$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: rm4/jFvQ3hvjUrcnNfMUPEmrPulmhbhzMwDlKLcaCqI= Subject key identifier: B9:DC:59:8D:82:50:67:67:13:C3:45:B9:39:47:FE:B7:DC:C7:87:95 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 69E8CA1DFD472166CF7D5EF30232D2F0C450A9AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:47:46 +0000 Manifest this update: Thu 24 Sep 2026 09:42:46 +0000 Manifest next update: Fri 25 Sep 2026 13:43:46 +0000 Files and hashes: 1: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 2: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: DeGZnIoU9xHFB//nsQgrzOs8JNPZBfFYchnk9/Yq9IY=) 3: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) 4: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) 5: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 6: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e8:ca:1d:fd:47:21:66:cf:7d:5e:f3:02:32:d2:f0:c4:50:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Sep 24 09:42:46 2026 GMT Not After : Sep 25 13:43:46 2026 GMT Subject: CN=B9DC598D8250676713C345B93947FEB7DCC78795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:e6:8a:49:f9:ce:31:d5:57:3e:74:51:6f: 2b:93:3e:2c:89:2e:11:86:53:f9:b5:70:8b:d2:a3: 0f:f1:88:33:60:9b:71:aa:ff:52:3d:70:48:a9:d1: d0:cb:13:26:c3:ac:b5:57:50:28:ed:0f:3e:91:e8: e8:4a:bf:83:be:8f:8f:54:8d:2e:c3:0b:0c:17:5f: f3:1d:b3:5c:5f:9f:36:d4:d3:b2:d5:0a:61:cf:4f: 93:3d:91:c4:96:55:6b:54:62:3b:b3:47:00:9b:6c: 55:6d:fe:e4:2e:c3:8b:37:2e:f7:4c:cb:5e:82:f7: cc:b6:77:3d:cf:7c:68:5f:15:98:2f:eb:5e:8f:1c: 48:62:d4:7d:27:c4:9e:e4:92:2e:34:9f:a2:ed:c6: ab:07:ef:83:91:63:99:c5:88:2a:a3:91:91:e2:1e: f3:c2:fb:fd:cb:51:ec:89:d3:7f:6d:0a:b2:71:e0: bb:37:fa:d4:7d:47:93:21:1e:ef:96:37:4c:26:20: 2c:6f:88:5f:f4:b7:b1:1f:76:d7:47:7e:c7:4d:95: d5:c2:cd:9c:02:cf:6f:12:d8:78:55:84:5e:ed:73: 66:6f:ea:12:7e:2f:b3:f3:29:6a:af:88:48:3c:1c: 48:7c:bb:9c:39:bb:92:da:e0:88:b2:b2:56:4d:a4: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:59:8D:82:50:67:67:13:C3:45:B9:39:47:FE:B7:DC:C7:87:95 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:51:b9:da:9e:89:a0:33:ea:61:04:75:6a:cd:81:52:de:df: 02:e5:7c:9a:bb:85:25:2f:b4:b0:0b:32:d2:86:fd:cf:40:3b: 18:66:73:a1:7e:9a:98:88:58:55:45:ee:88:84:50:c5:89:d7: 43:40:32:53:9d:81:ae:70:77:a2:3d:07:02:40:e1:2a:9a:bf: 18:8d:9a:a6:ac:48:9f:39:c9:a3:bb:8c:0e:25:e5:26:e8:c1: e6:65:80:6e:53:4f:2c:3f:93:1e:b3:49:9c:eb:68:60:af:7e: 73:56:bd:e7:e7:03:07:ea:77:61:6d:ef:f3:a6:7d:a4:6c:53: 2e:01:89:5e:81:24:82:de:b1:93:3d:7a:66:c0:b6:5b:dd:06: 9c:da:60:e7:43:c8:4b:59:01:16:3b:81:95:ac:d8:fd:ee:62: 0a:6c:91:b0:06:0d:c9:b1:0f:40:6e:8f:e2:9e:11:66:2a:17: 24:24:84:c7:9a:62:fb:84:8f:4f:59:15:b8:12:95:76:f7:2a: 10:25:2b:14:68:9d:5e:2a:9c:95:e8:c8:1c:91:56:53:a5:ac: d6:ed:88:f1:c2:f3:bc:c1:05:bb:6a:04:c3:79:3a:6c:23:30: 9a:a0:d1:59:6b:0f:fb:dc:b1:0c:da:d9:33:05:2f:95:e0:f7: 35:a4:79:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaejKHf1HIWbPfV7zAjLS8MRQqawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA5MjQwOTQyNDZaFw0yNjA5MjUxMzQzNDZaMDMxMTAvBgNV BAMTKEI5REM1OThEODI1MDY3NjcxM0MzNDVCOTM5NDdGRUI3RENDNzg3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QuaKSfnOMdVXPnRRbyuTPiyJ LhGGU/m1cIvSow/xiDNgm3Gq/1I9cEip0dDLEybDrLVXUCjtDz6R6OhKv4O+j49U jS7DCwwXX/Mds1xfnzbU07LVCmHPT5M9kcSWVWtUYjuzRwCbbFVt/uQuw4s3LvdM y16C98y2dz3PfGhfFZgv616PHEhi1H0nxJ7kki40n6LtxqsH74ORY5nFiCqjkZHi HvPC+/3LUeyJ039tCrJx4Ls3+tR9R5MhHu+WN0wmICxviF/0t7EfdtdHfsdNldXC zZwCz28S2HhVhF7tc2Zv6hJ+L7PzKWqviEg8HEh8u5w5u5La4IiyslZNpLgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudxZjYJQZ2cTw0W5OUf+t9zHh5UwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNRudqeiaAz6mEEdWrNgVLe3wLlfJq7hSUv tLALMtKG/c9AOxhmc6F+mpiIWFVF7oiEUMWJ10NAMlOdga5wd6I9BwJA4SqavxiN mqasSJ85yaO7jA4l5SboweZlgG5TTyw/kx6zSZzraGCvfnNWvefnAwfqd2Ft7/Om faRsUy4BiV6BJILesZM9embAtlvdBpzaYOdDyEtZARY7gZWs2P3uYgpskbAGDcmx D0Buj+KeEWYqFyQkhMeaYvuEj09ZFbgSlXb3KhAlKxRonV4qnJXoyByRVlOlrNbt iPHC87zBBbtqBMN5OmwjMJqg0VlrD/vcsQza2TMFL5Xg9zWkebc= -----END CERTIFICATE-----Generated at Fri Sep 25 02:59:24 2026 by rpki-client