$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: 4jPrt+2TfB9ulRGjogVRjSEkNYdxz/RxjOGPf3g9PP0= Subject key identifier: 0C:F3:28:9B:2A:E4:93:78:87:DA:7B:FE:65:BD:96:D1:51:5B:C5:3D Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 054F5C4BF648C99BAD422F2A02E9425BCE03913D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:03:59 +0000 Manifest this update: Mon 21 Sep 2026 13:58:59 +0000 Manifest next update: Tue 22 Sep 2026 16:11:59 +0000 Files and hashes: 1: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: PWRQ6vZu0qwzwy+QRluOGXuIH9aMRtG9mOSNzrwgEWo=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) 3: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 4: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4f:5c:4b:f6:48:c9:9b:ad:42:2f:2a:02:e9:42:5b:ce:03:91:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Sep 21 13:58:59 2026 GMT Not After : Sep 22 16:11:59 2026 GMT Subject: CN=0CF3289B2AE4937887DA7BFE65BD96D1515BC53D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:71:7c:17:8e:ea:1a:2b:a0:14:d1:ac:db: 71:02:02:a8:24:2a:fe:8d:8d:9b:8c:76:e0:78:d2: d5:c1:0d:09:4e:a3:c0:9e:98:2f:23:ad:24:f3:31: 84:ea:a1:b8:b8:bc:59:e3:64:27:16:24:1d:81:5e: 3e:7b:b9:d1:fc:d7:4c:e4:54:74:7d:78:56:89:50: 3e:11:52:9f:b8:44:d5:dd:65:5c:5a:00:30:1d:51: e9:c3:a5:7e:c1:d2:2f:39:2a:5f:ec:39:df:97:0c: 3b:8d:1a:35:11:ed:84:a2:4a:bb:cd:aa:b0:f1:b7: 3b:a0:a8:4c:90:1a:25:29:e9:a6:26:47:a7:ed:4f: 0c:6f:c1:bc:37:30:4a:8f:46:b6:81:21:44:22:5f: b5:51:39:a6:b9:50:09:6d:3f:af:20:7b:67:c2:45: e0:8d:89:18:27:e4:79:9c:ed:b5:28:42:e7:e8:99: 4f:81:97:02:52:fb:78:6c:f5:68:91:04:c3:bc:02: a4:6d:4b:4b:bf:45:30:dc:2f:51:2a:50:1b:c8:4f: 7c:a5:26:a5:96:50:6e:cc:12:0e:a0:d9:61:9d:5f: 67:4f:d4:2b:63:f4:26:cd:89:9d:ef:3e:ba:fa:eb: 80:0f:0d:73:13:16:91:73:12:c8:c0:88:e2:dd:e9: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F3:28:9B:2A:E4:93:78:87:DA:7B:FE:65:BD:96:D1:51:5B:C5:3D X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:c2:19:39:0d:f7:a9:7e:d6:6f:5b:0e:fe:97:d3:46:24: 99:82:49:87:eb:36:dc:9d:47:e8:97:da:90:f9:53:ad:fd:75: 3b:4c:30:8f:d9:97:40:49:6d:a4:9b:96:76:a7:55:7b:3f:95: f7:9c:f1:76:22:d9:2e:ba:5f:73:8e:89:dc:e7:0b:95:1c:9f: d6:44:ca:c2:b3:89:78:dd:29:fe:a3:9c:84:31:98:56:65:7b: 89:80:78:3a:3a:47:d5:b8:c1:df:e7:e9:5f:aa:52:2f:13:39: de:12:1d:81:e4:e7:9e:fe:cd:e3:6b:02:cb:f0:e4:d1:f6:40: 6e:8a:65:f6:c8:67:c7:9a:14:b0:30:66:db:97:df:64:13:aa: d0:7f:bd:ca:b0:d4:79:bc:a6:7b:8f:d0:98:68:23:ce:41:c5: 15:c2:05:57:f2:89:d3:3a:52:d6:b5:22:b6:84:b5:49:37:c8: aa:fe:f7:30:68:96:a7:d7:7d:0e:0f:70:41:ea:d3:f2:47:b3: a9:46:22:d5:22:f9:6b:4d:78:b0:d3:d7:9b:54:50:c8:fc:73: 2e:5a:8d:1f:6c:49:19:48:30:be:85:35:80:b4:c2:94:37:c7: 6b:02:05:66:11:05:18:69:6f:3b:40:3f:48:ac:26:1f:ad:fa: c0:bb:83:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBU9cS/ZIyZutQi8qAulCW84DkT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA5MjExMzU4NTlaFw0yNjA5MjIxNjExNTlaMDMxMTAvBgNV BAMTKDBDRjMyODlCMkFFNDkzNzg4N0RBN0JGRTY1QkQ5NkQxNTE1QkM1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1rXF8F47qGiugFNGs23ECAqgk Kv6NjZuMduB40tXBDQlOo8CemC8jrSTzMYTqobi4vFnjZCcWJB2BXj57udH810zk VHR9eFaJUD4RUp+4RNXdZVxaADAdUenDpX7B0i85Kl/sOd+XDDuNGjUR7YSiSrvN qrDxtzugqEyQGiUp6aYmR6ftTwxvwbw3MEqPRraBIUQiX7VROaa5UAltP68ge2fC ReCNiRgn5Hmc7bUoQufomU+BlwJS+3hs9WiRBMO8AqRtS0u/RTDcL1EqUBvIT3yl JqWWUG7MEg6g2WGdX2dP1Ctj9CbNiZ3vPrr664APDXMTFpFzEsjAiOLd6WGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPMomyrkk3iH2nv+Zb2W0VFbxT0wHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoMwhk5DfepftZvWw7+l9NGJJmCSYfrNtyd R+iX2pD5U639dTtMMI/Zl0BJbaSblnanVXs/lfec8XYi2S66X3OOidznC5Ucn9ZE ysKziXjdKf6jnIQxmFZle4mAeDo6R9W4wd/n6V+qUi8TOd4SHYHk557+zeNrAsvw 5NH2QG6KZfbIZ8eaFLAwZtuX32QTqtB/vcqw1Hm8pnuP0JhoI85BxRXCBVfyidM6 Uta1IraEtUk3yKr+9zBolqfXfQ4PcEHq0/JHs6lGItUi+WtNeLDT15tUUMj8cy5a jR9sSRlIML6FNYC0wpQ3x2sCBWYRBRhpbztAP0isJh+t+sC7g58= -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:46 2026 by rpki-client