$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: ihdLcrlPf9DMgZX1VEyqNdUwMw9Pz84B60M3BxTahRQ= Subject key identifier: 37:57:3F:D6:73:1E:B6:F3:7F:00:36:E8:41:06:B9:B9:AC:C3:49:8D Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 249218076D673AF869F21AC65C31E40AFA3D6867 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 05:01:23 +0000 Manifest this update: Sat 26 Sep 2026 04:56:23 +0000 Manifest next update: Sun 27 Sep 2026 07:55:23 +0000 Files and hashes: 1: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: CU4fhxpTSoWALPjRqNjvNxnVIzYrldn92pW7hcwCMHE=) 2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 3: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) 4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 07:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:92:18:07:6d:67:3a:f8:69:f2:1a:c6:5c:31:e4:0a:fa:3d:68:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Sep 26 04:56:23 2026 GMT Not After : Sep 27 07:55:23 2026 GMT Subject: CN=37573FD6731EB6F37F0036E84106B9B9ACC3498D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:97:84:47:bc:e5:8b:9e:fd:79:d9:0c:43: 32:ea:34:98:26:25:c6:ca:0f:59:cf:b4:a1:a6:f3: 5e:31:4a:20:83:11:f3:d6:2d:10:e8:12:93:21:21: 40:7e:5f:7b:14:b6:9d:1b:0f:a3:6e:c2:8d:11:8c: a9:af:26:eb:62:ca:5e:05:fe:99:04:a3:f1:e3:0e: c2:25:78:45:a9:29:cb:0b:e1:f2:a0:13:53:65:95: d1:08:c2:af:6a:50:a6:6f:58:7f:be:67:96:57:1a: da:9d:22:eb:67:50:34:92:c8:59:31:6b:24:89:0a: dd:29:d4:4c:0e:71:0c:c0:83:26:7e:41:70:62:1f: 44:eb:66:03:30:e0:43:71:da:85:36:0f:f0:c3:58: a0:df:72:dd:11:53:4f:63:4f:8d:8f:d1:b8:d1:3f: e6:35:8b:5c:f2:bd:e4:61:aa:c6:f2:8d:40:5a:a0: a2:52:67:5c:18:13:1d:bc:0a:b2:60:3d:a9:23:be: ff:88:ec:b0:ce:fe:e3:01:3b:dd:47:55:b8:17:e6: 5d:16:5e:83:41:29:85:d8:3a:36:cc:8d:28:49:2c: 21:db:2d:55:1e:08:99:9e:11:ba:6d:2a:fd:88:31: 12:01:56:9e:91:08:35:6b:32:cf:1e:de:77:c1:b7: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:57:3F:D6:73:1E:B6:F3:7F:00:36:E8:41:06:B9:B9:AC:C3:49:8D X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f3:cb:23:15:f0:ea:1a:ea:cb:52:c0:fa:af:2f:ce:36:09: 25:ad:9c:17:64:4c:46:78:6b:ca:46:45:2f:d2:21:67:04:08: ac:8b:4e:b7:ff:f7:e3:e7:4d:e8:9f:c3:ae:c0:ae:5b:02:f8: e7:f2:86:f9:5d:03:ce:4d:37:3e:93:b5:99:c7:09:ad:7e:61: 62:e6:e2:4c:be:34:19:2a:a4:77:7f:03:cd:e2:19:59:83:66: 05:5d:18:a2:3f:14:1a:03:70:e4:91:7b:6f:58:52:87:fb:7f: c4:56:de:4e:94:f2:d8:d4:98:10:38:eb:7e:8d:08:f3:3d:c8: 57:b4:5d:e4:5f:d2:02:b0:60:3f:87:11:a4:50:3b:56:d6:00: 36:7f:1b:03:b8:0f:0e:f7:84:cc:1f:91:d2:6d:3c:8b:84:e2: 74:9e:4c:16:53:a0:88:4f:0c:e0:54:c3:b6:e3:9e:ff:ce:c1: 5b:64:73:5b:bc:91:97:cd:da:78:3e:a6:5e:2a:60:14:a2:57: f9:81:d6:5e:d7:b9:d3:b9:c6:c6:a2:10:50:9f:0d:3c:4b:9b: 9e:e3:fa:9c:22:f3:c6:89:d3:f2:2a:e7:a1:31:56:63:41:16: 46:14:98:18:82:de:5e:8e:c2:19:ab:6d:09:85:fc:b1:d4:f4: 7f:e8:0b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJIYB21nOvhp8hrGXDHkCvo9aGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA5MjYwNDU2MjNaFw0yNjA5MjcwNzU1MjNaMDMxMTAvBgNV BAMTKDM3NTczRkQ2NzMxRUI2RjM3RjAwMzZFODQxMDZCOUI5QUNDMzQ5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtZeER7zli579edkMQzLqNJgm JcbKD1nPtKGm814xSiCDEfPWLRDoEpMhIUB+X3sUtp0bD6Nuwo0RjKmvJutiyl4F /pkEo/HjDsIleEWpKcsL4fKgE1NlldEIwq9qUKZvWH++Z5ZXGtqdIutnUDSSyFkx aySJCt0p1EwOcQzAgyZ+QXBiH0TrZgMw4ENx2oU2D/DDWKDfct0RU09jT42P0bjR P+Y1i1zyveRhqsbyjUBaoKJSZ1wYEx28CrJgPakjvv+I7LDO/uMBO91HVbgX5l0W XoNBKYXYOjbMjShJLCHbLVUeCJmeEbptKv2IMRIBVp6RCDVrMs8e3nfBt2CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1c/1nMetvN/ADboQQa5uazDSY0wHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXzyyMV8Ooa6stSwPqvL842CSWtnBdkTEZ4 a8pGRS/SIWcECKyLTrf/9+PnTeifw67ArlsC+OfyhvldA85NNz6TtZnHCa1+YWLm 4ky+NBkqpHd/A83iGVmDZgVdGKI/FBoDcOSRe29YUof7f8RW3k6U8tjUmBA4636N CPM9yFe0XeRf0gKwYD+HEaRQO1bWADZ/GwO4Dw73hMwfkdJtPIuE4nSeTBZToIhP DOBUw7bjnv/OwVtkc1u8kZfN2ng+pl4qYBSiV/mB1l7XudO5xsaiEFCfDTxLm57j +pwi88aJ0/Iq56ExVmNBFkYUmBiC3l6OwhmrbQmF/LHU9H/oC40= -----END CERTIFICATE-----Generated at Sat Sep 26 15:13:16 2026 by rpki-client