$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json) Hash identifier: MpCX7hwwrfh3lZCZxcEs14iq5rL20zIpT6Fs8N21N9Q= Subject key identifier: A4:06:57:E0:3B:A6:C9:0E:57:5E:07:64:33:D6:8A:10:E4:24:A1:94 Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Certificate serial: 38A97E444EC4080B6FE2748727F85C21FE33F33B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:57:09 +0000 Manifest this update: Wed 23 Sep 2026 12:52:09 +0000 Manifest next update: Thu 24 Sep 2026 16:49:09 +0000 Files and hashes: 1: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: ChxMSNqGoLpFHiqx/p30YFNJkK/f3c8/QNt9GaQf9s0=) 2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=) 3: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=) 4: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a9:7e:44:4e:c4:08:0b:6f:e2:74:87:27:f8:5c:21:fe:33:f3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Validity Not Before: Sep 23 12:52:09 2026 GMT Not After : Sep 24 16:49:09 2026 GMT Subject: CN=A40657E03BA6C90E575E076433D68A10E424A194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:9a:4d:08:17:cc:12:88:c6:57:40:66:cd: ab:67:fb:47:48:5f:8f:d7:e7:24:cd:79:9e:f5:ee: ef:e1:1c:6f:f2:a6:3d:3c:97:17:7b:57:2b:80:19: 0b:af:a3:63:bb:7c:49:50:65:1e:bb:2d:3a:b9:9f: 5f:e0:85:41:16:6b:ef:37:df:9b:9c:aa:c6:11:3f: 44:26:0b:c3:ed:7a:25:7f:89:79:7b:33:c2:2a:12: a7:b4:f2:21:c3:81:93:b5:ac:3a:e6:b3:4e:48:1e: b5:be:6d:97:f2:22:dc:9b:4a:a6:e7:de:33:6b:44: 24:e0:90:9f:d1:ac:e9:89:2f:6a:46:5e:63:8e:45: 6c:bf:2e:78:c9:f3:8d:5d:1c:61:50:69:f8:95:2c: 0b:1f:99:b8:13:9e:70:ed:ed:b5:38:57:df:81:f7: 2f:ab:1c:73:1e:46:89:7f:41:96:2e:70:8b:d1:1a: 48:06:e5:b6:3f:bd:5b:79:3b:a1:05:11:fc:65:9d: f5:69:06:b1:8e:56:68:6d:45:eb:f2:6f:57:ff:d4: 3c:e2:89:2f:e5:45:35:9f:3c:f4:98:4a:5e:49:31: fe:75:db:8d:f3:91:af:57:52:ab:01:04:b2:e8:3a: 58:05:d2:96:d7:1e:57:38:a7:62:a0:e6:aa:54:47: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:06:57:E0:3B:A6:C9:0E:57:5E:07:64:33:D6:8A:10:E4:24:A1:94 X509v3 Authority Key Identifier: keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:43:c3:87:b9:6a:9d:9e:6f:0c:11:db:76:ac:ed:cd:ec: 96:8c:c6:5f:9b:a8:c3:a8:8a:eb:48:3a:99:b3:c5:27:93:aa: f2:f5:5b:85:1b:6c:b6:0d:81:74:a8:04:27:ee:bf:8b:12:a3: 68:ec:47:94:b2:52:8e:82:dd:da:63:a5:c5:75:35:2e:cb:90: aa:7b:72:09:5a:98:32:47:1f:9e:11:32:dc:73:8b:f4:67:86: f5:d0:a5:88:41:ea:2a:4b:f0:31:2a:1c:39:4a:66:94:33:c6: 1e:5f:ba:72:de:aa:6c:d0:18:ac:81:e5:6d:bb:4e:56:6b:c9: 71:ad:32:f1:f8:17:cc:3b:79:41:0c:3a:df:b3:4d:77:83:e4: 0e:41:82:51:38:15:0a:f7:55:9c:28:a6:90:da:88:51:a3:9e: d7:e1:3e:0a:97:e7:e5:55:9a:9a:fd:8b:15:c6:bd:57:0c:e9: 07:39:72:f7:6f:ca:06:9e:26:83:aa:20:e8:95:7b:08:8f:c1: 44:05:ac:47:44:0b:06:00:f5:2c:a8:7a:a8:06:80:0f:f5:0a: a7:9d:13:e6:f3:01:8f:94:6c:b9:1f:b6:5a:e3:bf:9b:bc:be: 64:4b:8b:31:15:17:68:84:aa:a2:f1:6d:ac:0b:a7:7f:25:32: cd:df:90:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKl+RE7ECAtv4nSHJ/hcIf4z8zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENCRkIw NzQ5REYxQjAeFw0yNjA5MjMxMjUyMDlaFw0yNjA5MjQxNjQ5MDlaMDMxMTAvBgNV BAMTKEE0MDY1N0UwM0JBNkM5MEU1NzVFMDc2NDMzRDY4QTEwRTQyNEExOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDppNCBfMEojGV0Bmzatn+0dI X4/X5yTNeZ717u/hHG/ypj08lxd7VyuAGQuvo2O7fElQZR67LTq5n1/ghUEWa+83 35ucqsYRP0QmC8PteiV/iXl7M8IqEqe08iHDgZO1rDrms05IHrW+bZfyItybSqbn 3jNrRCTgkJ/RrOmJL2pGXmOORWy/LnjJ841dHGFQafiVLAsfmbgTnnDt7bU4V9+B 9y+rHHMeRol/QZYucIvRGkgG5bY/vVt5O6EFEfxlnfVpBrGOVmhtRevyb1f/1Dzi iS/lRTWfPPSYSl5JMf51243zka9XUqsBBLLoOlgF0pbXHlc4p2Kg5qpUR+BtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpAZX4DumyQ5XXgdkM9aKEOQkoZQwHwYDVR0j BBgwFoAU+JM5Jq6Dne1ymvouDk3L+wdJ3xswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU1MjEwOTktM2JhMS00ZjkxLWI1YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZB RTgzOURFRDcyOUFGQTJFMEU0RENCRkIwNzQ5REYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODkzMzkyNkFFODM5REVENzI5QUZBMkUwRTREQ0JGQjA3NDlE RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENC RkIwNzQ5REYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUiQ8OHuWqdnm8MEdt2rO3N7JaMxl+bqMOo iutIOpmzxSeTqvL1W4UbbLYNgXSoBCfuv4sSo2jsR5SyUo6C3dpjpcV1NS7LkKp7 cglamDJHH54RMtxzi/RnhvXQpYhB6ipL8DEqHDlKZpQzxh5funLeqmzQGKyB5W27 TlZryXGtMvH4F8w7eUEMOt+zTXeD5A5BglE4FQr3VZwoppDaiFGjntfhPgqX5+VV mpr9ixXGvVcM6Qc5cvdvygaeJoOqIOiVewiPwUQFrEdECwYA9SyoeqgGgA/1Cqed E+bzAY+UbLkftlrjv5u8vmRLizEVF2iEqqLxbawLp38lMs3fkPg= -----END CERTIFICATE-----Generated at Thu Sep 24 08:15:54 2026 by rpki-client