$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: m7XN+b14Ts47alPNh1ihYSjgu6+IIw0Lu9cUj8CrZbk= Subject key identifier: 61:CF:93:DF:86:B5:94:30:FB:AF:69:B5:25:81:F8:5D:6B:77:29:00 Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 7D0076A3160E4BE4EA283EC887779C6CCF5CC63C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 10:23:26 +0000 Manifest this update: Fri 25 Sep 2026 10:18:26 +0000 Manifest next update: Sat 26 Sep 2026 12:52:26 +0000 Files and hashes: 1: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: iZUZ4aLtxli0v/Vyuzzm8iYbtlX90yvBVBqCpvgTndE=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:00:76:a3:16:0e:4b:e4:ea:28:3e:c8:87:77:9c:6c:cf:5c:c6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Sep 25 10:18:26 2026 GMT Not After : Sep 26 12:52:26 2026 GMT Subject: CN=61CF93DF86B59430FBAF69B52581F85D6B772900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3d:02:11:82:0d:dd:29:c8:e4:7f:fc:7d:f2: 71:cf:ec:9c:e4:4e:a3:f2:11:67:14:ea:1b:c4:a6: 09:f2:9b:61:63:ce:03:41:96:c3:c6:ea:ae:71:8f: 72:04:1c:ff:92:96:bd:1e:14:3b:90:7e:e1:98:ca: ca:a0:02:e5:58:73:0c:ef:68:a4:e6:86:6c:bc:2c: e9:6d:1d:6f:7a:67:22:4d:60:c4:cc:39:1b:e0:98: 7d:64:c0:2b:83:24:92:31:31:fa:3f:10:03:b8:e5: f6:ef:34:33:72:bd:5b:9c:89:a6:0f:7c:b0:40:c2: e4:ea:dc:ae:07:df:56:a1:e0:74:1b:ac:69:1e:af: e9:09:5b:cf:17:ca:f1:ab:0a:74:41:5b:db:fb:f1: d8:d2:6d:80:cb:6d:a5:5d:e2:cd:d5:f7:90:b0:04: 07:b3:1b:86:ec:36:9a:0f:c8:3d:f2:82:7c:7d:5f: 48:b7:95:43:ea:e0:05:a8:2d:df:71:b1:76:7d:b4: 85:dd:75:b6:90:c2:b8:59:be:af:74:da:e3:ec:d2: 42:e5:d4:43:22:cc:12:52:e7:68:98:49:6a:26:7e: 6e:99:1c:9b:71:71:08:4b:b4:ce:c2:bb:1d:7e:b4: ed:5a:c0:04:c3:ac:cf:54:35:61:4d:5e:0f:ea:f7: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:93:DF:86:B5:94:30:FB:AF:69:B5:25:81:F8:5D:6B:77:29:00 X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:82:38:32:e3:71:e5:c9:17:cd:da:b0:20:e2:25:92:83:28: e2:70:21:ed:f0:b6:ba:d7:6c:73:41:a5:7c:ad:88:53:06:2b: ff:5e:59:ea:29:5e:11:74:93:22:de:73:8a:8f:04:cb:82:fe: 5c:05:d5:b5:f7:b7:b6:88:24:03:6a:4a:5a:77:7e:54:b2:4b: 4b:9f:ea:06:31:99:6b:78:b4:41:96:32:a6:dc:55:87:66:65: d8:ee:ea:41:58:21:eb:4a:65:53:58:87:96:1b:39:c7:3e:1e: 91:27:60:1f:66:24:e8:15:22:b0:34:d1:a8:b7:64:7e:ee:ad: ca:70:79:8f:27:cc:4c:e6:d5:6b:ce:f1:07:ad:be:76:90:76: c1:57:1c:3e:f9:24:6f:d4:59:ec:50:41:dd:c1:6b:a8:d9:0b: 69:0b:a9:41:76:bd:92:6e:3b:24:b0:8d:ec:f4:66:57:17:1f: c3:1b:e3:45:59:0e:4d:2b:e1:fd:94:56:9e:69:80:87:17:a6: 38:cd:15:d3:5f:ac:ca:f0:8c:6e:67:e8:aa:9c:d1:59:81:ef: f5:07:4b:0e:64:38:ab:e1:27:5c:89:41:0f:83:f3:ea:0c:bb: 7a:c2:a9:8c:58:e6:5b:cb:fb:4b:22:8d:48:59:6d:38:fc:7e: f3:6e:27:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQB2oxYOS+TqKD7Ih3ecbM9cxjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA5MjUxMDE4MjZaFw0yNjA5MjYxMjUyMjZaMDMxMTAvBgNV BAMTKDYxQ0Y5M0RGODZCNTk0MzBGQkFGNjlCNTI1ODFGODVENkI3NzI5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHPQIRgg3dKcjkf/x98nHP7Jzk TqPyEWcU6hvEpgnym2FjzgNBlsPG6q5xj3IEHP+Slr0eFDuQfuGYysqgAuVYcwzv aKTmhmy8LOltHW96ZyJNYMTMORvgmH1kwCuDJJIxMfo/EAO45fbvNDNyvVuciaYP fLBAwuTq3K4H31ah4HQbrGker+kJW88XyvGrCnRBW9v78djSbYDLbaVd4s3V95Cw BAezG4bsNpoPyD3ygnx9X0i3lUPq4AWoLd9xsXZ9tIXddbaQwrhZvq902uPs0kLl 1EMizBJS52iYSWomfm6ZHJtxcQhLtM7Cux1+tO1awATDrM9UNWFNXg/q9/C9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYc+T34a1lDD7r2m1JYH4XWt3KQAwHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeCODLjceXJF83asCDiJZKDKOJwIe3wtrrX bHNBpXytiFMGK/9eWeopXhF0kyLec4qPBMuC/lwF1bX3t7aIJANqSlp3flSyS0uf 6gYxmWt4tEGWMqbcVYdmZdju6kFYIetKZVNYh5YbOcc+HpEnYB9mJOgVIrA00ai3 ZH7urcpweY8nzEzm1WvO8QetvnaQdsFXHD75JG/UWexQQd3Ba6jZC2kLqUF2vZJu OySwjez0ZlcXH8Mb40VZDk0r4f2UVp5pgIcXpjjNFdNfrMrwjG5n6Kqc0VmB7/UH Sw5kOKvhJ1yJQQ+D8+oMu3rCqYxY5lvL+0sijUhZbTj8fvNuJ9k= -----END CERTIFICATE-----Generated at Fri Sep 25 13:06:13 2026 by rpki-client