$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: voOneA9Ud+vD7PkSqVWJFopPUQodpr7e/FFv5wEfBE0= Subject key identifier: 7F:1B:F9:62:E3:A1:43:FC:24:0B:EB:2C:3B:9B:8C:7F:CB:BB:B0:03 Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 3DCB94A5F10A99F9E6127C5CD95A72DBB1226A82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 03:15:04 +0000 Manifest this update: Wed 23 Sep 2026 03:10:04 +0000 Manifest next update: Thu 24 Sep 2026 05:16:04 +0000 Files and hashes: 1: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: 545kvz571Nxgb6ipRCvabLVUQtmkN5me49ZD4UmfE2Y=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cb:94:a5:f1:0a:99:f9:e6:12:7c:5c:d9:5a:72:db:b1:22:6a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Sep 23 03:10:04 2026 GMT Not After : Sep 24 05:16:04 2026 GMT Subject: CN=7F1BF962E3A143FC240BEB2C3B9B8C7FCBBBB003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:c6:0d:6b:41:52:08:b8:92:21:1b:aa:72: 62:26:ba:6b:f1:b5:6c:b8:2e:36:c9:e5:24:26:82: 15:41:a7:5c:af:a2:48:4e:2b:e9:c0:c5:5e:2f:81: a5:ba:aa:f3:97:cf:3a:cc:3a:47:45:4d:44:61:1a: 96:42:99:19:30:fc:21:ac:c0:0b:08:75:2e:61:d5: 5c:3b:69:08:ac:cd:18:5b:1c:58:10:04:73:2b:b7: 96:12:79:ec:db:03:37:7a:0c:aa:89:4d:47:97:6e: f4:06:74:5d:bc:6e:0c:2e:f6:24:5a:8a:e9:79:99: ae:b2:29:a5:fd:3a:e4:19:64:75:f3:5e:1c:80:92: 27:5c:c0:18:d1:a2:f3:02:51:c2:1a:7c:a4:5a:63: 57:08:0f:13:bd:e3:30:87:2d:5c:25:27:51:87:d3: 01:25:c4:90:a8:5a:46:88:7d:dd:94:55:0e:48:9a: ea:09:e2:4b:b2:19:86:60:c7:bf:04:04:9d:a1:eb: 71:ce:0b:08:64:5a:58:d2:f3:83:6c:64:fd:d9:09: 68:43:5f:85:55:3b:95:5d:98:7c:e0:55:2d:2e:2f: 27:e5:8f:22:04:e8:65:93:38:64:d6:fc:7a:10:89: b1:71:5f:83:1e:02:4f:13:1e:56:82:32:57:c7:66: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:F9:62:E3:A1:43:FC:24:0B:EB:2C:3B:9B:8C:7F:CB:BB:B0:03 X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b2:56:fd:f5:23:ce:35:29:a8:c2:bd:68:7a:18:30:73:29: 5e:1a:d2:76:9d:93:a1:28:55:03:60:fa:54:2a:fd:7c:a9:42: ee:ba:2b:20:b1:d2:6e:64:e4:ed:01:f6:9e:78:dc:30:49:0b: 72:17:d0:d3:d7:7c:ae:d5:87:52:3d:df:13:62:f5:db:d7:7f: d7:c4:4b:f7:7f:07:29:2a:6a:0f:a8:45:d9:bc:15:34:2e:40: 3b:10:b7:4e:bc:00:8e:e8:92:26:7b:1b:41:38:d2:56:4f:64: 3e:f5:ad:aa:77:f2:fa:b5:d7:c1:0f:b9:d2:6b:08:1a:70:af: c8:65:44:72:fd:4a:82:4a:64:f4:05:cc:ec:ac:7f:ae:61:1e: 3a:b3:d4:da:90:1e:51:5e:50:e6:e1:b0:2d:a3:49:0f:d0:0b: 3a:7a:0f:06:96:34:7e:dd:c0:23:dc:5f:50:9d:a8:0f:dd:35: b1:41:f7:55:62:2f:d6:85:2f:7f:29:33:63:fa:7d:ec:7e:1a: 0a:7b:3b:79:51:e6:78:ff:e6:ef:c6:df:5f:a1:75:cf:8b:3a: d1:e0:0e:f2:1f:43:25:56:09:ac:31:2d:13:20:9c:13:42:f9: 0f:9b:e7:5e:b9:e8:bd:9e:ab:cc:79:01:59:d6:b4:6d:fd:78: aa:1d:aa:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcuUpfEKmfnmEnxc2Vpy27EiaoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA5MjMwMzEwMDRaFw0yNjA5MjQwNTE2MDRaMDMxMTAvBgNV BAMTKDdGMUJGOTYyRTNBMTQzRkMyNDBCRUIyQzNCOUI4QzdGQ0JCQkIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZcYNa0FSCLiSIRuqcmImumvx tWy4LjbJ5SQmghVBp1yvokhOK+nAxV4vgaW6qvOXzzrMOkdFTURhGpZCmRkw/CGs wAsIdS5h1Vw7aQiszRhbHFgQBHMrt5YSeezbAzd6DKqJTUeXbvQGdF28bgwu9iRa iul5ma6yKaX9OuQZZHXzXhyAkidcwBjRovMCUcIafKRaY1cIDxO94zCHLVwlJ1GH 0wElxJCoWkaIfd2UVQ5ImuoJ4kuyGYZgx78EBJ2h63HOCwhkWljS84NsZP3ZCWhD X4VVO5VdmHzgVS0uLyfljyIE6GWTOGTW/HoQibFxX4MeAk8THlaCMlfHZuhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxv5YuOhQ/wkC+ssO5uMf8u7sAMwHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqyVv31I841KajCvWh6GDBzKV4a0nadk6Eo VQNg+lQq/XypQu66KyCx0m5k5O0B9p543DBJC3IX0NPXfK7Vh1I93xNi9dvXf9fE S/d/Bykqag+oRdm8FTQuQDsQt068AI7okiZ7G0E40lZPZD71rap38vq118EPudJr CBpwr8hlRHL9SoJKZPQFzOysf65hHjqz1NqQHlFeUObhsC2jSQ/QCzp6DwaWNH7d wCPcX1CdqA/dNbFB91ViL9aFL38pM2P6fex+Ggp7O3lR5nj/5u/G31+hdc+LOtHg DvIfQyVWCawxLRMgnBNC+Q+b51656L2eq8x5AVnWtG39eKodqqo= -----END CERTIFICATE-----Generated at Wed Sep 23 08:46:42 2026 by rpki-client