$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft File: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft (raw, json) Hash identifier: OEJJs0PW2pWPP3A5jEgesNDk0WIaOLyZ9ZXGFenczxs= Subject key identifier: C7:59:A6:53:63:46:0D:96:4F:0B:E1:ED:87:81:F2:9A:FF:9C:E4:5C Authority key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 Certificate issuer: /CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Certificate serial: 5389EFD6828874A65950D51F15B2B135FEE85C7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:06:00 +0000 Manifest this update: Wed 23 Sep 2026 12:01:00 +0000 Manifest next update: Thu 24 Sep 2026 14:50:00 +0000 Files and hashes: 1: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: VsBGao6wJ+D9luytrcOpRnST1DbJomPxjbQHafMOBCc=) 2: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl (hash: D2p7uIQBOtHWuf40UyGEDyHPpwTdqSLBwEZBz5sgPBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:89:ef:d6:82:88:74:a6:59:50:d5:1f:15:b2:b1:35:fe:e8:5c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Validity Not Before: Sep 23 12:01:00 2026 GMT Not After : Sep 24 14:50:00 2026 GMT Subject: CN=C759A65363460D964F0BE1ED8781F29AFF9CE45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:17:52:53:2c:be:39:46:6f:34:2e:3f:90: 69:c8:74:e7:df:6b:b5:e5:e7:63:c6:0c:38:06:86: 26:12:fe:54:a2:4a:ee:b0:ca:e1:95:04:21:95:47: 21:36:ea:3b:ea:a6:40:74:80:32:b5:e3:76:c6:99: 63:de:d3:37:21:19:87:53:ff:ca:21:0f:66:a2:14: d9:ee:0e:63:a0:23:f7:4d:ec:0a:ce:0f:f4:f4:81: f5:0d:90:15:cb:de:ce:ad:30:d1:67:1e:24:95:45: 99:d1:23:f8:cc:0d:f7:91:9f:ec:d5:be:66:8d:4c: 82:c8:56:53:58:f2:f1:58:45:5f:80:c4:b6:15:cc: 81:54:ef:42:b4:a0:a4:b4:57:52:28:61:e2:a5:a9: 5b:9e:00:14:19:80:18:e0:86:cc:5b:68:57:59:2f: fc:16:de:d2:b5:1e:a7:5b:a3:24:2a:fd:21:90:e1: d3:ef:e3:e1:04:0e:58:43:e8:c8:84:a5:2b:f3:21: d6:30:63:c8:45:ca:da:da:00:fe:a2:3f:0d:c0:5f: ee:86:ed:90:3a:d6:61:43:5a:96:32:c7:81:26:45: bd:ea:de:ba:96:fa:26:56:94:86:d9:a6:fe:52:cf: 3c:30:95:0d:25:48:75:e3:1e:15:de:eb:9c:7d:25: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:59:A6:53:63:46:0D:96:4F:0B:E1:ED:87:81:F2:9A:FF:9C:E4:5C X509v3 Authority Key Identifier: keyid:F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:35:21:01:48:77:91:2d:39:38:e6:7e:9b:40:d3:8a:6d:12: 06:de:ad:3e:c0:bb:86:b2:a5:09:05:ce:21:34:8b:a6:de:55: 23:39:23:86:16:b4:68:0e:0a:7f:6e:30:48:45:fb:fc:dd:28: de:87:3f:86:3b:0b:c9:8a:ff:40:b5:ec:c1:d3:6e:e5:bf:01: cd:95:40:cf:52:ba:e6:8a:22:3c:27:3d:32:dd:ae:45:bd:70: 1e:d0:ce:8c:ba:76:a8:54:29:f3:f8:1d:12:f0:18:a6:f9:0c: 46:f1:39:6b:dd:3c:37:ff:1c:1e:8a:f4:f6:4d:83:e7:d9:08: 48:2d:ff:96:fa:35:61:66:79:e4:98:b0:38:ac:a2:5c:aa:da: 2f:bf:26:64:36:ac:16:e6:3b:aa:a4:6f:df:6c:48:b9:37:95: ce:f3:f7:47:e6:6c:1d:8b:ea:4c:ee:64:a5:96:4e:42:38:70: c3:da:09:ac:88:05:0e:6d:67:ed:e1:9a:c8:dd:76:44:4e:22: d3:1c:1d:a2:63:3e:8a:a5:43:6a:07:76:f6:d1:b2:ed:69:4e: 79:0f:fd:96:4d:bd:ea:e2:b8:bb:63:26:ee:24:13:ee:77:58: 4f:90:95:92:c6:44:ed:3e:88:14:32:fc:b7:fe:d6:6c:c9:da: 7f:46:30:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4nv1oKIdKZZUNUfFbKxNf7oXH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3MkMy MDhEOTE5MjAeFw0yNjA5MjMxMjAxMDBaFw0yNjA5MjQxNDUwMDBaMDMxMTAvBgNV BAMTKEM3NTlBNjUzNjM0NjBEOTY0RjBCRTFFRDg3ODFGMjlBRkY5Q0U0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRBdSUyy+OUZvNC4/kGnIdOff a7Xl52PGDDgGhiYS/lSiSu6wyuGVBCGVRyE26jvqpkB0gDK143bGmWPe0zchGYdT /8ohD2aiFNnuDmOgI/dN7ArOD/T0gfUNkBXL3s6tMNFnHiSVRZnRI/jMDfeRn+zV vmaNTILIVlNY8vFYRV+AxLYVzIFU70K0oKS0V1IoYeKlqVueABQZgBjghsxbaFdZ L/wW3tK1HqdboyQq/SGQ4dPv4+EEDlhD6MiEpSvzIdYwY8hFytraAP6iPw3AX+6G 7ZA61mFDWpYyx4EmRb3q3rqW+iZWlIbZpv5SzzwwlQ0lSHXjHhXe65x9JT/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1mmU2NGDZZPC+Hth4Hymv+c5FwwHwYDVR0j BBgwFoAU9DyLlj2p3wOHfFv/DaH3LCCNkZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczNWUxNWYtZDQ0OS00NmQ4LWJlMGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYz REE5REYwMzg3N0M1QkZGMERBMUY3MkMyMDhEOTE5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDNDOEI5NjNEQTlERjAzODc3QzVCRkYwREExRjcyQzIwOEQ5 MTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3 MkMyMDhEOTE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI1IQFId5EtOTjmfptA04ptEgberT7Au4ay pQkFziE0i6beVSM5I4YWtGgOCn9uMEhF+/zdKN6HP4Y7C8mK/0C17MHTbuW/Ac2V QM9SuuaKIjwnPTLdrkW9cB7Qzoy6dqhUKfP4HRLwGKb5DEbxOWvdPDf/HB6K9PZN g+fZCEgt/5b6NWFmeeSYsDisolyq2i+/JmQ2rBbmO6qkb99sSLk3lc7z90fmbB2L 6kzuZKWWTkI4cMPaCayIBQ5tZ+3hmsjddkROItMcHaJjPoqlQ2oHdvbRsu1pTnkP /ZZNveriuLtjJu4kE+53WE+QlZLGRO0+iBQy/Lf+1mzJ2n9GMD8= -----END CERTIFICATE-----Generated at Thu Sep 24 03:07:59 2026 by rpki-client