$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: gz73j9yI02PGgR0v2QdgZ2OFGt69OlK1ueBI52oiANU= Subject key identifier: 62:21:D7:D7:AE:84:E5:83:0E:9A:BE:0F:32:00:38:E0:66:74:71:5B Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 0BE8009BFBEE121DE87CF404FE35BDAAB6512019 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:22:52 +0000 Manifest this update: Wed 23 Sep 2026 01:17:52 +0000 Manifest next update: Thu 24 Sep 2026 04:06:52 +0000 Files and hashes: 1: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: JjXsamd9aFu5ijzWxVP79GVhog/TRrVjB9IomnsJroE=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:00:9b:fb:ee:12:1d:e8:7c:f4:04:fe:35:bd:aa:b6:51:20:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Sep 23 01:17:52 2026 GMT Not After : Sep 24 04:06:52 2026 GMT Subject: CN=6221D7D7AE84E5830E9ABE0F320038E06674715B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:62:05:db:e6:4d:67:07:ac:c8:e0:b9:d1:33: ad:eb:c4:5c:58:67:bc:9c:59:c8:20:53:17:98:91: 1e:7c:d9:7a:4c:40:04:be:f0:6f:60:ab:cf:14:0e: 32:a3:36:7f:10:b5:12:8a:0d:23:84:f0:93:3a:f7: 72:2c:84:c7:48:e5:82:5a:d5:98:fc:14:c4:8a:e0: 26:c7:0d:e0:21:9b:85:ad:b8:fb:b1:6f:3d:08:a7: b7:bc:78:06:ba:b7:2e:df:3d:cd:ec:99:cc:63:15: de:81:cf:82:7c:39:cc:4a:ba:1a:51:0d:78:c7:c0: fb:3f:e3:01:85:78:e7:ae:a8:3a:02:3d:b7:5e:ad: 06:28:20:28:ee:e0:35:7e:ac:c1:d8:79:19:8e:d5: 49:4a:e5:e4:31:00:d1:97:f1:28:b4:c0:3e:ff:3f: 62:95:71:59:c1:d8:fd:71:89:99:46:ee:3e:60:3a: b0:2b:80:ac:f8:fb:9c:2f:28:05:b9:7c:da:28:73: 2c:93:ae:53:fa:28:33:1a:6f:bc:4c:88:e4:1f:23: 31:5d:c7:f0:51:51:36:1f:e5:46:cb:af:e5:e2:6e: 2b:97:cf:ed:db:14:ef:fa:6b:ce:74:49:da:e1:bc: fd:3c:eb:72:bf:bd:92:b2:f1:4a:ce:f0:29:0b:65: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:D7:D7:AE:84:E5:83:0E:9A:BE:0F:32:00:38:E0:66:74:71:5B X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:e5:86:d9:76:1c:f4:d1:bd:68:5d:bc:6e:90:83:9e:06: 16:c9:d6:ad:43:18:94:09:cb:90:95:ad:78:60:20:dd:85:40: 6a:eb:7f:fc:86:3b:bf:0d:18:66:1e:b5:75:2d:25:88:a9:e8: fc:cb:25:15:03:64:6e:ed:1e:04:9e:49:dd:c0:13:bd:ed:af: 3d:32:44:4d:a1:ad:49:cb:bb:45:06:dd:35:f9:8b:f7:75:ad: b7:a2:1b:11:c1:38:92:6e:89:ff:84:3f:25:dd:fc:07:fe:75: 4b:aa:db:36:0f:1e:2a:b4:4d:ab:74:d1:be:61:12:e0:4c:b9: ef:65:59:1d:48:0c:d5:f2:4d:9f:01:99:04:7c:e8:58:d9:72: f2:35:12:83:b2:f8:6a:61:5c:3a:41:f0:1e:88:fb:0c:fd:2e: ac:3c:48:8f:a8:28:80:4f:1b:25:e1:a1:55:8a:56:e9:67:21: 92:17:20:08:80:6e:5f:a9:80:87:c3:4f:fd:44:b1:08:51:73: ce:ba:33:26:23:a3:a0:bd:b8:70:ad:f4:0c:0f:4d:91:59:0e: 51:e1:06:0b:fb:a4:c7:3e:2f:6c:fe:30:95:5e:7f:d3:b3:45: 81:d8:72:00:08:73:63:48:92:93:c3:88:da:80:27:a8:c2:6c: 1e:57:71:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+gAm/vuEh3ofPQE/jW9qrZRIBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA5MjMwMTE3NTJaFw0yNjA5MjQwNDA2NTJaMDMxMTAvBgNV BAMTKDYyMjFEN0Q3QUU4NEU1ODMwRTlBQkUwRjMyMDAzOEUwNjY3NDcxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYgXb5k1nB6zI4LnRM63rxFxY Z7ycWcggUxeYkR582XpMQAS+8G9gq88UDjKjNn8QtRKKDSOE8JM693IshMdI5YJa 1Zj8FMSK4CbHDeAhm4WtuPuxbz0Ip7e8eAa6ty7fPc3smcxjFd6Bz4J8OcxKuhpR DXjHwPs/4wGFeOeuqDoCPbderQYoICju4DV+rMHYeRmO1UlK5eQxANGX8Si0wD7/ P2KVcVnB2P1xiZlG7j5gOrArgKz4+5wvKAW5fNoocyyTrlP6KDMab7xMiOQfIzFd x/BRUTYf5UbLr+XibiuXz+3bFO/6a850SdrhvP0863K/vZKy8UrO8CkLZf6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYiHX166E5YMOmr4PMgA44GZ0cVswHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPV5YbZdhz00b1oXbxukIOeBhbJ1q1DGJQJ y5CVrXhgIN2FQGrrf/yGO78NGGYetXUtJYip6PzLJRUDZG7tHgSeSd3AE73trz0y RE2hrUnLu0UG3TX5i/d1rbeiGxHBOJJuif+EPyXd/Af+dUuq2zYPHiq0Tat00b5h EuBMue9lWR1IDNXyTZ8BmQR86FjZcvI1EoOy+GphXDpB8B6I+wz9Lqw8SI+oKIBP GyXhoVWKVulnIZIXIAiAbl+pgIfDT/1EsQhRc866MyYjo6C9uHCt9AwPTZFZDlHh Bgv7pMc+L2z+MJVef9OzRYHYcgAIc2NIkpPDiNqAJ6jCbB5XcSg= -----END CERTIFICATE-----Generated at Wed Sep 23 19:33:41 2026 by rpki-client