$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: GZa7I5c0qZdZhKDqZdN5keCPKj7aJWyKmNK4DF5GB+M= Subject key identifier: B8:55:BA:C7:D9:3E:51:E5:B4:C5:62:BC:FA:D7:0D:C1:17:02:F2:D1 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 73083147229F707E764B3BBC61D1819202F3EC8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:31:09 +0000 Manifest this update: Thu 24 Sep 2026 08:26:09 +0000 Manifest next update: Fri 25 Sep 2026 11:31:09 +0000 Files and hashes: 1: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: ttmhF8urhBtBFLleovtHzS6SvOaiAuw0lrYxImX5RQs=) 2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:08:31:47:22:9f:70:7e:76:4b:3b:bc:61:d1:81:92:02:f3:ec:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Sep 24 08:26:09 2026 GMT Not After : Sep 25 11:31:09 2026 GMT Subject: CN=B855BAC7D93E51E5B4C562BCFAD70DC11702F2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:ee:ab:52:a3:92:86:8e:2e:1a:c2:1e:aa: 3b:81:5a:9c:04:06:ed:72:89:c4:52:fe:a3:0a:95: 3f:cf:59:6f:05:e2:1c:ba:f6:83:1a:68:cc:70:cc: 10:e3:42:1d:b6:f6:ee:b9:85:4b:86:b6:58:86:30: d0:46:69:43:5d:9e:81:d8:05:d0:58:2f:52:40:c6: a6:97:70:ec:49:d3:5e:75:72:0e:b9:09:66:a1:8b: 8d:e8:b8:7c:9e:73:72:76:ad:af:7f:43:af:ee:38: 6f:5a:b1:e2:0a:1f:ef:f8:3a:71:f6:99:90:36:45: d3:4c:01:00:73:a5:df:e3:da:e1:4f:77:76:db:1d: e5:ba:6c:99:ef:f8:ad:83:b6:19:af:3e:c9:4a:51: 95:3a:c6:d5:1c:7c:62:06:30:4e:8f:63:36:98:9c: 99:45:ce:42:43:13:9b:19:30:bc:21:f2:56:f1:9c: 94:06:b0:1f:a2:b6:9e:4e:fb:0c:59:4c:e2:df:9b: 41:d2:95:3e:8a:3b:cd:09:a8:68:da:bd:46:62:72: f0:9e:d1:aa:28:aa:77:63:4c:83:c9:b6:6a:41:af: 63:df:f0:1b:b9:c0:04:ab:15:fc:50:09:da:76:28: 81:65:be:24:05:44:ce:f6:2b:be:1c:d8:52:e5:08: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:55:BA:C7:D9:3E:51:E5:B4:C5:62:BC:FA:D7:0D:C1:17:02:F2:D1 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:45:02:61:72:ba:34:f1:97:2b:93:36:5b:3c:20:d1:2b:70: 31:67:04:09:42:b7:ce:3a:62:93:ed:f6:dd:cc:07:db:e7:62: a1:52:3e:8f:29:8c:84:b1:af:e3:6c:a7:c0:16:9e:14:16:b1: 46:59:47:80:d0:b6:2b:0a:9e:b2:39:46:1e:9a:8b:ea:96:4c: bb:6f:56:57:dc:72:fb:59:bb:6f:e2:0e:d3:b2:86:86:f4:e1: ea:cb:c8:96:e2:5b:0b:63:35:0d:ce:f3:5f:a5:8f:75:e0:4e: aa:36:c7:cf:96:10:9b:e2:27:c4:5b:d8:c1:c0:e8:2a:fe:7a: 01:52:e3:99:b3:7e:e3:96:45:66:36:81:06:d4:a5:d7:9e:70: c9:09:4a:7a:ac:85:a5:01:31:33:78:88:f8:bd:c3:8f:56:8d: ce:d5:02:84:cb:92:e5:68:32:5d:47:2b:34:aa:41:e8:ad:9f: f9:8f:99:55:21:45:81:5f:94:d0:f4:b0:e3:f6:45:ec:ab:5c: 14:78:5b:6e:90:fb:a6:fc:35:fb:56:14:64:e8:a8:5a:12:ae: 3f:44:25:47:e8:ef:42:58:25:85:ec:0d:3b:52:9a:9d:89:55: 4d:38:73:79:90:92:cb:98:ba:fe:52:e8:ef:6a:cc:f9:e2:06: 35:1c:03:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwgxRyKfcH52Szu8YdGBkgLz7I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA5MjQwODI2MDlaFw0yNjA5MjUxMTMxMDlaMDMxMTAvBgNV BAMTKEI4NTVCQUM3RDkzRTUxRTVCNEM1NjJCQ0ZBRDcwREMxMTcwMkYyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIu6rUqOSho4uGsIeqjuBWpwE Bu1yicRS/qMKlT/PWW8F4hy69oMaaMxwzBDjQh229u65hUuGtliGMNBGaUNdnoHY BdBYL1JAxqaXcOxJ0151cg65CWahi43ouHyec3J2ra9/Q6/uOG9aseIKH+/4OnH2 mZA2RdNMAQBzpd/j2uFPd3bbHeW6bJnv+K2DthmvPslKUZU6xtUcfGIGME6PYzaY nJlFzkJDE5sZMLwh8lbxnJQGsB+itp5O+wxZTOLfm0HSlT6KO80JqGjavUZicvCe 0aooqndjTIPJtmpBr2Pf8Bu5wASrFfxQCdp2KIFlviQFRM72K74c2FLlCBiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFW6x9k+UeW0xWK8+tcNwRcC8tEwHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRFAmFyujTxlyuTNls8INErcDFnBAlCt846 YpPt9t3MB9vnYqFSPo8pjISxr+Nsp8AWnhQWsUZZR4DQtisKnrI5Rh6ai+qWTLtv VlfccvtZu2/iDtOyhob04erLyJbiWwtjNQ3O81+lj3XgTqo2x8+WEJviJ8Rb2MHA 6Cr+egFS45mzfuOWRWY2gQbUpdeecMkJSnqshaUBMTN4iPi9w49Wjc7VAoTLkuVo Ml1HKzSqQeitn/mPmVUhRYFflND0sOP2ReyrXBR4W26Q+6b8NftWFGToqFoSrj9E JUfo70JYJYXsDTtSmp2JVU04c3mQksuYuv5S6O9qzPniBjUcA8M= -----END CERTIFICATE-----Generated at Thu Sep 24 22:17:14 2026 by rpki-client