$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json) Hash identifier: pyuMzW0C1DW8WpBe1yHFnHC3+6b7KNw9rwIsigZmsus= Subject key identifier: F5:EE:7A:FB:3A:04:9A:62:88:57:62:64:36:20:37:F7:F0:BC:97:E1 Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Certificate serial: 0975600C1DEC97EE9566192577EFEEA1F3DEC9FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:29:59 +0000 Manifest this update: Wed 23 Sep 2026 19:24:59 +0000 Manifest next update: Thu 24 Sep 2026 20:10:59 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=) 2: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: K9phgMNd282i2lbZwcc4l573KklBaOXi0P63wriTMkM=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:75:60:0c:1d:ec:97:ee:95:66:19:25:77:ef:ee:a1:f3:de:c9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Validity Not Before: Sep 23 19:24:59 2026 GMT Not After : Sep 24 20:10:59 2026 GMT Subject: CN=F5EE7AFB3A049A6288576264362037F7F0BC97E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:00:73:17:d6:fd:d2:49:7e:cf:df:a0:b9: 31:e5:5f:fe:20:cd:aa:4e:cb:ee:f6:40:21:d8:a6: 71:2a:ad:83:ad:0b:6c:94:1d:3d:d5:84:58:f7:74: 73:d1:12:fa:0e:14:af:c3:59:c6:24:30:8a:b7:aa: ef:b9:d4:ea:91:e0:f4:85:e9:da:3f:86:f0:8d:8b: ed:76:ca:44:22:7d:ad:48:67:ef:40:bc:a7:d8:5a: 6a:49:83:99:28:fb:de:89:33:d9:ad:a3:29:81:a9: 52:2d:69:7b:eb:58:8e:ac:e7:75:0d:da:4b:0e:c9: f6:00:c5:39:30:28:8b:71:ff:f6:93:f6:58:6c:0a: 1e:41:04:4b:fc:94:15:88:b6:db:69:42:4d:29:5e: 39:1a:5e:d5:ce:82:fb:de:84:e8:bd:b1:6f:3b:32: 8c:f5:71:44:40:44:92:62:f4:7d:b2:d3:6e:ce:95: f7:c5:e3:8f:ca:4b:fb:89:d0:2b:89:8b:46:b0:76: 0e:48:e7:d2:e0:f4:fa:7b:68:fd:3f:b0:e4:5e:7b: be:0f:1f:14:f4:4e:00:a7:ca:ad:e7:0a:0e:b2:c7: c6:bf:4e:22:58:0e:83:d8:30:41:77:ff:b0:09:9d: 73:37:0c:8a:c5:72:e4:d2:3d:64:48:fc:0c:6c:98: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:7A:FB:3A:04:9A:62:88:57:62:64:36:20:37:F7:F0:BC:97:E1 X509v3 Authority Key Identifier: keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:35:c5:d2:eb:52:5f:4e:9a:e7:52:a2:4b:03:a3:5c:a3:12: cb:4c:83:14:17:36:88:b5:ed:ff:46:3b:63:73:a9:6e:7a:16: 7c:95:f2:46:c5:bc:5a:fd:bd:2f:ec:4f:48:71:ba:ce:31:8b: 18:5c:3c:07:57:4f:4a:b5:7a:97:f3:c3:4b:84:5c:99:b4:39: d6:a7:c6:f2:96:37:a8:c8:f3:56:34:39:90:74:bd:89:77:dc: d1:c2:6c:fd:91:27:12:c3:f7:87:f4:53:2d:cc:11:2d:ce:75: 1b:72:7a:59:21:0f:24:03:07:80:73:40:b5:16:50:c1:74:d1: 67:2b:23:45:65:b6:f9:dd:9e:9f:b6:87:b9:04:0a:19:7f:da: 2a:03:4f:f2:d5:af:4d:14:65:c8:41:a7:04:91:7c:1a:cc:26: db:2e:0c:59:3e:90:d8:bb:db:6c:36:19:0d:14:3a:17:1f:c5: 45:e0:74:74:6e:7f:29:6f:7d:ea:3a:0e:b7:fe:74:21:94:b0: 43:d7:d5:a2:0a:a6:32:e7:00:88:38:15:90:71:8d:0b:ba:d9: f0:1d:03:d4:bb:a3:32:24:3b:41:22:45:04:0f:23:b1:26:29: 77:11:72:d3:65:5c:62:04:e7:31:33:47:0b:15:6e:d9:f9:73: 2a:ed:aa:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXVgDB3sl+6VZhkld+/uofPeyfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG MTJBNEExRjAeFw0yNjA5MjMxOTI0NTlaFw0yNjA5MjQyMDEwNTlaMDMxMTAvBgNV BAMTKEY1RUU3QUZCM0EwNDlBNjI4ODU3NjI2NDM2MjAzN0Y3RjBCQzk3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDABzF9b90kl+z9+guTHlX/4g zapOy+72QCHYpnEqrYOtC2yUHT3VhFj3dHPREvoOFK/DWcYkMIq3qu+51OqR4PSF 6do/hvCNi+12ykQifa1IZ+9AvKfYWmpJg5ko+96JM9mtoymBqVItaXvrWI6s53UN 2ksOyfYAxTkwKItx//aT9lhsCh5BBEv8lBWItttpQk0pXjkaXtXOgvvehOi9sW87 Moz1cURARJJi9H2y027OlffF44/KS/uJ0CuJi0awdg5I59Lg9Pp7aP0/sORee74P HxT0TgCnyq3nCg6yx8a/TiJYDoPYMEF3/7AJnXM3DIrFcuTSPWRI/AxsmH15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9e56+zoEmmKIV2JkNiA39/C8l+EwHwYDVR0j BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4 OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0 QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA1xdLrUl9OmudSoksDo1yjEstMgxQXNoi1 7f9GO2NzqW56FnyV8kbFvFr9vS/sT0hxus4xixhcPAdXT0q1epfzw0uEXJm0Odan xvKWN6jI81Y0OZB0vYl33NHCbP2RJxLD94f0Uy3MES3OdRtyelkhDyQDB4BzQLUW UMF00WcrI0Vltvndnp+2h7kEChl/2ioDT/LVr00UZchBpwSRfBrMJtsuDFk+kNi7 22w2GQ0UOhcfxUXgdHRufylvfeo6Drf+dCGUsEPX1aIKpjLnAIg4FZBxjQu62fAd A9S7ozIkO0EiRQQPI7EmKXcRctNlXGIE5zEzRwsVbtn5cyrtqqo= -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:37 2026 by rpki-client