$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json) Hash identifier: ST6WVSzgqu7xEyUbsDjwMfQu9VF6vGrg+rhbP69kWqk= Subject key identifier: 39:4D:28:2E:9B:B5:E1:70:59:E9:0E:7C:4D:2A:57:7F:0F:EE:DE:86 Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A Certificate issuer: /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Certificate serial: 4E1CCD09998426F4ECBA2DD0523D830CF2FA9BFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 08:05:48 +0000 Manifest this update: Fri 25 Sep 2026 08:00:48 +0000 Manifest next update: Sat 26 Sep 2026 11:46:48 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=) 2: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: 5EUVXhBslnjdGmOrAu5fqabjn825OrCiDL5seShdiM4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1c:cd:09:99:84:26:f4:ec:ba:2d:d0:52:3d:83:0c:f2:fa:9b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Validity Not Before: Sep 25 08:00:48 2026 GMT Not After : Sep 26 11:46:48 2026 GMT Subject: CN=394D282E9BB5E17059E90E7C4D2A577F0FEEDE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:d0:66:f6:8c:6f:3f:e7:30:5b:14:f6:57: d7:44:d8:4c:d3:bf:98:1a:9e:19:9c:c3:3f:83:41: 09:0b:e6:d9:5f:be:af:be:e3:3d:33:3f:76:e9:64: 6b:80:5c:c3:73:be:64:49:e5:06:90:80:6d:0e:9d: 34:17:d5:04:34:7f:2f:c9:da:2d:32:c5:8d:51:bc: 18:2f:a5:e6:f6:23:f7:34:fc:05:f9:b8:27:42:37: 01:ee:d8:03:5e:7a:26:db:d0:45:96:86:ce:98:84: f5:86:9f:07:ec:ad:f0:16:58:f1:96:73:bd:80:c1: e9:7b:50:4b:30:bd:a7:90:0f:51:00:f7:4b:9c:bc: f7:ca:6d:5e:c9:d4:66:ed:1a:30:cc:c9:88:03:6a: 26:6d:f1:8d:30:3e:bf:e8:cd:35:36:46:2e:d9:ab: 7b:3b:72:6a:69:1f:02:22:ab:e3:80:bf:fa:8b:7b: c9:fb:35:c3:b1:a1:e3:5d:27:fa:e2:c3:ec:21:ee: 68:ca:81:50:81:7c:c6:ce:55:65:d2:f7:24:95:f3: 5f:f7:d4:d5:d3:56:53:4e:16:23:bb:6b:8b:f4:1c: 85:b0:53:d8:30:3e:32:29:90:8c:88:59:b0:09:60: 10:f4:6c:57:f8:af:bc:cc:ee:7d:1b:eb:1f:09:53: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4D:28:2E:9B:B5:E1:70:59:E9:0E:7C:4D:2A:57:7F:0F:EE:DE:86 X509v3 Authority Key Identifier: keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:92:11:53:1b:91:e7:8a:63:15:49:33:7c:26:a1:67:ec: a9:7f:94:5e:08:cf:fd:d8:5a:e8:9d:ea:ca:d5:21:5c:fe:10: 6f:02:44:28:f2:0f:7e:06:fe:f4:83:bf:37:11:58:13:2b:15: d0:5c:4a:7d:ca:05:47:21:75:05:d1:09:46:bf:b9:02:cb:ea: 5e:81:a7:d6:56:b4:42:73:97:14:d5:1e:40:33:5e:b7:6c:8b: 1d:e9:32:f3:05:11:a7:fe:8a:20:32:ec:51:40:86:ce:e0:83: cb:92:9c:15:d9:15:30:b3:dd:d6:50:81:18:45:c4:dc:29:f2: bd:58:57:c2:d1:e0:d2:7f:1a:75:d6:f7:1f:9e:0d:a2:4e:b0: 11:e2:8d:b5:bf:27:6f:b9:af:37:ec:2f:73:db:60:ec:ac:82: a0:5d:41:03:8c:fe:dc:28:bd:a5:b8:77:9d:94:6f:c6:0d:80: 2b:dc:49:58:79:1d:6f:83:dd:d3:66:29:2e:f4:a1:dc:4a:32: 2a:20:b8:d0:f4:2c:28:2f:bf:bd:6e:43:0f:e8:a1:79:12:92: d3:90:f5:ac:d5:1e:62:76:2b:0b:e3:a9:c0:72:e1:de:12:c2: 6b:17:34:f6:21:76:6d:0a:57:5d:4b:be:b9:33:01:5c:16:de: 5b:b6:05:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThzNCZmEJvTsui3QUj2DDPL6m/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFB QkEyOTc5QTAeFw0yNjA5MjUwODAwNDhaFw0yNjA5MjYxMTQ2NDhaMDMxMTAvBgNV BAMTKDM5NEQyODJFOUJCNUUxNzA1OUU5MEU3QzREMkE1NzdGMEZFRURFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sdBm9oxvP+cwWxT2V9dE2EzT v5ganhmcwz+DQQkL5tlfvq++4z0zP3bpZGuAXMNzvmRJ5QaQgG0OnTQX1QQ0fy/J 2i0yxY1RvBgvpeb2I/c0/AX5uCdCNwHu2ANeeibb0EWWhs6YhPWGnwfsrfAWWPGW c72Awel7UEswvaeQD1EA90ucvPfKbV7J1GbtGjDMyYgDaiZt8Y0wPr/ozTU2Ri7Z q3s7cmppHwIiq+OAv/qLe8n7NcOxoeNdJ/riw+wh7mjKgVCBfMbOVWXS9ySV81/3 1NXTVlNOFiO7a4v0HIWwU9gwPjIpkIyIWbAJYBD0bFf4r7zM7n0b6x8JU6E9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOU0oLpu14XBZ6Q58TSpXfw/u3oYwHwYDVR0j BBgwFoAU+Z+8wNfBqkeU2V1wZBuQEauil5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM5NDFmYmQtYWQ0MC00MzI3LTkzZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBE N0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFBQkEyOTc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTlGQkNDMEQ3QzFBQTQ3OTREOTVENzA2NDFCOTAxMUFCQTI5 NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkw MTFBQkEyOTc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmWkhFTG5HnimMVSTN8JqFn7Kl/lF4Iz/3Y Wuid6srVIVz+EG8CRCjyD34G/vSDvzcRWBMrFdBcSn3KBUchdQXRCUa/uQLL6l6B p9ZWtEJzlxTVHkAzXrdsix3pMvMFEaf+iiAy7FFAhs7gg8uSnBXZFTCz3dZQgRhF xNwp8r1YV8LR4NJ/GnXW9x+eDaJOsBHijbW/J2+5rzfsL3PbYOysgqBdQQOM/two vaW4d52Ub8YNgCvcSVh5HW+D3dNmKS70odxKMioguND0LCgvv71uQw/ooXkSktOQ 9azVHmJ2KwvjqcBy4d4SwmsXNPYhdm0KV11LvrkzAVwW3lu2Bbg= -----END CERTIFICATE-----Generated at Fri Sep 25 18:32:28 2026 by rpki-client