$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: 5yEEGIq64EpEPQiYm6mgeblMXZiWqILV3jaw7JBcrRA= Subject key identifier: C8:7A:02:FB:0F:E1:C8:AF:97:53:77:82:4C:62:E8:DA:8C:00:70:8F Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 5D6932DCE3B08370E0AE7D99348077B9713EC9DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: BF Signing time: Tue 22 Sep 2026 21:48:21 +0000 Manifest this update: Tue 22 Sep 2026 21:43:21 +0000 Manifest next update: Wed 23 Sep 2026 21:58:21 +0000 Files and hashes: 1: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: Gu9YqeSV6nRrCAiqymIcKJE5WeY7wHoQ87dFrAmDpHs=) 2: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 3: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 21:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:32:dc:e3:b0:83:70:e0:ae:7d:99:34:80:77:b9:71:3e:c9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Sep 22 21:43:21 2026 GMT Not After : Sep 23 21:58:21 2026 GMT Subject: CN=C87A02FB0FE1C8AF975377824C62E8DA8C00708F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:b0:72:72:77:57:c5:6f:17:14:b6:20:1f: fe:2f:76:dc:aa:f2:8f:52:13:36:22:c7:a8:f5:c3: ba:e7:26:fe:df:6d:30:dc:3d:d9:d1:7e:42:43:d4: 49:28:70:3d:47:13:4f:66:21:95:5f:d9:2e:4d:ad: 47:34:17:77:61:77:a2:69:65:16:ae:c4:e9:5b:a9: 45:92:92:31:78:e7:c5:f2:71:75:38:4a:72:40:26: d5:3c:e8:6d:34:b6:7a:4d:6a:f4:29:f8:b8:98:7f: 6a:44:51:1a:6a:a3:4d:86:9b:b5:73:d9:bb:8d:9b: 6a:ed:f7:00:57:6c:0b:af:5e:af:9d:21:9d:4a:da: d0:f2:28:b8:e9:74:d7:cc:45:19:83:34:3f:be:b3: bf:6f:5e:8b:2c:41:d1:4f:6c:6f:2c:2d:73:8a:6b: e3:50:d1:3f:1c:a2:44:9e:4c:34:65:14:f3:63:23: 69:b6:78:e9:a3:17:58:30:57:8b:55:af:b6:b1:90: 23:cf:40:ba:7d:d3:87:e0:7c:36:fc:ef:4d:a3:2d: e9:36:82:52:84:a5:aa:c0:b1:0b:3e:68:84:57:0d: 9a:69:91:bd:67:dd:67:f7:09:cb:86:1d:6e:9e:36: 78:9a:cf:db:ee:02:41:a6:0a:4d:ee:b8:37:b3:cd: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7A:02:FB:0F:E1:C8:AF:97:53:77:82:4C:62:E8:DA:8C:00:70:8F X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4c:76:fd:a8:b7:0a:ff:30:4e:3b:21:fc:d8:a9:c3:c8:45: ab:81:5e:f8:9a:7b:48:9f:33:52:5e:97:e8:f5:6b:52:c1:45: 2b:32:77:44:da:2a:18:27:c0:76:65:ff:fc:85:06:a7:4d:d7: ce:31:6b:71:ae:fc:3b:b6:0c:c1:5d:24:f5:6c:e5:1f:7d:dc: 38:96:8b:d5:97:f1:bf:bd:ae:aa:78:27:6b:f1:32:a9:2d:fb: b5:94:ad:e2:0e:bb:3a:03:47:fc:57:26:06:5d:9b:1a:80:0b: 00:35:aa:9c:90:d2:e6:43:6c:34:c5:45:f4:54:27:a1:b3:16: d7:0b:ac:ed:23:96:b8:80:c4:a5:b5:ba:42:c4:5f:0e:13:32: 41:fe:65:e2:3b:78:e5:a1:6b:05:ef:90:0c:3b:59:83:ec:06: 00:3f:73:d5:45:8f:13:a1:17:07:96:b2:3f:c2:ba:0c:a2:68: fd:73:07:82:c7:27:d6:26:31:69:94:68:3f:31:c5:4e:df:96: 80:86:d9:f3:9e:23:6b:59:dd:a1:21:7e:10:fc:30:76:84:58: 3b:4a:de:70:a4:04:57:28:18:03:f3:58:93:31:72:60:3e:24: 00:47:54:8c:3a:6d:82:cf:bf:1f:d8:d4:ae:43:b8:cf:34:13: 4d:b1:30:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWky3OOwg3Dgrn2ZNIB3uXE+yd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA5MjIyMTQzMjFaFw0yNjA5MjMyMTU4MjFaMDMxMTAvBgNV BAMTKEM4N0EwMkZCMEZFMUM4QUY5NzUzNzc4MjRDNjJFOERBOEMwMDcwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLrBycndXxW8XFLYgH/4vdtyq 8o9SEzYix6j1w7rnJv7fbTDcPdnRfkJD1EkocD1HE09mIZVf2S5NrUc0F3dhd6Jp ZRauxOlbqUWSkjF458XycXU4SnJAJtU86G00tnpNavQp+LiYf2pEURpqo02Gm7Vz 2buNm2rt9wBXbAuvXq+dIZ1K2tDyKLjpdNfMRRmDND++s79vXossQdFPbG8sLXOK a+NQ0T8cokSeTDRlFPNjI2m2eOmjF1gwV4tVr7axkCPPQLp904fgfDb8702jLek2 glKEparAsQs+aIRXDZppkb1n3Wf3CcuGHW6eNniaz9vuAkGmCk3uuDezzXABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHoC+w/hyK+XU3eCTGLo2owAcI8wHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9Mdv2otwr/ME47IfzYqcPIRauBXviae0if M1Jel+j1a1LBRSsyd0TaKhgnwHZl//yFBqdN184xa3Gu/Du2DMFdJPVs5R993DiW i9WX8b+9rqp4J2vxMqkt+7WUreIOuzoDR/xXJgZdmxqACwA1qpyQ0uZDbDTFRfRU J6GzFtcLrO0jlriAxKW1ukLEXw4TMkH+ZeI7eOWhawXvkAw7WYPsBgA/c9VFjxOh FweWsj/CugyiaP1zB4LHJ9YmMWmUaD8xxU7floCG2fOeI2tZ3aEhfhD8MHaEWDtK 3nCkBFcoGAPzWJMxcmA+JABHVIw6bYLPvx/Y1K5DuM80E02xMFg= -----END CERTIFICATE-----Generated at Wed Sep 23 09:51:27 2026 by rpki-client