$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: 7e5drlV1CsnFBi7lV74IH9x1sPbMZxZ4ZagQlew6aHQ= Subject key identifier: 73:98:ED:E6:36:59:43:88:4A:3B:82:4B:F7:BF:8F:83:21:D0:8F:54 Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 2099D268EACD50B8DC0C7A5AED706DC4E321846F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:59:28 +0000 Manifest this update: Wed 23 Sep 2026 18:54:28 +0000 Manifest next update: Thu 24 Sep 2026 22:44:28 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) 2: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: sFDCubUWFnPtD8VePYoLUfqReNc/Fa0hvxWxSt5RdiM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:99:d2:68:ea:cd:50:b8:dc:0c:7a:5a:ed:70:6d:c4:e3:21:84:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Sep 23 18:54:28 2026 GMT Not After : Sep 24 22:44:28 2026 GMT Subject: CN=7398EDE6365943884A3B824BF7BF8F8321D08F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:fe:cc:2e:8a:cc:18:1e:44:d3:25:e8:20: e7:98:06:b4:78:69:cd:48:c1:a4:f4:8d:e9:bb:e4: e5:aa:ab:05:8a:bd:e8:50:ad:fb:4f:eb:a8:07:79: cf:6c:d1:71:a5:87:aa:5b:37:48:9a:1b:f7:80:37: c1:0d:94:16:48:2c:64:7f:7c:4c:af:97:ae:6e:db: da:7d:a1:26:15:e6:5a:b1:f2:a2:f3:7c:c6:17:68: 41:20:9d:e3:ab:13:6c:64:5d:41:65:51:71:52:62: ba:af:82:b9:99:21:2a:ff:51:fa:60:c7:c3:40:b0: 48:2c:67:95:27:91:01:04:b2:19:a2:36:da:07:e7: 76:82:03:f7:82:e1:67:09:ca:a3:f7:ae:27:73:b1: 8c:5b:61:05:c4:06:c9:2e:41:f9:41:49:68:d1:68: e4:3d:2a:cc:38:30:b7:47:e2:04:59:b6:f6:da:76: 5c:57:64:9c:18:6c:d1:b3:47:31:e3:a2:56:2b:75: 90:1b:d0:c9:4e:92:a7:5a:93:f4:29:75:78:ca:7f: 81:8e:91:50:63:59:b9:d5:54:fd:84:a4:59:12:f5: 67:ff:b6:ba:a7:d2:91:6a:17:c8:45:dc:1f:5b:5c: 3c:f0:ec:4a:2f:8b:31:cf:91:18:47:c1:3d:af:f7: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:98:ED:E6:36:59:43:88:4A:3B:82:4B:F7:BF:8F:83:21:D0:8F:54 X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:83:39:3c:8f:17:0e:ea:f8:d2:f3:4b:af:06:1d:3d:33:f0: fc:c8:3b:51:69:0d:82:9f:66:bb:46:d8:69:cc:68:ef:a4:a7: ee:e0:bf:48:16:08:c0:b7:c3:aa:4e:f6:1a:f7:b2:c5:af:4b: 53:f3:61:ba:80:f7:a7:2c:3b:4c:a2:ec:8e:c6:1f:13:ee:00: 91:a8:d4:6e:72:9c:60:a9:6a:91:1e:3d:a1:23:4d:78:54:07: 59:55:d2:88:67:cd:7d:59:62:65:38:5b:a1:88:e2:59:82:38: b3:80:a7:ac:d2:cb:11:c4:32:6a:d9:10:8c:79:2d:64:09:3c: 54:82:72:67:07:c4:6c:87:c3:ac:3a:e8:88:83:f6:e5:b9:54: d7:00:bb:7d:c4:50:ef:28:41:68:cd:4c:a2:ca:9d:f2:e6:7a: 42:d2:e2:3d:d6:9d:e2:5f:e0:eb:e2:ad:4e:51:c1:d6:2f:e8: 8d:27:89:4f:28:8c:b6:09:2f:17:51:0c:59:b2:cd:a6:b0:57: 66:9a:cf:4a:9d:e6:33:d4:b3:12:a2:1f:e8:e5:87:d3:46:e4: c5:18:b3:26:89:18:7e:86:23:ba:f1:a8:eb:bf:ae:b4:65:b9: 7b:ba:ed:98:9f:e6:9e:8a:72:64:51:c8:79:6e:77:de:31:26: 6e:9f:42:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJnSaOrNULjcDHpa7XBtxOMhhG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA5MjMxODU0MjhaFw0yNjA5MjQyMjQ0MjhaMDMxMTAvBgNV BAMTKDczOThFREU2MzY1OTQzODg0QTNCODI0QkY3QkY4RjgzMjFEMDhGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIev7MLorMGB5E0yXoIOeYBrR4 ac1IwaT0jem75OWqqwWKvehQrftP66gHec9s0XGlh6pbN0iaG/eAN8ENlBZILGR/ fEyvl65u29p9oSYV5lqx8qLzfMYXaEEgneOrE2xkXUFlUXFSYrqvgrmZISr/Ufpg x8NAsEgsZ5UnkQEEshmiNtoH53aCA/eC4WcJyqP3ridzsYxbYQXEBskuQflBSWjR aOQ9Ksw4MLdH4gRZtvbadlxXZJwYbNGzRzHjolYrdZAb0MlOkqdak/QpdXjKf4GO kVBjWbnVVP2EpFkS9Wf/trqn0pFqF8hF3B9bXDzw7EovizHPkRhHwT2v90C5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5jt5jZZQ4hKO4JL97+PgyHQj1QwHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiDOTyPFw7q+NLzS68GHT0z8PzIO1FpDYKf ZrtG2GnMaO+kp+7gv0gWCMC3w6pO9hr3ssWvS1PzYbqA96csO0yi7I7GHxPuAJGo 1G5ynGCpapEePaEjTXhUB1lV0ohnzX1ZYmU4W6GI4lmCOLOAp6zSyxHEMmrZEIx5 LWQJPFSCcmcHxGyHw6w66IiD9uW5VNcAu33EUO8oQWjNTKLKnfLmekLS4j3WneJf 4OvirU5RwdYv6I0niU8ojLYJLxdRDFmyzaawV2aaz0qd5jPUsxKiH+jlh9NG5MUY syaJGH6GI7rxqOu/rrRluXu67Zif5p6KcmRRyHlud94xJm6fQvQ= -----END CERTIFICATE-----Generated at Thu Sep 24 15:54:54 2026 by rpki-client