$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json) Hash identifier: RKDYPl4DN84xjn6G48E2QW1c3o2ZjbkmUAzbSUNh9Jo= Subject key identifier: 44:EC:0F:20:D6:15:4A:02:6D:C2:14:17:42:AC:37:E7:30:EB:45:E3 Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 26B2BFB259C87C083262C65262D8A097D79C144C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft Manifest number: BF Signing time: Tue 22 Sep 2026 14:08:47 +0000 Manifest this update: Tue 22 Sep 2026 14:03:47 +0000 Manifest next update: Wed 23 Sep 2026 15:25:47 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=) 2: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: ll3mUSiA/eUzTu+yW4/h/wX+ReUS1AkdlksL4JSL2Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b2:bf:b2:59:c8:7c:08:32:62:c6:52:62:d8:a0:97:d7:9c:14:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: Sep 22 14:03:47 2026 GMT Not After : Sep 23 15:25:47 2026 GMT Subject: CN=44EC0F20D6154A026DC2141742AC37E730EB45E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:35:66:28:7b:a0:ec:1c:8a:e1:e2:7e:e1: 7c:af:6b:82:9b:e0:10:ff:41:6b:45:80:47:e5:ed: a0:74:24:d1:a9:00:ec:16:c5:22:63:dd:aa:5b:1d: e3:2e:38:8c:6d:ff:af:57:16:ad:06:55:ea:37:bc: 1f:82:0a:d2:ac:99:97:4c:61:71:0d:00:07:b1:00: 65:7b:e4:d5:27:a0:a0:40:00:7e:8c:80:73:1e:40: 13:cd:f7:a0:e6:a0:cb:b5:33:dd:34:fb:9d:39:95: d6:2d:32:95:4f:e2:db:65:ca:45:f2:23:e0:fd:9d: 3d:66:d8:e7:e9:ff:de:16:f1:8a:93:a3:07:56:32: 24:6e:01:3e:5b:61:c0:1f:3f:53:30:c5:27:9e:69: 95:7c:57:8d:23:5b:d0:6f:6b:df:c2:24:59:15:fd: 60:28:43:ea:17:53:78:a8:a5:4f:fb:cc:56:eb:19: 6d:9f:4a:d0:c2:31:10:87:53:19:b0:f6:ee:09:e7: 92:a3:7c:4e:e0:57:3f:0a:b1:e7:40:eb:79:88:c7: bb:b9:a3:c0:e0:50:de:ac:a7:c9:af:aa:a3:52:02: 9c:a1:f4:02:c0:5f:c4:d9:8d:0d:a5:78:94:7a:22: b6:28:d2:a5:c2:ec:ae:cc:79:93:87:24:4c:42:bd: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:0F:20:D6:15:4A:02:6D:C2:14:17:42:AC:37:E7:30:EB:45:E3 X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:64:11:48:8f:f3:12:11:6f:e3:85:fe:38:08:51:17:e8:b5: 4e:2d:a2:ae:0b:f8:e1:96:c1:47:44:77:ef:ac:00:28:a8:d5: 2f:4c:f5:b8:5a:63:2c:7d:17:f6:c2:94:f4:5a:d2:55:cf:c6: 9c:d3:cc:40:c4:e0:10:2e:05:1e:80:8c:ad:6d:fe:6a:25:a6: 14:21:50:24:89:49:c2:a4:ee:a2:07:c1:b5:fd:8a:1b:f2:34: 9f:e3:68:de:90:d1:f5:30:44:b0:c5:ce:85:6e:15:c5:26:c6: 70:c9:38:41:1b:1d:b6:56:d1:ef:94:22:6a:30:7d:8b:b0:aa: 35:7f:42:d8:7f:56:a4:4a:58:4f:13:d9:6e:9f:ca:59:df:f0: 68:60:94:55:14:43:7e:6c:f2:91:14:a7:0d:90:a3:58:23:0a: f5:47:14:83:59:24:1f:65:ed:28:be:e3:3b:c8:0b:ba:d4:25: 6e:a6:c4:b4:e1:db:72:23:7b:83:0d:2d:fb:ab:1d:1e:40:29: b0:65:7c:ad:46:d3:41:83:00:97:55:36:99:91:89:f4:15:44: 36:43:f5:52:f6:00:21:72:d7:64:d0:7d:e0:74:d4:8e:e2:81: 27:c7:97:15:0d:bb:db:c7:f4:8b:fc:e7:7a:29:75:b7:24:d4: 51:66:f6:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrK/slnIfAgyYsZSYtigl9ecFEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjA5MjIxNDAzNDdaFw0yNjA5MjMxNTI1NDdaMDMxMTAvBgNV BAMTKDQ0RUMwRjIwRDYxNTRBMDI2REMyMTQxNzQyQUMzN0U3MzBFQjQ1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1zVmKHug7ByK4eJ+4Xyva4Kb 4BD/QWtFgEfl7aB0JNGpAOwWxSJj3apbHeMuOIxt/69XFq0GVeo3vB+CCtKsmZdM YXENAAexAGV75NUnoKBAAH6MgHMeQBPN96DmoMu1M900+505ldYtMpVP4ttlykXy I+D9nT1m2Ofp/94W8YqTowdWMiRuAT5bYcAfP1MwxSeeaZV8V40jW9Bva9/CJFkV /WAoQ+oXU3iopU/7zFbrGW2fStDCMRCHUxmw9u4J55KjfE7gVz8KsedA63mIx7u5 o8DgUN6sp8mvqqNSApyh9ALAX8TZjQ2leJR6IrYo0qXC7K7MeZOHJExCvdTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROwPINYVSgJtwhQXQqw35zDrReMwHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhkEUiP8xIRb+OF/jgIURfotU4toq4L+OGW wUdEd++sACio1S9M9bhaYyx9F/bClPRa0lXPxpzTzEDE4BAuBR6AjK1t/molphQh UCSJScKk7qIHwbX9ihvyNJ/jaN6Q0fUwRLDFzoVuFcUmxnDJOEEbHbZW0e+UImow fYuwqjV/Qth/VqRKWE8T2W6fylnf8GhglFUUQ35s8pEUpw2Qo1gjCvVHFINZJB9l 7Si+4zvIC7rUJW6mxLTh23Ije4MNLfurHR5AKbBlfK1G00GDAJdVNpmRifQVRDZD 9VL2ACFy12TQfeB01I7igSfHlxUNu9vH9Iv853opdbck1FFm9lk= -----END CERTIFICATE-----Generated at Wed Sep 23 02:58:36 2026 by rpki-client