$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft File: F576D7187FE092471757158DEF85D92023BB827A.mft (raw, json) Hash identifier: BFDwf/6SZXmR7sTc3ZEmaT+wlyKfjAZUzmAd38qaV+k= Subject key identifier: A2:51:96:92:B5:71:D1:D0:82:31:BB:83:A0:00:82:36:7E:56:68:FB Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A Certificate serial: 03288874D5F3DF0A3D1A0EC2143FA38049085A47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 08:56:44 +0000 Manifest this update: Thu 24 Sep 2026 08:51:44 +0000 Manifest next update: Fri 25 Sep 2026 12:51:44 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: 4zXAf/L+AniN8j9yaENVjCZM42RaS1KRlWjNorgEXzk=) 2: F576D7187FE092471757158DEF85D92023BB827A.crl (hash: pPM384E+Lh/wBV3vv229nIUQih//c1Yk1GmwVyd3pew=) 3: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:28:88:74:d5:f3:df:0a:3d:1a:0e:c2:14:3f:a3:80:49:08:5a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A Validity Not Before: Sep 24 08:51:44 2026 GMT Not After : Sep 25 12:51:44 2026 GMT Subject: CN=A2519692B571D1D08231BB83A00082367E5668FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:1d:5e:38:17:62:eb:03:00:f8:42:37:19: 5a:27:0b:8f:97:1d:35:a1:62:75:2d:57:9e:fb:09: 2a:6c:53:e6:6d:c2:a4:61:ab:7a:02:6a:02:d7:69: d2:6a:97:c8:c4:06:03:05:ae:3f:64:71:ea:f3:62: 6f:10:e4:7b:38:02:56:a5:9d:c2:24:17:d2:6d:e0: 7c:0e:f1:aa:bd:ec:b2:8c:03:ee:28:87:3a:37:ac: 6c:26:b4:13:54:a2:35:60:16:9a:60:1a:b2:9b:50: a3:bd:a0:5a:f9:a1:46:3a:1e:01:72:9d:58:00:09: 2b:ed:cb:b9:e6:61:0d:5f:af:5a:06:b8:4a:27:35: c5:85:31:d8:97:82:c3:d1:2a:ce:48:34:e9:f5:47: 71:91:ab:f1:e2:ba:b7:5d:b7:67:72:29:c2:62:3b: 7a:35:43:8d:91:5a:c6:09:2f:02:94:1f:7d:7a:09: 46:40:fd:3b:5b:52:b9:3f:0f:c5:93:63:46:fe:42: 8d:59:76:93:3b:4b:29:de:4a:e4:ed:fa:50:8a:cc: b7:d5:ce:2f:da:45:29:a8:a1:ba:24:88:07:d1:38: b6:f0:4a:d4:85:84:8b:b1:fc:5f:bc:a5:ee:6d:fd: 8c:d8:2e:c8:d2:fe:ba:44:60:b3:68:5f:dd:30:57: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:51:96:92:B5:71:D1:D0:82:31:BB:83:A0:00:82:36:7E:56:68:FB X509v3 Authority Key Identifier: keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cb:d2:18:54:80:1c:36:a3:c8:7b:8a:4e:ea:f2:3b:3d:72: 28:3b:55:a1:51:1d:b5:34:33:50:4c:37:18:6a:b1:a1:75:c6: a1:0b:7b:47:b4:44:30:6a:f4:7c:cb:d3:2b:8b:9d:1a:dc:dd: 8b:fd:e9:33:dd:c8:b9:12:77:d8:b8:0c:b1:f4:e0:55:84:ce: 9f:bc:e8:c1:4d:f9:7f:4c:1a:ba:69:3f:54:92:a4:43:b4:d0: 25:9e:8f:a1:b3:db:22:03:0b:f5:b5:3a:06:35:c6:af:b3:dc: 68:6e:91:1f:f7:72:06:bb:ba:d2:42:e0:63:6e:f1:52:b9:76: ef:db:bb:22:2f:3a:f5:ed:b6:22:98:7f:e6:7e:3d:4c:84:6f: 24:8f:31:54:bc:0a:52:03:ba:a6:85:7c:a0:dd:9e:ef:73:5f: 4b:f6:f9:fd:ff:43:1d:df:0f:f1:57:f1:28:c5:9a:e3:f3:e7: 2d:f8:df:4e:28:3b:1f:35:0b:d2:0b:44:16:41:d4:58:cc:71: 88:dc:f5:2a:f5:4b:ad:7f:f1:73:0c:a2:9e:65:f1:d2:09:f6: 03:a5:a0:c6:61:73:70:db:a0:5c:85:9d:f5:7a:ed:72:0e:51: 40:e4:65:5f:4d:e9:27:cd:3d:35:dc:7f:46:6a:3d:05:95:8c: 99:ac:6b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyiIdNXz3wo9Gg7CFD+jgEkIWkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAy M0JCODI3QTAeFw0yNjA5MjQwODUxNDRaFw0yNjA5MjUxMjUxNDRaMDMxMTAvBgNV BAMTKEEyNTE5NjkyQjU3MUQxRDA4MjMxQkI4M0EwMDA4MjM2N0U1NjY4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sB1eOBdi6wMA+EI3GVonC4+X HTWhYnUtV577CSpsU+ZtwqRhq3oCagLXadJql8jEBgMFrj9kcerzYm8Q5Hs4Alal ncIkF9Jt4HwO8aq97LKMA+4ohzo3rGwmtBNUojVgFppgGrKbUKO9oFr5oUY6HgFy nVgACSvty7nmYQ1fr1oGuEonNcWFMdiXgsPRKs5INOn1R3GRq/Hiurddt2dyKcJi O3o1Q42RWsYJLwKUH316CUZA/TtbUrk/D8WTY0b+Qo1ZdpM7SyneSuTt+lCKzLfV zi/aRSmoobokiAfROLbwStSFhIux/F+8pe5t/YzYLsjS/rpEYLNoX90wV0PJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolGWkrVx0dCCMbuDoACCNn5WaPswHwYDVR0j BBgwFoAU9XbXGH/gkkcXVxWN74XZICO7gnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTIwNmRlZmEtZmE0My00ZjkzLTkzY2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3 RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAyM0JCODI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNTc2RDcxODdGRTA5MjQ3MTc1NzE1OERFRjg1RDkyMDIzQkI4 MjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5 MjAyM0JCODI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADL0hhUgBw2o8h7ik7q8js9cig7VaFRHbU0 M1BMNxhqsaF1xqELe0e0RDBq9HzL0yuLnRrc3Yv96TPdyLkSd9i4DLH04FWEzp+8 6MFN+X9MGrppP1SSpEO00CWej6Gz2yIDC/W1OgY1xq+z3GhukR/3cga7utJC4GNu 8VK5du/buyIvOvXttiKYf+Z+PUyEbySPMVS8ClIDuqaFfKDdnu9zX0v2+f3/Qx3f D/FX8SjFmuPz5y34304oOx81C9ILRBZB1FjMcYjc9Sr1S61/8XMMop5l8dIJ9gOl oMZhc3DboFyFnfV67XIOUUDkZV9N6SfNPTXcf0ZqPQWVjJmsay0= -----END CERTIFICATE-----Generated at Thu Sep 24 15:54:15 2026 by rpki-client