$ rpki-client -vvvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft File: F831F8D1B7EB333E836D19E2C6659AA968449902.mft (raw, json) Hash identifier: h95RdQ++yBoxrTEtrcWUXRfDZh/gue5Ni6XbdsoUrlM= Subject key identifier: 79:02:28:2A:F9:F4:40:79:23:0D:D1:97:00:D9:03:E9:2C:EB:F4:CF Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 Certificate issuer: /CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Certificate serial: 19A5CF5A53B5F505A5C8A5BFCD99D7762437A6A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft Manifest number: CA Signing time: Thu 01 Oct 2026 02:08:30 +0000 Manifest this update: Thu 01 Oct 2026 02:03:30 +0000 Manifest next update: Fri 02 Oct 2026 03:20:30 +0000 Files and hashes: 1: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: GC34bSdqb+lceUDxAMg1+4DTRXPlTsVXAo/W4xvhmFg=) 2: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: FptSR8q7lfMCgCSKLjWnM/OjVJhBqEdi2E49VH6LcSA=) 3: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: NUr5zEr4YzxkTQ8Y53f2vd4+rpGC5VIJU6v6ZJ3ymFI=) 4: F831F8D1B7EB333E836D19E2C6659AA968449902.crl (hash: PeV9YS7stZLdZ1TRgyCfETCRhKcsz/XAWDce7cAYmiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:cf:5a:53:b5:f5:05:a5:c8:a5:bf:cd:99:d7:76:24:37:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Validity Not Before: Oct 1 02:03:30 2026 GMT Not After : Oct 2 03:20:30 2026 GMT Subject: CN=7902282AF9F44079230DD19700D903E92CEBF4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:97:8e:32:58:4f:d4:b9:9e:f0:ea:6a:83: a2:32:63:41:b8:2d:74:01:4e:ab:25:74:fe:41:d5: ab:39:1e:da:a1:ff:bf:16:69:4d:ea:2f:5c:91:47: 6c:41:bc:e1:67:f3:27:3f:f5:7a:5f:85:c3:de:84: 9f:47:76:ec:ca:00:13:96:d7:76:b8:c1:76:89:f8: dd:64:2c:ec:3d:0d:0b:79:58:f6:7f:d1:b6:e6:36: 81:6e:c4:74:53:22:55:26:1e:de:dd:2c:1e:08:5d: 3d:5f:99:c9:b0:37:04:29:68:3d:26:b9:5d:eb:ba: 51:a6:5c:0d:1f:82:48:63:95:25:42:05:11:34:d2: 94:7b:4e:16:11:50:ad:5f:da:7f:0a:1b:07:23:41: 04:21:9b:67:58:0d:98:65:fc:b4:c0:a0:19:8b:7b: 47:90:ff:53:b3:d6:95:70:c8:83:26:13:cb:b9:01: 18:13:0c:31:2d:70:ad:00:0d:b4:bf:16:89:69:63: 79:84:e6:d9:46:9b:3e:65:ad:58:57:9a:40:90:68: db:7c:5b:7e:cf:69:71:1d:57:9e:ad:e6:c5:c9:72: 3c:5f:c8:b1:cc:3e:d8:80:f0:6e:a7:11:e9:5a:3d: 6c:1f:4b:26:3a:b7:43:91:66:93:eb:d9:ab:52:a7: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:02:28:2A:F9:F4:40:79:23:0D:D1:97:00:D9:03:E9:2C:EB:F4:CF X509v3 Authority Key Identifier: keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:a3:7d:e1:64:ae:a4:33:3c:0c:73:9a:31:88:8a:16:33: 39:db:a9:f3:24:64:05:58:3b:ad:1c:d4:d1:36:8e:fb:c7:69: 5c:fd:6c:3d:b4:2c:db:46:08:1b:25:ad:70:30:c7:2f:2c:00: 6a:74:1b:3a:d1:e0:b4:79:2d:5d:3d:15:02:7f:9f:da:06:cb: 4e:b0:47:fd:37:d7:49:18:42:39:3a:40:95:24:56:8a:67:08: f7:cf:a2:61:5a:f9:82:7e:e2:24:eb:4b:67:26:f5:e3:86:7c: c8:29:dd:18:dc:1f:48:9f:8f:6e:a6:1b:83:7c:c1:7e:e0:15: fc:ed:f1:34:fa:f4:da:3f:1a:b2:f9:dc:2d:e1:7a:38:7b:7d: 9b:79:ef:17:d5:26:8f:90:78:f4:ab:66:76:77:af:df:04:f8: 1a:da:73:46:45:a8:b8:03:1c:f8:3b:13:96:b3:11:1e:a8:bf: 6c:a3:29:2b:16:0a:c2:24:f9:32:ea:9b:64:58:ad:66:3a:10: db:b0:06:b1:cb:f9:39:d2:32:b7:7a:95:64:db:8d:18:72:69: 91:20:27:9a:d4:9a:aa:37:2d:ca:dc:eb:d1:bd:90:34:1a:1d: ce:32:25:25:98:2f:f1:5d:66:e2:8b:65:c4:40:49:ae:f2:eb: 6d:09:49:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaXPWlO19QWlyKW/zZnXdiQ3pqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2 ODQ0OTkwMjAeFw0yNjEwMDEwMjAzMzBaFw0yNjEwMDIwMzIwMzBaMDMxMTAvBgNV BAMTKDc5MDIyODJBRjlGNDQwNzkyMzBERDE5NzAwRDkwM0U5MkNFQkY0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoZeOMlhP1Lme8Opqg6IyY0G4 LXQBTqsldP5B1as5Htqh/78WaU3qL1yRR2xBvOFn8yc/9XpfhcPehJ9HduzKABOW 13a4wXaJ+N1kLOw9DQt5WPZ/0bbmNoFuxHRTIlUmHt7dLB4IXT1fmcmwNwQpaD0m uV3rulGmXA0fgkhjlSVCBRE00pR7ThYRUK1f2n8KGwcjQQQhm2dYDZhl/LTAoBmL e0eQ/1Oz1pVwyIMmE8u5ARgTDDEtcK0ADbS/FolpY3mE5tlGmz5lrVhXmkCQaNt8 W37PaXEdV56t5sXJcjxfyLHMPtiA8G6nEelaPWwfSyY6t0ORZpPr2atSp8X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQIoKvn0QHkjDdGXANkD6Szr9M8wHwYDVR0j BBgwFoAU+DH40bfrMz6DbRnixmWaqWhEmQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQ0Y2I4ZDgtMTUwNS00NjgyLTlkZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFC N0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2ODQ0OTkwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODMxRjhEMUI3RUIzMzNFODM2RDE5RTJDNjY1OUFBOTY4NDQ5 OTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlB QTk2ODQ0OTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEyo33hZK6kMzwMc5oxiIoWMznbqfMkZAVY O60c1NE2jvvHaVz9bD20LNtGCBslrXAwxy8sAGp0GzrR4LR5LV09FQJ/n9oGy06w R/0310kYQjk6QJUkVopnCPfPomFa+YJ+4iTrS2cm9eOGfMgp3RjcH0ifj26mG4N8 wX7gFfzt8TT69No/GrL53C3hejh7fZt57xfVJo+QePSrZnZ3r98E+Brac0ZFqLgD HPg7E5azER6ov2yjKSsWCsIk+TLqm2RYrWY6ENuwBrHL+TnSMrd6lWTbjRhyaZEg J5rUmqo3Lcrc69G9kDQaHc4yJSWYL/FdZuKLZcRASa7y620JSVE= -----END CERTIFICATE-----Generated at Thu Oct 1 12:38:55 2026 by rpki-client