$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json) Hash identifier: lQZrKdNyoFzUJo47KlxppxgijIPCi2+W8acW0tH+9N8= Subject key identifier: 4C:01:D4:1E:01:E9:66:B9:FF:DC:24:7E:B8:48:00:85:D5:DD:D8:8E Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Certificate serial: 6682C203FCB714311EBCE8822D1E72996DD49A8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:58:59 +0000 Manifest this update: Mon 21 Sep 2026 09:53:59 +0000 Manifest next update: Tue 22 Sep 2026 10:06:59 +0000 Files and hashes: 1: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=) 2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=) 3: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=) 4: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: cKuaKq2l8/e0HHjA07iDQWAQ4tmk2INijLBQCqw7eIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:82:c2:03:fc:b7:14:31:1e:bc:e8:82:2d:1e:72:99:6d:d4:9a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Validity Not Before: Sep 21 09:53:59 2026 GMT Not After : Sep 22 10:06:59 2026 GMT Subject: CN=4C01D41E01E966B9FFDC247EB8480085D5DDD88E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:20:b4:16:cc:6c:aa:37:ac:84:96:c4:b1: df:01:bf:15:80:e4:ae:3a:36:c7:16:8e:87:79:af: b8:51:6c:db:02:11:2a:bd:08:06:e4:06:43:bf:72: c5:bb:c8:9f:ef:34:bb:e8:39:ec:c2:97:ab:37:34: 5f:8c:3d:37:a7:99:62:61:ac:68:69:bd:f4:eb:37: 75:3a:c4:26:49:26:20:90:31:43:0a:c2:9b:d7:1f: 54:d0:f8:cb:cc:9f:0c:1b:29:6a:0a:59:a2:56:28: ef:bb:04:03:50:14:06:d3:7e:ad:9b:08:02:4f:ac: 43:02:4b:af:fb:53:65:3c:11:d2:99:cb:69:85:b8: eb:2a:ec:1a:cf:61:52:0d:9f:c7:2f:cb:1e:0a:01: b6:13:c4:85:c1:98:24:27:d2:6b:f8:49:05:9a:22: 4c:bc:d1:84:51:eb:fa:ab:16:35:d2:4b:b3:82:0e: a8:19:ae:60:83:31:87:e2:38:8d:3d:60:d9:e5:85: 6b:8f:4a:4f:bc:fe:2a:99:2c:42:32:e0:cb:83:51: 96:0c:61:77:83:a6:98:0f:39:40:b9:4b:9a:76:6c: 69:1a:ed:3a:91:3c:c2:e5:f9:50:ec:80:79:a4:45: f2:1d:c5:e4:9e:4d:16:bd:36:2a:d1:79:e9:14:77: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:D4:1E:01:E9:66:B9:FF:DC:24:7E:B8:48:00:85:D5:DD:D8:8E X509v3 Authority Key Identifier: keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:ea:34:8e:50:e3:20:b5:2d:1d:60:e3:ff:22:1e:26:8b: d4:90:52:3c:ac:d3:71:55:c3:15:26:b6:48:f5:f8:2f:d1:7f: 2a:66:88:72:d3:3f:32:a8:cb:5b:11:75:2a:f9:96:0a:47:fe: 3b:55:95:07:03:59:52:d6:42:07:dc:bf:4d:14:e7:0a:49:2d: 68:b3:53:ee:e8:de:71:63:e8:00:e2:b7:bf:c6:51:1f:31:4e: d5:f5:37:17:e3:1c:4a:40:58:44:62:ec:b3:1c:32:fe:21:89: 6a:9e:17:0b:44:86:5f:35:47:1e:3b:a1:43:af:de:33:09:d9: b6:f7:42:38:1f:2e:f0:49:ba:6e:d8:87:b3:f1:f8:80:ba:8e: 8b:72:64:f7:57:03:60:79:39:c9:d6:a2:c6:54:67:95:90:d3: 17:94:b5:2e:4e:54:9a:30:07:8c:d9:77:49:ef:ae:50:38:4b: b6:31:0b:cc:6d:10:aa:0a:f6:5e:9a:f5:ce:22:04:d1:fd:9f: 84:ba:80:46:a7:3c:c7:f7:d3:81:ce:8e:b1:6c:50:65:c1:04: 32:54:2b:61:9f:ef:b9:fe:d7:de:89:59:94:c4:91:a5:1a:24: e2:53:82:66:7d:91:75:48:2e:f6:e3:0d:f3:4f:3b:20:12:11: c3:00:e4:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoLCA/y3FDEevOiCLR5ymW3UmoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENCRkIw NzQ5REYxQjAeFw0yNjA5MjEwOTUzNTlaFw0yNjA5MjIxMDA2NTlaMDMxMTAvBgNV BAMTKDRDMDFENDFFMDFFOTY2QjlGRkRDMjQ3RUI4NDgwMDg1RDVEREQ4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFSC0FsxsqjeshJbEsd8BvxWA 5K46NscWjod5r7hRbNsCESq9CAbkBkO/csW7yJ/vNLvoOezCl6s3NF+MPTenmWJh rGhpvfTrN3U6xCZJJiCQMUMKwpvXH1TQ+MvMnwwbKWoKWaJWKO+7BANQFAbTfq2b CAJPrEMCS6/7U2U8EdKZy2mFuOsq7BrPYVINn8cvyx4KAbYTxIXBmCQn0mv4SQWa Iky80YRR6/qrFjXSS7OCDqgZrmCDMYfiOI09YNnlhWuPSk+8/iqZLEIy4MuDUZYM YXeDppgPOUC5S5p2bGka7TqRPMLl+VDsgHmkRfIdxeSeTRa9NirReekUd6dZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAHUHgHpZrn/3CR+uEgAhdXd2I4wHwYDVR0j BBgwFoAU+JM5Jq6Dne1ymvouDk3L+wdJ3xswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU1MjEwOTktM2JhMS00ZjkxLWI1YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZB RTgzOURFRDcyOUFGQTJFMEU0RENCRkIwNzQ5REYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODkzMzkyNkFFODM5REVENzI5QUZBMkUwRTREQ0JGQjA3NDlE RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENC RkIwNzQ5REYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvS6jSOUOMgtS0dYOP/Ih4mi9SQUjys03FV wxUmtkj1+C/RfypmiHLTPzKoy1sRdSr5lgpH/jtVlQcDWVLWQgfcv00U5wpJLWiz U+7o3nFj6ADit7/GUR8xTtX1NxfjHEpAWERi7LMcMv4hiWqeFwtEhl81Rx47oUOv 3jMJ2bb3QjgfLvBJum7Yh7Px+IC6jotyZPdXA2B5OcnWosZUZ5WQ0xeUtS5OVJow B4zZd0nvrlA4S7YxC8xtEKoK9l6a9c4iBNH9n4S6gEanPMf304HOjrFsUGXBBDJU K2Gf77n+196JWZTEkaUaJOJTgmZ9kXVILvbjDfNPOyASEcMA5Lw= -----END CERTIFICATE-----Generated at Mon Sep 21 20:19:46 2026 by rpki-client