$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft File: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json) Hash identifier: URQRdwuf3FQXxPAjTxQ001uOxn2C7MJ5w01EURidkXY= Subject key identifier: 48:4A:87:46:DA:D7:5B:66:A7:37:D1:6C:AA:C6:F2:36:17:0B:AF:19 Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Certificate serial: 69A471DCBADC1DAF5E00B74E7042EFDFCD7F42F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:43:35 +0000 Manifest this update: Mon 21 Sep 2026 09:38:35 +0000 Manifest next update: Tue 22 Sep 2026 11:24:35 +0000 Files and hashes: 1: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=) 2: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=) 3: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=) 4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=) 5: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=) 6: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: co4Wr58TwRqkbe8Jn25ecBZGD9Qg7JZ+vYUBoO0i+rM=) 7: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=) 8: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=) 9: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=) 10: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a4:71:dc:ba:dc:1d:af:5e:00:b7:4e:70:42:ef:df:cd:7f:42:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Validity Not Before: Sep 21 09:38:35 2026 GMT Not After : Sep 22 11:24:35 2026 GMT Subject: CN=484A8746DAD75B66A737D16CAAC6F236170BAF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:0a:5d:68:83:95:7c:37:8f:44:ef:a4:42: d5:fe:05:44:cc:d7:3f:b6:ea:63:ed:c4:9f:b8:df: 26:00:4d:c8:2a:4d:b9:9f:1a:dc:15:79:e1:40:1c: 34:1e:b5:79:ab:f2:9b:ab:c5:8d:e4:32:3a:ca:70: e9:08:f7:dd:a0:70:c5:6e:42:93:6e:7f:d6:7d:5b: 52:ad:22:0e:2f:5d:0d:ae:0d:4b:2e:76:b5:dc:34: 5d:4b:8c:68:23:13:c8:7d:06:0b:e5:4f:0f:be:65: 72:c7:f5:39:e3:5a:93:04:08:75:87:cf:02:9f:86: c9:70:8d:5a:b5:9c:15:7f:1c:6a:94:db:e9:55:ef: 45:52:58:04:d2:96:8a:a6:aa:3c:92:1f:b8:c2:98: fd:18:c2:c8:c8:84:18:23:28:d2:59:aa:a1:04:d7: 54:11:71:cb:8b:40:24:3d:44:0e:76:43:f1:70:ba: d0:a0:c6:a0:08:66:db:e6:4c:91:a8:f5:5a:2b:a8: 8f:22:75:88:43:59:2f:6c:62:c6:03:44:f7:72:97: 1d:cd:ce:81:f1:89:4a:f1:44:bb:fc:15:b0:6d:a6: 5e:bd:a8:40:bb:ba:5f:6e:30:ce:85:38:39:b4:5c: 3c:ab:a5:92:c6:1a:98:88:63:20:f5:27:fa:07:14: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4A:87:46:DA:D7:5B:66:A7:37:D1:6C:AA:C6:F2:36:17:0B:AF:19 X509v3 Authority Key Identifier: keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:85:31:c4:c0:b0:61:1f:9d:88:c5:67:38:45:a2:97:69: af:97:ac:4d:cc:47:b0:50:32:dd:c1:15:ca:7c:70:7c:9d:6e: 3d:78:32:bc:a2:8e:4f:84:95:f4:d4:b8:20:47:6c:03:4f:e0: e4:8d:bb:74:55:f5:c4:21:1f:ee:eb:b1:24:90:a9:f8:ac:22: 69:99:24:a3:3a:ee:7a:2e:0f:02:4a:58:63:66:76:86:48:31: 2c:18:08:55:e6:54:d6:d3:6c:5c:23:00:1a:60:c1:56:42:95: 4c:4f:9e:b7:f3:18:ba:a0:59:8d:5d:6f:a0:14:d0:9e:e5:d5: c4:ba:a1:06:86:4f:6b:70:c5:75:69:1b:3d:f0:4e:5b:f5:b0: 7c:ce:f3:92:5c:b6:44:a6:b2:de:ee:04:ec:ff:56:9b:78:fd: 69:47:c2:69:12:3b:95:3a:48:4e:d3:5a:eb:e0:8c:3d:b6:1a: 5f:de:9a:3d:b5:56:ba:33:7d:e1:24:fd:19:45:1b:f4:e4:0c: 40:33:b7:9c:05:a0:b1:ee:13:06:bf:46:80:e3:cb:02:0f:d5: a4:51:4f:c8:df:70:a0:3b:dd:aa:93:60:99:c9:13:a7:e3:46: 2a:9b:1b:55:c8:7f:d0:b8:a1:3f:11:18:42:82:c8:72:bd:17: b9:51:5c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaRx3LrcHa9eALdOcELv381/QvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4NkRB QkEyMkNBRjAeFw0yNjA5MjEwOTM4MzVaFw0yNjA5MjIxMTI0MzVaMDMxMTAvBgNV BAMTKDQ4NEE4NzQ2REFENzVCNjZBNzM3RDE2Q0FBQzZGMjM2MTcwQkFGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKApdaIOVfDePRO+kQtX+BUTM 1z+26mPtxJ+43yYATcgqTbmfGtwVeeFAHDQetXmr8purxY3kMjrKcOkI992gcMVu QpNuf9Z9W1KtIg4vXQ2uDUsudrXcNF1LjGgjE8h9BgvlTw++ZXLH9TnjWpMECHWH zwKfhslwjVq1nBV/HGqU2+lV70VSWATSloqmqjySH7jCmP0YwsjIhBgjKNJZqqEE 11QRccuLQCQ9RA52Q/FwutCgxqAIZtvmTJGo9VorqI8idYhDWS9sYsYDRPdylx3N zoHxiUrxRLv8FbBtpl69qEC7ul9uMM6FODm0XDyrpZLGGpiIYyD1J/oHFLmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEqHRtrXW2anN9FsqsbyNhcLrxkwHwYDVR0j BBgwFoAU8H3ipgQcTM30JNT+KZtYbauiLK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3YjBkN2UtZWFkZS00MzE4LWFiMjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYw NDFDNENDREY0MjRENEZFMjk5QjU4NkRBQkEyMkNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDdERTJBNjA0MUM0Q0NERjQyNEQ0RkUyOTlCNTg2REFCQTIy Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4 NkRBQkEyMkNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF5hTHEwLBhH52IxWc4RaKXaa+XrE3MR7BQ Mt3BFcp8cHydbj14Mryijk+ElfTUuCBHbANP4OSNu3RV9cQhH+7rsSSQqfisImmZ JKM67nouDwJKWGNmdoZIMSwYCFXmVNbTbFwjABpgwVZClUxPnrfzGLqgWY1db6AU 0J7l1cS6oQaGT2twxXVpGz3wTlv1sHzO85JctkSmst7uBOz/Vpt4/WlHwmkSO5U6 SE7TWuvgjD22Gl/emj21VrozfeEk/RlFG/TkDEAzt5wFoLHuEwa/RoDjywIP1aRR T8jfcKA73aqTYJnJE6fjRiqbG1XIf9C4oT8RGEKCyHK9F7lRXEk= -----END CERTIFICATE-----Generated at Mon Sep 21 16:26:33 2026 by rpki-client