$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json) Hash identifier: a/ViP/VquKsJDSEaOq4RGcE6BHFcxmp9IdH5lnOdLac= Subject key identifier: E4:23:9E:BB:C6:8A:3D:95:F5:30:34:B0:0B:E5:8C:A2:73:6D:98:47 Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303 Certificate serial: 152012C9981D5A3A952A01D1F74FB467F7B4EECC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 05:58:48 +0000 Manifest this update: Tue 22 Sep 2026 05:53:48 +0000 Manifest next update: Wed 23 Sep 2026 06:38:48 +0000 Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=) 2: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=) 3: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: HR3rHOgFhq+rXU44C/JinNA4pPEbKCZA8qU7rMeclYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:12:c9:98:1d:5a:3a:95:2a:01:d1:f7:4f:b4:67:f7:b4:ee:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303 Validity Not Before: Sep 22 05:53:48 2026 GMT Not After : Sep 23 06:38:48 2026 GMT Subject: CN=E4239EBBC68A3D95F53034B00BE58CA2736D9847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:74:ae:99:57:18:4a:e7:d3:c9:19:4f:c2: 86:aa:df:67:e0:12:a5:1e:cf:9f:fb:39:d4:cd:3d: 84:fa:62:a0:2c:7b:23:4c:6b:03:ae:28:83:c9:44: 71:7d:80:de:81:8c:1b:f1:71:ea:bc:4a:3f:6b:85: 7c:e6:0a:e1:2c:71:75:36:44:1d:f9:cd:66:29:1c: 27:38:ed:85:2c:60:cc:de:ae:bb:39:9b:ba:c8:e3: 32:db:bb:4a:8a:6c:fc:33:aa:46:f0:a4:f0:42:1a: 2c:d5:1b:a6:15:44:df:d0:c6:23:21:60:9a:33:05: 3e:3e:c0:f2:cd:d5:20:9e:3e:e4:ad:39:33:d2:58: 3d:85:40:45:2f:d7:9a:9b:40:20:5d:9f:a9:66:2e: ba:13:7a:ec:0d:23:5d:57:c1:84:20:68:11:af:11: c3:b5:41:67:ad:52:a1:c3:7f:57:09:28:56:c9:67: 07:9f:47:8a:c5:11:af:79:5e:b1:94:77:5f:53:63: 2f:d2:63:d1:4b:b6:e7:1b:40:c9:41:b5:e2:29:15: 0a:aa:dc:2a:d4:32:e5:07:dd:5b:2a:7c:f9:94:0d: dd:40:8c:c6:4d:4d:35:f3:26:a9:7d:8c:02:95:9e: 1a:f4:aa:c5:06:e2:27:a4:5e:ca:b5:a8:65:72:88: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:9E:BB:C6:8A:3D:95:F5:30:34:B0:0B:E5:8C:A2:73:6D:98:47 X509v3 Authority Key Identifier: keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:bf:53:cf:fb:e9:26:5a:e6:aa:2d:70:52:be:b1:08:7c: 5b:23:84:19:8f:99:ad:80:18:e0:32:f7:86:fa:f1:9b:65:b6: 22:c8:e7:f7:fa:72:1d:58:d8:03:c2:5e:9e:3c:36:d1:00:82: 2f:88:3d:54:7e:90:39:fd:e0:39:dc:00:89:95:21:1f:9d:e8: 25:8e:fb:a8:60:73:54:47:25:c6:c1:d7:77:65:d6:f2:23:d3: 4a:4c:a7:0e:51:06:b9:8b:19:12:66:e2:99:47:49:15:9c:db: df:51:cc:87:d9:8b:cc:5a:79:53:6a:2d:6c:52:45:0a:83:05: e5:22:2d:91:ee:31:8c:60:ea:a0:b5:b2:4d:c8:a7:c5:92:f0: 1f:f1:31:bc:0d:3f:70:55:4b:94:22:fe:a8:62:4d:f1:04:c9: d3:86:ff:72:ef:7f:bf:5e:18:7b:a0:6d:39:f1:b7:f4:3b:01: d1:67:f2:93:20:2b:69:c3:07:ce:bf:61:5b:37:34:1e:b1:45: 2a:94:0f:97:d2:51:7b:f6:ae:a8:e9:ad:f8:90:2f:0f:e6:af: dd:21:c2:6f:d1:73:4f:b1:44:2c:d6:47:1c:bd:10:aa:0c:2e: 1f:af:ef:01:bd:c8:53:dd:e2:1c:21:5a:03:5d:27:0d:63:43: ed:fa:6c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSASyZgdWjqVKgHR90+0Z/e07swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVD QTI2RDMwMzAeFw0yNjA5MjIwNTUzNDhaFw0yNjA5MjMwNjM4NDhaMDMxMTAvBgNV BAMTKEU0MjM5RUJCQzY4QTNEOTVGNTMwMzRCMDBCRTU4Q0EyNzM2RDk4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbL3SumVcYSufTyRlPwoaq32fg EqUez5/7OdTNPYT6YqAseyNMawOuKIPJRHF9gN6BjBvxceq8Sj9rhXzmCuEscXU2 RB35zWYpHCc47YUsYMzerrs5m7rI4zLbu0qKbPwzqkbwpPBCGizVG6YVRN/QxiMh YJozBT4+wPLN1SCePuStOTPSWD2FQEUv15qbQCBdn6lmLroTeuwNI11XwYQgaBGv EcO1QWetUqHDf1cJKFbJZwefR4rFEa95XrGUd19TYy/SY9FLtucbQMlBteIpFQqq 3CrUMuUH3VsqfPmUDd1AjMZNTTXzJql9jAKVnhr0qsUG4iekXsq1qGVyiIjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5COeu8aKPZX1MDSwC+WMonNtmEcwHwYDVR0j BBgwFoAU8kxieqBoX2jxQgx/KIYCZcom0wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRhYWUzZjAtOWM3MC00MmZjLWFlM2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FB MDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVDQTI2RDMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRDNjI3QUEwNjg1RjY4RjE0MjBDN0YyODg2MDI2NUNBMjZE MzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAy NjVDQTI2RDMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4ov1PP++kmWuaqLXBSvrEIfFsjhBmPma2A GOAy94b68ZtltiLI5/f6ch1Y2APCXp48NtEAgi+IPVR+kDn94DncAImVIR+d6CWO +6hgc1RHJcbB13dl1vIj00pMpw5RBrmLGRJm4plHSRWc299RzIfZi8xaeVNqLWxS RQqDBeUiLZHuMYxg6qC1sk3Ip8WS8B/xMbwNP3BVS5Qi/qhiTfEEydOG/3Lvf79e GHugbTnxt/Q7AdFn8pMgK2nDB86/YVs3NB6xRSqUD5fSUXv2rqjprfiQLw/mr90h wm/Rc0+xRCzWRxy9EKoMLh+v7wG9yFPd4hwhWgNdJw1jQ+36bFA= -----END CERTIFICATE-----Generated at Tue Sep 22 14:23:04 2026 by rpki-client