$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: I6fOyjZY7Z/SYO5/KZr0MY28lB36g7ruuPaoE5e6cbA= Subject key identifier: 7B:32:F5:05:EC:E6:E7:B2:73:54:C7:42:D2:A5:EC:9F:E8:D5:6D:3C Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 3E9BA382859D2059221005E6FFDB871EC1CDC56C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: BC Signing time: Sun 20 Sep 2026 15:15:56 +0000 Manifest this update: Sun 20 Sep 2026 15:10:56 +0000 Manifest next update: Mon 21 Sep 2026 18:56:56 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) 2: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: rDIE/ZIVyWBRD+lwV6tPqjLU7SMN1sVU3qdwkHB6SqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9b:a3:82:85:9d:20:59:22:10:05:e6:ff:db:87:1e:c1:cd:c5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: Sep 20 15:10:56 2026 GMT Not After : Sep 21 18:56:56 2026 GMT Subject: CN=7B32F505ECE6E7B27354C742D2A5EC9FE8D56D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:f6:38:70:2f:8a:1d:34:e2:2c:3d:30:ee: 28:cb:ff:d6:ff:d4:f8:f2:09:22:0f:1f:dc:28:22: 2e:bf:2e:a7:24:42:39:1d:f8:d8:f2:19:93:df:96: 97:ab:53:59:dc:b2:44:97:98:3a:10:62:28:db:27: 55:b4:ca:14:9f:92:8b:f5:2d:b6:ec:c5:8d:57:16: 6b:69:97:12:eb:62:97:6b:97:e4:fa:5f:50:aa:d2: dd:08:a5:24:ca:a8:fe:01:f1:a4:a0:22:01:e3:ef: 01:1b:c0:0e:5e:28:58:f0:10:44:00:63:87:50:36: ba:43:e7:d6:62:97:0c:34:4c:b4:bd:dd:48:f1:68: 56:bf:b5:87:c5:08:7a:fc:9b:31:9f:fc:03:c7:02: 76:2f:60:55:b7:80:19:d9:4d:4c:61:d8:8c:af:47: 4f:31:74:ab:71:68:03:90:5c:41:a3:31:12:c3:43: 55:af:24:2a:d2:06:d9:10:b7:e1:47:c3:b3:93:f8: 45:01:9c:8f:16:b6:06:90:5a:06:d5:f4:08:bb:c6: 05:da:14:4f:8b:ef:89:3c:05:57:ec:1e:1b:8b:b9: 22:4f:51:2a:54:11:ea:d6:16:c2:42:9f:cf:47:d1: 60:cd:33:a2:34:bc:c4:26:b7:e5:3d:ce:54:a2:2d: 9d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:32:F5:05:EC:E6:E7:B2:73:54:C7:42:D2:A5:EC:9F:E8:D5:6D:3C X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d6:83:05:23:d8:8e:1c:05:01:9e:5e:75:e9:34:c7:5c:d9: cb:8a:0c:19:89:27:74:b5:5f:3b:4e:17:81:c3:0f:4d:ae:a5: 4c:0c:b4:f9:48:2c:ff:0b:59:ab:77:d1:9c:49:a1:2d:91:05: 55:b0:01:c3:fc:16:f7:94:cd:ad:7c:08:7c:9c:08:b4:23:bb: d4:9c:94:19:8a:1b:7d:1c:f9:b1:20:6b:69:04:93:ed:d9:53: 45:eb:4f:9a:74:fa:da:39:d3:89:99:42:5d:6c:61:95:95:aa: 9c:a6:12:f7:1a:a6:0e:65:99:b6:2d:1c:6f:b2:fa:c0:49:4c: fa:12:c2:d9:87:9b:03:c6:02:a0:70:65:25:23:9c:b0:15:50: c3:91:5a:2c:04:e9:52:be:a2:b3:04:6c:3e:bd:bc:93:de:71: 35:ef:95:f1:7f:1d:d7:a7:0a:1f:e7:8d:f7:0b:b8:4f:4f:1d: 31:05:8c:0b:38:b0:27:47:32:55:87:f4:dc:3d:44:13:f4:1e: 45:12:d1:5f:ea:72:c9:a2:74:34:45:cc:39:43:3e:1a:f9:49: 8e:28:b9:a8:41:5d:fa:9b:f2:69:c3:7f:85:99:59:2b:72:22: fc:61:3e:e8:bf:dc:d3:61:1f:ef:c0:94:ff:38:d8:3e:df:a4: 12:7a:27:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpujgoWdIFkiEAXm/9uHHsHNxWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjA5MjAxNTEwNTZaFw0yNjA5MjExODU2NTZaMDMxMTAvBgNV BAMTKDdCMzJGNTA1RUNFNkU3QjI3MzU0Qzc0MkQyQTVFQzlGRThENTZEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE/Y4cC+KHTTiLD0w7ijL/9b/ 1PjyCSIPH9woIi6/LqckQjkd+NjyGZPflperU1ncskSXmDoQYijbJ1W0yhSfkov1 LbbsxY1XFmtplxLrYpdrl+T6X1Cq0t0IpSTKqP4B8aSgIgHj7wEbwA5eKFjwEEQA Y4dQNrpD59Zilww0TLS93UjxaFa/tYfFCHr8mzGf/APHAnYvYFW3gBnZTUxh2Iyv R08xdKtxaAOQXEGjMRLDQ1WvJCrSBtkQt+FHw7OT+EUBnI8WtgaQWgbV9Ai7xgXa FE+L74k8BVfsHhuLuSJPUSpUEerWFsJCn89H0WDNM6I0vMQmt+U9zlSiLZ2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezL1Bezm57JzVMdC0qXsn+jVbTwwHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDWgwUj2I4cBQGeXnXpNMdc2cuKDBmJJ3S1 XztOF4HDD02upUwMtPlILP8LWat30ZxJoS2RBVWwAcP8FveUza18CHycCLQju9Sc lBmKG30c+bEga2kEk+3ZU0XrT5p0+to504mZQl1sYZWVqpymEvcapg5lmbYtHG+y +sBJTPoSwtmHmwPGAqBwZSUjnLAVUMORWiwE6VK+orMEbD69vJPecTXvlfF/Hden Ch/njfcLuE9PHTEFjAs4sCdHMlWH9Nw9RBP0HkUS0V/qcsmidDRFzDlDPhr5SY4o uahBXfqb8mnDf4WZWStyIvxhPui/3NNhH+/AlP842D7fpBJ6J9s= -----END CERTIFICATE-----Generated at Mon Sep 21 05:34:46 2026 by rpki-client