$ rpki-client -vvvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: h+NGQE+sbR4VkWWA31iDNvpw+PS6ZyMVACHZ5szzxoE= Subject key identifier: 6E:97:62:D2:82:B1:C5:EC:7C:74:DF:4B:0C:CF:C8:84:D2:92:28:1D Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 507133B65234C59F2E64ADD65E78E002A0FABA83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:33:22 +0000 Manifest this update: Fri 25 Sep 2026 18:28:22 +0000 Manifest next update: Sat 26 Sep 2026 22:25:22 +0000 Files and hashes: 1: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) 2: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: RlqKLBiOjoWWA7vRki0+luBApRhyuf+VJZC4RT7Ouf4=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:71:33:b6:52:34:c5:9f:2e:64:ad:d6:5e:78:e0:02:a0:fa:ba:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Sep 25 18:28:22 2026 GMT Not After : Sep 26 22:25:22 2026 GMT Subject: CN=6E9762D282B1C5EC7C74DF4B0CCFC884D292281D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:cd:e6:93:9b:97:73:d6:57:43:74:fa:d5: b6:b3:6c:10:43:e6:ff:88:a3:dd:53:5c:e4:b2:04: 65:ab:0f:56:04:b5:de:9b:ab:bf:f6:d3:39:aa:19: fa:41:a9:e5:7d:9f:fe:48:b0:99:ba:44:83:17:e9: c6:0c:48:35:2d:9d:9a:69:a9:7b:7e:65:7d:3c:b2: de:d5:d9:35:8d:bd:31:76:24:c9:54:8c:d1:68:4a: 5c:8b:17:63:7e:32:cf:43:9f:76:d1:c7:76:3c:e4: 2c:de:81:c9:7f:16:07:44:3a:05:37:18:fa:0b:06: 76:0e:92:76:4d:fc:8a:c9:0d:91:32:8b:03:17:c6: 75:f3:4a:43:12:aa:9d:df:a9:8d:1c:4b:29:ac:2d: a0:f6:96:f2:02:c7:36:fd:7f:98:85:9e:af:73:9d: 53:67:e2:6e:c6:3e:3b:b1:cc:cf:4f:98:b8:df:91: b7:7c:ba:7f:a3:4a:b7:e6:f3:0f:a1:41:83:48:fb: f7:6a:2d:33:58:3f:72:df:71:dc:f7:34:ab:3e:bb: 6b:b2:b7:9e:02:56:73:c8:87:1f:f6:5e:e7:1c:d9: 35:6a:77:17:3e:53:5f:8c:3a:7a:7a:c7:95:85:21: ff:0f:14:0e:62:6e:9e:b1:83:26:79:97:9a:5d:d7: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:97:62:D2:82:B1:C5:EC:7C:74:DF:4B:0C:CF:C8:84:D2:92:28:1D X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f2:c4:54:90:e9:51:dc:de:17:e4:18:cc:b6:b6:fe:ed:b0: 80:8c:ea:ba:0f:5f:95:ee:eb:0f:dd:23:0d:3d:cb:19:db:20: 26:9a:cf:bf:04:47:43:55:1a:35:51:4b:6d:e6:f0:90:07:88: 2d:e2:b4:c1:42:36:bd:07:0e:a2:a1:5e:d7:c5:9d:31:40:04: a5:b9:1e:aa:82:7e:4f:42:76:d4:dc:f9:48:94:cc:e6:69:f2: 69:d0:68:bb:72:e6:dd:b6:cf:37:93:02:d0:c5:59:fc:80:fa: f4:90:7e:75:51:49:78:5a:54:23:a5:aa:c7:f5:48:3e:8e:d9: 65:84:41:65:65:19:28:bc:1d:4d:88:cb:d5:ab:18:b9:e2:bc: a4:4c:7a:46:16:00:59:78:1a:29:cb:2d:b8:dc:ca:53:3e:ea: 34:74:aa:7a:89:83:71:81:1e:95:60:a2:6b:f2:a8:48:0a:34: 07:60:fe:db:30:fe:19:a2:ee:b1:a6:90:54:6d:24:04:b1:9d: 0a:9a:a7:92:03:98:29:09:0a:4f:a3:ee:8a:ac:99:31:27:c4: e4:4d:78:6e:dd:39:cc:fc:8e:c3:30:4e:a2:88:2b:d4:57:c7: 68:a9:59:8b:fd:82:99:10:b1:66:ce:dd:9d:77:91:a1:60:35: 18:66:24:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHEztlI0xZ8uZK3WXnjgAqD6uoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjA5MjUxODI4MjJaFw0yNjA5MjYyMjI1MjJaMDMxMTAvBgNV BAMTKDZFOTc2MkQyODJCMUM1RUM3Qzc0REY0QjBDQ0ZDODg0RDI5MjI4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQs3mk5uXc9ZXQ3T61bazbBBD 5v+Io91TXOSyBGWrD1YEtd6bq7/20zmqGfpBqeV9n/5IsJm6RIMX6cYMSDUtnZpp qXt+ZX08st7V2TWNvTF2JMlUjNFoSlyLF2N+Ms9Dn3bRx3Y85Czegcl/FgdEOgU3 GPoLBnYOknZN/IrJDZEyiwMXxnXzSkMSqp3fqY0cSymsLaD2lvICxzb9f5iFnq9z nVNn4m7GPjuxzM9PmLjfkbd8un+jSrfm8w+hQYNI+/dqLTNYP3Lfcdz3NKs+u2uy t54CVnPIhx/2Xucc2TVqdxc+U1+MOnp6x5WFIf8PFA5ibp6xgyZ5l5pd1w7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpdi0oKxxex8dN9LDM/IhNKSKB0wHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTyxFSQ6VHc3hfkGMy2tv7tsICM6roPX5Xu 6w/dIw09yxnbICaaz78ER0NVGjVRS23m8JAHiC3itMFCNr0HDqKhXtfFnTFABKW5 HqqCfk9CdtTc+UiUzOZp8mnQaLty5t22zzeTAtDFWfyA+vSQfnVRSXhaVCOlqsf1 SD6O2WWEQWVlGSi8HU2Iy9WrGLnivKRMekYWAFl4GinLLbjcylM+6jR0qnqJg3GB HpVgomvyqEgKNAdg/tsw/hmi7rGmkFRtJASxnQqap5IDmCkJCk+j7oqsmTEnxORN eG7dOcz8jsMwTqKIK9RXx2ipWYv9gpkQsWbO3Z13kaFgNRhmJPg= -----END CERTIFICATE-----Generated at Sat Sep 26 10:16:20 2026 by rpki-client