$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: aTwa3FYIbg/mwhPuT57i8ZfuX0vYN9EDLpcsZVlpHqM= Subject key identifier: 51:91:B7:53:19:BB:32:18:64:3A:BA:E2:CD:84:A1:EE:60:6C:63:AA Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 461779E86237D6082756CC5868C58BF7E52B6854 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:05:50 +0000 Manifest this update: Wed 23 Sep 2026 20:00:50 +0000 Manifest next update: Thu 24 Sep 2026 21:45:50 +0000 Files and hashes: 1: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: ndhnVr8+8mwRzvxmVi/GXagWxCF2g+s3COhg1+RZR8M=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:17:79:e8:62:37:d6:08:27:56:cc:58:68:c5:8b:f7:e5:2b:68:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Sep 23 20:00:50 2026 GMT Not After : Sep 24 21:45:50 2026 GMT Subject: CN=5191B75319BB3218643ABAE2CD84A1EE606C63AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:15:71:8d:7f:3e:c8:17:a7:fc:c6:3b:59:06: 42:cc:4e:aa:e0:4d:88:e6:79:92:75:d5:2a:80:e2: d3:a6:b5:92:20:ca:40:4b:a9:73:75:6d:3d:c1:f0: fc:75:a1:f1:11:4c:0c:34:a0:a9:b4:8d:fd:df:6e: e1:94:15:b2:67:b9:34:01:32:f8:a4:2a:b4:e4:f6: 5b:e3:a6:df:fa:fa:c3:cc:ed:d1:f3:c2:18:8f:d8: ae:38:2f:0f:35:a7:e7:70:56:48:3a:f3:21:ec:c5: 49:26:c2:90:d4:6f:8b:39:db:de:34:65:d0:b5:35: 16:28:5c:f9:9d:35:d3:38:9b:0b:d0:9c:48:3b:25: 3f:52:68:d2:5a:f4:5e:5a:52:10:92:dc:90:1b:53: 79:cd:68:d0:df:e5:d9:4e:e7:92:df:48:84:6d:49: ed:9b:6c:61:b7:91:26:01:00:c3:97:fd:33:10:3c: 27:31:0f:06:57:e0:cf:c2:9a:d8:21:31:a2:90:ee: 35:cc:61:c2:4c:46:04:90:7e:fe:71:b8:17:66:7c: 30:33:a4:cc:48:ce:1f:56:1f:53:ec:b1:65:5f:ff: 34:7d:13:3f:df:f5:13:f9:c6:32:4d:9f:ae:27:93: 71:dc:d8:47:b5:e6:52:65:18:5d:f5:77:27:0c:00: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:91:B7:53:19:BB:32:18:64:3A:BA:E2:CD:84:A1:EE:60:6C:63:AA X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:f6:e3:49:2f:54:c5:ec:10:ec:af:26:13:15:d3:7a:c6: 57:09:1b:51:7d:7a:77:bd:d1:34:cf:bd:c2:ac:7f:c0:2f:c0: 0f:37:a2:e8:52:36:41:a8:f4:c0:c1:77:b2:ef:43:43:06:ce: 16:b7:84:0a:46:e6:a5:d4:94:c3:66:f3:3c:be:ce:3e:c4:9b: 8b:1a:15:d9:a2:eb:d9:53:7b:58:e4:8b:7f:d9:31:70:e2:53: 86:d9:57:b7:e2:3f:a9:79:04:50:f8:5a:3b:f1:b7:29:14:1c: ba:e5:15:b8:75:5c:77:16:a8:8d:00:34:27:a3:ad:00:37:7c: 0e:0b:80:fb:83:d7:f0:52:fe:b8:a4:3e:32:d6:ba:7c:f5:a9: 3d:a5:f5:46:44:06:5c:75:3f:ec:61:bf:e9:3c:f3:d5:b9:c2: b8:fb:be:fe:99:6a:48:1f:6e:a3:27:91:2a:59:05:99:dc:df: 26:a4:55:ca:04:22:aa:e0:b4:f8:1f:a1:c2:1b:24:93:4a:c4: b2:53:08:e2:b9:95:3e:8e:89:3e:11:56:ca:bd:25:dc:45:07: 58:41:f8:3a:1a:9e:c0:4c:3a:dc:d4:f5:40:fe:2e:f7:64:01: b4:59:64:8c:14:6c:48:32:6f:a3:4f:6a:03:e0:37:27:9b:66: f5:2a:c9:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhd56GI31ggnVsxYaMWL9+UraFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA5MjMyMDAwNTBaFw0yNjA5MjQyMTQ1NTBaMDMxMTAvBgNV BAMTKDUxOTFCNzUzMTlCQjMyMTg2NDNBQkFFMkNEODRBMUVFNjA2QzYzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFXGNfz7IF6f8xjtZBkLMTqrg TYjmeZJ11SqA4tOmtZIgykBLqXN1bT3B8Px1ofERTAw0oKm0jf3fbuGUFbJnuTQB MvikKrTk9lvjpt/6+sPM7dHzwhiP2K44Lw81p+dwVkg68yHsxUkmwpDUb4s52940 ZdC1NRYoXPmdNdM4mwvQnEg7JT9SaNJa9F5aUhCS3JAbU3nNaNDf5dlO55LfSIRt Se2bbGG3kSYBAMOX/TMQPCcxDwZX4M/CmtghMaKQ7jXMYcJMRgSQfv5xuBdmfDAz pMxIzh9WH1PssWVf/zR9Ez/f9RP5xjJNn64nk3Hc2Ee15lJlGF31dycMAIFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZG3Uxm7MhhkOrrizYSh7mBsY6owHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIah9uNJL1TF7BDsryYTFdN6xlcJG1F9ene9 0TTPvcKsf8AvwA83ouhSNkGo9MDBd7LvQ0MGzha3hApG5qXUlMNm8zy+zj7Em4sa Fdmi69lTe1jki3/ZMXDiU4bZV7fiP6l5BFD4WjvxtykUHLrlFbh1XHcWqI0ANCej rQA3fA4LgPuD1/BS/rikPjLWunz1qT2l9UZEBlx1P+xhv+k889W5wrj7vv6Zakgf bqMnkSpZBZnc3yakVcoEIqrgtPgfocIbJJNKxLJTCOK5lT6OiT4RVsq9JdxFB1hB +DoansBMOtzU9UD+LvdkAbRZZIwUbEgyb6NPagPgNyebZvUqyS8= -----END CERTIFICATE-----Generated at Thu Sep 24 05:50:46 2026 by rpki-client