$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: T6J4JioqMqV48B4yWtk4xzQ8Z1WK4zA1fXM6awSeVOg= Subject key identifier: 04:EE:79:79:B1:F5:7D:52:15:4E:33:A4:21:18:F1:2D:0A:F3:D2:66 Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 4B109A2AF680A7E585E204489FE76988673E211E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:59:22 +0000 Manifest this update: Thu 24 Sep 2026 14:54:22 +0000 Manifest next update: Fri 25 Sep 2026 17:22:22 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: Caq5afkNY+lXW9IZaMmf3dNMf5f1tkAyqIFukNJFp+w=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:10:9a:2a:f6:80:a7:e5:85:e2:04:48:9f:e7:69:88:67:3e:21:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Sep 24 14:54:22 2026 GMT Not After : Sep 25 17:22:22 2026 GMT Subject: CN=04EE7979B1F57D52154E33A42118F12D0AF3D266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:e7:2c:24:87:de:91:82:9b:8c:2c:83:0c: 38:ba:98:d4:75:67:4d:75:9b:b3:77:22:7a:3a:0a: 33:f6:d0:73:f0:73:de:b9:fc:3d:71:ea:85:fa:8a: c3:1a:f3:67:76:05:c0:aa:aa:70:54:31:36:ff:ef: 76:9b:b1:96:3f:67:12:8f:e9:34:8a:1a:a5:55:84: 8d:ff:ea:61:4b:ae:15:9a:5e:79:15:94:e8:9f:2b: a5:7a:2a:57:dd:71:3e:8f:0d:dc:31:54:6e:5b:30: 2f:4f:6a:59:c0:09:2d:11:c3:5f:aa:6d:be:dd:9e: 6f:f3:05:9c:ce:48:2b:54:bf:53:31:e7:9d:35:c1: e1:ce:db:7a:64:06:1c:33:13:f9:71:8a:1c:3b:53: fd:d9:4d:d0:7d:f6:8c:4b:ba:e6:a7:2d:f1:45:8a: 36:cc:ee:03:12:5a:75:d9:d2:4c:b2:a9:5b:93:85: 22:ef:cc:03:ef:2c:2a:27:8a:00:98:23:8a:87:dc: c8:a2:1d:8c:26:a2:85:54:9f:b1:1f:75:ea:9b:dc: ff:4d:03:4f:0f:ab:a7:cb:ec:0b:c8:f3:bd:0f:bc: dc:b4:5e:0f:b7:d9:4a:f9:60:dc:db:5d:31:00:f0: 57:82:40:22:5b:40:c7:ad:3e:b1:4b:22:74:bc:db: 86:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EE:79:79:B1:F5:7D:52:15:4E:33:A4:21:18:F1:2D:0A:F3:D2:66 X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:14:da:76:35:45:33:c6:c2:bd:d8:93:e9:85:b2:f4:4d:7c: 1e:9c:9c:9b:52:07:38:a3:c3:4e:cc:2a:e9:2d:dc:80:91:d8: 85:39:8d:fd:e7:56:54:63:68:5c:3b:cc:0b:a3:bd:1b:3d:e4: 0b:5c:c0:db:56:25:65:6e:32:0f:12:22:cb:81:61:5c:58:e0: 80:3c:9a:ce:70:da:f6:cd:82:5f:ee:71:ed:a2:28:e2:44:27: 9e:bd:71:03:c3:38:69:96:0f:49:4a:ac:a9:49:e2:a3:49:5a: 07:6c:5a:ed:3e:99:f6:33:d7:03:95:08:97:e4:2b:15:8b:51: 5e:20:14:19:dd:8f:6e:08:ac:c5:3f:72:4f:bd:a5:ad:14:ad: f1:35:b3:76:7f:32:d7:99:ca:cc:75:88:84:c1:9d:f3:16:b8: 75:28:12:af:15:8f:e4:1d:4f:3f:94:20:73:25:19:93:e7:b0: 44:38:03:07:ba:6a:70:c0:c7:92:81:0e:48:15:1f:6b:b9:9d: 39:2e:c4:6d:1f:51:ca:9b:f8:74:06:00:db:54:36:ba:bc:3b: 31:48:a8:49:d6:1d:9a:01:f0:55:0b:ee:87:b3:d5:bb:a3:26: a6:b2:55:78:ae:a2:50:44:e9:49:70:eb:84:8b:ce:64:21:0f: ef:83:56:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxCaKvaAp+WF4gRIn+dpiGc+IR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA5MjQxNDU0MjJaFw0yNjA5MjUxNzIyMjJaMDMxMTAvBgNV BAMTKDA0RUU3OTc5QjFGNTdENTIxNTRFMzNBNDIxMThGMTJEMEFGM0QyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkOcsJIfekYKbjCyDDDi6mNR1 Z011m7N3Ino6CjP20HPwc965/D1x6oX6isMa82d2BcCqqnBUMTb/73absZY/ZxKP 6TSKGqVVhI3/6mFLrhWaXnkVlOifK6V6KlfdcT6PDdwxVG5bMC9PalnACS0Rw1+q bb7dnm/zBZzOSCtUv1Mx5501weHO23pkBhwzE/lxihw7U/3ZTdB99oxLuuanLfFF ijbM7gMSWnXZ0kyyqVuThSLvzAPvLConigCYI4qH3MiiHYwmooVUn7Efdeqb3P9N A08Pq6fL7AvI870PvNy0Xg+32Ur5YNzbXTEA8FeCQCJbQMetPrFLInS824atAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBO55ebH1fVIVTjOkIRjxLQrz0mYwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsU2nY1RTPGwr3Yk+mFsvRNfB6cnJtSBzij w07MKukt3ICR2IU5jf3nVlRjaFw7zAujvRs95AtcwNtWJWVuMg8SIsuBYVxY4IA8 ms5w2vbNgl/uce2iKOJEJ569cQPDOGmWD0lKrKlJ4qNJWgdsWu0+mfYz1wOVCJfk KxWLUV4gFBndj24IrMU/ck+9pa0UrfE1s3Z/MteZysx1iITBnfMWuHUoEq8Vj+Qd Tz+UIHMlGZPnsEQ4Awe6anDAx5KBDkgVH2u5nTkuxG0fUcqb+HQGANtUNrq8OzFI qEnWHZoB8FUL7oez1bujJqayVXiuolBE6Ulw64SLzmQhD++DVgA= -----END CERTIFICATE-----Generated at Fri Sep 25 07:24:11 2026 by rpki-client