$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: Q+ZrbqWk139u1iK8eGm+TcFxD7DwgzfpCqD0GLIopG4= Subject key identifier: 86:38:0A:FA:91:AF:72:79:17:37:70:54:6A:2F:1B:E5:2B:91:36:44 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 6555D60E50CF6F12383A98C822AE2DC6DCB66007 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:35:22 +0000 Manifest this update: Wed 23 Sep 2026 15:30:22 +0000 Manifest next update: Thu 24 Sep 2026 17:53:22 +0000 Files and hashes: 1: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: YeecvfrJGa5yV8Yim3R5pFNFcgFON+zvEInR/ad1JLg=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:55:d6:0e:50:cf:6f:12:38:3a:98:c8:22:ae:2d:c6:dc:b6:60:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Sep 23 15:30:22 2026 GMT Not After : Sep 24 17:53:22 2026 GMT Subject: CN=86380AFA91AF7279173770546A2F1BE52B913644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:28:ec:64:a6:ea:2b:69:8b:c9:6c:18:b5:dd: 49:9e:bf:dc:5f:75:5c:b2:68:49:22:fb:31:71:33: ca:22:41:2b:85:ee:f1:ad:10:72:c6:89:d1:1e:e4: 55:df:96:96:b6:89:c1:a0:c2:ca:e4:93:a9:1b:45: 28:8c:ad:7a:21:e4:e5:59:c1:be:33:2f:59:84:67: f9:57:e0:72:87:6a:1d:d9:7c:4c:63:82:4e:95:13: 4f:6f:fc:f0:5b:11:69:d6:2b:22:93:38:e7:de:c9: 2a:73:42:3c:df:f0:6d:6a:d2:de:2b:f2:be:95:8a: 91:a0:ca:b9:bd:42:1f:4e:79:f8:8b:d5:cb:58:e2: 3c:ec:18:01:6d:14:71:d5:4f:f0:11:2b:f6:da:c9: 91:fc:98:de:8e:44:04:47:23:c2:b8:65:41:cc:8b: 7c:a9:22:09:28:04:65:f5:f0:2f:72:2d:c3:21:a8: 75:4b:29:e2:72:20:89:d4:22:20:3c:db:28:92:23: 24:d0:fb:76:12:8b:4c:10:85:b3:bd:c6:f7:c8:ca: a1:d7:f6:b5:8b:0b:5d:ed:48:56:30:3f:ca:59:88: 23:1e:24:49:6d:d2:a2:b5:4b:fa:ea:af:25:bd:65: 66:d4:8a:46:51:d7:2c:55:78:70:b0:56:ec:d1:65: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:0A:FA:91:AF:72:79:17:37:70:54:6A:2F:1B:E5:2B:91:36:44 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1d:39:c2:3d:48:ae:f5:72:fb:60:62:01:b6:b4:f6:49:a7: e5:3c:7f:c2:79:43:d2:24:1c:cb:4b:87:0a:21:80:24:db:86: d3:3c:c5:aa:2c:e2:aa:39:71:26:3f:34:8d:3e:01:7b:c7:ea: db:1c:c3:46:e1:ee:31:b7:27:b6:3b:ec:db:83:d1:dd:64:d1: 8e:62:ec:4e:01:d0:24:7b:f5:6e:bc:b3:f3:39:81:55:c5:89: 58:7b:b7:45:00:66:8e:0e:d9:3e:07:b9:39:43:dc:66:70:fb: b6:5c:42:52:53:8a:62:85:3b:fe:75:d9:d3:57:66:3c:64:72: 9d:9f:53:b6:4c:89:94:89:99:e3:03:6d:b0:41:fc:c8:2b:d6: d1:7b:0c:79:b8:ff:dc:a7:ff:23:d9:97:79:e1:e1:48:57:be: fb:96:40:8f:96:e6:62:69:14:e0:21:78:7e:50:60:30:b6:84: 41:23:3d:9f:87:87:0a:c2:5f:56:de:c8:ad:d9:85:b7:9b:6d: c9:7d:40:ec:ad:bd:0b:42:b2:26:90:b9:47:f7:34:9c:45:f3: c7:08:50:34:82:57:85:f9:23:5c:1c:cf:ec:6c:7c:1f:cd:43: 2a:03:bb:9c:f5:ff:9a:79:26:ba:eb:71:d8:99:61:be:7c:7c: 2a:a1:67:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVXWDlDPbxI4OpjIIq4txty2YAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA5MjMxNTMwMjJaFw0yNjA5MjQxNzUzMjJaMDMxMTAvBgNV BAMTKDg2MzgwQUZBOTFBRjcyNzkxNzM3NzA1NDZBMkYxQkU1MkI5MTM2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwKOxkpuoraYvJbBi13Umev9xf dVyyaEki+zFxM8oiQSuF7vGtEHLGidEe5FXflpa2icGgwsrkk6kbRSiMrXoh5OVZ wb4zL1mEZ/lX4HKHah3ZfExjgk6VE09v/PBbEWnWKyKTOOfeySpzQjzf8G1q0t4r 8r6VipGgyrm9Qh9OefiL1ctY4jzsGAFtFHHVT/ARK/bayZH8mN6ORARHI8K4ZUHM i3ypIgkoBGX18C9yLcMhqHVLKeJyIInUIiA82yiSIyTQ+3YSi0wQhbO9xvfIyqHX 9rWLC13tSFYwP8pZiCMeJElt0qK1S/rqryW9ZWbUikZR1yxVeHCwVuzRZWvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjgK+pGvcnkXN3BUai8b5SuRNkQwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0dOcI9SK71cvtgYgG2tPZJp+U8f8J5Q9Ik HMtLhwohgCTbhtM8xaos4qo5cSY/NI0+AXvH6tscw0bh7jG3J7Y77NuD0d1k0Y5i 7E4B0CR79W68s/M5gVXFiVh7t0UAZo4O2T4HuTlD3GZw+7ZcQlJTimKFO/512dNX Zjxkcp2fU7ZMiZSJmeMDbbBB/Mgr1tF7DHm4/9yn/yPZl3nh4UhXvvuWQI+W5mJp FOAheH5QYDC2hEEjPZ+HhwrCX1beyK3Zhbebbcl9QOytvQtCsiaQuUf3NJxF88cI UDSCV4X5I1wcz+xsfB/NQyoDu5z1/5p5JrrrcdiZYb58fCqhZ0E= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:18 2026 by rpki-client