$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft File: F03310D1D60B7C8D4880FEE5263129029C23044D.mft (raw, json) Hash identifier: SKwisVQZPGobUqo8MxbWJpbdG9eIukIMfRGdEq0qAlw= Subject key identifier: 84:DB:DA:08:C4:CB:8A:AF:B1:6A:24:0E:4C:1B:0B:28:6C:B4:A4:F9 Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D Certificate issuer: /CN=F03310D1D60B7C8D4880FEE5263129029C23044D Certificate serial: 15CCD8F28BA468F099F8E0D47C491D1C2A5D40E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:45:55 +0000 Manifest this update: Mon 21 Sep 2026 19:40:55 +0000 Manifest next update: Tue 22 Sep 2026 21:37:55 +0000 Files and hashes: 1: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk=) 2: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: oj0326y5Cx12gm92v2QPQwGd5h65A9BVPedBNOtACzM=) 3: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: 0UDfWdK0ccDtOWv3TneU4N8dGsBm8DxDAXGKlhp/dv4=) 4: F03310D1D60B7C8D4880FEE5263129029C23044D.crl (hash: Suf6GULksLS6rT4PEssEaP1XOSLG5uYc5dNOtvnq5Ms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cc:d8:f2:8b:a4:68:f0:99:f8:e0:d4:7c:49:1d:1c:2a:5d:40:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D Validity Not Before: Sep 21 19:40:55 2026 GMT Not After : Sep 22 21:37:55 2026 GMT Subject: CN=84DBDA08C4CB8AAFB16A240E4C1B0B286CB4A4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:a2:28:55:9f:38:e5:63:48:7c:15:2f:86: da:8c:3a:60:6f:78:e7:5d:74:f6:0b:4f:bc:1c:c6: 27:ac:44:5d:27:4d:4e:fb:37:6f:ee:40:7f:f1:e3: 14:2c:61:98:f6:87:a4:8b:73:dc:55:23:e6:c6:7a: 86:eb:e8:f9:38:2b:94:c3:d7:a2:4f:86:cc:e8:b5: dd:bc:d2:66:ef:78:c4:6e:1a:4b:ae:a9:a8:e5:ea: fe:c8:0c:e8:ac:97:fe:48:f2:c9:2b:2f:9a:1b:ae: f6:de:1f:4a:fc:99:58:fc:45:30:58:c6:2a:fd:6d: 7f:79:de:54:cd:a4:4c:68:52:c6:9d:ca:f6:2f:4b: 7b:aa:dc:38:79:0a:cd:45:ba:19:e4:b0:ab:73:c2: df:30:e9:c7:a9:6e:92:97:cc:8d:4f:41:f7:e9:54: c6:04:49:e3:43:aa:63:11:b4:da:c4:af:33:41:88: 41:dc:16:6f:97:c1:54:f7:2c:0e:63:77:cb:3e:52: 54:3b:94:b1:7e:88:80:c5:a9:e7:c8:3f:b6:ec:09: de:a9:b6:f1:e6:77:7f:cd:ba:33:3f:dc:48:90:11: 4a:99:7e:d4:63:de:63:3e:6c:ea:5e:77:1f:6f:79: b7:75:11:e5:16:70:38:af:24:a9:fb:a9:dd:8c:ff: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DB:DA:08:C4:CB:8A:AF:B1:6A:24:0E:4C:1B:0B:28:6C:B4:A4:F9 X509v3 Authority Key Identifier: keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:3a:28:5a:c4:2e:9b:7a:19:78:5d:cc:25:c4:75:ad:24: 47:c6:95:22:fe:53:2e:7a:ce:17:03:7c:00:f4:eb:15:b3:d8: 30:5c:b9:06:6d:ad:c7:50:5f:29:36:f2:a7:4c:f3:67:1e:8b: 49:6f:00:81:68:76:70:35:78:ba:7e:64:2f:d8:fb:b5:ed:cf: f2:32:a5:99:cb:33:b2:84:6d:8b:ed:8c:0a:15:79:fe:1d:ac: 19:0a:a4:35:12:a7:7e:f5:9b:a8:f0:20:fe:a9:32:fe:1b:43: 52:91:d7:b7:0e:a3:cb:43:00:11:f2:b5:1f:92:59:be:96:0a: 69:33:c1:c4:25:59:76:b7:c9:32:37:32:24:d7:02:b3:77:be: 58:81:3a:c5:60:4b:9c:a3:e1:03:56:73:5f:75:65:dc:dc:6f: b4:b5:d5:a3:1c:1d:59:8d:36:f2:0d:bc:77:a2:e1:63:ca:7a: c6:7f:a1:43:e6:d1:f8:ed:78:7a:be:ff:53:81:eb:9e:c4:58: ee:62:b6:9e:9f:cf:77:31:8b:de:62:72:97:1f:ab:66:3d:e4: 2c:29:2c:78:3a:35:ef:48:9e:e7:89:e2:39:be:cf:f6:8b:5b: cc:2e:82:c2:15:fd:9a:26:18:72:93:8a:b8:60:92:60:63:f3: b4:1d:0e:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFczY8oukaPCZ+ODUfEkdHCpdQOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5 QzIzMDQ0RDAeFw0yNjA5MjExOTQwNTVaFw0yNjA5MjIyMTM3NTVaMDMxMTAvBgNV BAMTKDg0REJEQTA4QzRDQjhBQUZCMTZBMjQwRTRDMUIwQjI4NkNCNEE0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0qIoVZ845WNIfBUvhtqMOmBv eOdddPYLT7wcxiesRF0nTU77N2/uQH/x4xQsYZj2h6SLc9xVI+bGeobr6Pk4K5TD 16JPhszotd280mbveMRuGkuuqajl6v7IDOisl/5I8skrL5obrvbeH0r8mVj8RTBY xir9bX953lTNpExoUsadyvYvS3uq3Dh5Cs1FuhnksKtzwt8w6cepbpKXzI1PQffp VMYESeNDqmMRtNrErzNBiEHcFm+XwVT3LA5jd8s+UlQ7lLF+iIDFqefIP7bsCd6p tvHmd3/NujM/3EiQEUqZftRj3mM+bOpedx9vebd1EeUWcDivJKn7qd2M/9z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNvaCMTLiq+xaiQOTBsLKGy0pPkwHwYDVR0j BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw NDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5 MDI5QzIzMDQ0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq+OihaxC6behl4XcwlxHWtJEfGlSL+Uy56 zhcDfAD06xWz2DBcuQZtrcdQXyk28qdM82cei0lvAIFodnA1eLp+ZC/Y+7Xtz/Iy pZnLM7KEbYvtjAoVef4drBkKpDUSp371m6jwIP6pMv4bQ1KR17cOo8tDABHytR+S Wb6WCmkzwcQlWXa3yTI3MiTXArN3vliBOsVgS5yj4QNWc191Zdzcb7S11aMcHVmN NvINvHei4WPKesZ/oUPm0fjteHq+/1OB657EWO5itp6fz3cxi95icpcfq2Y95Cwp LHg6Ne9InueJ4jm+z/aLW8wugsIV/ZomGHKTirhgkmBj87QdDns= -----END CERTIFICATE-----Generated at Tue Sep 22 06:48:58 2026 by rpki-client