$ rpki-client -vvvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: j0cwSDjtFPP0pdLsXLydvctxwY51CDwtwhhjvD7nf3Y= Subject key identifier: 73:31:86:D4:E7:9F:3A:C7:98:E0:37:CB:94:7E:3E:88:2D:A5:2E:0E Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 01DDFE980D41418DB36052EFC189C595FA9E43BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:23:05 +0000 Manifest this update: Mon 21 Sep 2026 21:18:05 +0000 Manifest next update: Tue 22 Sep 2026 22:41:05 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 3: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: xoX8yHLBH7tGYyYWVF1ilVamHCoCR6iXXLPCfZUg9ws=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dd:fe:98:0d:41:41:8d:b3:60:52:ef:c1:89:c5:95:fa:9e:43:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Sep 21 21:18:05 2026 GMT Not After : Sep 22 22:41:05 2026 GMT Subject: CN=733186D4E79F3AC798E037CB947E3E882DA52E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:cf:9d:e0:97:9a:fc:b6:e6:e9:46:70:25: 90:18:99:9b:ce:23:21:00:3a:85:dc:01:14:3b:27: 0e:c8:1a:f3:f4:5b:58:ad:30:10:4f:21:e3:b9:fd: 20:31:ca:ab:23:a9:74:d3:2b:7c:0d:27:2a:97:36: d3:c3:9f:8c:53:2c:4f:fb:dc:56:95:ee:43:64:1a: 47:fc:1e:ca:fb:32:ff:62:30:43:ff:2c:cf:95:c9: a7:62:e3:69:17:62:ab:df:bf:b3:ca:72:dc:a4:1b: 6e:69:bf:17:78:53:f6:75:3b:18:0e:d9:0c:6f:63: 36:73:9d:9d:e2:5d:71:19:b4:51:73:f3:d3:d6:31: f9:85:91:19:48:2a:db:37:90:19:05:d6:05:47:e7: bb:cd:49:64:1c:49:42:ea:d2:da:c8:63:5b:36:57: 49:87:f7:05:82:e8:79:09:8a:30:60:1b:7b:82:8c: 06:ed:7c:e7:87:bf:fd:f0:26:6e:1b:a8:12:89:ba: 28:91:0b:d5:5b:29:44:b7:e9:9a:ee:14:d7:fc:f8: 7f:04:2f:ac:9d:4f:b5:83:0e:97:43:9b:f7:80:3f: 31:cb:4f:7e:40:4c:67:51:48:8c:2b:66:f9:b7:21: 6c:e2:e0:63:5d:4e:36:56:81:a7:53:48:63:df:5f: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:86:D4:E7:9F:3A:C7:98:E0:37:CB:94:7E:3E:88:2D:A5:2E:0E X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:dc:21:03:91:7e:fe:20:ab:04:6c:58:d8:ba:4a:05:1d:fa: cb:77:d8:f6:52:29:13:82:ee:e9:c1:3f:6a:0f:f5:1c:ea:92: ba:1a:66:a1:1f:fb:35:e7:9d:19:3d:43:6a:f9:bd:fd:5c:49: de:b6:23:14:90:d0:87:70:43:05:a8:4f:66:54:90:ae:b5:db: 56:2e:90:43:8e:50:74:2c:70:b5:6a:0b:ca:5e:74:04:52:da: c2:e6:3b:d2:81:5f:43:cd:91:0e:d0:23:0f:51:f8:c2:7b:95: 01:48:79:f6:ac:27:ab:6f:e2:de:3b:dc:e9:4b:d4:b2:e0:bb: 27:e3:dc:e4:ce:f5:58:e3:06:45:aa:d5:58:84:b8:03:a6:66: 2b:86:c7:c0:44:44:5f:77:3f:63:95:4e:5c:1b:c9:e8:7f:0e: aa:24:7d:37:6f:66:7c:86:87:2a:6f:1b:36:ea:aa:45:ec:60: fa:9b:f4:34:30:1b:27:bf:b5:a1:b0:62:6a:43:b1:7e:fb:3d: 6f:01:41:f8:36:f4:06:57:04:8d:d2:bf:dd:ba:bf:ad:2d:3b: 1a:74:7b:81:1b:40:1e:62:52:d7:87:d8:04:97:97:62:95:04: b3:8a:de:6b:3a:0c:a7:b3:84:de:7c:ff:33:ac:85:ad:76:b7: 12:52:9a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAd3+mA1BQY2zYFLvwYnFlfqeQ78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA5MjEyMTE4MDVaFw0yNjA5MjIyMjQxMDVaMDMxMTAvBgNV BAMTKDczMzE4NkQ0RTc5RjNBQzc5OEUwMzdDQjk0N0UzRTg4MkRBNTJFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Bc+d4Jea/Lbm6UZwJZAYmZvO IyEAOoXcARQ7Jw7IGvP0W1itMBBPIeO5/SAxyqsjqXTTK3wNJyqXNtPDn4xTLE/7 3FaV7kNkGkf8Hsr7Mv9iMEP/LM+Vyadi42kXYqvfv7PKctykG25pvxd4U/Z1OxgO 2QxvYzZznZ3iXXEZtFFz89PWMfmFkRlIKts3kBkF1gVH57vNSWQcSULq0trIY1s2 V0mH9wWC6HkJijBgG3uCjAbtfOeHv/3wJm4bqBKJuiiRC9VbKUS36ZruFNf8+H8E L6ydT7WDDpdDm/eAPzHLT35ATGdRSIwrZvm3IWzi4GNdTjZWgadTSGPfXz13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczGG1OefOseY4DfLlH4+iC2lLg4wHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbcIQORfv4gqwRsWNi6SgUd+st32PZSKROC 7unBP2oP9RzqkroaZqEf+zXnnRk9Q2r5vf1cSd62IxSQ0IdwQwWoT2ZUkK6121Yu kEOOUHQscLVqC8pedARS2sLmO9KBX0PNkQ7QIw9R+MJ7lQFIefasJ6tv4t473OlL 1LLguyfj3OTO9VjjBkWq1ViEuAOmZiuGx8BERF93P2OVTlwbyeh/DqokfTdvZnyG hypvGzbqqkXsYPqb9DQwGye/taGwYmpDsX77PW8BQfg29AZXBI3Sv926v60tOxp0 e4EbQB5iUteH2ASXl2KVBLOK3ms6DKezhN58/zOsha12txJSmpk= -----END CERTIFICATE-----Generated at Tue Sep 22 05:59:51 2026 by rpki-client