$ rpki-client -vvvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: /BrBfuV7YcmJ+Qsyws5fmh4LJPomiCfYeSzoAp1chII= Subject key identifier: 00:8D:65:E9:40:00:08:F3:CF:D7:C6:76:2D:A2:84:F6:BF:19:65:F3 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 38912C8E41CC9F630CD9356633EC736E61D17E2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:41:04 +0000 Manifest this update: Mon 21 Sep 2026 03:36:04 +0000 Manifest next update: Tue 22 Sep 2026 07:34:04 +0000 Files and hashes: 1: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) 2: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: ekTtwvwpcHz2ejugmu+D0UuXcVDv4Aoin3w6YinTlCA=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:91:2c:8e:41:cc:9f:63:0c:d9:35:66:33:ec:73:6e:61:d1:7e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Sep 21 03:36:04 2026 GMT Not After : Sep 22 07:34:04 2026 GMT Subject: CN=008D65E9400008F3CFD7C6762DA284F6BF1965F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:d8:3b:3d:52:e0:c5:9e:a3:3a:7e:83:80: 99:64:e5:8d:8d:d4:8c:4c:19:42:d0:e3:e8:ed:ec: be:52:bb:c3:2b:37:94:e7:8c:f1:4c:df:26:e8:e5: 80:40:b0:df:0a:c6:80:05:ff:06:9f:66:89:81:92: a4:47:42:e0:36:9c:40:96:4e:2c:52:71:33:92:94: 46:ea:bf:02:3e:a3:6f:bd:e8:e9:a2:a0:54:ed:92: be:c3:61:e2:44:86:10:d4:47:b7:63:35:f3:60:53: 76:1d:7c:ae:1a:8f:8f:7b:97:55:88:18:ff:78:fe: 06:b3:cb:32:d0:86:cc:26:d5:4b:bb:b4:3e:ee:e6: 10:87:90:e1:ba:74:d5:89:fa:34:2d:11:2e:21:a5: cf:95:63:51:1d:0a:7b:25:c3:d5:8c:33:4a:94:22: 58:31:de:ed:68:65:3a:6c:fa:09:f6:38:9a:74:d2: e0:58:87:78:60:a3:73:43:85:c8:fb:d0:80:5f:43: 7b:d1:7b:7b:f2:aa:52:c9:bb:92:5f:d6:c7:27:a3: 13:a7:db:8e:d5:d5:a3:91:70:43:90:37:5f:b0:e1: 41:69:bb:7e:1c:01:78:6d:16:46:d6:20:7f:4f:15: 01:97:ff:13:c4:5f:e7:ea:de:3f:54:9c:b0:51:ba: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:65:E9:40:00:08:F3:CF:D7:C6:76:2D:A2:84:F6:BF:19:65:F3 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e3:53:54:3e:53:1b:ac:e6:60:27:25:90:aa:9d:22:fa:e2: ae:3e:c4:23:f0:bc:36:6b:10:16:2d:47:f8:8f:54:e2:71:f7: cb:eb:d7:6c:de:84:59:e3:9c:77:7b:a5:a3:e4:e7:bf:7c:62: fd:d8:93:37:77:0e:91:11:fa:32:12:cb:15:ee:a3:c6:42:f9: d8:3e:cf:e7:18:13:6f:bc:f8:8e:bc:77:9e:58:fe:6f:2a:f3: 6e:9d:e7:8e:07:a8:0d:a5:41:42:88:77:e8:e8:39:57:9f:79: a7:3a:ba:a0:b5:2e:b7:05:80:36:4e:a5:e8:3f:12:ec:d1:34: 82:44:6d:87:a8:44:ed:9c:75:e5:df:dc:0e:78:e2:99:07:88: f6:12:4a:bf:6f:63:dc:68:d1:69:49:84:a0:94:28:a9:81:f1: a0:ab:93:ca:b3:04:8a:c9:ad:9f:6b:6e:2b:40:44:2d:0d:6a: be:1d:57:0c:d5:29:01:29:12:a1:0f:cb:77:34:94:fc:49:8e: c7:ec:c9:84:f2:eb:44:bc:a9:96:e5:dd:f7:ea:e1:fd:f9:21: a5:c4:e5:1a:df:6c:19:de:c7:df:97:23:c4:e0:d4:56:30:8d: 9c:ad:a9:0b:72:33:2e:93:cd:76:9a:c7:eb:ef:d5:7e:24:d7: b3:51:dc:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJEsjkHMn2MM2TVmM+xzbmHRfi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjA5MjEwMzM2MDRaFw0yNjA5MjIwNzM0MDRaMDMxMTAvBgNV BAMTKDAwOEQ2NUU5NDAwMDA4RjNDRkQ3QzY3NjJEQTI4NEY2QkYxOTY1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqtg7PVLgxZ6jOn6DgJlk5Y2N 1IxMGULQ4+jt7L5Su8MrN5TnjPFM3ybo5YBAsN8KxoAF/wafZomBkqRHQuA2nECW TixScTOSlEbqvwI+o2+96OmioFTtkr7DYeJEhhDUR7djNfNgU3YdfK4aj497l1WI GP94/gazyzLQhswm1Uu7tD7u5hCHkOG6dNWJ+jQtES4hpc+VY1EdCnslw9WMM0qU Ilgx3u1oZTps+gn2OJp00uBYh3hgo3NDhcj70IBfQ3vRe3vyqlLJu5Jf1scnoxOn 247V1aORcEOQN1+w4UFpu34cAXhtFkbWIH9PFQGX/xPEX+fq3j9UnLBRunc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAI1l6UAACPPP18Z2LaKE9r8ZZfMwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDjU1Q+Uxus5mAnJZCqnSL64q4+xCPwvDZr EBYtR/iPVOJx98vr12zehFnjnHd7paPk5798Yv3Ykzd3DpER+jISyxXuo8ZC+dg+ z+cYE2+8+I68d55Y/m8q826d544HqA2lQUKId+joOVefeac6uqC1LrcFgDZOpeg/ EuzRNIJEbYeoRO2cdeXf3A544pkHiPYSSr9vY9xo0WlJhKCUKKmB8aCrk8qzBIrJ rZ9rbitARC0Nar4dVwzVKQEpEqEPy3c0lPxJjsfsyYTy60S8qZbl3ffq4f35IaXE 5RrfbBnex9+XI8Tg1FYwjZytqQtyMy6TzXaax+vv1X4k17NR3Dk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:05:30 2026 by rpki-client