$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: +TncPbgYIQtlORd35nnYuqkUG8Y69BvUGNrTSwgXmN0= Subject key identifier: DB:B0:DE:FD:03:BF:86:0A:9F:A0:35:FE:F0:E6:6B:02:E9:84:32:F4 Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 32403592A5A822063E982B4E825110BC6301EC87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 04:11:13 +0000 Manifest this update: Wed 23 Sep 2026 04:06:13 +0000 Manifest next update: Thu 24 Sep 2026 05:16:13 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: HNR1dN2f4E201GUe4UbcRVn6+rBvf3vKzPlqwgWFHlQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:40:35:92:a5:a8:22:06:3e:98:2b:4e:82:51:10:bc:63:01:ec:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: Sep 23 04:06:13 2026 GMT Not After : Sep 24 05:16:13 2026 GMT Subject: CN=DBB0DEFD03BF860A9FA035FEF0E66B02E98432F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:7e:d2:47:05:a8:00:cf:e6:26:24:2f:d9: 18:76:2b:cc:e9:47:40:cb:58:0f:42:13:52:e8:de: 57:55:14:e1:d9:f8:0d:6c:4f:a2:f4:d8:73:4b:0f: d4:db:9a:21:d1:34:23:13:d1:c0:58:aa:52:c0:ca: be:40:0e:48:e8:75:da:11:e9:2b:ce:66:ee:eb:ae: 2c:f3:38:03:39:d2:00:93:08:97:f1:b4:87:24:f0: ab:3c:30:92:78:63:6b:18:50:08:71:24:53:e0:f8: 90:8b:40:c8:7f:5e:9f:b7:f5:54:7f:4f:96:73:9c: 42:a1:bc:3a:24:3b:73:86:79:4b:f3:5c:44:00:ef: 5d:72:59:46:f6:79:ad:0e:1e:3f:6c:0f:38:13:60: 9e:80:3f:85:f3:84:c7:49:e4:1e:17:de:fd:73:83: 4b:ee:5d:00:fc:ca:94:ec:b0:7b:40:a5:bc:be:23: 67:e6:80:98:56:bd:35:4a:ac:32:e3:55:f1:ea:18: cd:d1:28:0c:43:47:1a:08:1a:50:12:7c:3b:86:0d: e6:49:1a:57:1e:ad:2d:ce:68:55:61:05:91:91:a1: b0:93:25:39:f6:b9:53:9d:23:57:49:77:32:28:a5: 77:d2:cf:7c:dd:07:4e:90:ad:c4:69:fd:8b:f2:de: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:DE:FD:03:BF:86:0A:9F:A0:35:FE:F0:E6:6B:02:E9:84:32:F4 X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:62:2c:51:b7:13:e1:27:5a:ab:8e:1c:f6:70:95:cd:d4:70: be:84:48:99:6b:f5:e8:20:ee:a1:44:db:7d:61:e7:c4:4b:3a: 99:d5:d3:be:50:36:a6:de:a1:9c:7a:6b:45:4b:13:14:60:c8: 8d:e9:2e:d7:c4:d1:24:a8:9a:2e:7c:61:2a:41:93:e6:c5:d6: 69:b4:99:f5:2f:85:dc:e0:1c:61:d5:7d:04:6f:ab:51:37:a6: f0:da:9d:eb:a7:53:c5:d6:f0:9c:76:ee:47:eb:8a:c0:da:ff: 20:4e:da:8e:1f:67:31:9f:e7:6e:d5:c1:ea:e0:a0:e5:62:26: 1c:00:1a:04:ed:72:4d:e1:54:32:78:79:2c:30:6d:9c:39:e2: 83:61:82:fc:1e:69:b4:16:7f:08:98:43:69:2c:87:7c:9c:d6: b6:48:08:de:e7:1d:8e:19:5c:df:07:88:52:c9:5b:2d:15:c6: 18:ae:9f:75:02:a9:3e:35:aa:b3:dc:2e:ca:b2:db:0d:9e:22: a3:c0:aa:18:c1:d3:50:7b:d3:0a:fc:fb:0f:47:54:8a:b8:c9: c5:f3:38:30:cb:50:c1:dd:17:0e:93:cd:52:da:c5:6a:3e:ce: 29:13:c9:00:6d:41:01:14:07:1e:52:13:08:f3:b4:55:1c:f6: 79:80:1f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkA1kqWoIgY+mCtOglEQvGMB7IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA5MjMwNDA2MTNaFw0yNjA5MjQwNTE2MTNaMDMxMTAvBgNV BAMTKERCQjBERUZEMDNCRjg2MEE5RkEwMzVGRUYwRTY2QjAyRTk4NDMyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnn7SRwWoAM/mJiQv2Rh2K8zp R0DLWA9CE1Lo3ldVFOHZ+A1sT6L02HNLD9TbmiHRNCMT0cBYqlLAyr5ADkjoddoR 6SvOZu7rrizzOAM50gCTCJfxtIck8Ks8MJJ4Y2sYUAhxJFPg+JCLQMh/Xp+39VR/ T5ZznEKhvDokO3OGeUvzXEQA711yWUb2ea0OHj9sDzgTYJ6AP4XzhMdJ5B4X3v1z g0vuXQD8ypTssHtApby+I2fmgJhWvTVKrDLjVfHqGM3RKAxDRxoIGlASfDuGDeZJ GlcerS3OaFVhBZGRobCTJTn2uVOdI1dJdzIopXfSz3zdB06QrcRp/Yvy3sIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27De/QO/hgqfoDX+8OZrAumEMvQwHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1iLFG3E+EnWquOHPZwlc3UcL6ESJlr9egg 7qFE231h58RLOpnV075QNqbeoZx6a0VLExRgyI3pLtfE0SSomi58YSpBk+bF1mm0 mfUvhdzgHGHVfQRvq1E3pvDaneunU8XW8Jx27kfrisDa/yBO2o4fZzGf527Vwerg oOViJhwAGgTtck3hVDJ4eSwwbZw54oNhgvweabQWfwiYQ2ksh3yc1rZICN7nHY4Z XN8HiFLJWy0Vxhiun3UCqT41qrPcLsqy2w2eIqPAqhjB01B70wr8+w9HVIq4ycXz ODDLUMHdFw6TzVLaxWo+zikTyQBtQQEUBx5SEwjztFUc9nmAH7k= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:28 2026 by rpki-client