$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: MdWUT3cdr0vQAHKjQp24oWU2+/VdG7W3jPJjWMNjpD8= Subject key identifier: EC:BD:D9:83:5C:D2:02:FE:B8:39:B3:EE:B3:16:76:FE:7D:7A:AA:CB Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 468DBC9550AA827FAC0114F8100844A5F4DA8D4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:29:45 +0000 Manifest this update: Fri 25 Sep 2026 11:24:45 +0000 Manifest next update: Sat 26 Sep 2026 12:48:45 +0000 Files and hashes: 1: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 3: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) 4: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: FwQCqFbcIu+CYqkeBVU3LYQCBidyJ2N5hhMtivbQE7o=) 5: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8d:bc:95:50:aa:82:7f:ac:01:14:f8:10:08:44:a5:f4:da:8d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Sep 25 11:24:45 2026 GMT Not After : Sep 26 12:48:45 2026 GMT Subject: CN=ECBDD9835CD202FEB839B3EEB31676FE7D7AAACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:3e:a5:67:5b:ad:5a:a9:79:34:90:40:8e: e3:9d:bb:ae:2f:59:92:82:0c:c5:ec:4e:2a:b6:d4: 0c:26:19:fa:45:23:2d:63:cd:bf:42:ee:b0:c2:b9: b4:22:c0:ef:b5:48:cc:03:9c:1b:90:3a:94:15:2e: 50:19:91:af:c2:17:fd:62:d1:e9:9f:23:ee:83:69: 54:1a:95:f9:7b:23:0a:1f:72:2d:f5:49:00:d2:bf: 86:83:f5:96:25:cf:b7:15:44:8f:91:12:9d:f9:4c: 0e:43:40:f6:b8:27:00:64:bc:8f:79:88:da:8c:c9: 84:80:aa:fd:d0:b0:09:7b:3e:da:85:11:b1:4d:81: 42:c9:7e:08:8c:55:6b:3e:41:13:44:2c:ba:9e:6c: 54:4b:37:87:28:64:ab:0f:c0:82:e3:71:bb:e1:78: d7:9d:60:c9:ed:ae:f8:59:29:ce:4c:81:72:b2:00: 23:81:d0:39:0c:aa:9a:a9:66:43:a6:3f:8f:1c:42: 55:00:1d:a1:0b:4b:f5:f5:98:e6:bc:70:e3:6b:7a: bb:0b:a4:ca:df:b4:6b:de:b5:f0:f2:76:8b:92:fd: e8:04:c8:a2:8e:e4:f1:f4:ca:c5:52:2e:9c:9b:f4: 68:82:be:07:71:e0:03:2b:d7:5d:3b:b2:7a:11:7a: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:D9:83:5C:D2:02:FE:B8:39:B3:EE:B3:16:76:FE:7D:7A:AA:CB X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:10:8d:af:07:db:08:ec:b1:a5:63:43:54:c6:33:fe:41:10: 73:38:8b:f3:79:6a:e9:2b:d6:c3:ef:f6:2d:a1:6e:15:1c:73: e3:ed:89:db:8b:8e:1a:ab:d9:51:b0:54:17:11:5c:7e:d0:d8: 44:04:bd:a1:d1:97:2d:6e:c2:1e:f0:a5:9d:1a:17:2c:29:3f: 1c:a3:24:c7:e5:16:df:f1:7e:9a:88:c2:23:54:a2:13:55:73: 7e:d3:2f:8e:d6:bd:9b:0a:74:1b:ee:a9:fd:3d:aa:cc:25:89: ca:23:94:73:e7:f6:d2:ff:de:80:6f:a9:05:03:94:0c:d1:2e: 89:bb:9e:f2:fa:99:eb:1a:39:4f:0f:f1:54:e1:ac:da:70:e0: 86:61:98:3b:59:4a:3e:a9:d3:67:41:21:d9:1c:ec:40:63:b4: 3f:59:0c:53:e2:18:2a:d7:86:87:2f:8b:d1:52:8a:46:ec:c2: 62:18:e9:09:ae:dd:e4:88:29:bf:45:96:51:2c:f7:05:42:0d: 45:29:fe:64:be:98:df:d0:25:33:6d:61:8f:ad:7d:20:85:21: 1b:71:82:7f:c9:34:42:b5:d3:02:06:9f:90:fb:ad:9b:0d:f8: 1a:5f:89:b1:5f:36:48:4f:74:3b:ee:28:fe:e0:6c:19:3a:60: ae:d8:7e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURo28lVCqgn+sART4EAhEpfTajU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA5MjUxMTI0NDVaFw0yNjA5MjYxMjQ4NDVaMDMxMTAvBgNV BAMTKEVDQkREOTgzNUNEMjAyRkVCODM5QjNFRUIzMTY3NkZFN0Q3QUFBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5j6lZ1utWql5NJBAjuOdu64v WZKCDMXsTiq21AwmGfpFIy1jzb9C7rDCubQiwO+1SMwDnBuQOpQVLlAZka/CF/1i 0emfI+6DaVQalfl7Iwofci31SQDSv4aD9ZYlz7cVRI+REp35TA5DQPa4JwBkvI95 iNqMyYSAqv3QsAl7PtqFEbFNgULJfgiMVWs+QRNELLqebFRLN4coZKsPwILjcbvh eNedYMntrvhZKc5MgXKyACOB0DkMqpqpZkOmP48cQlUAHaELS/X1mOa8cONrersL pMrftGvetfDydouS/egEyKKO5PH0ysVSLpyb9GiCvgdx4AMr1107snoResZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7L3Zg1zSAv64ObPusxZ2/n16qsswHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0Qja8H2wjssaVjQ1TGM/5BEHM4i/N5aukr 1sPv9i2hbhUcc+PtiduLjhqr2VGwVBcRXH7Q2EQEvaHRly1uwh7wpZ0aFywpPxyj JMflFt/xfpqIwiNUohNVc37TL47WvZsKdBvuqf09qswlicojlHPn9tL/3oBvqQUD lAzRLom7nvL6mesaOU8P8VThrNpw4IZhmDtZSj6p02dBIdkc7EBjtD9ZDFPiGCrX hocvi9FSikbswmIY6Qmu3eSIKb9FllEs9wVCDUUp/mS+mN/QJTNtYY+tfSCFIRtx gn/JNEK10wIGn5D7rZsN+BpfibFfNkhPdDvuKP7gbBk6YK7YfiQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:28:15 2026 by rpki-client