$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft File: F92C9917A30302FCE264D46D8FE65A1CEA194138.mft (raw, json) Hash identifier: XxBdRWCb9dJsfNsAzEIYbPFtd+VU7KWpz9oFXnPzDsA= Subject key identifier: 06:05:D2:C8:6B:BC:78:B2:5F:F2:B5:6E:71:0A:8C:C4:EB:67:11:95 Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 Certificate issuer: /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Certificate serial: 5B1AB12A768FDD381AA9CDCCC56018A56F2EC36B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:48:43 +0000 Manifest this update: Thu 24 Sep 2026 22:43:43 +0000 Manifest next update: Sat 26 Sep 2026 01:49:43 +0000 Files and hashes: 1: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: VwexXBl+Y3+ndbZIMN+60ZESaBQjfihLPdMwB+vbCec=) 2: F92C9917A30302FCE264D46D8FE65A1CEA194138.crl (hash: F97Su1w9jfcYyMEzPjvgy+sp4lyujxGQpfn3/aWZf9Q=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: nJnlMgxQpBrYqZycvGCzonJXiZwDsWr34U7o3OPt3ps=) 4: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: 8ED3fpYlNYrY20dW5dy2FIrzIf47HrbQ0fyQ3uLjegk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1a:b1:2a:76:8f:dd:38:1a:a9:cd:cc:c5:60:18:a5:6f:2e:c3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Validity Not Before: Sep 24 22:43:43 2026 GMT Not After : Sep 26 01:49:43 2026 GMT Subject: CN=0605D2C86BBC78B25FF2B56E710A8CC4EB671195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:e2:fc:6f:33:ca:2d:cc:d9:bd:22:f5:88: 06:18:36:35:29:9a:93:dd:32:56:d0:e7:e0:13:18: 31:3b:3d:29:fb:58:b7:c1:8d:09:16:6e:b0:86:48: 6c:f6:48:ae:4f:4b:e4:5b:6b:ef:da:80:bf:2c:14: d1:5e:41:e3:e8:46:69:d7:e2:06:28:1c:f5:b7:25: 25:5b:18:7d:10:64:47:5d:38:bf:06:af:b4:55:b7: 6b:66:fb:df:ee:18:65:49:27:53:3d:4b:cc:16:ad: b4:ff:fd:7a:eb:63:1b:39:4c:dc:19:16:8f:5d:7b: 6d:0e:77:5c:28:05:4e:5a:60:63:2c:02:00:86:df: 00:09:67:16:4f:0d:8a:37:f0:3c:ce:29:c9:2e:d5: de:2f:32:2c:df:f3:1b:6e:e3:df:fe:96:eb:e6:48: a1:79:00:f1:0b:db:51:a1:56:d5:b3:f8:7d:d2:49: f6:07:dd:b9:f0:d1:2c:1d:48:78:05:c0:51:d3:53: ed:09:71:2e:10:a4:4d:3a:a5:0e:fb:d4:62:4f:6d: b1:d8:59:58:12:8d:c9:87:af:8b:6a:ef:9c:ae:b0: 74:01:23:36:d9:dc:04:d2:d9:df:b2:43:e3:83:e5: ab:c8:cd:c9:4f:71:de:bc:14:bd:7e:fb:fd:a5:85: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:D2:C8:6B:BC:78:B2:5F:F2:B5:6E:71:0A:8C:C4:EB:67:11:95 X509v3 Authority Key Identifier: keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:22:22:6e:fa:9d:14:d2:4f:cf:1e:79:d6:84:a2:d8:3c:6b: d5:89:91:c8:5f:c7:be:69:b3:69:b1:5b:9d:6b:4e:03:75:ff: 37:ce:34:75:b8:1d:5b:53:21:d8:9f:5b:f3:aa:2b:7c:6c:07: 2f:04:e2:01:62:ac:ac:a2:fa:dd:5e:39:e5:02:de:e8:0c:e1: d2:e3:aa:79:6e:1d:2c:10:b7:cd:c3:2e:3c:16:7f:83:6a:6d: 87:c2:5c:81:90:f4:b6:44:e7:3f:04:67:e7:46:20:2a:2f:b1: 76:2f:6c:11:90:e4:b1:c1:c6:b3:2d:c6:8a:3e:9f:12:97:31: 93:fd:a9:8f:9a:bf:b5:5e:0d:6a:0f:30:50:ea:e3:4a:14:d0: ab:9a:d1:9d:3e:68:b0:76:42:42:07:ac:af:b4:2c:31:4f:3b: e8:4e:65:4f:7a:ad:d6:79:1e:c4:b4:90:19:de:3a:65:cb:1f: b1:e2:bc:3b:65:dc:bc:31:7e:c6:1a:4f:ef:dc:e1:61:b8:84: 2c:76:69:0d:dc:c8:b5:eb:d1:7f:1b:01:48:3a:55:b7:9e:db: 4c:5a:51:ba:cb:66:b1:53:40:ab:38:77:d2:b0:6b:74:c8:66: 00:81:13:42:78:38:59:b6:c1:ef:95:ae:0b:43:ef:a1:0e:8c: 4c:98:a6:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxqxKnaP3Tgaqc3MxWAYpW8uw2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNF QTE5NDEzODAeFw0yNjA5MjQyMjQzNDNaFw0yNjA5MjYwMTQ5NDNaMDMxMTAvBgNV BAMTKDA2MDVEMkM4NkJCQzc4QjI1RkYyQjU2RTcxMEE4Q0M0RUI2NzExOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypuL8bzPKLczZvSL1iAYYNjUp mpPdMlbQ5+ATGDE7PSn7WLfBjQkWbrCGSGz2SK5PS+Rba+/agL8sFNFeQePoRmnX 4gYoHPW3JSVbGH0QZEddOL8Gr7RVt2tm+9/uGGVJJ1M9S8wWrbT//XrrYxs5TNwZ Fo9de20Od1woBU5aYGMsAgCG3wAJZxZPDYo38DzOKcku1d4vMizf8xtu49/+luvm SKF5APEL21GhVtWz+H3SSfYH3bnw0SwdSHgFwFHTU+0JcS4QpE06pQ771GJPbbHY WVgSjcmHr4tq75yusHQBIzbZ3ATS2d+yQ+OD5avIzclPcd68FL1++/2lhZT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgXSyGu8eLJf8rVucQqMxOtnEZUwHwYDVR0j BBgwFoAU+SyZF6MDAvziZNRtj+ZaHOoZQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwZTdmOGUtYzI5Zi00ZTZiLWFkMGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdB MzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNFQTE5NDEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTJDOTkxN0EzMDMwMkZDRTI2NEQ0NkQ4RkU2NUExQ0VBMTk0 MTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVB MUNFQTE5NDEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8iIm76nRTST88eedaEotg8a9WJkchfx75p s2mxW51rTgN1/zfONHW4HVtTIdifW/OqK3xsBy8E4gFirKyi+t1eOeUC3ugM4dLj qnluHSwQt83DLjwWf4NqbYfCXIGQ9LZE5z8EZ+dGICovsXYvbBGQ5LHBxrMtxoo+ nxKXMZP9qY+av7VeDWoPMFDq40oU0Kua0Z0+aLB2QkIHrK+0LDFPO+hOZU96rdZ5 HsS0kBneOmXLH7HivDtl3LwxfsYaT+/c4WG4hCx2aQ3cyLXr0X8bAUg6Vbee20xa UbrLZrFTQKs4d9Kwa3TIZgCBE0J4OFm2we+VrgtD76EOjEyYppI= -----END CERTIFICATE-----Generated at Fri Sep 25 02:35:50 2026 by rpki-client