$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: XYfycFs26zYtrq3wNi+jhxOno2X4yWPzj9B33hP/YYE= Subject key identifier: A0:08:6D:7D:AD:76:7C:B0:98:2B:11:21:52:27:0B:34:2C:A3:0F:E5 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 69F2F0B1B055B6AC1E4CDC7CFD47707526AAA33D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:06:21 +0000 Manifest this update: Fri 25 Sep 2026 01:01:21 +0000 Manifest next update: Sat 26 Sep 2026 03:11:21 +0000 Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 2: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: U7lhF43XCoCs3pkLjxpHVoa4gSNLC4p1VPQ6gR+Oxh8=) 3: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f2:f0:b1:b0:55:b6:ac:1e:4c:dc:7c:fd:47:70:75:26:aa:a3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Sep 25 01:01:21 2026 GMT Not After : Sep 26 03:11:21 2026 GMT Subject: CN=A0086D7DAD767CB0982B112152270B342CA30FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:0b:fe:d6:67:14:8f:e7:ea:cc:41:de:55: 27:9d:4c:22:a7:85:53:65:0a:dc:af:d2:ee:01:72: 6e:60:12:cf:20:79:5d:08:02:3d:9f:40:cc:42:d0: a8:e6:50:cc:d7:ea:ec:1b:18:81:98:6e:c5:83:4e: 85:37:cb:cb:c5:ce:32:a4:85:d7:92:41:f0:f7:e5: 0a:79:85:71:ef:7b:1f:5c:60:f6:ba:83:0b:08:f0: 4e:1e:90:1d:62:a1:6e:c4:c4:1f:74:b2:78:bc:d9: f8:89:38:2e:c0:e4:dd:e0:43:1e:fc:2d:58:b0:44: e2:74:bc:c2:ba:42:5c:77:94:d8:f5:b0:25:60:45: 53:dd:cf:0f:d9:01:33:eb:d4:9c:0e:4a:54:56:d8: 1b:ea:58:35:ce:5b:2a:62:77:43:56:53:aa:1e:fd: c9:b7:72:21:b5:81:eb:40:94:d9:e6:16:c8:41:aa: e1:83:0c:e0:f2:5d:1d:a6:39:cb:fd:da:5a:d4:38: e8:16:f2:aa:b6:30:59:4a:1f:6e:e8:03:37:66:1a: 1f:5f:bb:1f:8f:76:b8:0c:d9:8b:a0:23:4b:eb:26: 22:40:b2:51:2e:27:c3:83:05:f7:84:77:db:b0:5b: 90:3a:36:31:f5:c2:e0:93:1f:13:f7:c4:d4:64:dd: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:08:6D:7D:AD:76:7C:B0:98:2B:11:21:52:27:0B:34:2C:A3:0F:E5 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ca:12:23:fa:dd:da:d9:67:5f:06:66:c7:71:f9:c2:db:35: a8:c2:4c:48:f5:d3:5a:51:e7:30:9d:00:51:eb:10:2c:53:c1: 8d:85:66:89:fe:25:af:d6:33:61:1a:27:65:22:83:74:d3:b1: a5:e6:62:86:31:25:97:d1:04:7e:a0:14:ff:ed:a0:be:64:90: 32:f2:44:63:04:f8:23:c6:7f:6f:95:d6:90:3d:83:25:49:8e: 50:29:2a:0e:92:9a:19:62:c7:c8:3f:7a:e1:8d:5d:89:ee:d9: 81:79:ec:ba:4a:63:6d:98:c9:26:5d:8d:df:6c:7b:f2:38:94: a3:39:3f:38:69:1a:62:ac:40:50:93:19:4b:c7:10:84:44:d5: b8:92:1a:19:c6:39:79:59:65:e6:d6:5d:67:a2:1d:b6:94:80: d1:c2:7a:e4:ff:3c:4a:f4:32:ec:7d:55:88:d4:0a:8d:90:2d: 2e:a2:b9:3c:6a:30:c4:eb:ce:95:36:2d:b3:06:f1:45:93:64: 2d:a9:70:dd:bc:3f:01:f6:ff:19:25:e9:13:1b:05:64:b3:1b: 4f:a0:31:73:45:6c:62:59:aa:db:f4:44:01:7f:13:41:ea:49: 69:1a:19:63:28:80:a9:c7:78:f7:76:16:3b:3a:4a:0e:4d:1c: e7:e9:5c:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafLwsbBVtqweTNx8/UdwdSaqoz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA5MjUwMTAxMjFaFw0yNjA5MjYwMzExMjFaMDMxMTAvBgNV BAMTKEEwMDg2RDdEQUQ3NjdDQjA5ODJCMTEyMTUyMjcwQjM0MkNBMzBGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfwv+1mcUj+fqzEHeVSedTCKn hVNlCtyv0u4Bcm5gEs8geV0IAj2fQMxC0KjmUMzX6uwbGIGYbsWDToU3y8vFzjKk hdeSQfD35Qp5hXHvex9cYPa6gwsI8E4ekB1ioW7ExB90sni82fiJOC7A5N3gQx78 LViwROJ0vMK6Qlx3lNj1sCVgRVPdzw/ZATPr1JwOSlRW2BvqWDXOWypid0NWU6oe /cm3ciG1getAlNnmFshBquGDDODyXR2mOcv92lrUOOgW8qq2MFlKH27oAzdmGh9f ux+PdrgM2YugI0vrJiJAslEuJ8ODBfeEd9uwW5A6NjH1wuCTHxP3xNRk3V0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAhtfa12fLCYKxEhUicLNCyjD+UwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3KEiP63drZZ18GZsdx+cLbNajCTEj101pR 5zCdAFHrECxTwY2FZon+Ja/WM2EaJ2Uig3TTsaXmYoYxJZfRBH6gFP/toL5kkDLy RGME+CPGf2+V1pA9gyVJjlApKg6Smhlix8g/euGNXYnu2YF57LpKY22YySZdjd9s e/I4lKM5PzhpGmKsQFCTGUvHEIRE1biSGhnGOXlZZebWXWeiHbaUgNHCeuT/PEr0 Mux9VYjUCo2QLS6iuTxqMMTrzpU2LbMG8UWTZC2pcN28PwH2/xkl6RMbBWSzG0+g MXNFbGJZqtv0RAF/E0HqSWkaGWMogKnHePd2Fjs6Sg5NHOfpXIg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:27:17 2026 by rpki-client