$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft File: 092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft (raw, json) Hash identifier: rl0QEzY2OmoIQGR04TIOqmUIycd6O3y+zHD8LPk50BM= Subject key identifier: 58:3D:32:2E:FE:FB:11:3B:A8:F2:EA:DE:3C:E8:E7:47:E5:DF:F6:15 Authority key identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A Certificate issuer: /CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A Certificate serial: 1CFA14177929F3C19A63D15F6D1DB1802B43E7C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft Manifest number: BE Signing time: Sun 20 Sep 2026 10:35:14 +0000 Manifest this update: Sun 20 Sep 2026 10:30:14 +0000 Manifest next update: Mon 21 Sep 2026 11:29:14 +0000 Files and hashes: 1: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: uTL4cKcHt38uH4jh6juXglSHHNrnHZI2si9UKTmT91M=) 2: 092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl (hash: WWqR5I7jBf9wNk1tcG/RZDUWIqDi5E7nssdwI5QI6xI=) 3: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: tRfSITs+YrhJoF1TTyr+NGlfoTZ0o7YCDKtZ//9HAxs=) 4: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: puUYMZLO3dx3dUs9emntLpbN6g4pJlOZBy33RTslZOI=) 5: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: 0KL+GKoXYThGAvjPDJloAkIR1Xp1OqoYniNvKJ7kjSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fa:14:17:79:29:f3:c1:9a:63:d1:5f:6d:1d:b1:80:2b:43:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A Validity Not Before: Sep 20 10:30:14 2026 GMT Not After : Sep 21 11:29:14 2026 GMT Subject: CN=583D322EFEFB113BA8F2EADE3CE8E747E5DFF615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:d9:1d:ba:af:f1:60:23:0c:4f:03:99:4b: b3:d4:d4:fd:f8:4b:20:56:cc:e1:d2:55:15:54:63: 51:c6:78:02:6d:ff:88:99:6b:a4:c5:75:b3:15:15: 0f:49:ca:19:eb:b4:ab:d3:a9:34:c7:38:99:32:c3: c7:d6:01:83:87:a5:e2:13:d6:47:92:af:f2:af:ad: c8:d9:8e:7e:2f:f4:b9:61:a4:57:f1:98:8a:aa:33: b4:91:44:7a:51:5c:46:c9:b1:84:3a:ba:3e:9d:86: dd:af:35:aa:10:1d:80:e2:90:8c:65:e7:15:82:d2: 50:10:b4:40:fa:72:48:12:5e:f1:a5:de:78:35:4b: 93:01:da:2b:84:d5:89:ae:a8:ec:37:02:d1:cd:7a: 8b:2d:77:d8:a3:a5:1a:b1:c5:a5:0e:9b:65:16:85: 82:c6:8c:c6:cd:5c:c9:56:a8:86:c8:86:13:6a:bd: 83:6c:2e:10:ac:9c:6f:78:65:46:03:36:49:d4:be: f1:fb:6c:8a:e1:ce:49:85:ca:cd:e7:a9:55:e6:f8: e9:a1:7d:70:c1:1f:23:04:5d:01:ee:61:57:67:87: 64:d4:5b:19:53:b5:fd:66:21:b3:e1:9f:c1:d0:52: 33:6e:c3:4a:70:4e:8d:92:59:fd:1d:65:1b:96:02: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:32:2E:FE:FB:11:3B:A8:F2:EA:DE:3C:E8:E7:47:E5:DF:F6:15 X509v3 Authority Key Identifier: keyid:09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8e:0d:65:f6:ae:2f:29:95:e0:72:23:60:a1:54:14:c8:02: 8c:f7:05:a3:e4:15:c3:bd:61:6a:b5:db:38:ee:fd:67:a3:02: e3:d5:34:3f:42:36:be:e4:6d:e5:ce:a2:99:ce:05:8b:a6:a6: 58:b8:50:33:6b:9f:0e:7c:05:e0:6e:48:0c:df:13:53:6f:52: 5a:f5:0b:97:88:15:1b:bb:a9:89:15:42:3f:d1:41:7f:0c:1c: 2f:9d:5e:bc:fa:17:1c:29:6f:b3:48:17:87:6d:7e:c9:8b:3e: 6b:9f:ec:b3:05:df:de:91:56:45:7e:3d:bb:74:bf:2e:fc:bd: 73:cd:c9:5d:3c:a0:88:1f:b6:86:ee:eb:8b:49:dd:29:ed:d9: 2c:0f:cf:aa:e8:a7:48:ba:6a:b0:c0:51:50:11:da:aa:7e:89: a8:b9:17:9a:16:1d:5d:b8:85:6f:d2:72:c3:85:0a:2e:1a:3d: 82:9b:89:f2:6f:cd:63:e5:3c:36:65:a5:9d:7b:6e:35:91:a4: 7b:a8:d2:43:35:99:2f:0c:d9:15:79:d1:c8:8d:d2:db:38:e8: 8d:51:b3:7d:02:57:15:08:73:63:64:30:09:5f:91:98:5a:ae: 19:de:26:1b:e8:35:89:79:b2:46:db:7e:72:8d:ed:5b:85:94: de:23:a0:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPoUF3kp88GaY9FfbR2xgCtD58EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyRkJDREEwMUMxNTlEOUFGQkU2MTk1QjY4NDJBRkI5 OEI2NUU1QTAeFw0yNjA5MjAxMDMwMTRaFw0yNjA5MjExMTI5MTRaMDMxMTAvBgNV BAMTKDU4M0QzMjJFRkVGQjExM0JBOEYyRUFERTNDRThFNzQ3RTVERkY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNtkduq/xYCMMTwOZS7PU1P34 SyBWzOHSVRVUY1HGeAJt/4iZa6TFdbMVFQ9JyhnrtKvTqTTHOJkyw8fWAYOHpeIT 1keSr/KvrcjZjn4v9LlhpFfxmIqqM7SRRHpRXEbJsYQ6uj6dht2vNaoQHYDikIxl 5xWC0lAQtED6ckgSXvGl3ng1S5MB2iuE1YmuqOw3AtHNeostd9ijpRqxxaUOm2UW hYLGjMbNXMlWqIbIhhNqvYNsLhCsnG94ZUYDNknUvvH7bIrhzkmFys3nqVXm+Omh fXDBHyMEXQHuYVdnh2TUWxlTtf1mIbPhn8HQUjNuw0pwTo2SWf0dZRuWArHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWD0yLv77ETuo8urePOjnR+Xf9hUwHwYDVR0j BBgwFoAUCS+82gHBWdmvvmGVtoQq+5i2XlowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmZmZjMmQtY2NhNy00OGU2LTljZDYtNTY1YzExYzQ1NDQwLzAvMDkyRkJDREEw MUMxNTlEOUFGQkU2MTk1QjY4NDJBRkI5OEI2NUU1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTJGQkNEQTAxQzE1OUQ5QUZCRTYxOTVCNjg0MkFGQjk4QjY1 RTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvMDkyRkJDREEwMUMxNTlEOUFGQkU2MTk1QjY4NDJB RkI5OEI2NUU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKODWX2ri8pleByI2ChVBTIAoz3BaPkFcO9 YWq12zju/WejAuPVND9CNr7kbeXOopnOBYumpli4UDNrnw58BeBuSAzfE1NvUlr1 C5eIFRu7qYkVQj/RQX8MHC+dXrz6Fxwpb7NIF4dtfsmLPmuf7LMF396RVkV+Pbt0 vy78vXPNyV08oIgftobu64tJ3Snt2SwPz6rop0i6arDAUVAR2qp+iai5F5oWHV24 hW/ScsOFCi4aPYKbifJvzWPlPDZlpZ17bjWRpHuo0kM1mS8M2RV50ciN0ts46I1R s30CVxUIc2NkMAlfkZharhneJhvoNYl5skbbfnKN7VuFlN4joNY= -----END CERTIFICATE-----Generated at Mon Sep 21 03:25:15 2026 by rpki-client