$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft File: F92C9917A30302FCE264D46D8FE65A1CEA194138.mft (raw, json) Hash identifier: C6EteVGhtLkCudBIlozIJ9sBfu4HDrDby4T6OOe1gTo= Subject key identifier: 3E:DF:C4:9B:D5:D0:CA:6C:7E:D9:F3:38:87:3D:AD:C9:EB:15:77:C6 Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 Certificate issuer: /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Certificate serial: 5E91BC795A92133D017344018D025D44673F3E62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:11:41 +0000 Manifest this update: Mon 21 Sep 2026 04:06:41 +0000 Manifest next update: Tue 22 Sep 2026 06:01:41 +0000 Files and hashes: 1: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: 8ED3fpYlNYrY20dW5dy2FIrzIf47HrbQ0fyQ3uLjegk=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: nJnlMgxQpBrYqZycvGCzonJXiZwDsWr34U7o3OPt3ps=) 3: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: VwexXBl+Y3+ndbZIMN+60ZESaBQjfihLPdMwB+vbCec=) 4: F92C9917A30302FCE264D46D8FE65A1CEA194138.crl (hash: zOwcBFmhpIoetsqpvTmeUYAXK58OReHE9pcuQSw9t8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:bc:79:5a:92:13:3d:01:73:44:01:8d:02:5d:44:67:3f:3e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Validity Not Before: Sep 21 04:06:41 2026 GMT Not After : Sep 22 06:01:41 2026 GMT Subject: CN=3EDFC49BD5D0CA6C7ED9F338873DADC9EB1577C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:d3:37:e0:67:29:4b:48:e9:81:f8:c1:0c: 6c:a1:19:97:d2:85:14:e2:ef:ca:28:0b:83:9a:ef: 78:50:18:8e:f0:fd:e9:6e:7b:e6:fe:82:9c:56:d0: 28:95:62:23:2b:2e:52:80:da:40:49:c4:ce:b7:f1: e0:71:34:6e:3b:e9:30:bb:c6:78:5b:9e:31:b1:f3: fd:fe:4e:80:4c:3f:0b:55:98:0a:36:32:60:fb:5a: b1:b6:4d:80:79:5b:27:db:44:31:0c:f8:c4:95:37: fe:80:a5:9a:73:f1:0f:e9:dd:43:04:ff:b8:e2:d5: cd:c9:85:37:32:06:14:3d:b0:4c:1f:65:88:a9:4e: 40:14:d9:99:67:c7:b5:31:94:ec:d5:4e:2b:d1:bb: 0e:99:96:25:b4:42:f7:b7:c8:f7:0d:dc:c7:77:f8: 97:6a:61:38:1e:f2:22:e2:94:2d:b4:52:89:c2:ce: e1:ff:46:61:55:e0:a3:ff:e3:ab:6b:4f:45:03:14: 79:cc:52:7e:f3:f2:69:97:2d:e0:8c:cf:19:5e:b9: 51:b1:b5:7d:dc:84:5d:b3:dc:63:e7:8c:0e:c9:c7: c2:e9:3b:78:4a:25:cf:a3:2e:95:16:f6:96:ee:1c: 43:3c:ce:b8:d8:fc:6e:79:7a:5e:42:22:f5:e2:62: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:C4:9B:D5:D0:CA:6C:7E:D9:F3:38:87:3D:AD:C9:EB:15:77:C6 X509v3 Authority Key Identifier: keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:98:f8:0b:c7:03:c4:55:82:48:aa:7f:cc:a4:00:69:33:a5: 46:30:04:32:b8:71:72:3b:2d:16:d2:cc:ee:67:e1:1e:ef:0a: fd:40:5d:e1:0b:b7:5b:6c:c9:83:19:4e:21:d9:1b:7b:d5:f4: ff:d5:c0:ca:e2:74:49:f5:e3:3f:53:10:73:b3:38:ea:b2:ea: 05:51:17:e3:41:8c:89:86:53:14:b3:7e:a2:eb:f0:aa:31:0f: f2:ff:ed:a8:9b:c1:19:1e:cd:6b:3b:46:3a:8e:8f:d3:a3:3c: 81:e3:ae:76:d1:e6:c1:5d:95:19:e7:ff:2e:ff:fe:fc:89:84: bc:b2:b1:26:8f:14:ec:22:6f:4a:62:be:d1:b8:cd:93:a3:e2: 67:ec:13:85:b4:7c:8c:c6:74:af:5b:19:33:cf:e0:cf:40:bf: 71:9b:5a:c8:bf:32:3e:8f:17:65:91:5c:3f:c7:fa:1a:7f:ac: f2:6a:74:16:6e:4b:8d:0c:ab:e0:47:0d:6a:34:d6:4d:04:80: 78:85:67:ee:4d:c6:ba:27:1c:07:ad:ac:8c:37:f7:82:4b:35: 47:31:5d:6a:09:26:6a:4e:7b:59:d2:37:ea:f6:64:da:cd:15: 87:6b:b5:1b:55:ed:21:b3:26:14:8d:ec:28:ac:64:f6:c0:87: 27:0a:4b:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpG8eVqSEz0Bc0QBjQJdRGc/PmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNF QTE5NDEzODAeFw0yNjA5MjEwNDA2NDFaFw0yNjA5MjIwNjAxNDFaMDMxMTAvBgNV BAMTKDNFREZDNDlCRDVEMENBNkM3RUQ5RjMzODg3M0RBREM5RUIxNTc3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPH9M34GcpS0jpgfjBDGyhGZfS hRTi78ooC4Oa73hQGI7w/elue+b+gpxW0CiVYiMrLlKA2kBJxM638eBxNG476TC7 xnhbnjGx8/3+ToBMPwtVmAo2MmD7WrG2TYB5WyfbRDEM+MSVN/6ApZpz8Q/p3UME /7ji1c3JhTcyBhQ9sEwfZYipTkAU2Zlnx7UxlOzVTivRuw6ZliW0Qve3yPcN3Md3 +JdqYTge8iLilC20UonCzuH/RmFV4KP/46trT0UDFHnMUn7z8mmXLeCMzxleuVGx tX3chF2z3GPnjA7Jx8LpO3hKJc+jLpUW9pbuHEM8zrjY/G55el5CIvXiYgBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPt/Em9XQymx+2fM4hz2tyesVd8YwHwYDVR0j BBgwFoAU+SyZF6MDAvziZNRtj+ZaHOoZQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwZTdmOGUtYzI5Zi00ZTZiLWFkMGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdB MzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNFQTE5NDEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTJDOTkxN0EzMDMwMkZDRTI2NEQ0NkQ4RkU2NUExQ0VBMTk0 MTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVB MUNFQTE5NDEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiY+AvHA8RVgkiqf8ykAGkzpUYwBDK4cXI7 LRbSzO5n4R7vCv1AXeELt1tsyYMZTiHZG3vV9P/VwMridEn14z9TEHOzOOqy6gVR F+NBjImGUxSzfqLr8KoxD/L/7aibwRkezWs7RjqOj9OjPIHjrnbR5sFdlRnn/y7/ /vyJhLyysSaPFOwib0pivtG4zZOj4mfsE4W0fIzGdK9bGTPP4M9Av3GbWsi/Mj6P F2WRXD/H+hp/rPJqdBZuS40Mq+BHDWo01k0EgHiFZ+5NxronHAetrIw394JLNUcx XWoJJmpOe1nSN+r2ZNrNFYdrtRtV7SGzJhSN7CisZPbAhycKSxI= -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:20 2026 by rpki-client