$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json) Hash identifier: lYp+SOxTiaBZrpTp5c4b3R6oKXygFtUwm2OxiYqqm8Y= Subject key identifier: 72:8E:43:21:5F:EF:CE:FA:07:D5:F6:E6:43:63:4A:A8:57:FB:23:01 Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Certificate serial: 4F3464BAB3C75598BD8D44AAE42CF13DDDDA5B81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:54:58 +0000 Manifest this update: Mon 21 Sep 2026 14:49:58 +0000 Manifest next update: Tue 22 Sep 2026 17:32:58 +0000 Files and hashes: 1: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: TG6p/RSGJ57xOXBrBTOrkXh/Lu35YfJqDPmB9av0KQY=) 2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:34:64:ba:b3:c7:55:98:bd:8d:44:aa:e4:2c:f1:3d:dd:da:5b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Validity Not Before: Sep 21 14:49:58 2026 GMT Not After : Sep 22 17:32:58 2026 GMT Subject: CN=728E43215FEFCEFA07D5F6E643634AA857FB2301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:45:a8:a9:e4:5a:8d:59:f9:6e:7f:87:b8: 8b:7e:b0:4f:3e:66:76:ce:ce:95:55:a9:fc:14:4f: 7a:26:cb:84:d6:94:e3:da:25:1e:54:dd:74:72:96: f2:f0:18:40:62:00:fb:04:9d:29:85:1f:b1:ef:70: 98:c0:58:ae:f9:23:ae:2b:08:53:59:12:ac:fc:cb: 96:2b:ad:87:90:90:c4:fb:44:da:62:e6:ef:fc:5d: 89:64:89:18:69:03:2c:6f:5a:75:42:13:e5:06:6a: d0:56:72:f5:d0:f5:25:46:65:91:17:a6:59:0b:48: 1b:a8:4d:ac:58:fa:ec:15:a0:3d:69:40:7b:5c:53: d5:c7:61:11:d9:7d:fe:01:fa:5d:c7:65:d5:a6:df: 07:de:81:7f:3e:25:e1:47:4d:ea:98:27:98:37:d5: 75:03:10:12:6a:03:64:68:24:64:58:ed:bb:85:ea: be:4d:11:f0:5d:0e:70:14:8c:6a:35:ed:0c:72:a1: 98:be:c3:a1:ac:7d:c8:82:ff:54:6e:16:fc:33:64: e9:6c:56:bf:35:b4:b6:91:c0:fb:a8:61:b7:28:d2: dc:7f:c8:ae:1d:5f:f5:61:60:26:11:ae:84:b4:22: 44:44:2c:96:f0:ad:54:af:fe:46:c8:77:f1:48:04: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:43:21:5F:EF:CE:FA:07:D5:F6:E6:43:63:4A:A8:57:FB:23:01 X509v3 Authority Key Identifier: keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8c:82:a0:8c:1b:fa:97:53:3b:39:d0:9f:5a:2e:67:48:7a: 7b:c3:93:15:3f:fb:b4:38:83:a8:09:a2:e5:1f:34:7d:ca:23: 1a:84:40:eb:a5:e1:b7:c1:35:63:91:77:45:85:36:5d:86:a1: 58:0a:7f:cb:9d:b7:b4:d3:e6:88:26:5f:bf:ee:13:3e:4b:36: 09:ca:05:4c:3d:30:c6:2d:2f:0c:de:c6:06:12:75:13:24:1c: 20:7b:ff:2f:02:2e:25:5b:31:fa:cb:c6:61:6a:e3:a2:8f:41: 0c:4c:5f:69:e2:75:77:ae:a5:7c:19:0d:e4:96:e3:9a:ef:84: d9:cb:17:17:3b:4a:f6:4b:07:64:65:37:15:6a:47:f3:55:be: ff:2e:6b:57:24:df:b4:06:2a:b6:ca:ec:f5:8e:d9:2c:e0:7f: 14:49:d7:51:33:47:de:89:ad:ef:d4:25:fc:79:83:f5:9e:1e: b7:51:ab:cc:72:00:5b:6b:bb:83:43:2d:a1:2d:25:90:79:cc: 48:32:be:17:02:3f:49:71:0f:14:c4:a6:8f:bd:f0:4f:0b:3b: 2c:48:a9:22:3e:cb:42:96:2b:16:e8:88:d7:65:45:ef:75:40: 70:d3:c3:1e:78:8a:83:bb:f0:91:d0:14:cf:de:6a:82:98:91: cc:80:bc:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzRkurPHVZi9jUSq5CzxPd3aW4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5RjE4 MzNCNTZDQTAeFw0yNjA5MjExNDQ5NThaFw0yNjA5MjIxNzMyNThaMDMxMTAvBgNV BAMTKDcyOEU0MzIxNUZFRkNFRkEwN0Q1RjZFNjQzNjM0QUE4NTdGQjIzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBUWoqeRajVn5bn+HuIt+sE8+ ZnbOzpVVqfwUT3omy4TWlOPaJR5U3XRylvLwGEBiAPsEnSmFH7HvcJjAWK75I64r CFNZEqz8y5YrrYeQkMT7RNpi5u/8XYlkiRhpAyxvWnVCE+UGatBWcvXQ9SVGZZEX plkLSBuoTaxY+uwVoD1pQHtcU9XHYRHZff4B+l3HZdWm3wfegX8+JeFHTeqYJ5g3 1XUDEBJqA2RoJGRY7buF6r5NEfBdDnAUjGo17QxyoZi+w6GsfciC/1RuFvwzZOls Vr81tLaRwPuoYbco0tx/yK4dX/VhYCYRroS0IkRELJbwrVSv/kbId/FIBIWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUco5DIV/vzvoH1fbmQ2NKqFf7IwEwHwYDVR0j BBgwFoAU8PxX/yTa41fgeSsEGK358YM7VsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkY2YwYTQtYWQxYi00YjcyLTg0MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYy NERBRTM1N0UwNzkyQjA0MThBREY5RjE4MzNCNTZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEZDNTdGRjI0REFFMzU3RTA3OTJCMDQxOEFERjlGMTgzM0I1 NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5 RjE4MzNCNTZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKMgqCMG/qXUzs50J9aLmdIenvDkxU/+7Q4 g6gJouUfNH3KIxqEQOul4bfBNWORd0WFNl2GoVgKf8udt7TT5ogmX7/uEz5LNgnK BUw9MMYtLwzexgYSdRMkHCB7/y8CLiVbMfrLxmFq46KPQQxMX2nidXeupXwZDeSW 45rvhNnLFxc7SvZLB2RlNxVqR/NVvv8ua1ck37QGKrbK7PWO2SzgfxRJ11EzR96J re/UJfx5g/WeHrdRq8xyAFtru4NDLaEtJZB5zEgyvhcCP0lxDxTEpo+98E8LOyxI qSI+y0KWKxboiNdlRe91QHDTwx54ioO78JHQFM/eaoKYkcyAvNU= -----END CERTIFICATE-----Generated at Mon Sep 21 21:59:29 2026 by rpki-client