$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json) Hash identifier: T2nFZUQ25NrEwxhL4N0t57+anvDDZ2UjJ/2sIMr/98w= Subject key identifier: 3A:F3:E8:CE:51:9F:E7:06:E9:C1:F4:6A:FA:8E:28:8E:59:94:3A:D8 Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Certificate serial: 3BACF17318F1202B8B282188745235A81F36905C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:14:38 +0000 Manifest this update: Thu 24 Sep 2026 03:09:38 +0000 Manifest next update: Fri 25 Sep 2026 05:44:38 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=) 2: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: sG+2QNVvPuok4fxsvPa4AwqZXs6C3ibBxoyCnjP9fUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ac:f1:73:18:f1:20:2b:8b:28:21:88:74:52:35:a8:1f:36:90:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Validity Not Before: Sep 24 03:09:38 2026 GMT Not After : Sep 25 05:44:38 2026 GMT Subject: CN=3AF3E8CE519FE706E9C1F46AFA8E288E59943AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:3f:f9:fd:36:0e:04:09:ef:1d:ca:98:9f: 98:cc:31:9b:50:58:89:89:4e:9c:c1:22:24:4d:d5: 43:ba:8e:d9:93:dc:12:b0:f6:37:9b:54:6c:16:e0: ce:35:92:f8:32:97:0d:93:87:71:61:04:74:d3:c3: 09:3f:35:3c:be:85:49:22:9e:da:f3:38:7d:bb:3a: bc:99:bf:1e:9e:1f:61:ae:1e:0c:98:98:c8:a8:be: 54:9c:62:96:bd:e2:1f:9c:e6:b0:de:de:d9:0f:2c: c3:73:14:85:4c:a0:1d:22:bb:90:15:3c:ea:72:a5: 6a:a5:e5:8d:1f:e1:63:65:23:d5:b0:dc:42:70:6e: c1:5e:27:6e:cf:d2:b5:50:25:7a:c8:6b:05:7d:3e: 9f:bf:81:29:88:55:b3:2b:6a:8b:3c:db:5f:2a:99: ba:88:57:61:1c:9f:93:17:18:91:f5:e3:83:32:27: 5c:77:29:58:cd:b2:27:b3:63:dc:4f:23:9c:58:22: 01:82:1d:f6:f2:93:be:71:b5:39:07:65:f8:11:c4: 06:e1:43:50:0b:f7:f4:fa:32:dc:06:18:7b:5b:b2: bc:f3:db:d5:19:14:63:40:65:8c:34:bb:86:02:20: 96:0b:2c:9f:6e:99:0a:d9:9b:75:a6:8e:b4:70:b7: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:E8:CE:51:9F:E7:06:E9:C1:F4:6A:FA:8E:28:8E:59:94:3A:D8 X509v3 Authority Key Identifier: keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f0:68:b2:7c:e4:29:24:1b:eb:62:47:86:42:0a:82:6a:03: 0e:a1:38:ef:35:aa:1f:78:bd:5d:f5:3b:42:dc:ab:56:f3:ed: ce:ba:26:15:c5:ac:18:98:39:41:d0:4f:52:21:1c:bd:43:dc: bb:fe:b9:df:5b:28:70:e4:04:c0:67:3f:af:76:b4:a6:61:9d: a0:0a:1e:09:53:d0:3f:59:b4:7e:c3:3c:73:be:96:32:65:b7: 20:cd:1d:7d:5f:36:4e:5a:19:7f:76:f1:ac:1a:8a:7c:01:ff: 3f:eb:aa:14:65:cc:d5:e5:75:28:fb:94:4e:b0:9c:96:93:e8: 59:f3:f6:14:93:71:80:6f:f9:ab:1b:51:8d:db:65:1c:8a:de: 49:3b:0d:b7:72:e5:b3:07:0b:b7:60:31:dd:c5:64:8a:89:33: cd:46:5d:98:36:76:d2:93:c1:bc:c0:c8:20:49:66:c0:83:14: c0:41:32:0a:df:18:0b:f8:c1:73:02:27:22:22:39:9b:41:c2: be:2f:73:f4:bc:49:6f:b6:06:cd:43:09:dd:b1:c1:07:11:32: f7:2f:1d:f3:48:7e:1d:c8:22:65:65:c4:c7:7a:18:96:98:0f: f9:ce:52:34:8f:16:f4:b6:ed:6b:5f:42:2f:56:76:ee:96:98: d2:87:6a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6zxcxjxICuLKCGIdFI1qB82kFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0 MkFGRDQ1ODAeFw0yNjA5MjQwMzA5MzhaFw0yNjA5MjUwNTQ0MzhaMDMxMTAvBgNV BAMTKDNBRjNFOENFNTE5RkU3MDZFOUMxRjQ2QUZBOEUyODhFNTk5NDNBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbeD/5/TYOBAnvHcqYn5jMMZtQ WImJTpzBIiRN1UO6jtmT3BKw9jebVGwW4M41kvgylw2Th3FhBHTTwwk/NTy+hUki ntrzOH27OryZvx6eH2GuHgyYmMiovlScYpa94h+c5rDe3tkPLMNzFIVMoB0iu5AV POpypWql5Y0f4WNlI9Ww3EJwbsFeJ27P0rVQJXrIawV9Pp+/gSmIVbMraos8218q mbqIV2Ecn5MXGJH144MyJ1x3KVjNsiezY9xPI5xYIgGCHfbyk75xtTkHZfgRxAbh Q1AL9/T6MtwGGHtbsrzz29UZFGNAZYw0u4YCIJYLLJ9umQrZm3WmjrRwtyRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvPozlGf5wbpwfRq+o4ojlmUOtgwHwYDVR0j BBgwFoAU8jF3rqBewALtnRqexg1qEkKv1FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY3OTgyNGYtNGUwOC00OTcwLWJiYTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVB MDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0MkFGRDQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjMxNzdBRUEwNUVDMDAyRUQ5RDFBOUVDNjBENkExMjQyQUZE NDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZB MTI0MkFGRDQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbwaLJ85CkkG+tiR4ZCCoJqAw6hOO81qh94 vV31O0Lcq1bz7c66JhXFrBiYOUHQT1IhHL1D3Lv+ud9bKHDkBMBnP692tKZhnaAK HglT0D9ZtH7DPHO+ljJltyDNHX1fNk5aGX928awainwB/z/rqhRlzNXldSj7lE6w nJaT6Fnz9hSTcYBv+asbUY3bZRyK3kk7Dbdy5bMHC7dgMd3FZIqJM81GXZg2dtKT wbzAyCBJZsCDFMBBMgrfGAv4wXMCJyIiOZtBwr4vc/S8SW+2Bs1DCd2xwQcRMvcv HfNIfh3IImVlxMd6GJaYD/nOUjSPFvS27WtfQi9Wdu6WmNKHanQ= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:15 2026 by rpki-client