$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: qV6p+5oH+5EmERTkgdGLdCSCKmCXADXx6JFXqP0QIIk= Subject key identifier: 3B:04:E6:8F:02:B3:77:72:D2:AB:07:B4:C7:07:03:9F:8F:CD:D3:2A Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 544F1DA0A60AA9066E29B39FACBD58EE206EED22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:37:18 +0000 Manifest this update: Mon 21 Sep 2026 00:32:18 +0000 Manifest next update: Tue 22 Sep 2026 03:27:18 +0000 Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: 4Xng5aGgemPhIpDmkzS/iXWDe6JLaQtkpjK1kLIeqmg=) 3: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) 4: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4f:1d:a0:a6:0a:a9:06:6e:29:b3:9f:ac:bd:58:ee:20:6e:ed:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Sep 21 00:32:18 2026 GMT Not After : Sep 22 03:27:18 2026 GMT Subject: CN=3B04E68F02B37772D2AB07B4C707039F8FCDD32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:48:3a:d5:51:c2:d4:57:95:86:b4:ac:7f: a2:e0:5e:d2:51:c1:d1:3d:ff:d5:58:46:9f:7b:87: 2a:04:64:58:04:0c:f5:92:69:4a:41:ae:80:b5:29: 00:1a:f9:9d:9d:06:74:13:92:e1:4c:b4:c0:00:69: 1d:82:84:71:31:a1:96:26:b3:83:6d:db:82:fb:f5: 0e:06:7a:67:93:24:95:e8:24:59:cf:90:52:c9:f1: a1:9f:0a:83:ba:cd:4b:56:f7:eb:ef:9d:13:b9:f5: af:4d:b9:e1:86:9c:5a:86:73:a7:54:94:35:bb:5e: 05:29:21:09:e4:c3:83:79:5e:2e:a7:f5:ac:57:58: a9:aa:66:9b:92:56:f5:22:4f:3f:2a:6d:df:14:cb: a0:32:85:e4:d1:92:1e:ca:b7:a0:4e:67:5d:75:34: 5d:a6:dd:92:55:98:a0:d9:42:02:ca:1a:b4:a9:7a: df:04:47:29:16:f5:53:bf:34:85:eb:67:b3:10:3a: 67:24:3a:1a:a7:b6:9d:e8:29:93:36:ab:88:ca:25: 70:89:d9:40:6d:5a:56:57:04:42:fb:cb:e1:11:73: 3b:a8:b5:08:c2:2e:3a:91:87:98:0d:41:51:96:84: 0f:47:10:eb:fb:d5:2d:a9:df:e8:81:26:a0:a2:9d: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:E6:8F:02:B3:77:72:D2:AB:07:B4:C7:07:03:9F:8F:CD:D3:2A X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:a7:50:6f:b2:d4:da:9a:f4:79:5e:a2:9c:10:02:35:e1: 9b:80:d0:85:7f:49:d5:cc:da:08:dd:09:c8:5b:ab:9a:f0:e5: 43:7a:8d:78:f5:97:6b:03:86:7b:88:d2:c8:c4:fc:3a:1c:ef: 6d:c7:62:c2:8f:37:49:a2:fd:6d:12:c6:96:9e:38:c7:ca:15: a8:fc:82:cf:c0:76:4b:ad:15:11:fd:e7:d1:cb:05:2a:28:81: b2:7f:2a:dd:ad:de:b8:65:c0:47:f2:f0:a1:08:03:bd:1b:48: dc:38:96:b1:70:e1:78:12:ab:ca:ca:0d:8e:0d:6c:07:cf:00: d6:d7:80:9b:fe:a7:5e:32:b6:85:c6:6f:21:f1:17:cf:2a:58: 94:83:30:35:b6:c2:47:58:60:b5:0d:3a:f3:52:a2:65:79:8a: e0:7e:ce:74:b6:ba:23:1e:0a:b7:f6:7d:de:d0:0b:fa:bb:fd: a5:f0:ce:4d:d3:db:c6:8d:a8:aa:17:ce:13:ee:31:b3:b0:14: 9c:60:f6:42:de:89:1e:e8:d5:29:6c:23:ba:43:3d:1e:9b:ec: 23:33:6e:3e:aa:48:1e:d6:fd:4a:d4:c3:85:29:dd:e2:90:ed: d4:e0:15:59:e4:13:b4:bc:34:a1:c2:da:73:54:19:be:a2:28: 54:5a:64:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVE8doKYKqQZuKbOfrL1Y7iBu7SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA5MjEwMDMyMThaFw0yNjA5MjIwMzI3MThaMDMxMTAvBgNV BAMTKDNCMDRFNjhGMDJCMzc3NzJEMkFCMDdCNEM3MDcwMzlGOEZDREQzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0kg61VHC1FeVhrSsf6LgXtJR wdE9/9VYRp97hyoEZFgEDPWSaUpBroC1KQAa+Z2dBnQTkuFMtMAAaR2ChHExoZYm s4Nt24L79Q4GemeTJJXoJFnPkFLJ8aGfCoO6zUtW9+vvnRO59a9NueGGnFqGc6dU lDW7XgUpIQnkw4N5Xi6n9axXWKmqZpuSVvUiTz8qbd8Uy6AyheTRkh7Kt6BOZ111 NF2m3ZJVmKDZQgLKGrSpet8ERykW9VO/NIXrZ7MQOmckOhqntp3oKZM2q4jKJXCJ 2UBtWlZXBEL7y+ERczuotQjCLjqRh5gNQVGWhA9HEOv71S2p3+iBJqCinTXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwTmjwKzd3LSqwe0xwcDn4/N0yowHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcFp1BvstTamvR5XqKcEAI14ZuA0IV/SdXM 2gjdCchbq5rw5UN6jXj1l2sDhnuI0sjE/Doc723HYsKPN0mi/W0SxpaeOMfKFaj8 gs/AdkutFRH959HLBSoogbJ/Kt2t3rhlwEfy8KEIA70bSNw4lrFw4XgSq8rKDY4N bAfPANbXgJv+p14ytoXGbyHxF88qWJSDMDW2wkdYYLUNOvNSomV5iuB+znS2uiMe Crf2fd7QC/q7/aXwzk3T28aNqKoXzhPuMbOwFJxg9kLeiR7o1SlsI7pDPR6b7CMz bj6qSB7W/UrUw4Up3eKQ7dTgFVnkE7S8NKHC2nNUGb6iKFRaZHY= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:25 2026 by rpki-client