$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json) Hash identifier: R9koArQ+YefdV11BPIeUzuVHwh2LXFIAPDp0UJwesPU= Subject key identifier: DD:92:5A:9A:BC:34:4F:68:5B:58:AF:53:6C:43:F3:06:78:82:F6:6A Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303 Certificate serial: 348C83000A72252D95D284CFDD4EF79015CCFCFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 06:54:10 +0000 Manifest this update: Fri 25 Sep 2026 06:49:10 +0000 Manifest next update: Sat 26 Sep 2026 08:38:10 +0000 Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=) 2: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: exLKdeb/ji+7JBUQOospgkbCt0gjlH/UpgT1afGyWGk=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8c:83:00:0a:72:25:2d:95:d2:84:cf:dd:4e:f7:90:15:cc:fc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303 Validity Not Before: Sep 25 06:49:10 2026 GMT Not After : Sep 26 08:38:10 2026 GMT Subject: CN=DD925A9ABC344F685B58AF536C43F3067882F66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:df:0d:df:7c:ba:5f:d5:c5:48:b4:42:96: 07:f0:c5:47:d5:b0:dc:88:6f:1d:f5:04:d9:d6:fb: 42:8e:f4:a2:5e:9b:e3:b8:c0:7f:df:2c:5f:5c:02: 2d:0b:de:8f:46:3b:ff:ec:55:8d:95:ed:49:bf:a2: 30:a4:87:72:53:4f:c0:06:0b:8d:2f:b2:11:bc:21: 0f:19:16:14:a1:5c:30:f6:31:a4:b8:27:42:19:3d: 96:48:35:0d:7c:5d:1e:67:52:ce:a1:5a:6f:4d:9c: 05:62:ca:fa:84:47:bd:45:05:79:2e:1c:05:8e:67: fb:a0:07:56:f6:bd:7a:ee:fe:1f:be:8c:68:dd:e2: 4a:2f:96:f5:0d:0b:94:43:5a:d7:a5:71:e3:75:6b: 0d:ab:d0:4e:f4:cb:a2:0b:a4:9d:67:15:3b:46:dc: c0:fa:bd:6f:c4:3d:e4:f8:d2:57:60:e2:04:cc:66: d8:87:3e:33:a3:c4:74:d7:6c:4d:f9:16:47:f7:40: 03:11:a5:59:a7:ed:a9:5d:3b:e7:72:77:44:45:0a: cf:e2:a7:29:19:c5:d3:97:e4:5c:5b:5d:39:d7:e0: e3:79:13:2e:45:ad:90:06:7f:3e:ec:7b:ac:e3:fa: 80:b1:66:70:c5:63:f5:61:18:2f:26:bb:d1:40:51: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:5A:9A:BC:34:4F:68:5B:58:AF:53:6C:43:F3:06:78:82:F6:6A X509v3 Authority Key Identifier: keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bb:ac:1f:44:f6:10:58:96:ca:51:91:1c:f1:5a:3f:00:f0: 0a:a0:fc:0c:14:2a:86:c4:bd:cb:6c:d3:9a:34:a9:34:2c:18: 3f:60:21:10:9e:52:42:52:3d:39:9a:e8:70:cd:b4:5c:e3:65: ba:33:8a:d1:1b:b5:df:b3:78:76:77:db:85:28:83:e9:7b:4b: 26:97:c1:61:02:36:0a:ad:0c:2b:0f:18:09:3a:5f:d8:91:e3: b5:f9:36:fb:c9:fb:32:f8:bd:ba:19:04:f0:68:30:91:34:63: fb:b2:f9:b7:8c:01:4f:bc:50:2d:05:be:e6:27:84:58:bb:8c: 16:f8:e5:d9:a3:d4:65:52:55:41:93:76:8a:ba:1f:07:f8:5e: 38:ab:6d:7a:cb:e2:5b:53:87:51:4e:4b:06:ab:f2:36:9e:8b: 5f:e4:2f:9c:c4:79:eb:7a:63:4d:42:c4:b0:f4:7e:1d:ac:94: 3b:cd:b6:d2:ee:cf:88:4c:ff:b6:97:6a:de:88:5a:91:95:f2: a2:8f:c9:0f:9c:f5:2a:5f:32:68:1c:46:73:83:00:0a:be:81: 4c:a2:c5:e4:ed:2d:34:26:e0:b3:cb:53:c6:c9:0a:c5:5d:59: e1:6f:d6:9d:5f:1b:01:2c:3c:93:7f:52:46:85:4e:0a:4d:85: b8:0e:e9:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIyDAApyJS2V0oTP3U73kBXM/P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVD QTI2RDMwMzAeFw0yNjA5MjUwNjQ5MTBaFw0yNjA5MjYwODM4MTBaMDMxMTAvBgNV BAMTKEREOTI1QTlBQkMzNDRGNjg1QjU4QUY1MzZDNDNGMzA2Nzg4MkY2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9N8N33y6X9XFSLRClgfwxUfV sNyIbx31BNnW+0KO9KJem+O4wH/fLF9cAi0L3o9GO//sVY2V7Um/ojCkh3JTT8AG C40vshG8IQ8ZFhShXDD2MaS4J0IZPZZINQ18XR5nUs6hWm9NnAViyvqER71FBXku HAWOZ/ugB1b2vXru/h++jGjd4kovlvUNC5RDWtelceN1aw2r0E70y6ILpJ1nFTtG 3MD6vW/EPeT40ldg4gTMZtiHPjOjxHTXbE35Fkf3QAMRpVmn7aldO+dyd0RFCs/i pykZxdOX5FxbXTnX4ON5Ey5FrZAGfz7se6zj+oCxZnDFY/VhGC8mu9FAUVvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZJamrw0T2hbWK9TbEPzBniC9mowHwYDVR0j BBgwFoAU8kxieqBoX2jxQgx/KIYCZcom0wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRhYWUzZjAtOWM3MC00MmZjLWFlM2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FB MDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVDQTI2RDMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRDNjI3QUEwNjg1RjY4RjE0MjBDN0YyODg2MDI2NUNBMjZE MzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAy NjVDQTI2RDMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC7rB9E9hBYlspRkRzxWj8A8Aqg/AwUKobE vcts05o0qTQsGD9gIRCeUkJSPTma6HDNtFzjZbozitEbtd+zeHZ324Uog+l7SyaX wWECNgqtDCsPGAk6X9iR47X5NvvJ+zL4vboZBPBoMJE0Y/uy+beMAU+8UC0FvuYn hFi7jBb45dmj1GVSVUGTdoq6Hwf4XjirbXrL4ltTh1FOSwar8jaei1/kL5zEeet6 Y01CxLD0fh2slDvNttLuz4hM/7aXat6IWpGV8qKPyQ+c9SpfMmgcRnODAAq+gUyi xeTtLTQm4LPLU8bJCsVdWeFv1p1fGwEsPJN/UkaFTgpNhbgO6fw= -----END CERTIFICATE-----Generated at Fri Sep 25 22:31:54 2026 by rpki-client