$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: ZQjs7mT9LMeNUwfgtGRO8EiSf1Rah8uStNUg2KIRRAw= Subject key identifier: D8:95:0D:E9:C2:6A:3F:0D:8D:F3:47:D6:FD:CF:9F:15:DC:C2:07:41 Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 2803C0142DD423B9A33DAC3D5DFFF25D777C2484 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:30:35 +0000 Manifest this update: Mon 21 Sep 2026 19:25:35 +0000 Manifest next update: Tue 22 Sep 2026 21:45:35 +0000 Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) 3: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: YUWs0G6s0H66iVY0IFgeXvGR7APWBgnjspL0MLE4d1M=) 4: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:03:c0:14:2d:d4:23:b9:a3:3d:ac:3d:5d:ff:f2:5d:77:7c:24:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Sep 21 19:25:35 2026 GMT Not After : Sep 22 21:45:35 2026 GMT Subject: CN=D8950DE9C26A3F0D8DF347D6FDCF9F15DCC20741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c7:22:30:9d:ef:38:f6:ef:7d:3b:18:40:22: a3:e2:ec:45:08:6f:3e:1e:2d:77:03:2d:12:bb:f0: e9:35:bc:73:d4:7f:d9:ed:34:88:67:e6:cc:03:1e: 61:cd:74:8d:a3:7c:fd:b0:b4:6f:cd:1d:ae:2f:76: b7:64:54:ee:8d:f8:30:7b:77:a0:00:b6:af:34:56: 91:bb:0d:fe:b5:b3:e4:73:43:c0:5d:59:cb:97:f0: 79:0f:04:31:3f:4e:ea:32:e5:df:63:89:bf:fc:d4: 70:fc:32:a9:56:90:2a:66:28:02:55:f8:1a:40:85: f7:e8:18:f1:4b:45:17:04:ac:b8:37:27:1e:98:64: 85:ae:f9:76:4f:b7:96:56:9b:bf:0a:ba:31:c5:45: 8b:27:fe:6c:9c:7c:db:aa:ef:00:0b:dd:b5:cd:03: 2b:84:6c:82:4b:9c:4a:ad:4e:8b:f2:68:4d:a2:68: dd:87:06:3d:ff:10:25:af:6e:a4:95:f1:d2:0f:a3: 3a:9a:cf:64:59:dc:59:69:e6:8f:dc:6e:4a:3e:52: b6:3c:ee:0b:25:e5:a4:ef:a5:14:66:53:8f:4c:50: 03:c8:a3:88:14:5c:4a:75:39:51:9c:23:4b:e1:82: b6:8f:62:44:d3:2a:b4:ab:af:b0:7a:28:b4:d8:06: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:0D:E9:C2:6A:3F:0D:8D:F3:47:D6:FD:CF:9F:15:DC:C2:07:41 X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d9:af:a0:6e:6c:9f:fb:c1:53:d9:1a:d7:ce:84:4b:aa:37: d5:3c:32:92:5e:1e:cc:19:3d:8b:1b:79:0e:fc:e8:ea:5d:6f: a4:ce:51:ff:b6:d2:d1:45:c1:89:bc:91:fe:b7:28:f3:4a:9f: 2a:0f:d7:03:8d:af:03:57:0d:ed:3c:a7:cb:0b:ef:21:ee:05: c5:de:9c:ee:d4:dd:14:a8:5f:f8:f9:a7:f9:1d:ed:38:a5:ae: 45:90:7e:9b:f6:c5:71:fa:1f:8f:91:f7:f7:1d:0b:6f:ea:48: 0d:f7:8a:8e:df:5c:90:6d:db:d3:27:b2:f5:d8:9a:ec:18:ad: b1:8f:d8:5a:88:da:02:b5:53:9e:58:91:67:12:34:0f:56:00: 30:64:63:e6:24:c3:b4:33:3e:bc:45:4e:4c:f1:cb:5f:7f:c5: 64:45:06:7a:ab:bf:7d:82:fd:4e:96:91:68:e4:1f:2c:33:b7: 16:cd:2f:8e:6d:9f:97:c2:55:89:a9:53:70:9c:b6:e5:50:e9: 98:fb:7f:53:f9:fd:35:33:87:3a:7a:0e:7f:f7:37:31:a3:88: b7:30:b2:5a:c6:1e:72:80:c0:85:3f:73:14:e5:f5:c7:0d:c5: 65:f4:49:49:81:21:1e:bf:40:31:0c:ae:26:d2:0c:32:4d:25: 68:74:7d:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAPAFC3UI7mjPaw9Xf/yXXd8JIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA5MjExOTI1MzVaFw0yNjA5MjIyMTQ1MzVaMDMxMTAvBgNV BAMTKEQ4OTUwREU5QzI2QTNGMEQ4REYzNDdENkZEQ0Y5RjE1RENDMjA3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLxyIwne849u99OxhAIqPi7EUI bz4eLXcDLRK78Ok1vHPUf9ntNIhn5swDHmHNdI2jfP2wtG/NHa4vdrdkVO6N+DB7 d6AAtq80VpG7Df61s+RzQ8BdWcuX8HkPBDE/Tuoy5d9jib/81HD8MqlWkCpmKAJV +BpAhffoGPFLRRcErLg3Jx6YZIWu+XZPt5ZWm78KujHFRYsn/mycfNuq7wAL3bXN AyuEbIJLnEqtTovyaE2iaN2HBj3/ECWvbqSV8dIPozqaz2RZ3Flp5o/cbko+UrY8 7gsl5aTvpRRmU49MUAPIo4gUXEp1OVGcI0vhgraPYkTTKrSrr7B6KLTYBm1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2JUN6cJqPw2N80fW/c+fFdzCB0EwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnZr6BubJ/7wVPZGtfOhEuqN9U8MpJeHswZ PYsbeQ786Opdb6TOUf+20tFFwYm8kf63KPNKnyoP1wONrwNXDe08p8sL7yHuBcXe nO7U3RSoX/j5p/kd7TilrkWQfpv2xXH6H4+R9/cdC2/qSA33io7fXJBt29MnsvXY muwYrbGP2FqI2gK1U55YkWcSNA9WADBkY+Ykw7QzPrxFTkzxy19/xWRFBnqrv32C /U6WkWjkHywztxbNL45tn5fCVYmpU3CctuVQ6Zj7f1P5/TUzhzp6Dn/3NzGjiLcw slrGHnKAwIU/cxTl9ccNxWX0SUmBIR6/QDEMribSDDJNJWh0feg= -----END CERTIFICATE-----Generated at Tue Sep 22 15:53:41 2026 by rpki-client