$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: lxLiIM4OiD9/gS4/fTJu0CY8Dv8n7H0rMHvy/6UpGAg= Subject key identifier: CB:52:75:8E:10:8E:A6:F7:E8:8E:36:62:3A:70:FE:C0:E6:23:E9:35 Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 02B16C6742B80B26E9566CD72DEDCE6FB7571375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 10:59:03 +0000 Manifest this update: Fri 25 Sep 2026 10:54:03 +0000 Manifest next update: Sat 26 Sep 2026 12:58:03 +0000 Files and hashes: 1: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) 3: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) 4: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: npzUudCygh7H+Vr0O4+v8Oz7GjYxzoUOBey0xJr8uko=) 5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b1:6c:67:42:b8:0b:26:e9:56:6c:d7:2d:ed:ce:6f:b7:57:13:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Sep 25 10:54:03 2026 GMT Not After : Sep 26 12:58:03 2026 GMT Subject: CN=CB52758E108EA6F7E88E36623A70FEC0E623E935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:19:cc:3b:62:7e:7b:fa:e0:3e:3c:f2:44: 3b:2d:bc:59:64:23:4d:1c:f3:d8:4c:3f:4d:fd:ce: f7:80:90:36:27:e1:5c:b1:4e:e7:40:e1:df:44:8f: 03:56:38:0e:6a:b7:7f:32:ce:7c:e1:ce:7e:c8:a1: fd:3f:63:0b:9d:b1:16:1f:ce:04:1a:9d:fa:50:68: ec:11:02:7f:52:9f:99:d8:88:e6:37:86:37:09:66: fc:24:a2:70:a4:2e:b7:c9:ca:fc:0f:0f:fa:b5:a0: 51:41:ba:41:dd:2a:a5:33:59:df:60:00:e3:df:a1: fe:5d:15:01:41:7d:8b:ca:05:14:df:cc:a7:16:83: 4f:76:05:89:34:8e:31:b1:1e:c1:23:ac:1b:b7:e5: 30:8d:1f:b2:aa:e3:0b:fa:28:e0:6c:5c:36:92:d3: df:62:3e:c3:11:7d:02:8d:49:fa:38:38:37:a4:bc: 4e:9d:45:27:87:d2:7e:4c:ed:8a:69:e4:5d:5c:bc: e6:ac:aa:16:54:f5:3c:bb:ac:4f:09:7f:88:94:4a: e8:b4:ac:87:00:e8:6b:2a:df:5f:cc:7b:a5:5a:e7: 76:2d:54:7d:44:a7:ab:e5:d3:28:2f:dc:a1:b5:d7: c7:25:72:2b:f6:d2:54:e5:b3:0a:5c:87:a5:40:e0: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:75:8E:10:8E:A6:F7:E8:8E:36:62:3A:70:FE:C0:E6:23:E9:35 X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:87:77:02:de:c6:df:84:cb:b3:45:44:f7:f2:82:43:b5: 3c:6e:ce:ad:3f:66:6d:76:d5:76:56:69:e9:c7:89:fd:0e:06: 26:70:64:01:9e:d2:1a:0c:b9:2c:fc:86:87:df:a2:b5:31:ba: 64:24:5e:b8:ff:34:08:c3:54:22:30:ac:d8:f4:09:41:e3:37: ff:a1:dd:1c:e4:2c:d0:4b:6a:8c:46:c1:5e:4c:93:d5:76:8a: b0:eb:6e:e8:77:6f:92:cf:48:68:39:b8:42:3d:56:34:8c:f7: 72:e1:46:10:c4:e9:e0:ee:7b:a6:e4:ed:7e:93:f9:d9:b6:b5: 31:e4:6a:80:20:7e:f8:4a:36:b8:b7:d7:fa:21:37:80:4f:b0: b2:51:7a:ea:ad:cd:57:d0:76:b3:f2:1a:27:ef:10:44:54:33: 13:07:91:cd:77:39:56:ca:7c:b1:f3:11:0d:5c:a3:a5:57:8b: ab:34:0c:6c:ff:c9:cd:29:a0:52:f1:69:6c:ce:23:4d:9e:bb: 0d:55:73:3d:d0:8c:ca:9b:9e:17:77:58:50:77:8b:cb:2d:dc: 2c:f5:19:10:5b:02:3e:f5:cc:db:6e:b2:e5:e1:be:c8:ef:53: 7a:4e:c1:a9:e3:ca:a2:95:4a:73:91:e2:fa:ad:ed:38:5b:04: e9:75:65:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArFsZ0K4CybpVmzXLe3Ob7dXE3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA5MjUxMDU0MDNaFw0yNjA5MjYxMjU4MDNaMDMxMTAvBgNV BAMTKENCNTI3NThFMTA4RUE2RjdFODhFMzY2MjNBNzBGRUMwRTYyM0U5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkRnMO2J+e/rgPjzyRDstvFlk I00c89hMP039zveAkDYn4VyxTudA4d9EjwNWOA5qt38yznzhzn7Iof0/YwudsRYf zgQanfpQaOwRAn9Sn5nYiOY3hjcJZvwkonCkLrfJyvwPD/q1oFFBukHdKqUzWd9g AOPfof5dFQFBfYvKBRTfzKcWg092BYk0jjGxHsEjrBu35TCNH7Kq4wv6KOBsXDaS 099iPsMRfQKNSfo4ODekvE6dRSeH0n5M7Ypp5F1cvOasqhZU9Ty7rE8Jf4iUSui0 rIcA6Gsq31/Me6Va53YtVH1Ep6vl0ygv3KG118clciv20lTlswpch6VA4JkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy1J1jhCOpvfojjZiOnD+wOYj6TUwHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxah3cC3sbfhMuzRUT38oJDtTxuzq0/Zm12 1XZWaenHif0OBiZwZAGe0hoMuSz8hofforUxumQkXrj/NAjDVCIwrNj0CUHjN/+h 3RzkLNBLaoxGwV5Mk9V2irDrbuh3b5LPSGg5uEI9VjSM93LhRhDE6eDue6bk7X6T +dm2tTHkaoAgfvhKNri31/ohN4BPsLJReuqtzVfQdrPyGifvEERUMxMHkc13OVbK fLHzEQ1co6VXi6s0DGz/yc0poFLxaWzOI02euw1Vcz3QjMqbnhd3WFB3i8st3Cz1 GRBbAj71zNtusuXhvsjvU3pOwanjyqKVSnOR4vqt7ThbBOl1ZU0= -----END CERTIFICATE-----Generated at Sat Sep 26 04:33:12 2026 by rpki-client