK8nx5Z5SrVaiunLg+WGDjiVq9aZDn 3+u5gza0UPvSXvfosVjvzSS+NgECAwEAAaOCAgUwggIBMB0GA1UdDgQWBBQCpzqh wQuVWpZuEY4F/0RIlliIOzAfBgNVHSMEGDAWgBQSQgS6lYLVoT/SD57QF0ry1RdH 5zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzQvMTI0MjA0QkE5NTgyRDVBMTNG RDIwRjlFRDAxNzRBRjJENTE3NDdFNy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2 MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvRWtJRXVwV0MxYUVfMGctZTBCZEs4 dFVYUi1jLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy80LzEyNDIwNEJBOTU4MkQ1 QTEzRkQyMEY5RUQwMTc0QUYyRDUxNzQ3RTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHaamCv60nXO3J lrUWFEw1MokmMcy45OkK9+yQDFd6pJivrc/aFGlwbVmxdpUkENWjsYJw5ZDehAip giTSoKDQH8+psRzJWJ6OJcYOV16oiARbXb68uKj0k7kwZkP86KGt4noMsKTmUFPQ HtP7jc25DwEtX5xB6ZB2ipuIesEhV/KpHRLc97dDab7CQ1RfjGwS9Ai9jgsgWeF+ HPhqCIWNB1CpPPXRE+IemydG/Lv64+ax+px6iTj27uQFiFh+gsY+kD9sQR8wrwSR JMFeBo/Gbu1Ta+k7dFfCWOyftTw9hYDacod9m6gtxNj3TwVhSTsPKqi4B+g+faf+ RGMfFWbV -----END CERTIFICATE-----Generated at Wed Aug 26 17:23:15 2026 by rpki-client