$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: k5xE84lDgMbC1EV5/t/yxY2VqI/4HReyUPULY52ikVI= Subject key identifier: B6:60:40:35:59:2D:CA:67:F0:C6:54:F7:1F:A1:EC:F6:A5:FB:2C:E6 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 7DA15078F39D21195C51A5485783AFF8046DEA51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:28:46 +0000 Manifest this update: Thu 24 Sep 2026 14:23:46 +0000 Manifest next update: Fri 25 Sep 2026 14:35:46 +0000 Files and hashes: 1: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: R0L8/I2S67+ij5YhQreCwHZ0ZgeqJnA0I7q0otjabc4=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a1:50:78:f3:9d:21:19:5c:51:a5:48:57:83:af:f8:04:6d:ea:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Sep 24 14:23:46 2026 GMT Not After : Sep 25 14:35:46 2026 GMT Subject: CN=B6604035592DCA67F0C654F71FA1ECF6A5FB2CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:00:bd:49:f1:4b:17:3e:f2:3f:e0:9d:e4: 1c:4c:db:b5:96:44:88:4b:7f:dd:f2:4e:25:26:c1: b2:9f:fd:d5:d8:59:6e:13:de:5e:ed:01:2c:b5:6b: f7:68:08:53:10:76:66:ce:7b:c9:4e:af:e3:3c:c5: d4:59:4b:9d:9e:d7:5a:1c:3b:30:0f:99:d7:37:0b: 10:21:51:25:3f:14:63:90:62:2f:9f:f9:b3:ac:00: 77:fa:ce:ea:eb:06:12:13:c3:b2:a6:d7:a8:d4:50: b9:e4:fe:15:b7:2a:14:60:aa:71:7c:16:c8:bd:84: a9:85:3f:cf:31:a4:f9:88:84:15:bc:16:3d:55:78: 31:2b:5e:b2:63:52:b3:08:cd:cc:4f:93:f9:0c:e1: df:62:1a:4e:87:46:e7:40:83:83:09:46:52:c3:f8: 69:97:04:6d:06:37:4b:47:1d:b6:77:7c:95:4d:9e: 4d:e2:80:a9:7c:67:15:ce:f2:0a:cc:24:99:56:66: 6e:83:c1:5b:8b:ab:9e:03:2a:06:26:31:75:0f:b6: fe:32:bb:e6:11:5d:a1:ef:45:20:9b:ea:7f:6d:d6: 2d:35:fb:95:e4:47:d0:e4:26:b5:ce:5e:28:b6:f9: 57:12:09:bb:c4:8e:8a:3d:79:cf:9f:4f:27:ee:8d: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:40:35:59:2D:CA:67:F0:C6:54:F7:1F:A1:EC:F6:A5:FB:2C:E6 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:87:4f:7c:c9:60:e9:ac:19:69:42:6f:bf:9e:83:51:98: e6:e7:63:92:60:99:be:a7:a8:01:4f:39:04:c9:a6:2d:d2:e3: e2:36:24:f1:db:0b:76:1f:34:8d:23:cc:18:33:82:c9:9c:6b: e2:6b:69:78:60:8b:b3:d9:ce:3a:41:11:6f:1a:0f:53:e8:3c: 1a:79:2f:7f:f1:10:b3:07:5f:b3:cd:dd:98:63:20:cb:3e:f0: d9:b9:81:cf:e1:84:5a:b6:5c:9c:45:01:0e:a8:3a:5c:12:ca: 15:65:2d:36:21:da:28:a0:c5:53:72:48:82:41:1c:03:31:ec: 00:19:64:4c:10:2c:8f:82:98:af:95:e2:b9:d5:78:74:e3:da: 06:ba:b7:58:75:18:ae:a0:bb:a1:80:6a:71:85:db:3a:f8:95: d1:2c:6c:3a:4a:90:f1:ff:79:eb:fb:5e:8f:67:65:9e:73:a8: be:c9:ba:d1:8b:9d:87:6c:e2:7f:28:4e:54:cf:90:07:81:ca: 71:79:10:7c:06:99:80:00:19:24:56:f0:2a:56:2f:30:6b:60: 67:9b:53:ce:94:72:a3:0f:61:33:a1:a7:91:fb:04:99:16:0c: 95:9b:64:e8:bc:04:6d:ab:55:42:11:3f:83:91:dc:9e:a5:17: af:2f:8a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaFQePOdIRlcUaVIV4Ov+ARt6lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA5MjQxNDIzNDZaFw0yNjA5MjUxNDM1NDZaMDMxMTAvBgNV BAMTKEI2NjA0MDM1NTkyRENBNjdGMEM2NTRGNzFGQTFFQ0Y2QTVGQjJDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbgC9SfFLFz7yP+Cd5BxM27WW RIhLf93yTiUmwbKf/dXYWW4T3l7tASy1a/doCFMQdmbOe8lOr+M8xdRZS52e11oc OzAPmdc3CxAhUSU/FGOQYi+f+bOsAHf6zurrBhITw7Km16jUULnk/hW3KhRgqnF8 Fsi9hKmFP88xpPmIhBW8Fj1VeDErXrJjUrMIzcxPk/kM4d9iGk6HRudAg4MJRlLD +GmXBG0GN0tHHbZ3fJVNnk3igKl8ZxXO8grMJJlWZm6DwVuLq54DKgYmMXUPtv4y u+YRXaHvRSCb6n9t1i01+5XkR9DkJrXOXii2+VcSCbvEjoo9ec+fTyfujcmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmBANVktymfwxlT3H6Hs9qX7LOYwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALqh098yWDprBlpQm+/noNRmObnY5Jgmb6n qAFPOQTJpi3S4+I2JPHbC3YfNI0jzBgzgsmca+JraXhgi7PZzjpBEW8aD1PoPBp5 L3/xELMHX7PN3ZhjIMs+8Nm5gc/hhFq2XJxFAQ6oOlwSyhVlLTYh2iigxVNySIJB HAMx7AAZZEwQLI+CmK+V4rnVeHTj2ga6t1h1GK6gu6GAanGF2zr4ldEsbDpKkPH/ eev7Xo9nZZ5zqL7JutGLnYds4n8oTlTPkAeBynF5EHwGmYAAGSRW8CpWLzBrYGeb U86UcqMPYTOhp5H7BJkWDJWbZOi8BG2rVUIRP4OR3J6lF68vikA= -----END CERTIFICATE-----Generated at Thu Sep 24 17:13:57 2026 by rpki-client