$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json) Hash identifier: zS71lpkAF+cPNLATq3mbLe7fbdb5Ypfw/00zEK+KJso= Subject key identifier: 35:D8:28:0D:39:A9:A0:38:8E:95:CA:54:56:0E:B1:D0:8E:94:F2:92 Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Certificate serial: 5428994C2F8A766ACEC12D4413395A8448F2820C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:08:04 +0000 Manifest this update: Sun 20 Sep 2026 17:03:04 +0000 Manifest next update: Mon 21 Sep 2026 20:32:04 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=) 2: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: 1WtYOOlnTr9FKNlwXfhuDMjflyQS7VRMUOEzMNVuk3E=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:28:99:4c:2f:8a:76:6a:ce:c1:2d:44:13:39:5a:84:48:f2:82:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Validity Not Before: Sep 20 17:03:04 2026 GMT Not After : Sep 21 20:32:04 2026 GMT Subject: CN=35D8280D39A9A0388E95CA54560EB1D08E94F292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:9e:3d:e1:c1:b0:96:8d:db:62:2d:e9:96: 78:be:cd:a2:ae:c0:b9:d2:04:3f:0c:13:44:ac:37: eb:3e:0c:29:93:f4:97:14:77:86:fa:93:79:a1:51: dc:e3:97:7b:14:4b:c3:fd:d8:0a:43:ef:6b:6a:20: 3b:72:99:c0:2f:a8:65:6e:b5:f6:38:e6:e3:c9:c1: e7:65:be:e9:82:8c:0c:0d:d9:6a:72:bf:1c:d0:e8: 71:48:39:b4:1e:6e:74:bb:e7:4c:7a:c0:24:96:96: 61:49:4d:84:9d:1d:ed:35:3c:56:58:3a:14:64:81: 94:fd:11:be:97:30:d4:00:1d:8c:3e:47:0f:8b:2d: 08:92:a9:05:28:84:65:a4:bf:2c:23:0c:b1:60:d0: 42:c5:bf:85:f6:a4:1f:b8:3a:a1:48:95:f5:e7:7e: 10:13:52:22:b6:50:3a:38:b9:a3:05:83:4c:9f:2b: 19:09:04:ed:a0:aa:5a:5b:85:74:9c:36:8d:b8:2c: b2:65:04:b3:46:50:23:37:39:e8:af:a0:a6:7b:6a: 09:21:3c:17:5c:cb:38:02:17:e0:0f:53:e1:57:38: ce:d1:a9:04:b5:d4:53:3b:82:e1:0d:39:10:4d:46: 4f:a8:57:8e:71:41:e2:b5:b3:3c:7f:e6:7c:09:0f: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:28:0D:39:A9:A0:38:8E:95:CA:54:56:0E:B1:D0:8E:94:F2:92 X509v3 Authority Key Identifier: keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0a:a2:05:76:b2:0e:49:af:7b:bf:d9:ba:57:67:de:b5:19: f6:09:84:09:31:ac:df:22:ba:ec:8b:16:1c:28:1b:72:8a:1a: da:d4:08:64:bc:96:ee:b2:cf:a2:e9:ac:66:a7:92:04:2a:c7: d1:59:f6:e2:76:69:58:49:c8:d8:52:42:e0:1d:bb:8d:72:20: d0:7e:d9:1f:a3:c5:ca:d4:57:87:85:bb:3e:c6:13:e1:df:05: b5:fa:81:a6:52:14:68:24:05:b5:20:15:87:ad:c9:c4:7b:2e: 4d:49:9c:a4:6a:74:07:77:ac:34:9e:4b:3f:01:00:6f:3b:0d: 5f:10:5a:11:d4:8e:2d:aa:bb:53:cb:c8:f8:d5:07:db:d5:ca: 52:74:35:f8:df:a5:8c:58:13:8e:fd:97:1f:04:c1:b7:a9:e8: 0e:d2:b9:e3:bf:26:ba:ba:fe:10:a3:01:ed:be:b7:ae:15:9f: db:ce:e8:8b:ac:40:fa:61:46:ac:af:8d:4d:ad:3a:87:8e:14: 85:c7:31:cb:c1:a4:4c:38:3f:7b:1a:ae:e9:eb:f6:06:1a:62: ae:69:0f:f9:73:0b:31:ad:04:02:5b:2e:cc:1f:d8:96:c3:2e: 32:9a:f8:ea:85:e5:95:3a:6a:99:9c:78:9a:f5:b3:d6:ea:ea: 74:a8:00:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCiZTC+KdmrOwS1EEzlahEjyggwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG MTJBNEExRjAeFw0yNjA5MjAxNzAzMDRaFw0yNjA5MjEyMDMyMDRaMDMxMTAvBgNV BAMTKDM1RDgyODBEMzlBOUEwMzg4RTk1Q0E1NDU2MEVCMUQwOEU5NEYyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnp494cGwlo3bYi3plni+zaKu wLnSBD8ME0SsN+s+DCmT9JcUd4b6k3mhUdzjl3sUS8P92ApD72tqIDtymcAvqGVu tfY45uPJwedlvumCjAwN2WpyvxzQ6HFIObQebnS750x6wCSWlmFJTYSdHe01PFZY OhRkgZT9Eb6XMNQAHYw+Rw+LLQiSqQUohGWkvywjDLFg0ELFv4X2pB+4OqFIlfXn fhATUiK2UDo4uaMFg0yfKxkJBO2gqlpbhXScNo24LLJlBLNGUCM3OeivoKZ7agkh PBdcyzgCF+APU+FXOM7RqQS11FM7guENORBNRk+oV45xQeK1szx/5nwJD2PzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdgoDTmpoDiOlcpUVg6x0I6U8pIwHwYDVR0j BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4 OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0 QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIKogV2sg5Jr3u/2bpXZ961GfYJhAkxrN8i uuyLFhwoG3KKGtrUCGS8lu6yz6LprGankgQqx9FZ9uJ2aVhJyNhSQuAdu41yINB+ 2R+jxcrUV4eFuz7GE+HfBbX6gaZSFGgkBbUgFYetycR7Lk1JnKRqdAd3rDSeSz8B AG87DV8QWhHUji2qu1PLyPjVB9vVylJ0NfjfpYxYE479lx8Ewbep6A7SueO/Jrq6 /hCjAe2+t64Vn9vO6IusQPphRqyvjU2tOoeOFIXHMcvBpEw4P3sarunr9gYaYq5p D/lzCzGtBAJbLswf2JbDLjKa+OqF5ZU6apmceJr1s9bq6nSoAAM= -----END CERTIFICATE-----Generated at Mon Sep 21 13:24:06 2026 by rpki-client