$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft File: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft (raw, json) Hash identifier: O4H+VIodNKqfujizOZSmvWb+dGfpFpaGW1zQ8rLuamg= Subject key identifier: 4F:2C:3C:51:7F:B7:89:20:91:A0:9E:F4:03:69:31:3C:FD:5C:D5:63 Authority key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA Certificate issuer: /CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Certificate serial: 1BF3C69D44287ED2438475663DEB113AF76C3DE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft Manifest number: BE Signing time: Sun 20 Sep 2026 21:54:01 +0000 Manifest this update: Sun 20 Sep 2026 21:49:01 +0000 Manifest next update: Tue 22 Sep 2026 01:46:01 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: BZY0+bJnzvWTGl0me+IsT0sdxq8LsPOVFzv3Xd1pRAM=) 2: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl (hash: wIp0APqyWePX+Gx9Csid2mq/47wIMDEi0gWYbkbwL3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f3:c6:9d:44:28:7e:d2:43:84:75:66:3d:eb:11:3a:f7:6c:3d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Validity Not Before: Sep 20 21:49:01 2026 GMT Not After : Sep 22 01:46:01 2026 GMT Subject: CN=4F2C3C517FB7892091A09EF40369313CFD5CD563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:93:6a:86:14:9c:cb:42:0f:e7:31:8c:28: e5:aa:67:42:e0:8f:e4:42:4c:9b:7a:e8:51:0b:fb: 7d:cd:a2:b3:aa:24:df:c4:b7:68:da:4a:95:f0:e0: f3:93:8f:d7:a0:7d:15:2b:d2:fa:ff:52:3c:21:89: e7:f4:d8:8c:b6:68:c3:46:91:cc:46:0f:4e:94:10: b0:69:e8:25:9e:07:12:f0:92:dd:f3:9a:b5:0f:22: 5e:47:65:49:c4:f4:b5:7c:db:7a:c1:b3:86:ac:de: 63:37:95:52:dc:31:7e:b5:00:29:57:6b:af:57:83: 5d:99:d1:d4:db:8a:87:42:f0:6c:07:2f:5f:c8:18: 61:28:17:fe:6a:ee:e7:08:ea:6b:5e:eb:f0:a9:94: 3a:cb:cf:c2:62:53:c9:ab:89:9f:df:09:ba:a7:7a: cf:c1:2e:9b:58:f3:13:ca:63:24:5b:9b:a8:06:bc: 0e:d7:ce:b2:00:cf:80:53:c2:66:91:21:1d:bb:2b: 98:2f:cd:c4:b4:aa:94:b3:ba:96:1d:4e:be:67:a6: 15:0c:4d:61:d5:a2:17:72:dd:c2:c0:c8:61:75:5d: 13:90:9a:52:b7:cd:38:39:0a:48:a6:07:8f:c5:c0: 0b:d7:75:24:b5:13:27:19:c1:30:50:35:04:ad:0f: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2C:3C:51:7F:B7:89:20:91:A0:9E:F4:03:69:31:3C:FD:5C:D5:63 X509v3 Authority Key Identifier: keyid:F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f4:d0:fe:c7:44:b3:6e:d8:7d:5a:f7:76:6f:0d:b4:dc:10: 14:db:2b:60:20:61:c6:81:27:bc:03:ae:1b:e1:cd:b8:0c:71: bd:16:8a:8e:c7:15:fb:d9:5d:49:e2:62:76:70:f9:48:3b:a3: 71:b8:a4:50:f1:08:b5:83:5e:f0:18:ba:ae:1e:85:b3:bb:2f: a4:eb:a7:d9:5b:2d:0c:9e:5e:15:26:8e:f4:24:83:c7:11:10: 60:46:38:03:fa:63:ed:90:87:8f:a5:81:24:a0:e9:d9:7c:88: 1c:10:8d:24:dd:b4:0c:b7:b1:c3:65:f1:db:25:b7:88:31:f0: 88:83:ba:a9:15:aa:79:73:f1:8b:2d:5d:91:ab:2c:47:84:98: 38:73:26:7b:54:10:85:de:5d:48:a4:b3:56:9f:8e:9e:c6:3e: 4e:4e:2b:f4:a1:33:64:5e:b1:6b:fd:8e:b0:e5:4a:bf:51:94: a8:18:95:88:df:3d:47:a3:31:2d:1b:bb:0d:cb:d2:b9:75:aa: 00:5f:d3:d3:eb:04:a2:24:d6:9b:a6:45:ca:8c:49:c6:2a:b6: 48:e0:eb:51:b8:bd:a3:fc:94:8e:f4:54:a2:63:f1:9c:25:0f: 1b:08:10:be:2a:48:45:02:5d:8f:09:6a:61:2b:a1:09:d6:e8: 8e:aa:6c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/PGnUQoftJDhHVmPesROvdsPegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZD QzlEM0JDQTAeFw0yNjA5MjAyMTQ5MDFaFw0yNjA5MjIwMTQ2MDFaMDMxMTAvBgNV BAMTKDRGMkMzQzUxN0ZCNzg5MjA5MUEwOUVGNDAzNjkzMTNDRkQ1Q0Q1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrZNqhhScy0IP5zGMKOWqZ0Lg j+RCTJt66FEL+33NorOqJN/Et2jaSpXw4POTj9egfRUr0vr/Ujwhief02Iy2aMNG kcxGD06UELBp6CWeBxLwkt3zmrUPIl5HZUnE9LV823rBs4as3mM3lVLcMX61AClX a69Xg12Z0dTbiodC8GwHL1/IGGEoF/5q7ucI6mte6/CplDrLz8JiU8mriZ/fCbqn es/BLptY8xPKYyRbm6gGvA7XzrIAz4BTwmaRIR27K5gvzcS0qpSzupYdTr5nphUM TWHVohdy3cLAyGF1XROQmlK3zTg5CkimB4/FwAvXdSS1EycZwTBQNQStDzQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTyw8UX+3iSCRoJ70A2kxPP1c1WMwHwYDVR0j BBgwFoAU9k0G+yndfGP9EuDSgx0Az8ydO8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlOGRkNDAtYmI5NC00ZDQzLWI4ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIy OUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZDQzlEM0JDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjREMDZGQjI5REQ3QzYzRkQxMkUwRDI4MzFEMDBDRkNDOUQz QkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAw Q0ZDQzlEM0JDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH300P7HRLNu2H1a93ZvDbTcEBTbK2AgYcaB J7wDrhvhzbgMcb0Wio7HFfvZXUniYnZw+Ug7o3G4pFDxCLWDXvAYuq4ehbO7L6Tr p9lbLQyeXhUmjvQkg8cREGBGOAP6Y+2Qh4+lgSSg6dl8iBwQjSTdtAy3scNl8dsl t4gx8IiDuqkVqnlz8YstXZGrLEeEmDhzJntUEIXeXUiks1afjp7GPk5OK/ShM2Re sWv9jrDlSr9RlKgYlYjfPUejMS0buw3L0rl1qgBf09PrBKIk1pumRcqMScYqtkjg 61G4vaP8lI70VKJj8ZwlDxsIEL4qSEUCXY8JamEroQnW6I6qbKQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:46 2026 by rpki-client