$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft File: F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft (raw, json) Hash identifier: tCWKDKr9rTFJSyQsi2qKnir6e4CbelhuMZ2LONiSIZo= Subject key identifier: 8A:DA:2D:E8:EB:B6:F7:44:71:1A:BD:58:C4:F1:16:D5:AC:38:A9:DA Authority key identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5 Certificate issuer: /CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5 Certificate serial: 5AED527CEB770C777C69DC914129599FB87F9CEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:12:21 +0000 Manifest this update: Wed 23 Sep 2026 21:07:21 +0000 Manifest next update: Thu 24 Sep 2026 23:02:21 +0000 Files and hashes: 1: F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl (hash: zBs/59j7NGawt4EsvvO5kaErdKU2QhvsoqCzQRpVQ+M=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: PCd+knmr04J6Gzr/RkHIouax9jjuHK8/vfxjUSI6hdw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ed:52:7c:eb:77:0c:77:7c:69:dc:91:41:29:59:9f:b8:7f:9c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5 Validity Not Before: Sep 23 21:07:21 2026 GMT Not After : Sep 24 23:02:21 2026 GMT Subject: CN=8ADA2DE8EBB6F744711ABD58C4F116D5AC38A9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:fa:8a:34:05:25:4c:6a:e4:00:bb:6b:ac: c5:0f:fd:4a:83:be:d9:f6:79:ef:76:9e:f2:3d:9e: 7d:38:cf:b5:b4:42:00:f8:72:8b:05:1a:f0:41:f2: df:2a:74:3b:85:b9:e6:df:ae:87:90:dc:89:e1:27: 2b:6b:b8:bd:be:29:1b:b6:ea:fb:fe:d0:54:ac:2c: d8:ff:18:04:68:b4:7d:dc:51:2b:bb:3e:38:a0:9f: a6:8e:ee:e3:f1:7e:ad:4c:79:a1:80:59:8d:63:20: a8:e1:8b:47:51:84:69:42:09:0e:4e:ca:b6:3d:11: 23:f0:d9:f6:19:ce:98:3b:52:32:ec:89:8c:81:fa: 64:c1:37:f7:1e:fe:4b:e2:52:0b:86:d6:90:f7:01: de:a9:f9:9c:dd:9f:67:15:60:d3:e6:5c:48:aa:64: f9:57:99:e9:28:07:2b:28:76:26:53:85:43:d1:a0: d7:fd:57:89:6a:59:34:a7:8e:9e:d5:e7:24:3f:2b: 3e:da:b8:0f:87:57:14:f7:df:a6:a8:f6:93:53:04: db:0e:e8:29:76:e4:d8:8a:5b:c8:e8:a4:18:98:94: c9:b1:40:b5:66:e5:63:2a:bd:fa:9b:50:5c:e2:0e: 70:b0:57:75:7b:e1:ea:f4:d6:01:a1:97:99:e5:9e: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:2D:E8:EB:B6:F7:44:71:1A:BD:58:C4:F1:16:D5:AC:38:A9:DA X509v3 Authority Key Identifier: keyid:F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:94:c4:5c:8f:4c:4e:5e:dc:0f:71:2d:13:36:cd:9a:8a:da: 9f:41:e2:c8:dc:41:dd:90:de:1e:25:c1:34:09:cc:3a:90:1d: f1:cc:68:86:f6:4c:e8:02:2e:c2:7f:d3:d4:aa:6f:7c:63:b1: e1:77:80:84:b6:d4:e6:a0:a2:75:11:5e:fa:d8:60:19:75:b4: d2:5c:c4:d2:79:65:68:9a:f1:10:34:c5:85:29:59:89:b1:d1: a3:57:9d:0a:d2:32:f2:5a:0e:5c:7c:87:6b:4e:aa:81:2f:ca: b1:18:b0:35:7e:23:68:1a:7e:67:34:0b:17:d4:b1:8f:2a:fb: f4:d1:40:77:4a:1f:d4:41:b5:c7:2a:81:ce:ce:48:f6:bb:a6: 4d:b0:f7:4a:2d:29:d3:45:3d:31:0e:19:d9:6a:57:89:91:7f: 45:00:cb:77:0d:f3:07:e7:b8:1e:db:d4:9f:36:3f:f7:3d:23: 25:76:de:5a:22:53:6f:0e:ee:35:46:b5:0b:67:f2:ac:8d:a2: 58:f3:ae:20:3d:07:aa:fc:86:ee:6c:80:8e:f8:9f:2f:41:e9: aa:03:e4:95:50:23:6e:25:53:2b:7e:00:68:3a:40:f3:b2:25: 85:17:30:53:11:49:15:5b:54:f3:a3:2f:38:fb:2b:34:74:a4: fb:dc:15:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWu1SfOt3DHd8adyRQSlZn7h/nOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFQjIwODg5MUJDMzI3MUE3NzYxRjc5NjlBNEY0QjE1 MkM0RjBFNTAeFw0yNjA5MjMyMTA3MjFaFw0yNjA5MjQyMzAyMjFaMDMxMTAvBgNV BAMTKDhBREEyREU4RUJCNkY3NDQ3MTFBQkQ1OEM0RjExNkQ1QUMzOEE5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0fqKNAUlTGrkALtrrMUP/UqD vtn2ee92nvI9nn04z7W0QgD4cosFGvBB8t8qdDuFuebfroeQ3InhJytruL2+KRu2 6vv+0FSsLNj/GARotH3cUSu7Pjign6aO7uPxfq1MeaGAWY1jIKjhi0dRhGlCCQ5O yrY9ESPw2fYZzpg7UjLsiYyB+mTBN/ce/kviUguG1pD3Ad6p+Zzdn2cVYNPmXEiq ZPlXmekoBysodiZThUPRoNf9V4lqWTSnjp7V5yQ/Kz7auA+HVxT336ao9pNTBNsO 6Cl25NiKW8jopBiYlMmxQLVm5WMqvfqbUFziDnCwV3V74er01gGhl5nlnjmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitot6Ou290RxGr1YxPEW1aw4qdowHwYDVR0j BBgwFoAU8OsgiJG8MnGndh95aaT0sVLE8OUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNiOGNlYWItZmI1Yy00MGE5LWI4ODktMmQxODg5YTUwMDRiLzAvRjBFQjIwODg5 MUJDMzI3MUE3NzYxRjc5NjlBNEY0QjE1MkM0RjBFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEVCMjA4ODkxQkMzMjcxQTc3NjFGNzk2OUE0RjRCMTUyQzRG MEU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvRjBFQjIwODg5MUJDMzI3MUE3NzYxRjc5NjlBNEY0 QjE1MkM0RjBFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+UxFyPTE5e3A9xLRM2zZqK2p9B4sjcQd2Q 3h4lwTQJzDqQHfHMaIb2TOgCLsJ/09Sqb3xjseF3gIS21OagonURXvrYYBl1tNJc xNJ5ZWia8RA0xYUpWYmx0aNXnQrSMvJaDlx8h2tOqoEvyrEYsDV+I2gafmc0CxfU sY8q+/TRQHdKH9RBtccqgc7OSPa7pk2w90otKdNFPTEOGdlqV4mRf0UAy3cN8wfn uB7b1J82P/c9IyV23loiU28O7jVGtQtn8qyNoljzriA9B6r8hu5sgI74ny9B6aoD 5JVQI24lUyt+AGg6QPOyJYUXMFMRSRVbVPOjLzj7KzR0pPvcFV8= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:07 2026 by rpki-client