$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: UZt5S9woEhz8cfNeDYMWYmTDSwk42lpOrXisNWE8b78= Subject key identifier: BB:07:BC:7D:BB:BC:07:F0:1A:CD:D4:F6:9B:C4:D9:C3:65:95:E5:49 Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 7F28A925C9875D38063470C5A581B16F9E315381 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:56:26 +0000 Manifest this update: Sun 20 Sep 2026 23:51:26 +0000 Manifest next update: Tue 22 Sep 2026 01:14:26 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: HXEFXshr5bIypLKmjVz+UHxlj5zE62wBxX7c34R8fww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:28:a9:25:c9:87:5d:38:06:34:70:c5:a5:81:b1:6f:9e:31:53:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: Sep 20 23:51:26 2026 GMT Not After : Sep 22 01:14:26 2026 GMT Subject: CN=BB07BC7DBBBC07F01ACDD4F69BC4D9C36595E549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:40:63:a8:10:78:3f:75:b6:6f:6d:38:c0: 3e:f9:83:8d:64:f5:1e:47:0c:80:55:4f:a8:cd:90: a4:cf:3e:d4:51:1a:a2:ac:4f:93:36:f6:97:83:96: 97:d5:c9:59:73:86:4d:cc:d9:1d:13:f5:78:29:72: d9:a1:b9:03:0f:f7:dc:f1:cf:2c:0c:5d:40:f6:f1: e7:9e:10:0d:5f:3d:4f:95:5b:9d:a2:89:85:f0:0d: 58:66:73:6f:3d:50:7b:3d:11:4d:57:05:e2:c0:60: 71:dd:36:3b:9a:68:57:ba:1c:02:5c:62:50:13:87: fa:cb:06:a3:ee:69:b2:8f:00:d7:ab:a5:07:51:08: cb:68:8d:e4:a9:43:77:41:5a:ab:c7:dd:5c:af:e1: 0f:d9:10:7a:68:52:59:37:96:78:95:d4:37:7e:b9: 85:da:0b:53:c1:6a:60:7d:93:69:86:b0:10:7b:d5: 02:f7:a0:92:39:2a:6e:9b:67:df:2d:df:a4:01:03: 30:1a:eb:2a:01:a1:20:88:f1:a8:f1:bb:48:a4:43: 1c:b7:9f:6c:eb:5a:9d:b9:6c:61:dd:3d:59:f9:68: f3:fe:40:cf:6d:90:4f:96:e2:14:6a:7c:d0:f0:bd: d3:90:53:55:5f:41:5b:f0:e8:b8:a3:b1:7f:8f:9b: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:BC:7D:BB:BC:07:F0:1A:CD:D4:F6:9B:C4:D9:C3:65:95:E5:49 X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:73:b2:22:6c:db:f6:a9:1e:96:ac:57:61:66:cd:f2:3c:31: 2f:5c:4d:ce:3f:f1:e9:2a:90:f9:01:ad:dc:c0:a1:58:a0:3d: b2:55:68:9c:09:ad:eb:2c:ed:93:f4:75:99:48:86:70:eb:49: 0e:46:9e:6a:66:af:d9:78:03:4a:12:30:4b:a7:2d:6e:03:f5: c5:26:cb:8b:80:12:41:93:52:25:ed:c1:ac:5e:b4:6c:34:56: 74:1f:c3:c7:14:47:83:24:2a:76:47:cb:3f:d0:f1:82:39:08: c3:83:51:3b:26:b7:c4:40:4c:5e:0e:b2:d8:c3:d3:c4:ee:73: 8e:37:b1:c6:8f:42:a9:11:60:71:5d:47:6f:2f:c2:a0:3d:10: ae:87:4c:7f:ea:3e:81:a9:bc:f3:2a:68:c9:38:31:2d:cc:73: a9:f7:51:09:be:73:d1:fb:1e:6f:81:d2:54:49:2f:eb:98:f0: 42:c0:17:85:38:c7:a7:1c:1c:52:14:f5:a3:f9:2b:80:4d:61: b8:bf:24:dd:97:cf:0f:09:c9:6f:78:86:fe:fc:1b:ec:f4:9f: b5:9b:56:ae:8e:ae:73:31:8f:f3:16:14:e6:5b:ac:99:84:1d: 8e:1e:b5:50:06:97:df:a8:17:97:af:34:3d:a7:6b:d6:9b:e2: d5:bc:6b:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyipJcmHXTgGNHDFpYGxb54xU4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA5MjAyMzUxMjZaFw0yNjA5MjIwMTE0MjZaMDMxMTAvBgNV BAMTKEJCMDdCQzdEQkJCQzA3RjAxQUNERDRGNjlCQzREOUMzNjU5NUU1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComkBjqBB4P3W2b204wD75g41k 9R5HDIBVT6jNkKTPPtRRGqKsT5M29peDlpfVyVlzhk3M2R0T9XgpctmhuQMP99zx zywMXUD28eeeEA1fPU+VW52iiYXwDVhmc289UHs9EU1XBeLAYHHdNjuaaFe6HAJc YlATh/rLBqPuabKPANerpQdRCMtojeSpQ3dBWqvH3Vyv4Q/ZEHpoUlk3lniV1Dd+ uYXaC1PBamB9k2mGsBB71QL3oJI5Km6bZ98t36QBAzAa6yoBoSCI8ajxu0ikQxy3 n2zrWp25bGHdPVn5aPP+QM9tkE+W4hRqfNDwvdOQU1VfQVvw6LijsX+Pm5CDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwe8fbu8B/AazdT2m8TZw2WV5UkwHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlzsiJs2/apHpasV2FmzfI8MS9cTc4/8ekq kPkBrdzAoVigPbJVaJwJress7ZP0dZlIhnDrSQ5Gnmpmr9l4A0oSMEunLW4D9cUm y4uAEkGTUiXtwaxetGw0VnQfw8cUR4MkKnZHyz/Q8YI5CMODUTsmt8RATF4OstjD 08Tuc443scaPQqkRYHFdR28vwqA9EK6HTH/qPoGpvPMqaMk4MS3Mc6n3UQm+c9H7 Hm+B0lRJL+uY8ELAF4U4x6ccHFIU9aP5K4BNYbi/JN2Xzw8JyW94hv78G+z0n7Wb Vq6OrnMxj/MWFOZbrJmEHY4etVAGl9+oF5evND2na9ab4tW8a8Q= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:32 2026 by rpki-client