$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json) Hash identifier: +gERfAtPzPpG7jgU8f+2stntGUvITc0SX9sR3Mnzkps= Subject key identifier: 40:B8:E8:FB:5F:54:AE:2B:38:B0:6C:D7:A7:7E:67:79:4B:A8:98:5C Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Certificate serial: 4710A835FA11084BAF265238356E389FFE14DB78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:36:54 +0000 Manifest this update: Mon 21 Sep 2026 12:31:54 +0000 Manifest next update: Tue 22 Sep 2026 15:51:54 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=) 3: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: xjnxLsNcznpWL82dVAqrNDD2zRCQc97OiXl61Bqim+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:10:a8:35:fa:11:08:4b:af:26:52:38:35:6e:38:9f:fe:14:db:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Validity Not Before: Sep 21 12:31:54 2026 GMT Not After : Sep 22 15:51:54 2026 GMT Subject: CN=40B8E8FB5F54AE2B38B06CD7A77E67794BA8985C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:4c:a2:3d:79:a9:46:4c:38:c0:e9:cd:a5: 7e:29:ac:e0:a4:fb:2a:fd:75:e7:34:89:22:28:5d: d5:36:58:3d:78:44:b5:7e:36:92:ee:83:02:2c:c9: c9:cb:ec:cc:06:47:34:b5:49:7d:dd:8b:b6:a1:5e: e0:90:38:bd:eb:17:56:3c:38:88:5a:ae:2e:b2:08: 37:ed:c4:76:d4:10:8a:51:b7:32:eb:b6:f7:4c:f1: 25:21:92:ae:20:1c:55:bd:10:17:35:39:8e:87:49: 2a:ee:15:2f:5e:86:99:a1:02:c4:90:d0:30:e4:46: 5f:18:26:55:56:74:fd:ed:24:5a:2e:8b:39:ee:2a: 5d:9c:88:c7:dd:21:37:15:52:dd:11:ef:52:13:f5: f0:be:3e:cc:fe:d4:f6:05:6b:a2:17:7d:e8:84:04: 11:e3:6c:c3:14:51:d7:29:ab:35:4d:70:af:ef:77: 10:fb:05:a6:06:c7:c9:81:72:b9:66:23:8f:d2:0d: 3f:b7:90:4c:1c:5b:a4:c0:06:dd:e0:a0:52:b0:0b: 00:44:cf:e5:c9:07:ea:fb:1e:f6:15:8d:38:18:16: 85:14:74:f2:ea:82:33:1f:a1:f2:44:d2:40:5a:e5: 96:a4:36:1e:3f:46:ea:51:28:60:a8:70:09:57:f9: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:E8:FB:5F:54:AE:2B:38:B0:6C:D7:A7:7E:67:79:4B:A8:98:5C X509v3 Authority Key Identifier: keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b1:b4:bc:9b:9d:2c:7d:39:eb:cf:92:c2:14:f2:fc:68:64: 15:77:09:e6:2e:f8:14:05:3d:bc:70:d8:7c:a3:a4:46:48:4f: 51:14:74:ea:91:37:94:65:55:94:83:b4:68:05:1b:7e:98:34: c4:f8:5c:df:a1:84:21:0f:5b:cb:63:30:82:12:15:82:d1:d6: e5:39:c7:c3:fc:c0:2a:cf:7e:c0:83:4f:04:be:c8:68:91:31: 8f:93:ce:a3:10:fe:36:a1:a7:a1:7d:44:9e:21:00:ac:ad:50: 63:a0:04:83:d1:79:a6:f0:21:ad:8f:98:c1:8f:f0:52:e0:b8: 26:70:17:35:2c:ce:77:b6:9e:8a:69:93:0a:36:80:25:c7:7a: 49:c5:be:c6:20:de:0f:52:b0:57:24:3f:2a:a0:c4:c3:ee:7c: 3b:86:d6:a2:d6:af:14:65:f5:c3:5d:40:82:64:89:72:5a:5a: 92:ad:8e:e3:ba:b6:ad:e8:32:b8:32:8d:c3:01:fe:02:ad:9a: 6f:5b:3e:ff:03:11:17:66:44:de:53:0a:4f:f2:c3:94:ff:1d: 4f:44:84:59:41:9b:38:d6:2e:72:33:9c:46:eb:fd:bb:ec:7a: 94:54:b5:cb:45:6b:a5:98:1b:dc:89:c9:0c:71:0c:38:92:03: e1:e8:61:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxCoNfoRCEuvJlI4NW44n/4U23gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4 NUYxNDY0QTAeFw0yNjA5MjExMjMxNTRaFw0yNjA5MjIxNTUxNTRaMDMxMTAvBgNV BAMTKDQwQjhFOEZCNUY1NEFFMkIzOEIwNkNEN0E3N0U2Nzc5NEJBODk4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAkyiPXmpRkw4wOnNpX4prOCk +yr9dec0iSIoXdU2WD14RLV+NpLugwIsycnL7MwGRzS1SX3di7ahXuCQOL3rF1Y8 OIhari6yCDftxHbUEIpRtzLrtvdM8SUhkq4gHFW9EBc1OY6HSSruFS9ehpmhAsSQ 0DDkRl8YJlVWdP3tJFouiznuKl2ciMfdITcVUt0R71IT9fC+Psz+1PYFa6IXfeiE BBHjbMMUUdcpqzVNcK/vdxD7BaYGx8mBcrlmI4/SDT+3kEwcW6TABt3goFKwCwBE z+XJB+r7HvYVjTgYFoUUdPLqgjMfofJE0kBa5ZakNh4/RupRKGCocAlX+embAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLjo+19Uris4sGzXp35neUuomFwwHwYDVR0j BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0 NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIx QTc4NUYxNDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCxtLybnSx9OevPksIU8vxoZBV3CeYu+BQF Pbxw2HyjpEZIT1EUdOqRN5RlVZSDtGgFG36YNMT4XN+hhCEPW8tjMIISFYLR1uU5 x8P8wCrPfsCDTwS+yGiRMY+TzqMQ/jahp6F9RJ4hAKytUGOgBIPReabwIa2PmMGP 8FLguCZwFzUszne2noppkwo2gCXHeknFvsYg3g9SsFckPyqgxMPufDuG1qLWrxRl 9cNdQIJkiXJaWpKtjuO6tq3oMrgyjcMB/gKtmm9bPv8DERdmRN5TCk/yw5T/HU9E hFlBmzjWLnIznEbr/bvsepRUtctFa6WYG9yJyQxxDDiSA+HoYY4= -----END CERTIFICATE-----Generated at Tue Sep 22 07:12:17 2026 by rpki-client