$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft File: F24F92FEE32EF3FD89B142D403B664674EC45F20.mft (raw, json) Hash identifier: ZvR9Web79ok+9+w+WMv138hhXr1CFnomrRpiSXUesZs= Subject key identifier: 09:8D:56:0E:56:38:4C:E2:E5:75:B0:FF:F4:90:56:A7:74:81:D5:B1 Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 Certificate issuer: /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Certificate serial: 7D38AB0041186702354447815A2C587D0D19B0EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:21:52 +0000 Manifest this update: Mon 21 Sep 2026 08:16:52 +0000 Manifest next update: Tue 22 Sep 2026 10:47:52 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: bxuJHdBQ29ujm6ZiEr/payUgkQDlp15FaGJqOvION0Y=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=) 3: F24F92FEE32EF3FD89B142D403B664674EC45F20.crl (hash: BzkmBF+IU229PmJFZxwOiaHYO5W6BQtJ8hsd3Z1YcoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:ab:00:41:18:67:02:35:44:47:81:5a:2c:58:7d:0d:19:b0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Validity Not Before: Sep 21 08:16:52 2026 GMT Not After : Sep 22 10:47:52 2026 GMT Subject: CN=098D560E56384CE2E575B0FFF49056A77481D5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:0e:4b:cf:c5:2b:39:f1:6b:93:bd:2c:d9: 2a:43:db:d8:17:3c:f2:45:bd:09:cd:1c:ed:0e:13: 90:5e:82:c5:39:68:b4:a2:60:e8:20:e1:bb:f6:b6: 87:c9:18:71:9d:50:e2:f1:88:1d:24:b8:26:cc:2f: 2b:97:75:3c:67:85:b5:24:c9:9a:4e:86:91:97:df: 62:4b:f1:0f:8e:b9:e6:c2:a7:61:e2:4d:77:ad:35: 56:a5:cc:88:fc:85:87:c0:b1:3e:c5:b2:f3:fe:2a: 8b:f6:ad:ca:b9:ab:43:91:36:da:70:6c:70:a6:cb: 8a:57:fc:34:03:f1:c4:51:3c:e7:ed:a9:db:9b:10: 24:15:00:c0:f2:a3:61:78:db:69:c7:a1:a7:ab:34: 31:4b:43:83:8d:fa:e6:71:0a:c9:f7:56:fd:8c:fa: 9a:00:44:d4:97:50:72:a9:09:8d:ae:aa:3c:cb:a6: d9:5f:a6:0e:11:7a:17:c9:3a:bb:8f:20:27:6d:70: f3:e9:61:62:42:68:c4:57:77:b8:f7:d3:34:75:7c: 0a:15:8e:cc:43:43:14:dc:a9:fc:ba:91:b2:e7:79: 26:17:2f:f4:9c:57:7b:27:0b:5f:33:a3:f5:f0:67: c7:b7:ca:b4:80:22:d0:24:56:01:5f:07:be:05:73: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8D:56:0E:56:38:4C:E2:E5:75:B0:FF:F4:90:56:A7:74:81:D5:B1 X509v3 Authority Key Identifier: keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:69:a8:8b:02:38:c6:2a:72:a1:68:f4:91:9d:ca:21:94: bc:bf:b5:a7:c2:6d:35:06:ea:f5:99:f9:18:94:82:7f:c3:22: 37:42:7a:3a:84:13:20:d2:6f:39:55:0f:ad:96:26:b8:e0:87: 09:59:62:44:e8:47:5c:3a:37:89:34:7d:74:5a:73:35:f7:2a: d1:ca:e8:56:46:78:87:fc:bf:b8:29:48:26:12:e2:02:a3:db: b2:d1:aa:f3:ef:46:1b:68:8c:47:c0:8f:81:e3:63:dc:06:78: 38:81:c1:44:72:73:af:7e:a6:01:6f:7b:aa:3b:72:ae:78:a3: 32:82:a8:84:85:ae:c9:c4:a4:48:31:17:dc:c5:ea:55:e8:2c: ec:9c:63:5c:18:31:0f:13:85:ea:d5:a4:b6:aa:9d:7a:65:0b: 18:7c:d0:92:1a:94:10:cf:b3:3c:2f:ae:36:1f:f8:fa:70:58: a7:98:fd:f1:69:35:b7:e3:00:01:59:3e:cd:37:31:d1:a8:8a: 50:3c:89:a4:98:f1:c0:5e:77:bc:f1:4e:1d:f3:86:31:e4:45: 17:a9:7b:eb:c7:c8:48:75:c3:76:f0:90:96:11:0c:8e:bb:b9: 73:ac:0b:a8:f6:f7:56:2b:9f:41:93:69:fb:91:07:6f:f9:11: 37:0c:39:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTirAEEYZwI1REeBWixYfQ0ZsO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0 RUM0NUYyMDAeFw0yNjA5MjEwODE2NTJaFw0yNjA5MjIxMDQ3NTJaMDMxMTAvBgNV BAMTKDA5OEQ1NjBFNTYzODRDRTJFNTc1QjBGRkY0OTA1NkE3NzQ4MUQ1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbEw5Lz8UrOfFrk70s2SpD29gX PPJFvQnNHO0OE5BegsU5aLSiYOgg4bv2tofJGHGdUOLxiB0kuCbMLyuXdTxnhbUk yZpOhpGX32JL8Q+OuebCp2HiTXetNValzIj8hYfAsT7FsvP+Kov2rcq5q0ORNtpw bHCmy4pX/DQD8cRRPOftqdubECQVAMDyo2F422nHoaerNDFLQ4ON+uZxCsn3Vv2M +poARNSXUHKpCY2uqjzLptlfpg4RehfJOruPICdtcPPpYWJCaMRXd7j30zR1fAoV jsxDQxTcqfy6kbLneSYXL/ScV3snC18zo/XwZ8e3yrSAItAkVgFfB74Fc+x/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCY1WDlY4TOLldbD/9JBWp3SB1bEwHwYDVR0j BBgwFoAU8k+S/uMu8/2JsULUA7ZkZ07EXyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg3ODhhOGItNTQxYi00Y2JmLWJhYjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVF MzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0RUM0NUYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRGOTJGRUUzMkVGM0ZEODlCMTQyRDQwM0I2NjQ2NzRFQzQ1 RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0 Njc0RUM0NUYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy6aaiLAjjGKnKhaPSRncohlLy/tafCbTUG 6vWZ+RiUgn/DIjdCejqEEyDSbzlVD62WJrjghwlZYkToR1w6N4k0fXRaczX3KtHK 6FZGeIf8v7gpSCYS4gKj27LRqvPvRhtojEfAj4HjY9wGeDiBwURyc69+pgFve6o7 cq54ozKCqISFrsnEpEgxF9zF6lXoLOycY1wYMQ8TherVpLaqnXplCxh80JIalBDP szwvrjYf+PpwWKeY/fFpNbfjAAFZPs03MdGoilA8iaSY8cBed7zxTh3zhjHkRRep e+vHyEh1w3bwkJYRDI67uXOsC6j291Yrn0GTafuRB2/5ETcMOWw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:19:52 2026 by rpki-client