$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: VpQS25h65JMpx1OyWWVak6kabQ3QeT4uYQmcGSXN7to= Subject key identifier: 1E:FD:E7:5D:94:40:CB:C7:A6:00:80:C0:5E:9F:1C:5A:B7:64:FD:01 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 7D1B710C14C781903AEE5AFE4346AB600E92A460 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:58:58 +0000 Manifest this update: Mon 21 Sep 2026 09:53:58 +0000 Manifest next update: Tue 22 Sep 2026 13:05:58 +0000 Files and hashes: 1: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: eaTMBRsc07E8DbeGdSOQo3FPVtzMt7VSLc9gmRniJMg=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1b:71:0c:14:c7:81:90:3a:ee:5a:fe:43:46:ab:60:0e:92:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Sep 21 09:53:58 2026 GMT Not After : Sep 22 13:05:58 2026 GMT Subject: CN=1EFDE75D9440CBC7A60080C05E9F1C5AB764FD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:38:0a:cb:c1:74:ee:50:d7:96:1b:2d:61: 79:2f:97:ee:22:49:6e:86:b4:7c:0b:ce:fd:ea:a6: 13:d8:bb:1c:85:ce:96:2b:60:fb:49:13:cb:82:2a: c9:66:a9:45:b3:e8:a7:08:6e:6f:9e:14:18:4b:4b: af:e1:43:55:cb:9f:3a:b4:49:17:d4:c4:a8:88:35: 6e:0d:3c:63:05:0c:e7:01:6a:21:de:35:d6:af:d5: 32:23:f9:9e:be:db:80:99:a3:0b:d2:89:9b:16:87: 46:3e:4d:ad:e5:6c:80:e6:fd:85:f0:10:e5:41:5f: c1:01:bf:d0:8e:bf:03:5e:f2:b0:22:10:e5:8d:70: 20:2f:b9:bd:72:a6:92:a3:1c:48:e8:97:80:2a:7e: 75:01:49:4e:75:7a:52:c4:62:36:d6:e2:d3:a7:3e: 38:45:03:87:1c:e4:57:06:dc:4e:70:16:94:0c:8b: e3:49:f2:a3:f1:5b:f0:66:eb:49:b5:ea:04:31:31: e1:10:c0:d9:a5:2d:4a:cb:df:d7:ff:69:81:68:e9: cd:83:83:90:c3:2a:fc:b2:9c:3b:5e:bf:1f:15:8a: 65:a7:a8:ea:45:28:51:0b:32:d0:52:7a:dc:cb:92: 84:5f:7a:16:17:bc:4e:32:83:f0:42:6e:23:da:a1: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FD:E7:5D:94:40:CB:C7:A6:00:80:C0:5E:9F:1C:5A:B7:64:FD:01 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8e:95:0b:11:79:ae:d6:6b:03:e5:00:a1:8b:7e:50:df:5c: 10:c1:81:31:bc:e2:28:eb:99:35:bf:8e:af:66:93:4d:80:ff: f8:1a:7e:fe:8b:7a:62:6e:f7:31:5e:8c:69:31:4a:da:0f:12: 65:7d:44:10:ac:fb:bc:40:46:65:59:2e:a5:bf:30:e1:a8:4f: 44:e2:40:ce:79:22:68:97:6d:75:04:dd:e9:15:26:80:9f:0f: 52:02:54:3c:87:0e:36:50:c8:31:0c:ed:0e:14:ba:8d:da:d9: 29:b6:fa:38:c4:f8:b6:6c:4b:da:81:12:b8:1b:b2:4d:b1:c2: 4d:cb:fe:82:db:3a:01:eb:47:3c:fd:f4:de:8b:22:16:7a:60: db:0d:88:ae:21:91:80:07:e5:67:03:87:de:63:b6:a3:16:b6: c5:e9:3d:c9:d7:99:d9:67:ae:93:91:dd:9e:63:90:86:76:fe: 32:22:ca:14:98:a7:3b:5d:85:a6:92:fd:15:19:26:4d:c0:f6: 12:bb:0c:db:67:d6:d6:7a:d8:fd:d4:86:94:0c:59:90:04:65: 5c:b0:d9:14:4e:2d:ad:6d:5d:82:c6:73:46:61:74:14:16:94: 01:f4:52:e4:72:2a:c2:73:6d:eb:91:19:d8:f6:3c:f8:58:8d: 37:ac:21:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRtxDBTHgZA67lr+Q0arYA6SpGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA5MjEwOTUzNThaFw0yNjA5MjIxMzA1NThaMDMxMTAvBgNV BAMTKDFFRkRFNzVEOTQ0MENCQzdBNjAwODBDMDVFOUYxQzVBQjc2NEZEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQLDgKy8F07lDXlhstYXkvl+4i SW6GtHwLzv3qphPYuxyFzpYrYPtJE8uCKslmqUWz6KcIbm+eFBhLS6/hQ1XLnzq0 SRfUxKiINW4NPGMFDOcBaiHeNdav1TIj+Z6+24CZowvSiZsWh0Y+Ta3lbIDm/YXw EOVBX8EBv9COvwNe8rAiEOWNcCAvub1yppKjHEjol4AqfnUBSU51elLEYjbW4tOn PjhFA4cc5FcG3E5wFpQMi+NJ8qPxW/Bm60m16gQxMeEQwNmlLUrL39f/aYFo6c2D g5DDKvyynDtevx8VimWnqOpFKFELMtBSetzLkoRfehYXvE4yg/BCbiPaoY4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHv3nXZRAy8emAIDAXp8cWrdk/QEwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaOlQsRea7WawPlAKGLflDfXBDBgTG84ijr mTW/jq9mk02A//gafv6LemJu9zFejGkxStoPEmV9RBCs+7xARmVZLqW/MOGoT0Ti QM55ImiXbXUE3ekVJoCfD1ICVDyHDjZQyDEM7Q4Uuo3a2Sm2+jjE+LZsS9qBErgb sk2xwk3L/oLbOgHrRzz99N6LIhZ6YNsNiK4hkYAH5WcDh95jtqMWtsXpPcnXmdln rpOR3Z5jkIZ2/jIiyhSYpztdhaaS/RUZJk3A9hK7DNtn1tZ62P3UhpQMWZAEZVyw 2RROLa1tXYLGc0ZhdBQWlAH0UuRyKsJzbeuRGdj2PPhYjTesIYc= -----END CERTIFICATE-----Generated at Tue Sep 22 00:51:06 2026 by rpki-client