$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json) Hash identifier: bYjs6GXSLlqA0Th6HyAkiVRgh4h9plUA3FItR3Js3Cw= Subject key identifier: BB:0B:FD:71:71:F6:F3:1C:28:F2:76:B2:F8:B0:13:15:D8:0E:C1:88 Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Certificate issuer: /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Certificate serial: 1EEF29A6FA4D0CE201F5E15F5EC712704F85B56D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:00:56 +0000 Manifest this update: Wed 23 Sep 2026 11:55:56 +0000 Manifest next update: Thu 24 Sep 2026 14:42:56 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=) 2: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: 3nw+cY5F4fUBervRjCqvzbHD6VtNdtjlpo0rlKVSt40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ef:29:a6:fa:4d:0c:e2:01:f5:e1:5f:5e:c7:12:70:4f:85:b5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Validity Not Before: Sep 23 11:55:56 2026 GMT Not After : Sep 24 14:42:56 2026 GMT Subject: CN=BB0BFD7171F6F31C28F276B2F8B01315D80EC188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:d1:86:ba:96:b8:6f:f2:47:58:c6:8e:b5: 8c:f8:4d:b3:b6:a9:9e:e4:64:6d:c3:cd:66:0b:5a: cd:86:28:62:0a:de:48:12:e6:94:f8:55:da:fc:4e: 69:a5:7a:ae:8b:23:6b:10:c9:a4:74:d2:c9:99:8f: 46:b9:50:1f:ac:98:8a:17:b8:12:c2:23:2c:5a:70: ac:28:b0:df:25:99:03:5b:f4:ec:7d:0c:2f:1d:1f: 02:d4:06:5e:8c:92:36:c4:6e:3a:fd:5a:ac:76:09: 64:ae:e4:24:f0:d6:ca:ba:14:e1:d3:5c:e9:b7:50: d5:94:38:e6:cd:f7:4a:7a:46:ff:bf:10:f8:d3:71: f1:93:c1:85:31:87:ae:87:38:c2:35:56:65:e0:47: 14:94:aa:b8:3f:1c:22:c5:90:7e:57:51:13:eb:1c: 96:11:8b:6f:7b:5e:26:a9:a7:31:aa:78:ca:b3:98: 23:59:47:97:fb:ac:62:7c:64:ef:31:85:7a:ca:6c: 25:88:a1:8e:c5:2e:57:5b:cb:ae:58:f3:77:c6:f0: e7:3d:aa:8e:01:a0:6a:7d:d5:95:62:3f:5b:a7:b5: 94:1a:2f:a1:4f:f3:62:d9:5a:f8:77:3a:1e:b4:ba: 2b:3b:8d:6a:84:2b:e9:91:70:82:90:32:d4:f6:ce: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:FD:71:71:F6:F3:1C:28:F2:76:B2:F8:B0:13:15:D8:0E:C1:88 X509v3 Authority Key Identifier: keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:92:41:6a:d2:a9:7b:04:9b:c9:83:dd:8d:62:24:5b:96:90: c9:9c:06:ff:5a:ce:95:ea:57:21:50:28:14:31:35:02:16:41: 29:7c:99:01:2a:10:fc:ac:c3:a2:72:05:1a:ab:a9:1b:a8:4e: c6:94:be:88:37:e0:9e:20:ad:85:4f:71:f3:73:d2:c5:57:eb: 18:92:72:8a:5d:c6:76:43:e9:dc:83:12:ca:e4:00:7f:f5:ca: 96:a8:7e:eb:0f:35:d7:0e:53:44:7e:c8:9f:ad:04:79:3e:e6: 6e:8f:d6:77:d5:4b:55:6a:47:24:a7:f0:03:77:95:ed:0c:58: 33:8f:a3:e6:7a:c1:5c:97:da:2d:b6:00:d2:35:ad:14:03:99: 57:3b:cd:52:70:d5:7b:3e:18:c5:53:18:4d:ee:cb:de:bf:f1: 2c:87:d4:82:5a:ba:b0:7d:5a:58:00:50:e3:1f:6f:1a:81:24: 02:c5:77:ca:df:4b:8f:f5:a0:91:74:8a:f1:2d:c7:f1:fb:bb: a0:5e:aa:de:46:fa:e8:7d:36:ef:df:e8:0a:a7:1e:6f:68:51: 47:4d:7f:03:72:48:02:f7:ba:70:83:30:9b:d2:3b:c1:fa:cf: 0b:f8:78:c3:48:29:b1:ac:7d:39:49:7c:38:3e:31:bb:ed:a3: 2e:7f:46:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu8ppvpNDOIB9eFfXscScE+FtW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYyODU4 RUE4RDQ5MTAeFw0yNjA5MjMxMTU1NTZaFw0yNjA5MjQxNDQyNTZaMDMxMTAvBgNV BAMTKEJCMEJGRDcxNzFGNkYzMUMyOEYyNzZCMkY4QjAxMzE1RDgwRUMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuNGGupa4b/JHWMaOtYz4TbO2 qZ7kZG3DzWYLWs2GKGIK3kgS5pT4Vdr8Tmmleq6LI2sQyaR00smZj0a5UB+smIoX uBLCIyxacKwosN8lmQNb9Ox9DC8dHwLUBl6MkjbEbjr9Wqx2CWSu5CTw1sq6FOHT XOm3UNWUOObN90p6Rv+/EPjTcfGTwYUxh66HOMI1VmXgRxSUqrg/HCLFkH5XURPr HJYRi297XiappzGqeMqzmCNZR5f7rGJ8ZO8xhXrKbCWIoY7FLldby65Y83fG8Oc9 qo4BoGp91ZViP1untZQaL6FP82LZWvh3Oh60uis7jWqEK+mRcIKQMtT2zvhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwv9cXH28xwo8nay+LATFdgOwYgwHwYDVR0j BBgwFoAU8DbCjrefPur+aHD9+2LyhY6o1JEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZjYzFlZjYtNzY5Zi00YWFmLTlkMTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVC NzlGM0VFQUZFNjg3MEZERkI2MkYyODU4RUE4RDQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDM2QzI4RUI3OUYzRUVBRkU2ODcwRkRGQjYyRjI4NThFQThE NDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYy ODU4RUE4RDQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmSQWrSqXsEm8mD3Y1iJFuWkMmcBv9azpXq VyFQKBQxNQIWQSl8mQEqEPysw6JyBRqrqRuoTsaUvog34J4grYVPcfNz0sVX6xiS copdxnZD6dyDEsrkAH/1ypaofusPNdcOU0R+yJ+tBHk+5m6P1nfVS1VqRySn8AN3 le0MWDOPo+Z6wVyX2i22ANI1rRQDmVc7zVJw1Xs+GMVTGE3uy96/8SyH1IJaurB9 WlgAUOMfbxqBJALFd8rfS4/1oJF0ivEtx/H7u6Beqt5G+uh9Nu/f6AqnHm9oUUdN fwNySAL3unCDMJvSO8H6zwv4eMNIKbGsfTlJfDg+Mbvtoy5/RsU= -----END CERTIFICATE-----Generated at Wed Sep 23 21:35:49 2026 by rpki-client