$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft File: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft (raw, json) Hash identifier: 787d2vg3NhAkuLsNIlNPoofm7LUApOQadqgkZMtG9Qw= Subject key identifier: 38:E4:CF:F7:B5:6B:96:32:1B:95:EC:BE:DB:49:C5:B2:2B:AC:E2:76 Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E Certificate serial: 5D4B27FDB08E567EC6EDBAF37A80DFB33DAD2FE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft Manifest number: EF Signing time: Wed 23 Sep 2026 23:40:19 +0000 Manifest this update: Wed 23 Sep 2026 23:35:19 +0000 Manifest next update: Thu 24 Sep 2026 23:48:19 +0000 Files and hashes: 1: AS45493.roa (hash: JFF0dBU20PveLMjEby6Gyb1xZkghp5FhZDVpNjyb37Q=) 2: AS38482.roa (hash: N/OlXz8sd/GVdv+lf2D/n/ORr9Z1KnMPOsIfMP5+Q1E=) 3: AS38060.roa (hash: CJzGjny6tGFnurwN7Wm4O9T4RPEgR9S1kqWDTurDzJc=) 4: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl (hash: 8oT9YE0dTRWbK6RlEDzG2QYzs+MhTu9+dlG0kQnIFrE=) 5: AS17451.roa (hash: VENzIFhowmCK+nBchOBUJubeyiTWfQgJkpru2/du5U4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:27:fd:b0:8e:56:7e:c6:ed:ba:f3:7a:80:df:b3:3d:ad:2f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E Validity Not Before: Sep 23 23:35:19 2026 GMT Not After : Sep 24 23:48:19 2026 GMT Subject: CN=38E4CFF7B56B96321B95ECBEDB49C5B22BACE276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:93:35:28:0d:2a:bd:3e:19:9a:85:b3:50: 9d:e3:46:44:32:da:39:d1:28:cd:14:ad:a3:35:d2: c4:db:f6:52:ca:6c:ee:13:30:51:78:07:e6:49:1b: de:1b:f3:e3:ec:56:81:10:10:be:ac:4f:bf:e9:b1: dc:11:7d:82:1d:7c:77:fe:72:d9:80:e7:59:e8:9c: d3:74:a2:28:8d:78:d3:9f:e9:70:75:b7:82:0d:f8: d7:f6:bd:1b:28:f6:79:a5:7e:8d:1f:05:37:20:17: 95:7e:7c:8f:cb:a1:ab:f6:2d:97:3f:ae:81:3a:ae: 1e:32:9a:38:e2:35:65:c8:c8:fc:ff:d9:a3:ac:27: 9e:b6:83:07:1d:25:ec:39:dc:b7:1d:f4:0f:48:2d: 5e:12:77:b5:b5:00:b1:9c:5d:2b:47:4f:5f:06:e8: e6:a7:8f:58:4b:4b:4f:9b:98:f5:17:10:94:e8:84: cc:a7:59:b0:17:21:9f:fa:43:b6:43:45:23:5d:df: 8f:a0:cc:f3:18:8e:9e:bc:e6:08:08:aa:bc:49:84: 49:13:a5:58:98:90:a7:42:9a:73:44:16:7d:fb:4a: e2:ce:5e:e5:9c:1f:05:51:f7:ef:4a:ea:a7:31:76: 06:d7:4a:ce:b1:e7:20:76:04:83:b1:bb:35:ac:8b: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E4:CF:F7:B5:6B:96:32:1B:95:EC:BE:DB:49:C5:B2:2B:AC:E2:76 X509v3 Authority Key Identifier: keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d5:43:b0:8e:24:b8:12:67:0b:e5:b6:0c:0e:3e:90:3b:87: 78:7c:fa:1a:30:ba:39:d1:29:63:37:af:da:0b:1f:c9:17:67: 47:8e:aa:d6:fe:aa:c3:32:a1:ad:9e:36:72:28:27:5e:6e:6b: a4:21:e4:62:5d:a4:03:c8:5b:56:c0:1f:68:41:c3:f2:89:80: 59:a7:17:45:2a:25:ed:ea:83:a4:57:eb:f5:df:b3:49:38:d5: 13:b7:25:cd:44:98:8d:03:63:f0:62:20:d2:5f:0e:b4:d0:2a: 22:cd:5c:ce:89:6a:25:8e:c9:62:0f:3a:ae:a5:50:79:5f:6d: bf:c4:58:b5:dc:a2:84:44:ff:9b:84:aa:47:f4:92:d1:e5:95: 6a:00:11:0b:bc:52:bc:53:28:da:19:8e:9f:b8:59:e6:d4:30: 12:20:d8:fa:05:2f:0a:12:d3:7f:bd:5a:ed:a5:46:0f:98:83: 25:d9:2a:f0:7c:5c:d7:9f:60:b0:0b:99:e7:68:74:99:6c:80: 5e:c9:59:d6:0d:f7:e7:b4:44:2f:6f:2f:fa:53:f9:70:f8:91: b7:b4:3b:67:e9:d9:d5:f5:27:c1:e2:fc:89:aa:e5:c9:c2:be: 4e:6e:e6:13:e7:dc:f7:54:37:a9:f7:c9:35:c2:9f:2c:d3:ef: 67:c0:5b:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUsn/bCOVn7G7brzeoDfsz2tL+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0NDhGNkMxRjQ0ODEwQ0YzOTQ2OTBGMUIyODMxQjlF NkU0QTkyRTAeFw0yNjA5MjMyMzM1MTlaFw0yNjA5MjQyMzQ4MTlaMDMxMTAvBgNV BAMTKDM4RTRDRkY3QjU2Qjk2MzIxQjk1RUNCRURCNDlDNUIyMkJBQ0UyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxpM1KA0qvT4ZmoWzUJ3jRkQy 2jnRKM0UraM10sTb9lLKbO4TMFF4B+ZJG94b8+PsVoEQEL6sT7/psdwRfYIdfHf+ ctmA51nonNN0oiiNeNOf6XB1t4IN+Nf2vRso9nmlfo0fBTcgF5V+fI/Loav2LZc/ roE6rh4ymjjiNWXIyPz/2aOsJ562gwcdJew53Lcd9A9ILV4Sd7W1ALGcXStHT18G 6Oanj1hLS0+bmPUXEJTohMynWbAXIZ/6Q7ZDRSNd34+gzPMYjp685ggIqrxJhEkT pViYkKdCmnNEFn37SuLOXuWcHwVR9+9K6qcxdgbXSs6x5yB2BIOxuzWsiwQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOTP97VrljIbley+20nFsius4nYwHwYDVR0j BBgwFoAU9USPbB9EgQzzlGkPGygxuebkqS4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk5M2YzNTAtYjc1Ni00OTE2LThkODQtNDg0ZjAyNWRmZmNjLzAvRjU0NDhGNkMx RjQ0ODEwQ0YzOTQ2OTBGMUIyODMxQjlFNkU0QTkyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNTQ0OEY2QzFGNDQ4MTBDRjM5NDY5MEYxQjI4MzFCOUU2RTRB OTJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvRjU0NDhGNkMxRjQ0ODEwQ0YzOTQ2OTBGMUIyODMx QjlFNkU0QTkyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHVQ7COJLgSZwvltgwOPpA7h3h8+howujnR KWM3r9oLH8kXZ0eOqtb+qsMyoa2eNnIoJ15ua6Qh5GJdpAPIW1bAH2hBw/KJgFmn F0UqJe3qg6RX6/Xfs0k41RO3Jc1EmI0DY/BiINJfDrTQKiLNXM6JaiWOyWIPOq6l UHlfbb/EWLXcooRE/5uEqkf0ktHllWoAEQu8UrxTKNoZjp+4WebUMBIg2PoFLwoS 03+9Wu2lRg+YgyXZKvB8XNefYLALmedodJlsgF7JWdYN9+e0RC9vL/pT+XD4kbe0 O2fp2dX1J8Hi/Imq5cnCvk5u5hPn3PdUN6n3yTXCnyzT72fAW0M= -----END CERTIFICATE-----Generated at Thu Sep 24 06:28:05 2026 by rpki-client