$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: ziEv4l66WAM/iKzw/KyQvfUo2S+9ujz08A4umZdwQ/8= Subject key identifier: 22:34:A1:38:33:D8:17:19:3D:DF:4C:4A:A7:58:9E:3A:76:DD:B6:E3 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 2B094AFD3E218A43C85983AD280C64768C8577CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:40:48 +0000 Manifest this update: Mon 21 Sep 2026 11:35:48 +0000 Manifest next update: Tue 22 Sep 2026 15:19:48 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) 3: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: e1RIM8gChlXHDYaygp340sd+wmTST/hPI+4cjYepLzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:09:4a:fd:3e:21:8a:43:c8:59:83:ad:28:0c:64:76:8c:85:77:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Sep 21 11:35:48 2026 GMT Not After : Sep 22 15:19:48 2026 GMT Subject: CN=2234A13833D817193DDF4C4AA7589E3A76DDB6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:18:1c:0a:dc:14:29:b8:f6:97:68:8f:b0: 6d:74:fe:8b:14:9a:b1:10:21:40:9c:1b:66:cc:0d: f8:82:73:e3:67:ae:5e:53:60:f4:7f:63:c9:dc:75: 31:ef:5f:37:87:93:db:b4:1b:9d:c7:3b:fd:02:a8: 3a:6d:5c:ab:28:7c:a8:dd:e0:5d:bf:2a:9a:08:04: a5:48:2b:1b:f3:bd:0b:63:21:46:d1:60:32:3f:cc: 75:e3:a2:9f:f9:e0:dd:a2:45:a9:62:23:cb:c5:92: 57:df:08:97:21:d6:55:59:dc:6b:4e:f4:a7:9e:d4: ac:d8:ae:66:4a:50:6b:86:4a:10:d8:5b:24:46:3a: 9d:94:f3:cc:42:2a:88:04:11:75:ea:52:a8:54:b9: 44:c3:f5:31:19:75:a3:01:63:df:78:a5:02:b1:17: 9c:32:7f:b3:3f:13:eb:f1:0d:8b:97:fa:55:ed:99: f6:59:24:bb:30:1d:bf:7c:54:56:89:59:27:c5:51: 51:82:16:a7:c0:c8:78:22:3b:3b:0b:42:9d:d2:eb: dd:c7:d4:63:8e:17:a9:34:28:50:fd:ab:1e:de:7e: 76:4c:a0:f8:0f:06:be:ba:73:3d:ea:d0:7c:e5:a4: f2:4f:e9:66:36:0a:aa:de:94:2f:d8:76:f9:67:86: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:A1:38:33:D8:17:19:3D:DF:4C:4A:A7:58:9E:3A:76:DD:B6:E3 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c8:48:b2:7a:4f:a1:96:d4:dd:2c:ca:c9:d9:2e:06:22:c0: 8a:e0:28:80:0a:5f:ca:42:ba:de:44:11:21:45:44:8b:5a:2b: c1:ba:8d:46:e7:64:56:a7:86:f8:f7:c0:22:01:c2:bd:1f:fb: f6:51:f4:b9:19:44:3a:2d:42:e3:f4:19:38:53:d9:95:af:4d: 09:58:eb:57:f2:6a:d2:0e:4b:58:7c:69:4f:2f:14:b0:a5:31: aa:3a:ae:57:3a:aa:fb:59:72:52:18:92:a8:8a:8a:7e:7d:3e: 95:a2:07:72:ea:49:64:6c:96:a7:55:e5:c5:f3:8b:39:b0:b5: a8:25:1a:cd:76:9f:f8:be:07:4e:dc:ba:45:65:95:88:fa:cd: 38:0e:b0:99:f7:1c:60:2b:84:84:bb:9a:d0:6f:44:2e:3d:65: ce:c5:28:f1:4f:0a:f8:64:76:fc:dc:b4:4e:b8:67:79:5b:97: f0:4e:1b:2e:9d:54:3a:d8:e0:3b:78:30:2b:92:91:c8:45:e8: 53:ac:78:e8:83:84:6d:0f:8a:f7:35:40:dd:af:30:aa:d4:f2: 8f:d5:d1:b9:ab:a2:cd:74:b3:81:bc:40:06:e8:c6:f6:f4:d0: e1:c1:79:56:f3:1d:ac:4b:f4:dc:7e:c1:76:6b:67:33:ef:4a: da:73:b3:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwlK/T4hikPIWYOtKAxkdoyFd80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA5MjExMTM1NDhaFw0yNjA5MjIxNTE5NDhaMDMxMTAvBgNV BAMTKDIyMzRBMTM4MzNEODE3MTkzRERGNEM0QUE3NTg5RTNBNzZEREI2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQChgcCtwUKbj2l2iPsG10/osU mrEQIUCcG2bMDfiCc+Nnrl5TYPR/Y8ncdTHvXzeHk9u0G53HO/0CqDptXKsofKjd 4F2/KpoIBKVIKxvzvQtjIUbRYDI/zHXjop/54N2iRaliI8vFklffCJch1lVZ3GtO 9Kee1KzYrmZKUGuGShDYWyRGOp2U88xCKogEEXXqUqhUuUTD9TEZdaMBY994pQKx F5wyf7M/E+vxDYuX+lXtmfZZJLswHb98VFaJWSfFUVGCFqfAyHgiOzsLQp3S693H 1GOOF6k0KFD9qx7efnZMoPgPBr66cz3q0HzlpPJP6WY2CqrelC/YdvlnhlSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjShODPYFxk930xKp1ieOnbdtuMwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXISLJ6T6GW1N0sysnZLgYiwIrgKIAKX8pC ut5EESFFRItaK8G6jUbnZFanhvj3wCIBwr0f+/ZR9LkZRDotQuP0GThT2ZWvTQlY 61fyatIOS1h8aU8vFLClMao6rlc6qvtZclIYkqiKin59PpWiB3LqSWRslqdV5cXz izmwtaglGs12n/i+B07cukVllYj6zTgOsJn3HGArhIS7mtBvRC49Zc7FKPFPCvhk dvzctE64Z3lbl/BOGy6dVDrY4Dt4MCuSkchF6FOseOiDhG0Pivc1QN2vMKrU8o/V 0bmros10s4G8QAboxvb00OHBeVbzHaxL9Nx+wXZrZzPvStpzs1s= -----END CERTIFICATE-----Generated at Mon Sep 21 17:51:03 2026 by rpki-client