$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: Ealp4b4M/nWBtoZlmruoPfmUXdaHC4HagWROqPU7kac= Subject key identifier: 66:0D:EF:D9:C5:32:0C:D5:21:83:9C:4F:18:E9:32:3A:B7:9C:23:64 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 360E34B86AFA752F1989AC361439843CEB1AF5B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:36:03 +0000 Manifest this update: Sun 20 Sep 2026 23:31:03 +0000 Manifest next update: Tue 22 Sep 2026 03:07:03 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) 2: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 3: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: HSsRTcUSwj7CvYiSuwcA/pmlyaBl/93xCBxTJPNN7PI=) 4: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 5: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0e:34:b8:6a:fa:75:2f:19:89:ac:36:14:39:84:3c:eb:1a:f5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Sep 20 23:31:03 2026 GMT Not After : Sep 22 03:07:03 2026 GMT Subject: CN=660DEFD9C5320CD521839C4F18E9323AB79C2364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:f0:db:0b:3f:54:60:3e:25:0e:8e:89:f4: 41:c3:90:8f:8c:2a:86:fa:ce:ad:b7:a7:b8:c4:ca: 0f:78:9e:7a:8a:23:06:0c:da:98:b6:4c:4e:9a:d5: 55:d8:b1:55:92:68:c4:01:4e:b6:5a:ea:ef:d0:36: 90:76:2c:34:f7:e2:17:24:a0:2a:db:85:db:41:92: 23:55:81:d2:57:c5:fe:ee:b2:46:bd:85:13:62:91: f9:8f:c2:ba:f8:ed:50:b6:ba:8c:fb:57:8c:ce:83: 1b:bc:0a:91:7f:a6:60:1d:57:23:b7:f7:c0:7c:fd: b3:9d:fb:0c:50:a5:cb:a5:7c:dd:5a:80:87:b1:38: 6e:71:a1:96:66:bb:b2:35:41:a4:ef:6b:b9:35:0c: c7:88:2b:7f:c6:fe:25:15:37:66:6c:e3:2f:45:9e: 23:43:bb:9a:14:39:5f:5e:fd:e8:22:ba:29:8f:51: ae:8d:3f:04:d8:07:62:54:c1:db:f6:e6:29:d7:9b: 16:17:62:77:4e:ec:98:bd:08:a9:c5:b4:b7:47:f3: 32:ce:fc:2b:8a:ee:de:8d:f2:07:38:82:f3:c5:ed: fd:85:a7:86:6c:d7:1c:5f:60:81:5e:66:fb:8a:1e: 97:60:a4:25:50:9a:e2:8a:6f:26:11:e3:e7:23:ff: 8b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0D:EF:D9:C5:32:0C:D5:21:83:9C:4F:18:E9:32:3A:B7:9C:23:64 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:f2:28:d4:0b:1c:17:ab:75:a6:b1:c2:10:9e:9b:06:04: de:05:bf:a1:48:65:75:7a:43:cb:98:fc:c2:b6:91:d8:59:d1: ef:8e:45:73:ee:27:58:f9:fb:82:8d:c7:ed:38:39:36:71:30: a1:13:a3:18:43:df:df:32:11:ff:62:df:7c:3e:88:e4:0e:0c: 48:9e:af:9c:a1:70:47:0e:84:37:eb:1a:aa:73:fa:56:7a:31: 77:a5:4d:9b:c6:ba:66:6b:e7:bf:5e:b3:33:0f:91:14:1a:54: e7:c3:c6:55:47:8b:43:b5:85:f2:9f:b1:2c:c6:9b:89:db:5f: 24:3a:0f:81:bf:bb:28:b0:2d:99:cb:39:ad:e4:d8:ac:08:ea: 3b:31:fe:33:49:87:94:48:7b:df:8a:4d:99:d6:69:12:56:59: c1:c0:de:64:40:97:ae:61:6b:5f:b9:c7:d8:ed:7a:17:f8:ba: ff:8d:2b:05:3e:3e:2c:ba:14:23:0b:f8:ed:55:29:6e:81:2b: 1e:71:0c:1e:d2:62:74:f4:ee:fb:a7:8b:24:f8:a4:9f:32:ef: 89:1b:76:ca:98:ec:61:c1:5e:50:f3:91:2a:c3:f8:81:4d:f4: 69:3e:ad:2c:b1:2a:6b:0a:51:e8:e5:45:66:8c:23:f7:00:2f: f4:b4:62:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNg40uGr6dS8Ziaw2FDmEPOsa9bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA5MjAyMzMxMDNaFw0yNjA5MjIwMzA3MDNaMDMxMTAvBgNV BAMTKDY2MERFRkQ5QzUzMjBDRDUyMTgzOUM0RjE4RTkzMjNBQjc5QzIzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvM/DbCz9UYD4lDo6J9EHDkI+M Kob6zq23p7jEyg94nnqKIwYM2pi2TE6a1VXYsVWSaMQBTrZa6u/QNpB2LDT34hck oCrbhdtBkiNVgdJXxf7uska9hRNikfmPwrr47VC2uoz7V4zOgxu8CpF/pmAdVyO3 98B8/bOd+wxQpculfN1agIexOG5xoZZmu7I1QaTva7k1DMeIK3/G/iUVN2Zs4y9F niNDu5oUOV9e/egiuimPUa6NPwTYB2JUwdv25inXmxYXYndO7Ji9CKnFtLdH8zLO /CuK7t6N8gc4gvPF7f2Fp4Zs1xxfYIFeZvuKHpdgpCVQmuKKbyYR4+cj/4tVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZg3v2cUyDNUhg5xPGOkyOrecI2QwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJF8ijUCxwXq3WmscIQnpsGBN4Fv6FIZXV6 Q8uY/MK2kdhZ0e+ORXPuJ1j5+4KNx+04OTZxMKEToxhD398yEf9i33w+iOQODEie r5yhcEcOhDfrGqpz+lZ6MXelTZvGumZr579eszMPkRQaVOfDxlVHi0O1hfKfsSzG m4nbXyQ6D4G/uyiwLZnLOa3k2KwI6jsx/jNJh5RIe9+KTZnWaRJWWcHA3mRAl65h a1+5x9jtehf4uv+NKwU+Piy6FCML+O1VKW6BKx5xDB7SYnT07vuniyT4pJ8y74kb dsqY7GHBXlDzkSrD+IFN9Gk+rSyxKmsKUejlRWaMI/cAL/S0YnI= -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:50 2026 by rpki-client