$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: vq9lcVrmhDuOf4d1vLd8hCsMEN2yDt61AW6F+78n58w= Subject key identifier: 6C:B5:01:90:30:E7:C3:82:A8:78:BE:EA:7E:7C:B3:A7:9E:D3:C1:D5 Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 037ACFCA9A716B1856226B035D13D0DE1549C115 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:11:25 +0000 Manifest this update: Wed 23 Sep 2026 08:06:25 +0000 Manifest next update: Thu 24 Sep 2026 11:36:25 +0000 Files and hashes: 1: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: Z8d/k8uqhWKditqPeyc5PG5IUDuxxnqK/DsCPKBBlC4=) 2: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) 3: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) 4: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 5: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7a:cf:ca:9a:71:6b:18:56:22:6b:03:5d:13:d0:de:15:49:c1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: Sep 23 08:06:25 2026 GMT Not After : Sep 24 11:36:25 2026 GMT Subject: CN=6CB5019030E7C382A878BEEA7E7CB3A79ED3C1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:3c:2e:4c:ad:19:22:41:3a:3a:94:97:2d: 4d:60:50:07:66:40:8f:4b:67:19:73:ec:9e:f2:92: 35:07:18:f9:ba:3f:a0:5a:f3:f7:ee:7f:30:7d:e4: b0:aa:79:64:c1:76:0b:67:c2:68:9b:c1:c9:48:f1: 83:e6:01:0f:56:64:16:bf:07:88:ca:4e:82:e6:de: 17:ee:72:bf:89:69:bc:ac:34:be:cb:66:dd:36:de: 9e:12:e4:5e:88:16:d9:2a:6b:64:e2:31:ed:13:0e: 34:56:82:6a:4c:13:a5:dd:62:d2:37:fc:d4:9c:f1: 89:fb:d9:75:bc:02:d7:2c:1c:53:ba:9a:fe:c5:cb: 68:d1:f9:29:c8:3d:db:3a:4d:0a:6f:91:ae:8e:50: 17:94:99:2e:33:77:a2:ea:e0:c0:25:2e:59:94:e7: 4b:a6:88:b5:50:f4:fb:44:87:eb:64:17:ee:d1:98: e9:13:e6:b8:a4:a0:10:9b:38:20:d2:5f:43:fe:e1: 6f:f7:03:26:77:dd:ce:e1:cc:33:b9:2b:21:fd:26: c1:4c:ba:c5:bb:74:4f:79:f1:53:97:53:83:09:4e: de:bf:b7:01:bd:1f:7f:48:26:4f:74:8b:d4:fd:ec: 0b:47:05:e8:37:12:f7:61:62:a4:23:c2:21:55:17: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:01:90:30:E7:C3:82:A8:78:BE:EA:7E:7C:B3:A7:9E:D3:C1:D5 X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5f:d3:70:c9:83:d3:c1:3a:72:f3:d2:f5:a4:ae:a3:86:e4: 10:c4:c1:2b:42:1f:ab:e2:93:4a:12:f8:b1:9b:b9:47:63:38: 77:02:c5:cd:76:30:a1:68:20:bd:c3:c1:b6:fc:c2:0e:3e:ef: 66:2a:74:80:2a:46:e3:ad:c2:50:75:5b:5e:91:20:0d:ee:1b: a9:ca:8c:b1:e3:71:c3:86:f2:74:51:e6:aa:95:2f:72:f8:e0: c8:fa:22:24:f2:5d:07:24:bc:cb:b7:0f:d4:1e:c6:33:59:b3: 64:01:14:01:9e:c2:c5:27:79:0c:fa:ca:50:95:c6:32:1a:c7: 6b:9d:c7:38:8d:31:22:7f:42:cf:2b:b4:a7:82:d7:0c:a5:53: fa:7e:e1:0a:06:8a:70:03:cf:70:da:b9:61:84:11:d2:4a:00: d7:dc:29:f7:45:77:48:67:cc:3e:eb:06:a4:74:50:8e:02:91: ce:63:37:a6:d9:f3:8e:54:83:67:ac:e4:6d:c7:5d:df:11:06: c6:63:b6:4a:f4:3f:2d:f9:a7:3c:ba:60:29:ef:1b:3e:6f:e7: d5:fb:4b:fd:7c:99:35:61:a7:c2:b1:f9:a4:d5:37:bf:2e:07: 4f:70:d2:1c:d1:cf:c3:9a:fd:c4:0d:30:dc:c6:e9:a0:7a:f4: 9f:d4:cc:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3rPyppxaxhWImsDXRPQ3hVJwRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA5MjMwODA2MjVaFw0yNjA5MjQxMTM2MjVaMDMxMTAvBgNV BAMTKDZDQjUwMTkwMzBFN0MzODJBODc4QkVFQTdFN0NCM0E3OUVEM0MxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqezwuTK0ZIkE6OpSXLU1gUAdm QI9LZxlz7J7ykjUHGPm6P6Ba8/fufzB95LCqeWTBdgtnwmibwclI8YPmAQ9WZBa/ B4jKToLm3hfucr+JabysNL7LZt023p4S5F6IFtkqa2TiMe0TDjRWgmpME6XdYtI3 /NSc8Yn72XW8AtcsHFO6mv7Fy2jR+SnIPds6TQpvka6OUBeUmS4zd6Lq4MAlLlmU 50umiLVQ9PtEh+tkF+7RmOkT5rikoBCbOCDSX0P+4W/3AyZ33c7hzDO5KyH9JsFM usW7dE958VOXU4MJTt6/twG9H39IJk90i9T97AtHBeg3EvdhYqQjwiFVFysJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLUBkDDnw4KoeL7qfnyzp57TwdUwHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1f03DJg9PBOnLz0vWkrqOG5BDEwStCH6vi k0oS+LGbuUdjOHcCxc12MKFoIL3Dwbb8wg4+72YqdIAqRuOtwlB1W16RIA3uG6nK jLHjccOG8nRR5qqVL3L44Mj6IiTyXQckvMu3D9QexjNZs2QBFAGewsUneQz6ylCV xjIax2udxziNMSJ/Qs8rtKeC1wylU/p+4QoGinADz3DauWGEEdJKANfcKfdFd0hn zD7rBqR0UI4Ckc5jN6bZ845Ug2es5G3HXd8RBsZjtkr0Py35pzy6YCnvGz5v59X7 S/18mTVhp8Kx+aTVN78uB09w0hzRz8Oa/cQNMNzG6aB69J/UzJc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:28:21 2026 by rpki-client