$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft File: F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft (raw, json) Hash identifier: v7HXTo9Ig/CvNF9LFcIBBpCXn8deJgs0kgtOfZRPU1o= Subject key identifier: CC:C5:05:67:76:DE:8C:8A:7D:84:93:D3:E6:99:F3:DA:2F:04:7A:FB Authority key identifier: F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA Certificate issuer: /CN=F9705E7510801B2BD073B5BE93CC35011C7E7ADA Certificate serial: 66BEC0ACDB4CEFF8BFF3F97519F08223F457C622 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 17:37:08 +0000 Manifest this update: Fri 25 Sep 2026 17:32:08 +0000 Manifest next update: Sat 26 Sep 2026 20:27:08 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: jc5tVvOo4HL6FqWDRn17JJ3mtU1gi5BuQqtyRnuC4AA=) 2: F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl (hash: e+KdHLKZGM8q7MQ4zwQ5C5PY1CLw8uhnc24XP9MHRL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:c0:ac:db:4c:ef:f8:bf:f3:f9:75:19:f0:82:23:f4:57:c6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9705E7510801B2BD073B5BE93CC35011C7E7ADA Validity Not Before: Sep 25 17:32:08 2026 GMT Not After : Sep 26 20:27:08 2026 GMT Subject: CN=CCC5056776DE8C8A7D8493D3E699F3DA2F047AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:84:51:25:e3:23:2d:d9:7f:b1:9b:95:e6: b4:f0:62:8f:ca:70:05:23:8c:c3:d9:09:47:ff:d3: 24:21:2b:c3:1c:be:ee:c6:2d:af:90:9d:d9:34:46: c9:83:05:50:3d:aa:ba:7f:db:94:75:0d:91:aa:1c: 2e:9d:1a:32:b5:b8:28:30:d2:db:c2:d5:4c:26:1f: 2d:dd:f9:a9:90:49:c7:1b:7c:22:0e:dc:36:60:f3: 14:ce:ca:a1:a6:3c:db:80:1e:8c:27:ec:07:7f:4e: be:4d:f8:64:62:ac:63:ee:7e:cd:72:05:d1:43:be: 38:8e:ce:14:cc:cb:ea:5e:63:85:4d:45:0f:3d:1f: 53:79:bf:24:a0:19:a0:47:84:36:91:cf:e8:f7:5b: 58:b2:6a:e5:f8:cd:62:ca:ce:af:aa:07:5c:63:6d: 3c:e9:f0:bf:55:00:ff:33:af:7e:cf:1e:97:15:4f: d1:b0:17:af:b3:c3:88:77:4e:70:9e:72:5e:38:f3: 6a:d5:19:78:69:d7:a0:bd:e3:73:8c:9f:08:1f:16: 45:90:91:01:7e:0e:28:d2:e7:1f:db:20:0b:2b:78: 28:5e:df:6a:be:05:e3:66:a6:21:5f:a8:68:34:1c: 4b:b8:42:cd:51:81:a6:2a:83:8e:9c:13:8b:77:a5: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C5:05:67:76:DE:8C:8A:7D:84:93:D3:E6:99:F3:DA:2F:04:7A:FB X509v3 Authority Key Identifier: keyid:F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:b5:70:2b:c5:3e:32:f2:0c:3f:86:66:78:a1:72:a6:59: cf:65:53:26:e3:54:a5:d3:e8:63:84:b1:cf:fb:4a:e4:92:2a: 54:5e:37:07:80:0b:f5:54:d5:68:9f:dc:d4:77:0b:64:f2:51: 79:93:4b:9b:db:58:54:58:c5:ea:20:24:7f:78:7b:9c:df:c3: c7:d2:b8:24:38:7b:bf:d7:5c:02:ff:64:c7:04:16:a1:60:62: c4:8f:43:e9:a5:0d:e5:c8:28:2f:a1:5a:ee:0e:c5:5a:04:83: fe:8b:8f:91:89:90:03:b0:30:23:44:3e:1d:cb:73:38:bf:cd: eb:c8:cc:9c:94:3e:fa:09:73:1f:20:b2:94:c6:98:29:4a:8f: b0:86:c1:d2:db:dc:77:49:73:03:31:8e:b1:46:aa:60:d8:39: 71:fb:d7:19:cf:83:9c:09:9b:88:82:3d:36:ae:dd:83:a8:aa: 96:2b:40:f7:85:c3:2e:c0:fe:bd:aa:2e:60:cb:4d:0f:d7:6c: a6:26:40:0b:17:09:98:c9:43:05:20:ed:03:cf:b7:ce:57:c8: 0b:41:a8:f1:b4:0c:d4:b7:e2:c5:cd:a9:25:5f:58:ec:90:a1: 76:f7:d1:20:3b:3a:ad:b7:bc:86:69:d5:57:56:95:0f:db:21: 4f:4b:19:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZr7ArNtM7/i/8/l1GfCCI/RXxiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk3MDVFNzUxMDgwMUIyQkQwNzNCNUJFOTNDQzM1MDEx QzdFN0FEQTAeFw0yNjA5MjUxNzMyMDhaFw0yNjA5MjYyMDI3MDhaMDMxMTAvBgNV BAMTKENDQzUwNTY3NzZERThDOEE3RDg0OTNEM0U2OTlGM0RBMkYwNDdBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7YRRJeMjLdl/sZuV5rTwYo/K cAUjjMPZCUf/0yQhK8Mcvu7GLa+Qndk0RsmDBVA9qrp/25R1DZGqHC6dGjK1uCgw 0tvC1UwmHy3d+amQSccbfCIO3DZg8xTOyqGmPNuAHown7Ad/Tr5N+GRirGPufs1y BdFDvjiOzhTMy+peY4VNRQ89H1N5vySgGaBHhDaRz+j3W1iyauX4zWLKzq+qB1xj bTzp8L9VAP8zr37PHpcVT9GwF6+zw4h3TnCecl4482rVGXhp16C943OMnwgfFkWQ kQF+DijS5x/bIAsreChe32q+BeNmpiFfqGg0HEu4Qs1RgaYqg46cE4t3pbZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMUFZ3bejIp9hJPT5pnz2i8EevswHwYDVR0j BBgwFoAU+XBedRCAGyvQc7W+k8w1ARx+etowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzEvRjk3MDVFNzUx MDgwMUIyQkQwNzNCNUJFOTNDQzM1MDExQzdFN0FEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTcwNUU3NTEwODAxQjJCRDA3M0I1QkU5M0NDMzUwMTFDN0U3 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvRjk3MDVFNzUxMDgwMUIyQkQwNzNCNUJFOTNDQzM1 MDExQzdFN0FEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUwtXArxT4y8gw/hmZ4oXKmWc9lUybjVKXT 6GOEsc/7SuSSKlReNweAC/VU1Wif3NR3C2TyUXmTS5vbWFRYxeogJH94e5zfw8fS uCQ4e7/XXAL/ZMcEFqFgYsSPQ+mlDeXIKC+hWu4OxVoEg/6Lj5GJkAOwMCNEPh3L czi/zevIzJyUPvoJcx8gspTGmClKj7CGwdLb3HdJcwMxjrFGqmDYOXH71xnPg5wJ m4iCPTau3YOoqpYrQPeFwy7A/r2qLmDLTQ/XbKYmQAsXCZjJQwUg7QPPt85XyAtB qPG0DNS34sXNqSVfWOyQoXb30SA7Oq23vIZp1VdWlQ/bIU9LGUE= -----END CERTIFICATE-----Generated at Sat Sep 26 10:09:39 2026 by rpki-client