$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json) Hash identifier: muQhmcXt7lguiJSmiit3jL3P7/1jomfQqnJwzc30FvQ= Subject key identifier: 29:C5:DE:26:85:63:C1:F2:33:CE:81:81:1E:B7:8D:F9:29:33:D7:B1 Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Certificate serial: 3A5C824DB43BC4314512BCFCE6AA412D3118D769 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:27:36 +0000 Manifest this update: Wed 23 Sep 2026 17:22:36 +0000 Manifest next update: Thu 24 Sep 2026 18:53:36 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=) 2: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: L3Cls/FA1LNPqNr4h5Qy/CVg6Z5/tlpfg1qIH04O88g=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5c:82:4d:b4:3b:c4:31:45:12:bc:fc:e6:aa:41:2d:31:18:d7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Validity Not Before: Sep 23 17:22:36 2026 GMT Not After : Sep 24 18:53:36 2026 GMT Subject: CN=29C5DE268563C1F233CE81811EB78DF92933D7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:81:fc:13:a5:5d:77:17:d1:bd:2f:1a:a0: 2f:8f:75:dc:4d:65:71:20:66:f7:b3:f5:a0:27:b5: 08:0b:b2:1d:55:7f:96:ec:91:ce:43:42:b7:fb:dd: 7b:37:c8:ab:e6:d5:9e:51:e3:fb:18:ba:e0:b0:c4: ef:5e:63:c9:92:a6:73:f7:b9:d6:9e:cb:a9:85:b8: 6a:80:80:86:6f:8d:03:ea:1a:c9:ba:f2:66:1e:9c: fd:1d:43:66:25:d9:ba:cd:72:a9:7a:a8:91:2b:b7: 7e:ac:d7:4b:72:60:fe:73:99:b8:bc:c8:ae:1b:8f: d7:dc:69:a6:69:eb:4d:7e:45:56:27:82:cd:45:6c: cb:c2:5e:d2:66:d8:d7:ae:33:bb:ae:71:db:da:da: 73:9b:ab:16:6b:ec:e7:39:bf:4c:a0:d1:fd:16:37: 8b:ad:74:eb:91:05:09:60:15:bc:cd:71:d5:a4:a6: fa:ca:8f:a6:96:fa:49:82:5d:16:c6:92:07:c9:d8: 07:85:b9:08:6f:e3:91:41:d7:dc:1a:77:5d:dd:6d: d1:84:4a:2a:37:4e:34:93:a1:3f:01:04:20:2f:96: a0:a8:1d:da:9d:d3:c4:93:28:91:6d:4c:2e:bb:ee: 4c:78:38:12:ac:b6:6b:1e:b5:62:7b:3a:de:d8:14: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C5:DE:26:85:63:C1:F2:33:CE:81:81:1E:B7:8D:F9:29:33:D7:B1 X509v3 Authority Key Identifier: keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:7f:ec:33:7c:21:dd:a3:62:52:d2:67:ec:ed:4e:13:7a: c4:a9:51:d9:1b:4d:86:7c:16:0a:43:2c:e7:b5:cf:a7:18:f9: 27:d4:30:92:c2:32:0a:37:06:d8:dd:08:c8:a2:bf:ee:59:9a: e6:f3:b6:49:16:12:fc:be:5d:3f:ea:52:54:ea:b7:5d:70:35: 50:60:fd:50:15:3d:37:68:63:dc:a6:13:42:c8:d9:77:a5:85: 53:06:e6:cc:f4:30:a0:4f:f6:d1:f1:3f:78:c4:e0:d3:0c:d6: 0a:11:81:c0:a0:ad:66:d0:0f:7d:0c:dc:4a:8f:19:7d:ae:8c: 48:95:80:bd:13:bc:b7:5f:62:50:15:af:12:df:e0:4a:89:4e: ac:3e:39:17:00:63:d7:3c:68:27:6f:40:40:8c:7a:dd:5a:27: 48:89:de:69:4c:db:f8:02:19:d1:6f:65:e0:56:e5:03:7f:e0: ab:00:32:d6:8f:5c:7e:a9:66:db:e4:0a:4b:7a:25:d8:8d:0f: 62:b2:ff:5f:a1:1d:ca:fd:82:07:7b:8f:ec:51:fe:f9:54:f6: f4:84:3a:a1:2f:81:3d:74:ad:d8:8b:00:9a:a5:00:0d:e9:32: 39:9b:30:0f:65:ab:6f:9f:70:1a:9e:51:a1:56:72:98:a8:f5: f2:2b:cc:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlyCTbQ7xDFFErz85qpBLTEY12kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4 NUYxNDY0QTAeFw0yNjA5MjMxNzIyMzZaFw0yNjA5MjQxODUzMzZaMDMxMTAvBgNV BAMTKDI5QzVERTI2ODU2M0MxRjIzM0NFODE4MTFFQjc4REY5MjkzM0Q3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wYH8E6VddxfRvS8aoC+PddxN ZXEgZvez9aAntQgLsh1Vf5bskc5DQrf73Xs3yKvm1Z5R4/sYuuCwxO9eY8mSpnP3 udaey6mFuGqAgIZvjQPqGsm68mYenP0dQ2Yl2brNcql6qJErt36s10tyYP5zmbi8 yK4bj9fcaaZp601+RVYngs1FbMvCXtJm2NeuM7uucdva2nObqxZr7Oc5v0yg0f0W N4utdOuRBQlgFbzNcdWkpvrKj6aW+kmCXRbGkgfJ2AeFuQhv45FB19wad13dbdGE Sio3TjSToT8BBCAvlqCoHdqd08STKJFtTC677kx4OBKstmsetWJ7Ot7YFOh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKcXeJoVjwfIzzoGBHreN+Skz17EwHwYDVR0j BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0 NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIx QTc4NUYxNDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwLf+wzfCHdo2JS0mfs7U4TesSpUdkbTYZ8 FgpDLOe1z6cY+SfUMJLCMgo3BtjdCMiiv+5ZmubztkkWEvy+XT/qUlTqt11wNVBg /VAVPTdoY9ymE0LI2XelhVMG5sz0MKBP9tHxP3jE4NMM1goRgcCgrWbQD30M3EqP GX2ujEiVgL0TvLdfYlAVrxLf4EqJTqw+ORcAY9c8aCdvQECMet1aJ0iJ3mlM2/gC GdFvZeBW5QN/4KsAMtaPXH6pZtvkCkt6JdiND2Ky/1+hHcr9ggd7j+xR/vlU9vSE OqEvgT10rdiLAJqlAA3pMjmbMA9lq2+fcBqeUaFWcpio9fIrzHA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:39:50 2026 by rpki-client