$ rpki-client -vvvf rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft File: F690A110357924F87D7056A8B32736A17D483A45.mft (raw, json) Hash identifier: o0K8zl7B0JNmhD4WyKqRJEBIxhkb7L7jN/tD2HwHoE8= Subject key identifier: 2F:60:C6:A0:35:21:61:DC:4E:46:C3:00:A9:F0:16:4E:02:3F:C7:E1 Authority key identifier: F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45 Certificate issuer: /CN=F690A110357924F87D7056A8B32736A17D483A45 Certificate serial: 6DD2DE9D94B30AD49C2AD210CFCA765F75A80022 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 20:06:18 +0000 Manifest this update: Mon 21 Sep 2026 20:01:18 +0000 Manifest next update: Tue 22 Sep 2026 22:48:18 +0000 Files and hashes: 1: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: +SYBYn6HDb6pQqKeC5onXzkMcxykXGu7bZqRDkq2FM8=) 2: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: KlBhDk/CuJvqKM8GQCLLnqyebm4H3/FO6ZO0CFEwBNk=) 3: F690A110357924F87D7056A8B32736A17D483A45.crl (hash: Sl4ynyT9BHs8AdQjgy6YWlRHUO90LXkv3kQqlwDPdUc=) 4: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: s6eJpsd07fVOpv5bnSTsV6HF0hMDI9QhxKFQra/tpWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d2:de:9d:94:b3:0a:d4:9c:2a:d2:10:cf:ca:76:5f:75:a8:00:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F690A110357924F87D7056A8B32736A17D483A45 Validity Not Before: Sep 21 20:01:18 2026 GMT Not After : Sep 22 22:48:18 2026 GMT Subject: CN=2F60C6A0352161DC4E46C300A9F0164E023FC7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:f1:24:d5:67:2a:bc:02:c8:d7:d8:f7:0d: dd:59:eb:9e:42:96:7f:2f:0c:83:a5:36:58:d5:a0: b6:06:96:47:d2:b5:7e:94:81:46:66:a2:c3:89:44: 83:7a:98:41:31:c8:be:b4:0d:87:51:2c:3a:c5:a4: 0f:71:12:32:0b:8c:ff:db:87:46:d4:0b:8e:d9:44: b4:a9:d8:ac:d4:d8:82:05:ec:ce:77:e0:96:f5:b4: 83:93:09:8d:8f:44:14:4d:e6:b0:5f:6a:7d:2d:27: c7:a5:bf:8f:3f:b7:0f:40:7f:4e:38:5d:18:57:a2: 07:8d:13:44:51:13:8e:5d:a2:01:2d:d1:ef:cf:f0: d6:4a:0b:d5:6d:13:f1:9a:1e:a7:82:34:15:17:80: 12:ec:92:30:01:14:ac:f8:3a:93:1e:22:f4:55:17: 33:8f:fb:34:64:06:03:0d:d0:a1:50:10:22:f8:06: 3a:2b:63:0a:d5:0f:5d:69:c9:99:11:46:8d:09:bf: 5d:0f:27:11:c1:a5:b3:bf:90:24:3e:99:24:8e:d3: a0:b2:3a:35:86:31:13:55:94:52:6f:9d:20:f7:cf: 2d:fd:c1:0e:dc:be:1a:dd:62:0e:b2:e3:32:d9:b0: 1a:aa:e7:5d:22:4f:b0:a5:5f:ad:4e:43:70:f6:12: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:C6:A0:35:21:61:DC:4E:46:C3:00:A9:F0:16:4E:02:3F:C7:E1 X509v3 Authority Key Identifier: keyid:F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:67:fa:69:cd:8e:e0:ee:ac:f7:03:07:8f:8b:eb:6e:3c:44: 55:ee:6c:4e:b0:d0:34:d5:35:f9:7b:93:3f:a5:1b:49:5f:b2: 29:cf:77:f2:50:cb:b4:16:f4:7c:64:0b:43:b7:7c:19:32:a1: 35:ac:ee:16:14:65:c8:97:0f:10:a6:1e:5b:7a:05:91:0d:7c: ca:cc:fd:26:cf:82:4d:57:ff:da:03:36:c3:63:3c:79:3f:b4: 27:17:17:19:3a:cd:62:a3:44:7c:09:47:de:c9:15:4f:5b:7f: 04:a7:6f:31:f8:a4:08:04:c8:22:29:a8:11:ca:dc:db:d7:29: 8b:d2:97:70:02:2f:98:3b:8e:7c:57:84:1c:6f:39:5b:ed:7f: b1:2e:f8:e0:8f:42:05:b0:8e:0f:f8:04:ea:7b:e3:19:2c:39: e3:1a:2c:b9:3e:15:ef:f8:71:91:a5:12:b8:b8:f1:37:1b:09: f3:20:1f:75:2c:50:24:d4:48:c0:41:f1:fd:7f:f0:de:3c:32: 84:c8:60:f9:4d:9d:c2:b7:ff:eb:38:75:c6:3e:7d:75:1e:54: 95:16:54:2a:06:d5:96:ee:41:80:50:87:b7:66:1c:c7:2c:3c: 6b:a3:64:56:0b:61:bc:4a:7b:1e:83:9d:1d:de:ab:49:08:c1: ca:ea:cc:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdLenZSzCtScKtIQz8p2X3WoACIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5MEExMTAzNTc5MjRGODdENzA1NkE4QjMyNzM2QTE3 RDQ4M0E0NTAeFw0yNjA5MjEyMDAxMThaFw0yNjA5MjIyMjQ4MThaMDMxMTAvBgNV BAMTKDJGNjBDNkEwMzUyMTYxREM0RTQ2QzMwMEE5RjAxNjRFMDIzRkM3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhvEk1WcqvALI19j3Dd1Z655C ln8vDIOlNljVoLYGlkfStX6UgUZmosOJRIN6mEExyL60DYdRLDrFpA9xEjILjP/b h0bUC47ZRLSp2KzU2IIF7M534Jb1tIOTCY2PRBRN5rBfan0tJ8elv48/tw9Af044 XRhXogeNE0RRE45dogEt0e/P8NZKC9VtE/GaHqeCNBUXgBLskjABFKz4OpMeIvRV FzOP+zRkBgMN0KFQECL4BjorYwrVD11pyZkRRo0Jv10PJxHBpbO/kCQ+mSSO06Cy OjWGMRNVlFJvnSD3zy39wQ7cvhrdYg6y4zLZsBqq510iT7ClX61OQ3D2EqJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2DGoDUhYdxORsMAqfAWTgI/x+EwHwYDVR0j BBgwFoAU9pChEDV5JPh9cFaosyc2oX1IOkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzczZDJiNjAtMTJjOC00MTNlLWI5NDEtMzkzZTAwZmRkNjUzLzAvRjY5MEExMTAz NTc5MjRGODdENzA1NkE4QjMyNzM2QTE3RDQ4M0E0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjkwQTExMDM1NzkyNEY4N0Q3MDU2QThCMzI3MzZBMTdENDgz QTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzczZDJiNjAtMTJjOC00MTNlLWI5 NDEtMzkzZTAwZmRkNjUzLzAvRjY5MEExMTAzNTc5MjRGODdENzA1NkE4QjMyNzM2 QTE3RDQ4M0E0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJn+mnNjuDurPcDB4+L6248RFXubE6w0DTV Nfl7kz+lG0lfsinPd/JQy7QW9HxkC0O3fBkyoTWs7hYUZciXDxCmHlt6BZENfMrM /SbPgk1X/9oDNsNjPHk/tCcXFxk6zWKjRHwJR97JFU9bfwSnbzH4pAgEyCIpqBHK 3NvXKYvSl3ACL5g7jnxXhBxvOVvtf7Eu+OCPQgWwjg/4BOp74xksOeMaLLk+Fe/4 cZGlEri48TcbCfMgH3UsUCTUSMBB8f1/8N48MoTIYPlNncK3/+s4dcY+fXUeVJUW VCoG1ZbuQYBQh7dmHMcsPGujZFYLYbxKex6DnR3eq0kIwcrqzAs= -----END CERTIFICATE-----Generated at Tue Sep 22 17:04:33 2026 by rpki-client