$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: hb1zvcCgIgjd5XgcyKMsHXns8XFzONxB0hKGp/pvU9Y= Subject key identifier: 56:1E:1F:80:03:1F:3D:CD:EE:9F:66:8B:41:FC:D2:C7:6C:43:FB:BA Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 16E677CA264889FCD170D79304F6CB983948B834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:00:54 +0000 Manifest this update: Wed 23 Sep 2026 15:55:54 +0000 Manifest next update: Thu 24 Sep 2026 17:50:54 +0000 Files and hashes: 1: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: QPhfzug5r3zxMMLLsdSTi/qIx6/cifbI91Pke+qeqhM=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e6:77:ca:26:48:89:fc:d1:70:d7:93:04:f6:cb:98:39:48:b8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: Sep 23 15:55:54 2026 GMT Not After : Sep 24 17:50:54 2026 GMT Subject: CN=561E1F80031F3DCDEE9F668B41FCD2C76C43FBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:40:d5:3a:25:d5:cd:f3:55:aa:32:d7:14: ef:49:b0:8f:b0:71:bf:a4:f0:ec:af:58:35:b1:f1: 4b:26:88:8e:a4:f5:a7:e7:95:40:b1:f6:09:7a:9f: d8:4e:03:3f:d1:b9:c0:e7:96:de:23:1a:93:40:73: be:5f:13:10:48:ac:4e:5e:5e:ea:3e:92:3e:a1:2b: bf:3c:5e:f2:26:c1:25:ed:9c:52:04:21:c0:52:08: a3:c1:0c:ce:18:06:f9:91:74:ff:a9:b3:42:6e:5c: 37:9f:a9:9f:b6:a9:ac:bc:22:d4:d9:05:38:98:97: 29:22:4f:db:4d:9a:bd:ca:5f:91:33:89:1c:fb:cb: 15:9f:0f:5e:41:c9:59:d5:cb:1d:ca:d6:72:36:62: 88:bb:e9:64:7d:2c:44:c7:19:6a:45:97:ea:d2:fc: f2:bc:06:9e:8e:88:40:ce:d8:84:82:d7:cb:fa:1a: f7:41:e2:40:6a:af:82:31:86:ce:15:93:6a:4e:17: c0:c4:07:d8:4a:fe:4c:8e:1b:4e:ee:11:ca:f8:98: 07:94:66:13:44:a5:b7:f3:05:b1:9a:9b:d0:a3:4d: 98:b6:5a:7e:b1:9a:a7:5a:e9:d5:5c:3d:04:a2:03: 1e:fc:4e:80:32:fb:91:2a:a3:a9:24:70:0c:97:5f: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:1F:80:03:1F:3D:CD:EE:9F:66:8B:41:FC:D2:C7:6C:43:FB:BA X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a7:3a:bd:00:ae:d7:a9:10:a5:57:d1:b5:99:a0:6d:e6:48: 7d:1d:75:a6:1a:49:54:7e:7d:b9:7d:b9:8e:61:12:da:06:0e: c1:3b:6f:b8:6f:a2:c7:93:e6:24:a6:40:77:d5:e6:b1:14:a5: 55:a7:1d:15:d6:88:66:5b:68:53:08:d4:04:21:29:a2:e3:39: 51:87:28:ce:20:16:b1:75:69:c2:22:9a:b6:44:e9:6c:75:41: 3a:fc:d0:87:fb:7e:89:7d:55:37:04:72:e4:70:1c:40:1b:91: 7e:fb:94:aa:10:5f:35:ca:75:17:18:be:a8:6d:93:92:83:a1: 68:ce:3e:06:be:96:05:1e:70:19:f3:be:68:8a:da:41:4e:51: 91:91:5f:69:74:1e:10:fc:f7:67:bb:d5:8b:ee:68:8d:90:05: 12:16:b2:55:84:68:cc:53:4e:48:2a:11:1b:07:96:4e:e2:30: cd:5b:46:59:3d:00:cf:b5:16:8e:13:d5:68:71:7a:e2:22:a8: 41:a7:0c:36:d2:c5:df:2b:69:c8:47:d7:fd:67:3c:04:f3:df: d5:82:32:f1:d4:ea:b5:ba:6a:b4:b0:43:88:df:f0:d6:07:38: c8:7e:a1:f7:81:71:ab:da:cb:28:61:d5:59:37:db:02:5f:bf: 5b:c0:43:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuZ3yiZIifzRcNeTBPbLmDlIuDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjA5MjMxNTU1NTRaFw0yNjA5MjQxNzUwNTRaMDMxMTAvBgNV BAMTKDU2MUUxRjgwMDMxRjNEQ0RFRTlGNjY4QjQxRkNEMkM3NkM0M0ZCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y0DVOiXVzfNVqjLXFO9JsI+w cb+k8OyvWDWx8UsmiI6k9afnlUCx9gl6n9hOAz/RucDnlt4jGpNAc75fExBIrE5e Xuo+kj6hK788XvImwSXtnFIEIcBSCKPBDM4YBvmRdP+ps0JuXDefqZ+2qay8ItTZ BTiYlykiT9tNmr3KX5EziRz7yxWfD15ByVnVyx3K1nI2Yoi76WR9LETHGWpFl+rS /PK8Bp6OiEDO2ISC18v6GvdB4kBqr4Ixhs4Vk2pOF8DEB9hK/kyOG07uEcr4mAeU ZhNEpbfzBbGam9CjTZi2Wn6xmqda6dVcPQSiAx78ToAy+5Eqo6kkcAyXX0DJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVh4fgAMfPc3un2aLQfzSx2xD+7owHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOnOr0ArtepEKVX0bWZoG3mSH0ddaYaSVR+ fbl9uY5hEtoGDsE7b7hvoseT5iSmQHfV5rEUpVWnHRXWiGZbaFMI1AQhKaLjOVGH KM4gFrF1acIimrZE6Wx1QTr80If7fol9VTcEcuRwHEAbkX77lKoQXzXKdRcYvqht k5KDoWjOPga+lgUecBnzvmiK2kFOUZGRX2l0HhD892e71YvuaI2QBRIWslWEaMxT TkgqERsHlk7iMM1bRlk9AM+1Fo4T1WhxeuIiqEGnDDbSxd8rachH1/1nPATz39WC MvHU6rW6arSwQ4jf8NYHOMh+ofeBcavayyhh1Vk32wJfv1vAQ0o= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:23 2026 by rpki-client