$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: ExYHlkyLrngYENW2BxY4ZSQUyFGNKPOScIkxGzi92MM= Subject key identifier: 69:C9:9C:C6:A3:6F:20:22:59:DB:2C:1F:AF:C2:63:87:76:5A:F0:2A Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 6F4A4C11F0E8C951547BCC906DD19AF4A0C4EAA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:36:15 +0000 Manifest this update: Sun 20 Sep 2026 15:31:15 +0000 Manifest next update: Mon 21 Sep 2026 18:05:15 +0000 Files and hashes: 1: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) 2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 3: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: Tlwrq9U2it5akyCKcCTV4jbWpsDAyCmED3oiBNzmFPQ=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4a:4c:11:f0:e8:c9:51:54:7b:cc:90:6d:d1:9a:f4:a0:c4:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Sep 20 15:31:15 2026 GMT Not After : Sep 21 18:05:15 2026 GMT Subject: CN=69C99CC6A36F202259DB2C1FAFC26387765AF02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:d6:e3:f8:13:50:b1:95:cb:26:12:cb:c3: 1e:d7:3b:77:f8:e8:07:bc:ef:8a:37:78:56:71:86: 0d:b9:31:ac:ae:5d:51:b4:18:a8:4b:78:c7:91:87: e9:4b:65:e4:2a:26:42:51:61:d0:52:51:b5:06:50: c1:fc:10:be:1b:ba:e4:27:ab:56:6a:d8:05:b3:fb: a3:2c:2b:14:50:d7:e3:ae:9d:ad:ba:d0:1b:5a:56: fc:1b:1f:ab:0c:24:d8:07:6d:5f:ab:b4:af:6a:af: e6:e2:e8:c0:23:e1:2f:cc:b0:eb:5a:0b:01:06:ff: c4:8f:1c:a4:b2:01:a3:72:d1:3b:fa:12:f7:8b:e3: 11:a5:05:fe:78:be:09:4f:10:14:b7:3e:62:8c:f0: d7:ab:71:f0:9d:17:9f:b7:ac:2e:53:46:7e:06:dd: ce:20:86:55:24:4a:0e:c1:c3:a6:2f:8a:5d:03:4c: 4c:a6:50:d4:cb:f6:2a:81:95:22:30:98:98:39:69: 92:25:95:0f:1f:d8:a7:8f:a9:6d:76:95:9a:4b:d2: c8:0d:11:f4:1b:a0:72:80:3c:1d:de:36:13:ea:ed: 57:a0:8b:5a:08:ce:46:d9:9a:b6:a0:7f:6d:22:a6: 05:be:8f:a1:aa:3a:2f:f9:90:98:7c:5c:74:48:f5: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C9:9C:C6:A3:6F:20:22:59:DB:2C:1F:AF:C2:63:87:76:5A:F0:2A X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:93:15:fd:a0:77:b2:ec:95:88:f0:6d:93:d5:66:59:b9: 87:aa:24:96:99:90:4f:14:67:66:3c:d3:37:a7:e8:2c:c7:6b: d3:b7:a6:46:e9:ff:d8:30:37:4c:a4:14:98:03:cd:c3:d5:fa: 12:c9:ff:03:3f:4e:f8:84:9f:fa:14:d2:12:f9:0e:1d:3f:f4: 0c:00:a9:9c:47:6f:24:91:11:7c:39:1d:16:67:46:c9:c6:f6: 77:dd:f5:33:aa:28:df:c6:34:96:eb:bf:13:0d:8f:35:e8:38: 19:34:5e:11:e2:4b:36:b4:19:28:e9:72:6b:44:31:04:78:64: cd:61:17:2b:6f:66:16:c4:94:07:fe:ee:96:17:31:28:90:d9: c4:85:7e:3c:19:70:34:49:23:da:e0:69:d7:49:4e:2d:b2:d8: e9:b5:f0:1c:c8:7d:c4:1b:14:12:8c:09:07:ff:5b:50:56:27: a6:77:3e:9d:9c:42:9c:a5:e8:e7:5f:b0:f7:40:e9:3c:24:b5: b8:d1:9f:b2:c2:17:a6:76:e9:5c:6c:9e:3e:ad:4c:f1:c1:f0: 58:cb:91:92:9c:80:93:50:a7:17:c8:a7:f6:df:c1:7a:59:2b: 33:0d:80:d8:7a:4a:81:f7:72:df:23:70:66:ae:81:2c:2c:9a: 2f:a6:b3:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0pMEfDoyVFUe8yQbdGa9KDE6qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA5MjAxNTMxMTVaFw0yNjA5MjExODA1MTVaMDMxMTAvBgNV BAMTKDY5Qzk5Q0M2QTM2RjIwMjI1OURCMkMxRkFGQzI2Mzg3NzY1QUYwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ctbj+BNQsZXLJhLLwx7XO3f4 6Ae874o3eFZxhg25MayuXVG0GKhLeMeRh+lLZeQqJkJRYdBSUbUGUMH8EL4buuQn q1Zq2AWz+6MsKxRQ1+Ouna260BtaVvwbH6sMJNgHbV+rtK9qr+bi6MAj4S/MsOta CwEG/8SPHKSyAaNy0Tv6EveL4xGlBf54vglPEBS3PmKM8NercfCdF5+3rC5TRn4G 3c4ghlUkSg7Bw6Yvil0DTEymUNTL9iqBlSIwmJg5aZIllQ8f2KePqW12lZpL0sgN EfQboHKAPB3eNhPq7Vegi1oIzkbZmragf20ipgW+j6GqOi/5kJh8XHRI9f/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacmcxqNvICJZ2ywfr8Jjh3Za8CowHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWukxX9oHey7JWI8G2T1WZZuYeqJJaZkE8U Z2Y80zen6CzHa9O3pkbp/9gwN0ykFJgDzcPV+hLJ/wM/TviEn/oU0hL5Dh0/9AwA qZxHbySREXw5HRZnRsnG9nfd9TOqKN/GNJbrvxMNjzXoOBk0XhHiSza0GSjpcmtE MQR4ZM1hFytvZhbElAf+7pYXMSiQ2cSFfjwZcDRJI9rgaddJTi2y2Om18BzIfcQb FBKMCQf/W1BWJ6Z3Pp2cQpyl6OdfsPdA6TwktbjRn7LCF6Z26Vxsnj6tTPHB8FjL kZKcgJNQpxfIp/bfwXpZKzMNgNh6SoH3ct8jcGaugSwsmi+ms+0= -----END CERTIFICATE-----Generated at Mon Sep 21 10:24:40 2026 by rpki-client