$ rpki-client -vvvf rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft File: F69314440BEB879DDDA166C5976A2F1F6A19E031.mft (raw, json) Hash identifier: KB/nZLBYLHLDwzWaewFs3QvMBZWWPklI+kUVN/Dxecs= Subject key identifier: 2E:59:20:09:0A:6B:D6:E0:B0:5A:51:3D:C3:8E:65:26:3C:49:DA:65 Authority key identifier: F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31 Certificate issuer: /CN=F69314440BEB879DDDA166C5976A2F1F6A19E031 Certificate serial: 56C05C87CEFD25B37026D31295DBA5C786233698 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:58:30 +0000 Manifest this update: Wed 23 Sep 2026 09:53:30 +0000 Manifest next update: Thu 24 Sep 2026 11:41:30 +0000 Files and hashes: 1: F69314440BEB879DDDA166C5976A2F1F6A19E031.crl (hash: rn+1CamoatB36lWHJLl83/IWKU8A6nfMP7AMFrMw/mM=) 2: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 0dsqJtJ46wdaXhRYrKKKJ2werWCm6VUK7dh9hbyOntI=) 3: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: aeQ9NN7n3Js6ilpMlf3iKltx6poDEG/MLFH04LVivcI=) 4: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: wQESs7cDBFebpdzSgETJh4YhQNH9K+ZjQ7a77NcaHp8=) 5: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: 2iUHhReRTogx2RhTVdfCvVoaJpAuDQddykI0WZaNgaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c0:5c:87:ce:fd:25:b3:70:26:d3:12:95:db:a5:c7:86:23:36:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69314440BEB879DDDA166C5976A2F1F6A19E031 Validity Not Before: Sep 23 09:53:30 2026 GMT Not After : Sep 24 11:41:30 2026 GMT Subject: CN=2E5920090A6BD6E0B05A513DC38E65263C49DA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:1f:a2:60:f4:e5:58:c4:0e:15:7a:29:31: fd:e9:b6:92:82:b8:59:61:68:66:aa:02:d2:ce:a0: 6c:dd:4a:d3:5a:65:9f:8d:23:52:c3:cc:ca:5f:26: bd:9b:eb:c3:7c:89:ea:4b:a3:02:5d:e6:c9:02:9f: 3b:0e:0b:04:20:c0:07:3b:24:34:ab:ca:2b:bf:e3: 11:00:81:5d:bf:6f:6f:3b:14:07:30:dc:2a:43:ee: 8b:a7:64:33:b8:17:5b:ef:54:b3:02:db:57:84:a7: cc:4d:db:e9:81:6a:29:22:4f:f1:c5:cb:b0:7d:ab: 8b:23:a4:ea:92:b9:40:65:5f:24:5e:85:33:db:c1: 10:cd:f9:5d:aa:b0:94:1f:c0:2c:25:63:53:0b:48: 5c:38:5c:e8:95:01:62:9a:44:32:32:45:5a:de:9a: 34:3f:a1:95:9b:99:7d:0b:61:e4:3a:75:fa:fe:18: 60:01:98:cf:5e:16:90:c1:2e:dd:a7:cc:e2:57:d4: 55:16:c8:dc:51:1b:90:ae:82:42:fb:ce:b1:c6:56: f6:1b:ee:6f:52:ec:4e:f9:14:dc:e1:a8:50:4f:9e: 92:bf:30:64:85:d6:b0:16:ec:95:42:51:b2:25:27: fe:17:53:a7:d8:36:91:86:43:0b:a1:b1:49:b5:78: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:20:09:0A:6B:D6:E0:B0:5A:51:3D:C3:8E:65:26:3C:49:DA:65 X509v3 Authority Key Identifier: keyid:F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:d8:13:a7:c4:7c:7c:70:1c:40:8e:0a:3a:48:a5:ad:8d: 61:e2:04:b4:cb:e8:61:22:d5:bb:92:6b:ec:39:bc:35:41:6d: 47:3c:98:48:c5:58:15:e8:22:e7:dd:e2:9c:75:73:f5:9d:4a: 28:e9:c3:1e:64:ea:b6:4f:88:84:74:c7:bc:12:d3:9c:ca:97: 43:a3:63:c0:64:1a:a6:cc:15:8f:01:fe:ca:fe:24:a5:0e:7c: b8:38:5c:f8:f7:72:8d:89:a2:1b:b4:28:3d:35:b8:87:52:aa: a3:fc:f4:01:16:9e:dc:95:78:67:13:f3:00:8f:52:f5:d4:ff: 03:b8:8a:a4:0b:ac:36:2c:0d:de:e0:b2:93:56:7d:28:cb:0d: eb:24:a5:8c:6d:07:15:e6:ab:98:12:31:31:fa:e5:ee:ce:e0: 0e:a7:fa:e8:fd:e8:13:25:c7:7a:79:72:45:50:fd:33:fe:18: 2d:b4:b4:01:2f:db:12:3e:b6:36:4c:33:27:94:e5:38:29:0f: 72:9a:46:8a:e3:ef:2f:0b:8a:66:b7:82:15:42:c3:d0:22:53: ef:69:b4:d5:fa:2b:df:f6:09:d7:2c:a6:ac:79:de:65:96:7c: a3:64:c6:15:57:33:13:9a:d8:63:4a:2a:b2:d2:18:7b:f7:49: 65:c1:f9:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsBch879JbNwJtMSldulx4YjNpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5MzE0NDQwQkVCODc5REREQTE2NkM1OTc2QTJGMUY2 QTE5RTAzMTAeFw0yNjA5MjMwOTUzMzBaFw0yNjA5MjQxMTQxMzBaMDMxMTAvBgNV BAMTKDJFNTkyMDA5MEE2QkQ2RTBCMDVBNTEzREMzOEU2NTI2M0M0OURBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslB+iYPTlWMQOFXopMf3ptpKC uFlhaGaqAtLOoGzdStNaZZ+NI1LDzMpfJr2b68N8iepLowJd5skCnzsOCwQgwAc7 JDSryiu/4xEAgV2/b287FAcw3CpD7ounZDO4F1vvVLMC21eEp8xN2+mBaikiT/HF y7B9q4sjpOqSuUBlXyRehTPbwRDN+V2qsJQfwCwlY1MLSFw4XOiVAWKaRDIyRVre mjQ/oZWbmX0LYeQ6dfr+GGABmM9eFpDBLt2nzOJX1FUWyNxRG5CugkL7zrHGVvYb 7m9S7E75FNzhqFBPnpK/MGSF1rAW7JVCUbIlJ/4XU6fYNpGGQwuhsUm1eA0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULlkgCQpr1uCwWlE9w45lJjxJ2mUwHwYDVR0j BBgwFoAU9pMURAvrh53doWbFl2ovH2oZ4DEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDgzOTc3ZjQtOGMyZC00ZWIxLWI0Y2QtMzViNDkyMTZlMDczLzAvRjY5MzE0NDQw QkVCODc5REREQTE2NkM1OTc2QTJGMUY2QTE5RTAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjkzMTQ0NDBCRUI4NzlERERBMTY2QzU5NzZBMkYxRjZBMTlF MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRjY5MzE0NDQwQkVCODc5REREQTE2NkM1OTc2QTJG MUY2QTE5RTAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsn2BOnxHx8cBxAjgo6SKWtjWHiBLTL6GEi 1buSa+w5vDVBbUc8mEjFWBXoIufd4px1c/WdSijpwx5k6rZPiIR0x7wS05zKl0Oj Y8BkGqbMFY8B/sr+JKUOfLg4XPj3co2Johu0KD01uIdSqqP89AEWntyVeGcT8wCP UvXU/wO4iqQLrDYsDd7gspNWfSjLDeskpYxtBxXmq5gSMTH65e7O4A6n+uj96BMl x3p5ckVQ/TP+GC20tAEv2xI+tjZMMyeU5TgpD3KaRorj7y8Lima3ghVCw9AiU+9p tNX6K9/2Cdcspqx53mWWfKNkxhVXMxOa2GNKKrLSGHv3SWXB+Yc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:26:58 2026 by rpki-client