$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft (raw, json) Hash identifier: V3X+ULwa/lfWJRsL3fowJOOvsouX2J2c/Vu11bIQEZE= Subject key identifier: 17:C4:9B:5A:B7:E8:45:A9:27:DE:BD:BE:11:CF:0E:06:49:2D:C5:94 Authority key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Certificate issuer: /CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Certificate serial: 18D920E331FD3D44907AE5815FB6E3F29CFF54DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:54:27 +0000 Manifest this update: Thu 17 Sep 2026 04:49:27 +0000 Manifest next update: Fri 18 Sep 2026 08:31:27 +0000 Files and hashes: 1: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl (hash: mg2uXUCueeL5MY6EWT6Pb5yufTfO/GnlgmhcChfHp84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d9:20:e3:31:fd:3d:44:90:7a:e5:81:5f:b6:e3:f2:9c:ff:54:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Validity Not Before: Sep 17 04:49:27 2026 GMT Not After : Sep 18 08:31:27 2026 GMT Subject: CN=17C49B5AB7E845A927DEBDBE11CF0E06492DC594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:59:99:81:20:58:84:87:af:33:65:d9:30: b2:9f:2f:f8:96:47:b4:d2:3f:8b:54:8e:16:15:69: 34:50:7e:4c:70:bd:de:83:e4:ae:71:1a:61:cc:f3: 22:e0:9e:3a:fd:a9:91:63:47:60:53:58:1e:4b:d5: 52:5f:06:5d:b3:1e:aa:b0:08:27:b7:43:c4:04:7f: 57:a0:ee:03:5b:18:3a:ad:26:c3:a0:fb:fb:d6:ba: 28:f2:82:81:fb:63:ce:4f:6f:c0:64:00:c3:ed:05: ae:af:ea:bc:07:38:36:84:36:83:01:17:fa:ed:29: 28:61:50:4d:57:5f:c1:83:f0:4f:fa:72:2b:6b:fc: d6:ab:8b:82:18:b7:21:f2:6e:c9:5d:96:d6:08:c2: 35:2e:57:b6:9a:9d:a6:e0:a3:d3:28:4e:17:cb:40: e2:ea:ee:56:80:34:af:c9:ba:29:39:c3:6b:49:0c: f7:7e:20:c4:3d:d7:15:3c:81:a2:e3:90:8f:59:4e: a3:f0:ca:34:21:60:e8:d0:fe:f2:07:54:d7:30:4c: b8:a8:41:b3:07:04:d1:a4:63:60:3a:36:32:32:8f: cf:d0:4e:07:d7:22:1e:ab:a6:62:e3:54:73:b4:45: f3:bb:3c:2c:9c:48:aa:59:d5:20:b6:63:dd:2d:54: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C4:9B:5A:B7:E8:45:A9:27:DE:BD:BE:11:CF:0E:06:49:2D:C5:94 X509v3 Authority Key Identifier: keyid:F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:89:e0:00:08:b9:db:42:bd:00:77:d9:cf:5c:ec:7a:59:3d: 28:bf:78:e9:7a:ec:fd:18:7e:64:11:40:86:c1:a8:4b:5c:3f: 1f:8c:e7:c6:3a:60:d9:ac:16:ec:08:b1:0b:0b:17:7e:29:cd: df:e7:0c:9b:ff:17:4f:e3:8a:23:3a:75:d3:65:85:4d:64:72: 12:0e:e9:cc:9e:aa:e7:4f:55:a7:c9:b9:03:11:84:d0:69:99: 00:1c:d6:ab:22:ef:98:7c:65:b4:37:81:ad:63:ce:f7:81:27: 71:be:e6:15:c5:59:96:a3:8b:77:61:d1:df:0c:f5:96:7b:34: 6f:66:bc:99:a4:f9:36:04:37:db:fa:63:bc:93:75:57:b0:67: 7d:ae:5a:a1:b6:26:11:db:6a:2d:9b:69:62:51:a1:76:71:13: a0:5e:43:15:60:fa:f7:e4:83:79:72:00:8f:59:c8:ec:16:bf: 7a:4a:55:67:06:5d:52:85:20:8f:c0:79:2b:72:80:62:d9:ff: a5:98:b3:9d:15:d5:dc:33:6f:9c:18:a6:a4:b6:2a:5b:e8:d8: 0c:57:22:bc:74:77:87:eb:e1:82:05:25:b7:74:d7:e1:cd:68: 38:0b:de:6f:a1:f2:35:ac:2d:d0:58:e5:b0:fb:fb:ab:ec:c1: da:68:6a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNkg4zH9PUSQeuWBX7bj8pz/VN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYw MzYxMEREQjAeFw0yNjA5MTcwNDQ5MjdaFw0yNjA5MTgwODMxMjdaMDMxMTAvBgNV BAMTKDE3QzQ5QjVBQjdFODQ1QTkyN0RFQkRCRTExQ0YwRTA2NDkyREM1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBVmZgSBYhIevM2XZMLKfL/iW R7TSP4tUjhYVaTRQfkxwvd6D5K5xGmHM8yLgnjr9qZFjR2BTWB5L1VJfBl2zHqqw CCe3Q8QEf1eg7gNbGDqtJsOg+/vWuijygoH7Y85Pb8BkAMPtBa6v6rwHODaENoMB F/rtKShhUE1XX8GD8E/6citr/Nari4IYtyHybsldltYIwjUuV7aanabgo9MoThfL QOLq7laANK/Juik5w2tJDPd+IMQ91xU8gaLjkI9ZTqPwyjQhYOjQ/vIHVNcwTLio QbMHBNGkY2A6NjIyj8/QTgfXIh6rpmLjVHO0RfO7PCycSKpZ1SC2Y90tVEG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8SbWrfoRakn3r2+Ec8OBkktxZQwHwYDVR0j BBgwFoAU+SScHu/pl/BvqiMj0q4H7wNhDdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc4Mzc2MmUtMmIyNi00Mzc0LWFlNjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVF RkU5OTdGMDZGQUEyMzIzRDJBRTA3RUYwMzYxMEREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTI0OUMxRUVGRTk5N0YwNkZBQTIzMjNEMkFFMDdFRjAzNjEw RERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvRjkyNDlDMUVFRkU5OTdGMDZGQUEyMzIzRDJBRTA3 RUYwMzYxMEREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeJ4AAIudtCvQB32c9c7HpZPSi/eOl67P0Y fmQRQIbBqEtcPx+M58Y6YNmsFuwIsQsLF34pzd/nDJv/F0/jiiM6ddNlhU1kchIO 6cyequdPVafJuQMRhNBpmQAc1qsi75h8ZbQ3ga1jzveBJ3G+5hXFWZaji3dh0d8M 9ZZ7NG9mvJmk+TYEN9v6Y7yTdVewZ32uWqG2JhHbai2baWJRoXZxE6BeQxVg+vfk g3lyAI9ZyOwWv3pKVWcGXVKFII/AeStygGLZ/6WYs50V1dwzb5wYpqS2Klvo2AxX Irx0d4fr4YIFJbd01+HNaDgL3m+h8jWsLdBY5bD7+6vswdpoanE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:02 2026 by rpki-client