$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: MHFTjN85LMROCv0G+6J0EMv76jdkO/d+VtsxYU9uIVY= Subject key identifier: 3F:42:8A:AA:79:12:06:5A:D3:0B:43:E0:39:C0:A0:18:11:78:CF:38 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 6045D552DED178E55756AC6C14CEF3CFC7D4DD72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:46:39 +0000 Manifest this update: Wed 23 Sep 2026 20:41:39 +0000 Manifest next update: Thu 24 Sep 2026 23:31:39 +0000 Files and hashes: 1: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: D3NB1Ky1nwfHPcarsVUtIiexsYWP+1rO/Wx97tElneY=) 2: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 3: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 4: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:45:d5:52:de:d1:78:e5:57:56:ac:6c:14:ce:f3:cf:c7:d4:dd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Sep 23 20:41:39 2026 GMT Not After : Sep 24 23:31:39 2026 GMT Subject: CN=3F428AAA7912065AD30B43E039C0A0181178CF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:95:95:e5:80:ab:4a:02:7d:ae:3a:7e:36: c5:15:1b:9c:2d:95:9c:84:3a:e6:5a:a4:c4:64:a5: b4:a5:07:8f:05:26:21:cb:49:be:06:84:f0:c5:27: df:7a:74:70:5b:20:f6:50:82:a5:93:4d:f0:3d:82: b1:aa:f3:d5:54:b5:34:52:f0:8d:c4:b8:f6:b7:81: 32:ba:50:29:0f:ca:fa:21:e0:62:78:aa:5b:e9:44: 9a:8f:19:5f:d8:3a:d4:f5:5e:40:e6:26:21:80:fa: 8d:4b:18:b2:47:c0:aa:eb:ee:f4:dd:9d:00:da:44: ed:50:13:2f:e1:47:0c:fd:17:ac:41:56:85:83:57: cf:6b:da:76:02:57:73:f1:90:09:aa:8f:0e:18:06: 77:90:25:86:de:0d:3d:56:e7:e9:bf:f1:f3:20:df: 95:17:de:24:07:e5:58:5d:13:a0:33:86:56:f5:cb: e8:29:37:72:d1:de:96:fd:55:2a:76:69:33:e4:eb: 48:72:63:eb:27:f4:a3:e8:8b:2f:a8:d2:36:4c:e2: 56:24:62:6e:a8:d5:57:fa:cf:b7:ae:49:6b:6b:04: aa:e8:23:21:c7:da:f9:9d:e4:6f:3f:b8:0f:44:25: 57:7e:94:dc:db:b1:cb:3d:07:e5:b2:9d:34:89:64: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:42:8A:AA:79:12:06:5A:D3:0B:43:E0:39:C0:A0:18:11:78:CF:38 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:33:92:11:41:9c:fa:93:86:69:b7:22:4a:5d:1c:6e:cb:27: eb:69:6b:cc:26:90:ee:ab:20:41:8a:81:84:11:11:f5:f8:aa: a9:0f:93:51:f8:fe:08:24:db:09:6f:08:29:4a:0b:a3:8a:d7: 13:ba:5d:6f:b8:da:f1:54:34:9c:c8:b2:ab:5e:18:6a:a7:19: 8a:a6:88:ed:8b:f7:c5:92:6a:b4:2b:ff:46:0d:d0:a6:dd:2d: 47:f9:fd:9a:84:c1:89:13:f0:65:0a:68:9d:85:c6:e1:fe:9a: 3d:da:06:fc:38:1f:14:9f:3d:4e:65:f4:a3:a5:37:d3:d5:73: 54:f6:7c:78:90:3c:b6:e3:e6:5d:36:61:22:a2:74:82:7f:0c: 69:21:d1:cb:78:55:b8:e9:5c:ec:a0:68:40:4a:20:9d:2b:b4: 31:31:4c:1c:84:58:5b:63:fd:f8:c6:d5:ea:81:c6:84:3a:96: fd:92:ce:92:4d:cd:12:d8:0c:56:f5:8a:ed:2e:59:bd:53:d8: f1:2d:68:e6:df:4a:b0:44:91:50:4e:52:0f:ff:7f:6e:85:6c: 4e:b1:4a:f9:cd:c4:b5:88:61:45:98:33:a2:83:5e:cf:f6:6e: 13:a4:87:21:1d:64:ea:d8:e0:d0:48:28:d7:c9:5e:aa:56:21: 45:80:91:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEXVUt7ReOVXVqxsFM7zz8fU3XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA5MjMyMDQxMzlaFw0yNjA5MjQyMzMxMzlaMDMxMTAvBgNV BAMTKDNGNDI4QUFBNzkxMjA2NUFEMzBCNDNFMDM5QzBBMDE4MTE3OENGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1ZWV5YCrSgJ9rjp+NsUVG5wt lZyEOuZapMRkpbSlB48FJiHLSb4GhPDFJ996dHBbIPZQgqWTTfA9grGq89VUtTRS 8I3EuPa3gTK6UCkPyvoh4GJ4qlvpRJqPGV/YOtT1XkDmJiGA+o1LGLJHwKrr7vTd nQDaRO1QEy/hRwz9F6xBVoWDV89r2nYCV3PxkAmqjw4YBneQJYbeDT1W5+m/8fMg 35UX3iQH5VhdE6Azhlb1y+gpN3LR3pb9VSp2aTPk60hyY+sn9KPoiy+o0jZM4lYk Ym6o1Vf6z7euSWtrBKroIyHH2vmd5G8/uA9EJVd+lNzbscs9B+WynTSJZO4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0KKqnkSBlrTC0PgOcCgGBF4zzgwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMzkhFBnPqThmm3IkpdHG7LJ+tpa8wmkO6r IEGKgYQREfX4qqkPk1H4/ggk2wlvCClKC6OK1xO6XW+42vFUNJzIsqteGGqnGYqm iO2L98WSarQr/0YN0KbdLUf5/ZqEwYkT8GUKaJ2FxuH+mj3aBvw4HxSfPU5l9KOl N9PVc1T2fHiQPLbj5l02YSKidIJ/DGkh0ct4VbjpXOygaEBKIJ0rtDExTByEWFtj /fjG1eqBxoQ6lv2SzpJNzRLYDFb1iu0uWb1T2PEtaObfSrBEkVBOUg//f26FbE6x SvnNxLWIYUWYM6KDXs/2bhOkhyEdZOrY4NBIKNfJXqpWIUWAkZM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:08:51 2026 by rpki-client