$ rpki-client -vvvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: kFc6niMD/tsSw+9h8uaAzJxR1xOF2k+S8dcbxm1kAf8= Subject key identifier: B0:35:27:91:98:D1:E2:65:7D:0C:BD:54:04:3F:0A:E3:E1:6B:B0:2C Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 5613E3D9DD3A30D4570C8507BCF33933A282ECA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:30:44 +0000 Manifest this update: Fri 25 Sep 2026 00:25:44 +0000 Manifest next update: Sat 26 Sep 2026 04:06:44 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 4: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: jnd8iqinQ2yGawtoBhC+8JPxLQT8ZDNDV0IE25g6P3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:13:e3:d9:dd:3a:30:d4:57:0c:85:07:bc:f3:39:33:a2:82:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Sep 25 00:25:44 2026 GMT Not After : Sep 26 04:06:44 2026 GMT Subject: CN=B035279198D1E2657D0CBD54043F0AE3E16BB02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:f5:d4:be:b9:10:e9:aa:0b:81:50:e8:b6: 32:27:a6:54:6d:76:89:67:6c:64:ac:e7:91:d7:c1: 5e:d3:4b:26:c6:8a:8d:3d:02:dc:68:02:f1:d2:5a: c4:b7:8e:e5:80:7f:d1:b1:d5:d0:f7:bd:d7:0e:7b: 72:07:fd:19:c0:b5:b9:47:9b:a2:83:e4:e5:1f:09: ce:93:d0:c5:53:94:fc:59:90:52:75:36:5f:9e:34: 28:d4:49:9a:79:0a:f7:1c:9a:16:7b:ae:5d:00:83: d5:fe:80:37:41:8f:58:7a:2c:54:60:9f:32:2e:35: 50:b9:44:80:28:8f:26:cc:88:67:1f:09:02:e5:44: 9a:45:11:0d:e5:a8:cc:e6:59:0c:d3:85:98:2a:af: 11:8e:b1:49:4e:24:d1:d1:8f:e3:8c:ef:c5:55:b0: b3:40:aa:9c:4e:2c:7f:80:54:9e:f2:ba:3f:a9:7a: e2:e5:a9:81:df:12:d2:07:19:51:ae:cd:6d:97:94: 9d:75:e7:e6:af:22:9a:af:f5:90:7d:85:96:b0:ef: c9:68:4f:44:6c:af:2e:89:3b:a1:6a:b0:60:2f:5e: f1:ff:28:85:a8:ca:f9:d5:bf:07:ad:d3:c7:a5:b6: 44:be:53:af:3a:1b:a7:cc:3a:27:fa:08:d6:87:d2: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:35:27:91:98:D1:E2:65:7D:0C:BD:54:04:3F:0A:E3:E1:6B:B0:2C X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:17:de:0b:0d:78:5e:e3:00:0f:b3:d1:51:a9:a2:5e:21:0a: bb:e4:3b:59:30:92:60:51:22:f3:1b:e7:67:a9:7d:c5:74:f4: 08:61:0f:0c:ff:ff:9c:0e:0c:07:4c:28:ba:cf:a1:4a:ec:0e: b3:61:c1:95:2a:b0:9c:7a:07:fc:8e:47:e4:9e:f0:bc:90:55: 13:87:f1:dc:bb:2c:45:75:d7:d6:6e:87:a6:3e:3a:06:93:2e: 98:bf:e1:d3:04:fb:78:86:53:f6:04:79:62:e7:d3:dd:6b:ea: e8:dc:3d:00:21:5f:97:30:50:17:f2:55:b5:4b:e4:1d:4d:75: 12:72:07:b4:73:82:d9:f2:20:69:98:1f:88:8b:40:8f:06:ef: cf:0f:76:25:b1:fb:d2:6e:45:ff:ce:d4:5c:60:9a:15:ce:1d: 6b:5c:de:8c:d5:51:46:84:32:59:de:e3:12:c2:7c:51:40:50: df:64:44:43:11:4f:05:55:81:6e:c8:74:c3:e0:d3:ca:e4:18: 53:d5:f1:e5:8f:45:9b:5a:00:3f:d1:c4:c3:0a:ed:e7:db:ae: ac:48:bc:38:97:79:05:87:71:84:e1:52:39:78:0a:fb:39:b0: d7:d7:83:7d:3d:c6:25:93:fa:1b:94:c7:9d:b4:8d:4d:09:54: f3:bf:ce:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhPj2d06MNRXDIUHvPM5M6KC7KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA5MjUwMDI1NDRaFw0yNjA5MjYwNDA2NDRaMDMxMTAvBgNV BAMTKEIwMzUyNzkxOThEMUUyNjU3RDBDQkQ1NDA0M0YwQUUzRTE2QkIwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/vXUvrkQ6aoLgVDotjInplRt dolnbGSs55HXwV7TSybGio09AtxoAvHSWsS3juWAf9Gx1dD3vdcOe3IH/RnAtblH m6KD5OUfCc6T0MVTlPxZkFJ1Nl+eNCjUSZp5CvccmhZ7rl0Ag9X+gDdBj1h6LFRg nzIuNVC5RIAojybMiGcfCQLlRJpFEQ3lqMzmWQzThZgqrxGOsUlOJNHRj+OM78VV sLNAqpxOLH+AVJ7yuj+peuLlqYHfEtIHGVGuzW2XlJ115+avIpqv9ZB9hZaw78lo T0Rsry6JO6FqsGAvXvH/KIWoyvnVvwet08eltkS+U686G6fMOif6CNaH0gyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDUnkZjR4mV9DL1UBD8K4+FrsCwwHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEX3gsNeF7jAA+z0VGpol4hCrvkO1kwkmBR IvMb52epfcV09AhhDwz//5wODAdMKLrPoUrsDrNhwZUqsJx6B/yOR+Se8LyQVROH 8dy7LEV119Zuh6Y+OgaTLpi/4dME+3iGU/YEeWLn091r6ujcPQAhX5cwUBfyVbVL 5B1NdRJyB7RzgtnyIGmYH4iLQI8G788PdiWx+9JuRf/O1FxgmhXOHWtc3ozVUUaE Mlne4xLCfFFAUN9kREMRTwVVgW7IdMPg08rkGFPV8eWPRZtaAD/RxMMK7efbrqxI vDiXeQWHcYThUjl4Cvs5sNfXg309xiWT+huUx520jU0JVPO/ziE= -----END CERTIFICATE-----Generated at Fri Sep 25 05:45:34 2026 by rpki-client