$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json) Hash identifier: jKxHPRzSaeB3ya9Fq/nzZneAiPdcbTJhpPOiWgMMHeI= Subject key identifier: 83:1A:66:2D:B4:54:B2:7B:F9:D1:85:30:C2:CE:57:98:24:B8:B7:75 Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 48E4E9EBA94074862BD58F4928C50E5CD9C7E3BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:05:18 +0000 Manifest this update: Thu 24 Sep 2026 20:00:18 +0000 Manifest next update: Fri 25 Sep 2026 23:28:18 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=) 2: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: GTzgsAq48Bhg14Qf9RslQiMmaM2gvvOty+z4j8iBljE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e4:e9:eb:a9:40:74:86:2b:d5:8f:49:28:c5:0e:5c:d9:c7:e3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: Sep 24 20:00:18 2026 GMT Not After : Sep 25 23:28:18 2026 GMT Subject: CN=831A662DB454B27BF9D18530C2CE579824B8B775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:86:86:e1:90:7f:87:7b:38:d8:ab:6a:5c: 2a:20:e1:16:aa:0b:93:f9:eb:e5:91:d4:3f:0a:76: b8:f4:b8:54:76:ed:05:0d:41:26:14:48:93:6c:b5: 6c:48:29:d5:60:45:d6:f1:b9:31:ed:0f:6b:38:3c: 23:4b:ed:46:8b:28:bc:5d:e0:1c:6d:59:ec:b3:cc: 82:90:59:4d:8e:30:82:c2:18:49:06:1f:5f:c3:df: 26:7b:9e:54:8d:59:7f:c8:96:b8:46:08:07:48:37: ac:14:12:ee:67:82:38:79:fa:33:3f:51:7e:2e:79: 09:57:ce:0c:d4:5a:26:f8:c7:d3:64:4d:e8:55:62: 54:6d:6f:c3:df:72:d2:41:9b:67:52:97:e4:43:40: da:19:10:2b:7b:47:f7:03:de:4d:7b:8e:3e:0b:bd: b5:2c:a8:09:df:16:25:54:05:ef:89:46:03:66:d1: 0e:02:ef:cd:5a:d5:f3:ca:76:ea:0e:1d:32:50:a8: ff:80:9c:44:e2:f9:65:ea:ec:ec:64:dd:cd:bf:c3: 0c:8d:06:86:f6:7e:cb:a2:52:d0:7b:c4:99:7a:eb: a0:02:5e:c4:16:0a:95:4b:e0:31:ab:6f:15:e6:1b: 4f:01:75:ea:0f:a3:f0:30:76:d7:c0:8b:57:e8:bc: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:66:2D:B4:54:B2:7B:F9:D1:85:30:C2:CE:57:98:24:B8:B7:75 X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:81:a5:c4:d4:fa:0a:41:2f:be:09:c0:50:3f:96:07:ba:7e: 50:7a:2f:a9:63:8a:a7:14:fa:36:7b:c5:a4:32:ad:8d:46:d1: 33:df:d0:68:94:41:31:59:d1:12:7d:da:bc:08:ea:80:4f:83: 4e:27:28:0c:36:df:5c:63:b9:e1:6d:20:3d:62:83:ab:ce:a3: 92:30:2f:04:1a:7e:13:90:c3:40:d6:55:f7:7f:23:46:2e:85: 8c:83:49:47:5d:5a:15:b2:9b:28:8e:d2:f9:b5:2a:27:a6:34: 79:1f:2b:f7:89:ea:52:d8:fc:16:a6:37:e9:d2:ef:8a:52:00: 62:da:a7:d2:93:d1:2b:d9:f4:6b:46:cc:50:b2:aa:c3:09:92: 5c:99:e3:e4:de:18:47:96:50:72:6e:83:13:e4:6f:8f:5b:ce: 8c:ae:55:0d:e6:5a:9d:6e:cc:4b:12:09:f8:cb:44:8d:5d:d1: 6e:e6:ad:32:b8:c6:f1:c7:07:ef:26:09:f5:46:fc:35:7a:7f: 06:1c:36:17:0d:55:e6:c0:93:ad:f7:47:e9:16:ee:53:a4:c2: 55:68:f8:52:7f:73:f9:5b:0d:0f:52:08:15:eb:e7:39:79:4d: 06:cb:cb:23:85:49:c2:b4:d6:81:f0:aa:90:5d:37:c4:9c:86: 43:c2:4f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOTp66lAdIYr1Y9JKMUOXNnH478wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjA5MjQyMDAwMThaFw0yNjA5MjUyMzI4MThaMDMxMTAvBgNV BAMTKDgzMUE2NjJEQjQ1NEIyN0JGOUQxODUzMEMyQ0U1Nzk4MjRCOEI3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C4aG4ZB/h3s42KtqXCog4Raq C5P56+WR1D8Kdrj0uFR27QUNQSYUSJNstWxIKdVgRdbxuTHtD2s4PCNL7UaLKLxd 4BxtWeyzzIKQWU2OMILCGEkGH1/D3yZ7nlSNWX/IlrhGCAdIN6wUEu5ngjh5+jM/ UX4ueQlXzgzUWib4x9NkTehVYlRtb8PfctJBm2dSl+RDQNoZECt7R/cD3k17jj4L vbUsqAnfFiVUBe+JRgNm0Q4C781a1fPKduoOHTJQqP+AnETi+WXq7Oxk3c2/wwyN Bob2fsuiUtB7xJl666ACXsQWCpVL4DGrbxXmG08BdeoPo/AwdtfAi1fovP/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgxpmLbRUsnv50YUwws5XmCS4t3UwHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuBpcTU+gpBL74JwFA/lge6flB6L6ljiqcU +jZ7xaQyrY1G0TPf0GiUQTFZ0RJ92rwI6oBPg04nKAw231xjueFtID1ig6vOo5Iw LwQafhOQw0DWVfd/I0YuhYyDSUddWhWymyiO0vm1KiemNHkfK/eJ6lLY/BamN+nS 74pSAGLap9KT0SvZ9GtGzFCyqsMJklyZ4+TeGEeWUHJugxPkb49bzoyuVQ3mWp1u zEsSCfjLRI1d0W7mrTK4xvHHB+8mCfVG/DV6fwYcNhcNVebAk633R+kW7lOkwlVo +FJ/c/lbDQ9SCBXr5zl5TQbLyyOFScK01oHwqpBdN8SchkPCT60= -----END CERTIFICATE-----Generated at Fri Sep 25 10:57:17 2026 by rpki-client