$ rpki-client -vvvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft File: F831F8D1B7EB333E836D19E2C6659AA968449902.mft (raw, json) Hash identifier: WBvh+QgemsNcniesC7HHhMEPBUdmXiTF2Bi3rUAXSuE= Subject key identifier: 53:6A:A2:1B:D9:07:67:95:AE:AF:BA:FD:A2:0C:FA:87:89:5C:65:C3 Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 Certificate issuer: /CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Certificate serial: 71C745C19B67EFFB024D212876D40E3DC069C9DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 15:19:17 +0000 Manifest this update: Fri 25 Sep 2026 15:14:17 +0000 Manifest next update: Sat 26 Sep 2026 17:41:17 +0000 Files and hashes: 1: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: NUr5zEr4YzxkTQ8Y53f2vd4+rpGC5VIJU6v6ZJ3ymFI=) 2: F831F8D1B7EB333E836D19E2C6659AA968449902.crl (hash: NIWfeUim/Awf/dg7YKBoAqmfPp6y3e1rF7F0HK2zN18=) 3: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: GC34bSdqb+lceUDxAMg1+4DTRXPlTsVXAo/W4xvhmFg=) 4: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: FptSR8q7lfMCgCSKLjWnM/OjVJhBqEdi2E49VH6LcSA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c7:45:c1:9b:67:ef:fb:02:4d:21:28:76:d4:0e:3d:c0:69:c9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Validity Not Before: Sep 25 15:14:17 2026 GMT Not After : Sep 26 17:41:17 2026 GMT Subject: CN=536AA21BD9076795AEAFBAFDA20CFA87895C65C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:21:f0:1e:67:b3:30:03:63:44:59:dd:22: 13:07:95:d5:64:bb:f7:95:11:1b:7e:82:5d:65:b4: 47:b8:b4:5e:24:ba:93:1f:ab:6e:24:72:01:83:76: 6a:48:11:00:2c:ed:24:e3:e9:65:5d:2b:90:b2:42: ae:d8:4c:b5:25:e0:ab:38:78:92:34:38:59:33:8d: e0:39:4f:36:bf:4a:c8:0c:80:ad:60:94:09:1a:fd: 88:ea:fd:f4:84:75:0a:71:44:4a:87:39:ad:65:eb: 6a:4f:27:31:7b:ca:e8:6a:20:80:88:0c:68:8c:61: 10:22:dd:c8:3c:4c:72:6d:3c:b7:40:a0:d8:cb:8d: 9e:3d:b2:29:15:3f:1b:92:c5:56:16:74:89:ae:0c: 5b:3a:dc:a5:18:92:c3:46:a7:bc:7e:56:23:3f:6e: 16:16:ff:67:3a:48:4b:ec:56:ff:70:83:4c:8f:23: 73:53:19:12:97:67:b5:12:26:57:ee:30:07:d2:8a: 6b:a7:20:7f:34:0b:b4:03:cd:fe:be:53:2b:19:12: ed:76:96:b7:2c:56:ff:bf:aa:03:0c:3d:c7:c7:2d: c1:27:29:93:ec:7e:70:f5:92:73:76:27:88:51:ce: f4:c4:1e:07:e5:9c:44:9e:09:6f:d5:d3:1c:25:51: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:A2:1B:D9:07:67:95:AE:AF:BA:FD:A2:0C:FA:87:89:5C:65:C3 X509v3 Authority Key Identifier: keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e5:e6:9c:03:e1:3c:88:70:d7:e2:f0:ac:10:d2:2e:a9:66: 5c:23:4a:4b:28:23:da:4b:03:04:5e:68:31:c3:e3:f6:e8:e5: ef:a1:d6:d6:ef:f3:d7:86:59:74:24:c0:c1:58:52:34:fd:f2: fc:90:ea:cd:7f:9a:40:ec:fd:38:a6:f5:0e:c6:df:64:8c:a3: 75:e4:d6:bc:60:87:69:a6:0d:db:c1:b5:65:4e:0c:9e:f2:eb: 76:20:6b:8c:d8:6f:38:74:94:1d:65:92:d9:e8:f7:95:1b:dd: 4d:1d:6e:aa:df:13:6d:ea:24:79:3d:e8:fc:27:5f:6c:46:f5: 38:cf:31:21:ce:a4:62:08:fd:96:50:b5:20:38:ee:3e:9a:7a: 1e:47:1b:87:10:c5:fc:93:81:c8:59:2d:2f:2d:86:73:42:c6: bc:4d:ac:99:32:05:84:71:79:e0:16:49:0c:6e:40:ec:f3:5b: 16:41:f9:50:87:cf:95:2a:c5:74:e2:16:b0:1d:62:3c:2c:a3: 7d:47:89:24:18:0c:e3:d7:09:4a:74:34:6d:73:ab:6f:4a:2b: 0b:fc:a2:96:60:85:51:c5:de:43:57:55:ba:86:32:36:9e:6a: 81:49:ce:fb:c9:7f:7b:16:34:fc:0e:86:a4:70:29:4b:0f:89: c6:07:8b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccdFwZtn7/sCTSEodtQOPcBpydswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2 ODQ0OTkwMjAeFw0yNjA5MjUxNTE0MTdaFw0yNjA5MjYxNzQxMTdaMDMxMTAvBgNV BAMTKDUzNkFBMjFCRDkwNzY3OTVBRUFGQkFGREEyMENGQTg3ODk1QzY1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwICHwHmezMANjRFndIhMHldVk u/eVERt+gl1ltEe4tF4kupMfq24kcgGDdmpIEQAs7STj6WVdK5CyQq7YTLUl4Ks4 eJI0OFkzjeA5Tza/SsgMgK1glAka/Yjq/fSEdQpxREqHOa1l62pPJzF7yuhqIICI DGiMYRAi3cg8THJtPLdAoNjLjZ49sikVPxuSxVYWdImuDFs63KUYksNGp7x+ViM/ bhYW/2c6SEvsVv9wg0yPI3NTGRKXZ7USJlfuMAfSimunIH80C7QDzf6+UysZEu12 lrcsVv+/qgMMPcfHLcEnKZPsfnD1knN2J4hRzvTEHgflnESeCW/V0xwlUUKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2qiG9kHZ5Wur7r9ogz6h4lcZcMwHwYDVR0j BBgwFoAU+DH40bfrMz6DbRnixmWaqWhEmQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQ0Y2I4ZDgtMTUwNS00NjgyLTlkZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFC N0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2ODQ0OTkwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODMxRjhEMUI3RUIzMzNFODM2RDE5RTJDNjY1OUFBOTY4NDQ5 OTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlB QTk2ODQ0OTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXl5pwD4TyIcNfi8KwQ0i6pZlwjSksoI9pL AwReaDHD4/bo5e+h1tbv89eGWXQkwMFYUjT98vyQ6s1/mkDs/Tim9Q7G32SMo3Xk 1rxgh2mmDdvBtWVODJ7y63Yga4zYbzh0lB1lktno95Ub3U0dbqrfE23qJHk96Pwn X2xG9TjPMSHOpGII/ZZQtSA47j6aeh5HG4cQxfyTgchZLS8thnNCxrxNrJkyBYRx eeAWSQxuQOzzWxZB+VCHz5UqxXTiFrAdYjwso31HiSQYDOPXCUp0NG1zq29KKwv8 opZghVHF3kNXVbqGMjaeaoFJzvvJf3sWNPwOhqRwKUsPicYHi7E= -----END CERTIFICATE-----Generated at Fri Sep 25 21:45:29 2026 by rpki-client