$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: qlnRZyqeDur3EPSd493LO2tHfcYt+3F/nIqZr3iVi3Q= Subject key identifier: 4B:0E:F8:70:4D:1A:FC:14:91:E4:10:C8:ED:D4:26:75:3C:1B:8F:2D Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 3BFA8B8A511139EAC07C192F50ECCF6D4D875498 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:28:12 +0000 Manifest this update: Fri 25 Sep 2026 14:23:12 +0000 Manifest next update: Sat 26 Sep 2026 15:04:12 +0000 Files and hashes: 1: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: 2fJDMdAypff6Y1bj0mxzpCYSxE5JgXZrT6jOF72b7GQ=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) 3: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) 4: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 5: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fa:8b:8a:51:11:39:ea:c0:7c:19:2f:50:ec:cf:6d:4d:87:54:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: Sep 25 14:23:12 2026 GMT Not After : Sep 26 15:04:12 2026 GMT Subject: CN=4B0EF8704D1AFC1491E410C8EDD426753C1B8F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:17:99:d5:7e:46:23:d7:3a:f1:22:f8:8f: 5f:9c:96:11:85:d5:ea:d9:c9:87:4b:ca:4d:e0:2c: 29:84:d9:90:f2:94:04:94:25:d2:bc:1a:e1:b8:58: 90:8f:bd:7a:89:41:c8:7a:c4:6c:b5:cd:c4:59:dc: 2e:1d:84:80:b9:11:d6:eb:bf:e8:04:b1:c9:f9:79: 09:14:36:e2:be:20:da:6d:eb:ee:66:12:af:40:4a: 7b:dc:e3:a6:2d:16:c3:6c:44:da:18:e0:90:8d:32: 18:e0:49:84:b6:bc:7d:56:18:16:66:dd:0d:ce:e1: 3e:c6:f0:db:26:40:96:8a:94:1d:cf:ad:a7:70:28: e2:dc:14:e8:dd:51:16:65:07:be:12:48:e3:aa:63: c2:6b:ba:61:81:af:fd:1b:1a:86:35:fb:5b:11:85: b2:ba:f0:c7:dc:d9:8e:59:e5:d8:91:3a:a4:b6:bd: 0e:80:a3:b5:b7:c1:d8:43:a7:47:32:5e:7c:98:2c: e3:af:af:9b:2c:05:6a:f2:19:0a:bb:03:66:14:de: 45:bf:8c:0b:f1:36:7f:e5:b3:a8:16:07:66:39:a2: a5:7a:4b:b2:db:55:d1:17:dd:81:7e:a7:a2:cf:9b: e7:2a:2d:0a:5d:66:81:14:9a:60:aa:6e:14:71:45: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:F8:70:4D:1A:FC:14:91:E4:10:C8:ED:D4:26:75:3C:1B:8F:2D X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c7:a2:42:55:3e:09:b4:ca:63:6e:b9:42:8b:34:81:d4:3a: 99:9c:a3:bd:d3:b6:8f:08:06:c0:87:6a:4b:29:5c:10:c1:e9: 3e:69:39:14:1b:e5:dd:f7:06:01:23:52:3f:4d:4f:d1:79:69: 28:52:16:31:86:63:5d:6a:77:88:4a:a6:20:53:24:b7:0f:9d: 7e:24:e2:50:80:72:db:ae:7f:e1:91:dc:a7:93:c7:ae:4e:5c: 44:8f:43:cb:17:8f:60:32:8a:78:4b:93:d0:1e:ff:a3:43:ac: 26:f2:92:0d:09:94:d6:1f:01:66:9b:b3:60:81:82:74:dc:07: 28:7b:ae:eb:f4:50:dd:dc:21:6e:0e:e5:50:1b:7b:6c:18:2f: 80:ba:77:3c:dd:5c:aa:34:63:8c:58:d8:7a:1b:19:29:da:b8: c7:4e:06:b0:a9:3a:fe:0c:c7:00:2c:59:25:d7:a9:aa:d6:c2: 3f:c9:ce:24:b1:6f:66:33:a8:42:18:23:c4:ca:13:25:41:b8: 14:78:4e:64:b7:bf:30:ed:46:c2:0c:f3:44:8f:22:55:b5:90: 41:3b:c9:ef:21:f2:2e:48:3c:06:0e:b3:79:ad:69:1e:c0:20: 2c:dc:93:9c:b2:12:8c:0d:34:23:ed:0d:73:1f:eb:35:6e:41: 79:96:62:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/qLilEROerAfBkvUOzPbU2HVJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA5MjUxNDIzMTJaFw0yNjA5MjYxNTA0MTJaMDMxMTAvBgNV BAMTKDRCMEVGODcwNEQxQUZDMTQ5MUU0MTBDOEVERDQyNjc1M0MxQjhGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNtxeZ1X5GI9c68SL4j1+clhGF 1erZyYdLyk3gLCmE2ZDylASUJdK8GuG4WJCPvXqJQch6xGy1zcRZ3C4dhIC5Edbr v+gEscn5eQkUNuK+INpt6+5mEq9ASnvc46YtFsNsRNoY4JCNMhjgSYS2vH1WGBZm 3Q3O4T7G8NsmQJaKlB3PradwKOLcFOjdURZlB74SSOOqY8JrumGBr/0bGoY1+1sR hbK68Mfc2Y5Z5diROqS2vQ6Ao7W3wdhDp0cyXnyYLOOvr5ssBWryGQq7A2YU3kW/ jAvxNn/ls6gWB2Y5oqV6S7LbVdEX3YF+p6LPm+cqLQpdZoEUmmCqbhRxRfe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSw74cE0a/BSR5BDI7dQmdTwbjy0wHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzHokJVPgm0ymNuuUKLNIHUOpmco73Tto8I BsCHakspXBDB6T5pORQb5d33BgEjUj9NT9F5aShSFjGGY11qd4hKpiBTJLcPnX4k 4lCActuuf+GR3KeTx65OXESPQ8sXj2AyinhLk9Ae/6NDrCbykg0JlNYfAWabs2CB gnTcByh7ruv0UN3cIW4O5VAbe2wYL4C6dzzdXKo0Y4xY2HobGSnauMdOBrCpOv4M xwAsWSXXqarWwj/JziSxb2YzqEIYI8TKEyVBuBR4TmS3vzDtRsIM80SPIlW1kEE7 ye8h8i5IPAYOs3mtaR7AICzck5yyEowNNCPtDXMf6zVuQXmWYjA= -----END CERTIFICATE-----Generated at Fri Sep 25 21:39:23 2026 by rpki-client