$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: 48vG5mhd2kMY2WhnT/gdmTpNFPGMFzTXUHDelcowKpo= Subject key identifier: B9:D3:19:98:62:0E:50:FA:35:60:99:FB:8A:F9:80:1F:57:F3:91:AF Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 31434304FB725E99D323D8615193772DF16C1823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 02:11:56 +0000 Manifest this update: Sun 27 Sep 2026 02:06:56 +0000 Manifest next update: Mon 28 Sep 2026 04:35:56 +0000 Files and hashes: 1: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: 8R19nUnXmzKp+5dyFazqTndYhqgtSNOv051GTk2pfkQ=) 2: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 3: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 4: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 5: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 6: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:43:43:04:fb:72:5e:99:d3:23:d8:61:51:93:77:2d:f1:6c:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Sep 27 02:06:56 2026 GMT Not After : Sep 28 04:35:56 2026 GMT Subject: CN=B9D31998620E50FA356099FB8AF9801F57F391AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:f8:cd:92:ba:e8:17:25:73:e1:2a:cd:e0: 6b:38:4c:4d:65:e0:b3:d8:1f:4b:31:98:70:90:f9: e7:e3:b3:8b:af:f2:28:21:3c:96:79:0d:6f:dc:6d: 75:0d:4b:11:60:ea:6b:ce:69:80:64:41:fc:f6:1d: 37:b0:3d:34:e9:aa:f3:df:b5:6a:a9:a1:06:d7:f4: f4:cb:b2:a0:45:42:79:ed:3f:70:eb:1a:14:c6:ac: aa:72:6d:2f:f6:fa:1c:2b:7c:6b:c6:05:34:69:96: 97:74:39:34:35:c2:b2:f8:95:11:cb:ef:7e:3d:06: 06:c5:98:74:ed:69:2e:9c:7e:a1:d7:d9:3e:65:de: 56:49:1b:8d:e0:1a:ed:6d:eb:c6:4a:22:2f:a5:67: 8b:04:89:24:dd:2b:62:fd:3d:90:e3:74:ca:33:b3: f3:6a:d4:aa:d6:39:d2:16:78:4b:eb:25:a9:d3:c7: 27:5d:39:50:7e:7c:9d:64:fd:2c:73:4b:d1:0a:47: 99:a4:dc:0d:8a:3a:73:2f:ab:70:ad:3c:a2:e5:27: ec:2c:6d:5f:c2:3f:81:6e:73:0a:32:3c:bd:f2:e4: 37:19:87:14:38:7a:fe:6c:01:0a:bb:9d:80:e2:7a: 2b:6f:c1:15:1f:ce:00:c9:17:18:7d:0f:ac:ec:c6: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:19:98:62:0E:50:FA:35:60:99:FB:8A:F9:80:1F:57:F3:91:AF X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:10:5a:95:ce:da:a3:bb:69:91:06:8b:c3:d9:61:60:7b: 67:48:00:28:94:13:0a:a1:a2:aa:1f:b7:95:f4:19:b6:64:55: 14:f3:91:ed:bf:2e:61:2f:61:8b:9a:85:a4:68:2b:75:1d:93: df:51:68:8a:5f:bb:eb:68:6d:b6:14:ce:6f:2e:66:66:84:2a: 27:72:66:59:06:08:a3:01:41:9b:27:f1:19:6c:13:65:05:7b: 94:2b:42:d2:d5:07:93:bc:d0:98:a9:ae:a9:0f:d6:31:ea:60: 02:99:7a:17:4a:e7:32:74:e5:e3:6f:c3:de:65:80:1b:0f:f9: ee:e4:cf:57:87:99:63:bc:d3:bd:84:9c:16:97:cc:a8:29:cb: 1a:13:23:a1:f2:1d:a6:bd:d0:9c:9c:90:1b:2c:af:21:a1:c3: 1c:36:51:10:08:60:e7:75:32:40:9a:e2:ad:1d:8e:8f:d4:52: 16:59:d3:0f:74:7f:8a:9e:f0:47:09:ee:4e:f6:b2:da:d2:68: 24:5a:57:dc:e6:3d:11:0c:1d:86:72:0b:9b:9f:76:ea:97:6a: 60:be:dc:bb:fc:cd:cd:27:7d:64:37:a6:df:ec:13:82:99:ba: 0d:8e:e1:20:d1:24:06:57:d5:6b:2d:c7:58:13:26:cf:e7:0a: 9d:9c:c7:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUNDBPtyXpnTI9hhUZN3LfFsGCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA5MjcwMjA2NTZaFw0yNjA5MjgwNDM1NTZaMDMxMTAvBgNV BAMTKEI5RDMxOTk4NjIwRTUwRkEzNTYwOTlGQjhBRjk4MDFGNTdGMzkxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvPjNkrroFyVz4SrN4Gs4TE1l 4LPYH0sxmHCQ+efjs4uv8ighPJZ5DW/cbXUNSxFg6mvOaYBkQfz2HTewPTTpqvPf tWqpoQbX9PTLsqBFQnntP3DrGhTGrKpybS/2+hwrfGvGBTRplpd0OTQ1wrL4lRHL 7349BgbFmHTtaS6cfqHX2T5l3lZJG43gGu1t68ZKIi+lZ4sEiSTdK2L9PZDjdMoz s/Nq1KrWOdIWeEvrJanTxyddOVB+fJ1k/SxzS9EKR5mk3A2KOnMvq3CtPKLlJ+ws bV/CP4FucwoyPL3y5DcZhxQ4ev5sAQq7nYDieitvwRUfzgDJFxh9D6zsxv0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudMZmGIOUPo1YJn7ivmAH1fzka8wHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJZEFqVztqju2mRBovD2WFge2dIACiUEwqh oqoft5X0GbZkVRTzke2/LmEvYYuahaRoK3Udk99RaIpfu+tobbYUzm8uZmaEKidy ZlkGCKMBQZsn8RlsE2UFe5QrQtLVB5O80JiprqkP1jHqYAKZehdK5zJ05eNvw95l gBsP+e7kz1eHmWO8072EnBaXzKgpyxoTI6HyHaa90JyckBssryGhwxw2URAIYOd1 MkCa4q0djo/UUhZZ0w90f4qe8EcJ7k72strSaCRaV9zmPREMHYZyC5ufduqXamC+ 3Lv8zc0nfWQ3pt/sE4KZug2O4SDRJAZX1Wstx1gTJs/nCp2cxzw= -----END CERTIFICATE-----Generated at Sun Sep 27 06:12:11 2026 by rpki-client