$ rpki-client -vvvf rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft File: F1D3A95017C5154231E294B063B353766A127193.mft (raw, json) Hash identifier: v8Dt+bPQmHW/P4W9nihJDKunbkHalWJsr3ClRxjaATA= Subject key identifier: 99:C6:F2:C9:F5:E1:64:A9:CA:07:CD:EB:94:34:9F:D9:5B:84:F7:F4 Authority key identifier: F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93 Certificate issuer: /CN=F1D3A95017C5154231E294B063B353766A127193 Certificate serial: 42B85DE386B8742F264074D0D88FAB9E91BA72E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft Manifest number: BE Signing time: Tue 22 Sep 2026 01:23:08 +0000 Manifest this update: Tue 22 Sep 2026 01:18:08 +0000 Manifest next update: Wed 23 Sep 2026 03:58:08 +0000 Files and hashes: 1: F1D3A95017C5154231E294B063B353766A127193.crl (hash: nqD4O28xTgWcXBLk9ZDPAxY4y9NhFc5vyl/vMawNM/c=) 2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: fFFO/k+PgY37k7qx7f15yGCXrtYu8NxYkgLNAXulmF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.crl rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b8:5d:e3:86:b8:74:2f:26:40:74:d0:d8:8f:ab:9e:91:ba:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D3A95017C5154231E294B063B353766A127193 Validity Not Before: Sep 22 01:18:08 2026 GMT Not After : Sep 23 03:58:08 2026 GMT Subject: CN=99C6F2C9F5E164A9CA07CDEB94349FD95B84F7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:a4:9d:b9:e6:c0:36:1c:4f:93:56:b4:9a: 44:be:e2:d0:9b:e6:a0:66:f9:9f:55:14:6c:94:fb: b9:d5:b2:a2:d5:c6:05:c8:3d:64:7c:ff:a1:58:19: 7f:53:9f:8e:7e:47:53:95:fe:f3:49:63:56:90:6a: cb:a1:74:aa:79:66:18:d9:3b:57:b5:79:17:1b:df: e8:6b:ea:5f:c9:7a:1a:65:3e:f5:ee:25:0a:e9:0f: f6:34:d3:95:6a:36:23:3e:4b:8f:86:88:ee:7e:45: c3:f5:66:4e:00:bb:46:a7:bd:34:a1:69:b0:b4:95: 5e:a8:18:c4:7e:4e:ea:42:29:b9:d0:27:2e:2d:c2: 0d:bb:54:ef:f8:ec:e8:1f:39:b0:a3:c5:35:23:20: 47:29:5a:1c:39:2f:91:5c:e0:ad:a5:f0:41:07:e3: 88:f7:6b:72:39:9a:ac:47:5a:90:f8:b2:a5:24:8c: 51:51:2f:d0:bc:4f:70:c4:05:2c:97:f8:04:2b:f3: b0:cb:d5:25:3c:a0:d9:86:fb:0a:4b:12:14:5c:6c: 4d:82:57:b1:89:27:2f:76:ba:ea:8c:10:6b:b2:8d: e2:0f:4d:fd:7b:a6:ee:ed:42:aa:d6:b1:b0:ca:bd: 9f:3c:0e:24:af:d5:e3:8a:ef:22:e4:39:79:6f:54: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:F2:C9:F5:E1:64:A9:CA:07:CD:EB:94:34:9F:D9:5B:84:F7:F4 X509v3 Authority Key Identifier: keyid:F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:22:99:88:64:e4:6e:d1:5a:34:7f:f6:15:0a:ac:94:9a:50: f1:99:25:de:a4:7f:f7:ac:bf:67:87:a1:f6:de:5b:13:5d:a2: a8:f1:de:e0:b9:58:63:35:3f:e8:92:54:aa:00:71:ca:f3:80: 7c:1d:e1:fd:94:06:dd:82:00:2b:01:c4:e4:09:63:2f:31:d7: eb:b9:00:39:b6:91:95:de:a5:42:93:a9:05:0a:90:fa:cf:20: fa:3e:53:c3:97:c0:3c:c2:32:84:99:ea:80:16:81:6b:06:0d: 54:18:00:67:27:c6:9f:03:49:ee:24:06:2c:55:65:cf:4e:80: 12:76:72:76:5e:e9:79:74:ea:38:20:5c:f1:6a:0b:be:61:51: 46:a4:63:39:a5:d6:8f:8e:46:86:29:d7:b1:83:59:15:a6:4a: fa:2a:df:cb:8c:17:54:f9:12:11:18:98:ed:b2:7a:e0:1f:d8: 0a:2e:ca:46:e0:e6:46:62:22:73:19:a2:15:c2:fb:b2:e3:57: e4:02:c8:de:f1:df:95:30:12:13:b3:10:e3:f8:94:87:54:14: 23:fc:ce:a6:6a:b3:3f:91:4e:12:15:4d:d2:10:ae:19:1d:aa: 59:2d:52:52:01:f9:75:db:35:2e:63:d3:73:3f:48:1a:5a:bc: c3:6c:ae:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrhd44a4dC8mQHTQ2I+rnpG6cuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFEM0E5NTAxN0M1MTU0MjMxRTI5NEIwNjNCMzUzNzY2 QTEyNzE5MzAeFw0yNjA5MjIwMTE4MDhaFw0yNjA5MjMwMzU4MDhaMDMxMTAvBgNV BAMTKDk5QzZGMkM5RjVFMTY0QTlDQTA3Q0RFQjk0MzQ5RkQ5NUI4NEY3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASqSduebANhxPk1a0mkS+4tCb 5qBm+Z9VFGyU+7nVsqLVxgXIPWR8/6FYGX9Tn45+R1OV/vNJY1aQasuhdKp5ZhjZ O1e1eRcb3+hr6l/JehplPvXuJQrpD/Y005VqNiM+S4+GiO5+RcP1Zk4Au0anvTSh abC0lV6oGMR+TupCKbnQJy4twg27VO/47OgfObCjxTUjIEcpWhw5L5Fc4K2l8EEH 44j3a3I5mqxHWpD4sqUkjFFRL9C8T3DEBSyX+AQr87DL1SU8oNmG+wpLEhRcbE2C V7GJJy92uuqMEGuyjeIPTf17pu7tQqrWsbDKvZ88DiSv1eOK7yLkOXlvVIVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmcbyyfXhZKnKB83rlDSf2VuE9/QwHwYDVR0j BBgwFoAU8dOpUBfFFUIx4pSwY7NTdmoScZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzAwYWVkMWQtOTRjOS00OWE2LWE2MDktODgyZTAzY2QwN2JhLzAvRjFEM0E5NTAx N0M1MTU0MjMxRTI5NEIwNjNCMzUzNzY2QTEyNzE5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMUQzQTk1MDE3QzUxNTQyMzFFMjk0QjA2M0IzNTM3NjZBMTI3 MTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvRjFEM0E5NTAxN0M1MTU0MjMxRTI5NEIwNjNCMzUz NzY2QTEyNzE5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQimYhk5G7RWjR/9hUKrJSaUPGZJd6kf/es v2eHofbeWxNdoqjx3uC5WGM1P+iSVKoAccrzgHwd4f2UBt2CACsBxOQJYy8x1+u5 ADm2kZXepUKTqQUKkPrPIPo+U8OXwDzCMoSZ6oAWgWsGDVQYAGcnxp8DSe4kBixV Zc9OgBJ2cnZe6Xl06jggXPFqC75hUUakYzml1o+ORoYp17GDWRWmSvoq38uMF1T5 EhEYmO2yeuAf2Aouykbg5kZiInMZohXC+7LjV+QCyN7x35UwEhOzEOP4lIdUFCP8 zqZqsz+RThIVTdIQrhkdqlktUlIB+XXbNS5j03M/SBpavMNsrnI= -----END CERTIFICATE-----Generated at Tue Sep 22 12:14:33 2026 by rpki-client