$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json) Hash identifier: H66GXYOdjJkBLtpzAuHlth/lHmalFwf36XhTDcoXOiY= Subject key identifier: 5A:25:EF:8E:26:D6:37:5D:FA:0F:70:E7:70:5D:9A:88:FB:B4:1F:12 Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Certificate serial: 20A9BD3F9CA14D9AE2E377BC7A14479DE85AD1AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft Manifest number: BD Signing time: Sun 20 Sep 2026 10:25:00 +0000 Manifest this update: Sun 20 Sep 2026 10:20:00 +0000 Manifest next update: Mon 21 Sep 2026 14:09:00 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=) 2: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: dszIxoRm2IF9mS02rClKZFk7tu9REnxgoSMakY7fSbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:bd:3f:9c:a1:4d:9a:e2:e3:77:bc:7a:14:47:9d:e8:5a:d1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Validity Not Before: Sep 20 10:20:00 2026 GMT Not After : Sep 21 14:09:00 2026 GMT Subject: CN=5A25EF8E26D6375DFA0F70E7705D9A88FBB41F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:38:b3:35:3d:13:58:69:30:38:dc:0b:75: 08:a5:41:72:be:0e:fb:dc:1b:48:5f:ae:84:60:17: 9b:46:e6:fc:9b:44:c6:05:57:8f:a9:7d:72:32:39: f8:8b:9a:82:c6:83:21:87:0a:54:ac:e2:e7:13:32: 4c:d5:d8:76:75:2d:cf:41:a5:68:b2:e8:db:a0:ac: 37:22:f1:66:b7:6d:7b:8f:ea:40:b2:1d:6c:e9:bb: 03:0b:e0:f2:3a:27:0e:0e:31:31:6f:5a:d9:29:d5: 9d:55:80:2f:f6:8a:f4:95:0b:af:f2:5e:ea:7e:c7: 0e:82:d0:ab:59:77:ce:2b:f0:7a:70:ec:56:29:8c: ef:37:86:a5:eb:1d:c2:97:84:f3:17:66:71:16:cd: 20:c2:ab:17:3a:d8:fc:8d:05:3f:fa:a5:ce:47:85: 5f:60:ed:6f:89:a7:49:71:69:6c:ba:6c:52:4a:12: 0a:8d:9d:de:9e:19:03:7a:f8:70:d2:2d:7c:22:c5: ac:7e:b4:14:01:89:dd:22:5a:c0:9f:e5:0d:70:cf: 61:de:20:57:28:83:6a:9e:f5:75:9a:ea:5d:c4:c5: c1:7b:af:d9:3c:dd:5d:42:9b:1c:99:d0:c3:7b:22: 4e:78:a9:5c:76:f9:68:e7:54:9b:80:26:4d:37:bb: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:EF:8E:26:D6:37:5D:FA:0F:70:E7:70:5D:9A:88:FB:B4:1F:12 X509v3 Authority Key Identifier: keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d5:2b:ae:5e:a7:8d:61:cf:8e:ae:39:74:0b:e3:61:67:cc: f3:51:07:24:24:f0:18:05:25:35:dd:30:46:0c:7e:df:39:8a: 71:06:ca:59:37:90:f1:50:70:19:ea:3d:6f:80:ad:cf:ee:98: 82:51:2f:55:4c:53:8b:a9:0c:a2:c1:61:3c:2d:7e:61:ca:8d: 80:ac:58:21:f5:b8:9e:02:34:74:30:26:25:38:9c:1b:8f:08: 82:5d:86:88:ee:ad:6f:0e:f9:a5:a6:64:eb:15:e1:c6:2c:d0: ef:ff:8e:f9:83:31:d3:b8:3b:f4:e8:a8:bd:ed:0e:14:7d:ac: fc:a1:e9:b7:e8:2d:96:ff:02:a0:ea:f0:d2:f2:0f:4a:ee:49: 08:d6:0d:24:8a:c9:0c:ec:c6:7f:db:eb:ee:8c:1b:8d:10:ce: 90:d5:b3:66:2c:1e:32:98:38:fc:64:da:ad:e6:3b:8f:1b:77: 7a:83:d8:25:44:55:90:f0:3e:f2:ae:8c:7a:ae:9c:cb:ef:f3: eb:e1:42:7d:bf:40:62:e9:f0:6b:59:ed:44:ef:ba:c6:db:e2: 24:df:03:42:00:f1:8d:16:33:10:7c:e9:a4:54:c4:39:6b:21: 7e:69:6c:c4:eb:d4:32:65:9e:d4:3a:90:22:85:54:3a:51:d0: 29:fb:df:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKm9P5yhTZri43e8ehRHneha0awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0 MkFGRDQ1ODAeFw0yNjA5MjAxMDIwMDBaFw0yNjA5MjExNDA5MDBaMDMxMTAvBgNV BAMTKDVBMjVFRjhFMjZENjM3NURGQTBGNzBFNzcwNUQ5QTg4RkJCNDFGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fTizNT0TWGkwONwLdQilQXK+ DvvcG0hfroRgF5tG5vybRMYFV4+pfXIyOfiLmoLGgyGHClSs4ucTMkzV2HZ1Lc9B pWiy6NugrDci8Wa3bXuP6kCyHWzpuwML4PI6Jw4OMTFvWtkp1Z1VgC/2ivSVC6/y Xup+xw6C0KtZd84r8Hpw7FYpjO83hqXrHcKXhPMXZnEWzSDCqxc62PyNBT/6pc5H hV9g7W+Jp0lxaWy6bFJKEgqNnd6eGQN6+HDSLXwixax+tBQBid0iWsCf5Q1wz2He IFcog2qe9XWa6l3ExcF7r9k83V1CmxyZ0MN7Ik54qVx2+WjnVJuAJk03uzb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiXvjibWN136D3DncF2aiPu0HxIwHwYDVR0j BBgwFoAU8jF3rqBewALtnRqexg1qEkKv1FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY3OTgyNGYtNGUwOC00OTcwLWJiYTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVB MDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0MkFGRDQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjMxNzdBRUEwNUVDMDAyRUQ5RDFBOUVDNjBENkExMjQyQUZE NDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZB MTI0MkFGRDQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvVK65ep41hz46uOXQL42FnzPNRByQk8BgF JTXdMEYMft85inEGylk3kPFQcBnqPW+Arc/umIJRL1VMU4upDKLBYTwtfmHKjYCs WCH1uJ4CNHQwJiU4nBuPCIJdhojurW8O+aWmZOsV4cYs0O//jvmDMdO4O/ToqL3t DhR9rPyh6bfoLZb/AqDq8NLyD0ruSQjWDSSKyQzsxn/b6+6MG40QzpDVs2YsHjKY OPxk2q3mO48bd3qD2CVEVZDwPvKujHqunMvv8+vhQn2/QGLp8GtZ7UTvusbb4iTf A0IA8Y0WMxB86aRUxDlrIX5pbMTr1DJlntQ6kCKFVDpR0Cn7358= -----END CERTIFICATE-----Generated at Mon Sep 21 05:40:57 2026 by rpki-client