$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: zpeiGu64gSxH4Gn5fPlPG4p4fD7l60hKUiPNxWhSQao= Subject key identifier: 00:89:60:DC:1B:CD:62:8B:86:68:8F:B1:78:6A:21:67:36:F6:68:96 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 5E6BB5B12E2287FA401AAB3BFB7A9F90BBBE17E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:38:29 +0000 Manifest this update: Mon 21 Sep 2026 09:33:29 +0000 Manifest next update: Tue 22 Sep 2026 12:31:29 +0000 Files and hashes: 1: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 3: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: 0kzgp7uGMYPFUHy9lV3bChZLDBx0Lh0TV361fD8mhl0=) 4: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 5: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) 6: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6b:b5:b1:2e:22:87:fa:40:1a:ab:3b:fb:7a:9f:90:bb:be:17:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Sep 21 09:33:29 2026 GMT Not After : Sep 22 12:31:29 2026 GMT Subject: CN=008960DC1BCD628B86688FB1786A216736F66896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:6f:74:74:79:68:3a:69:a7:57:fe:a2:46: 08:b6:ee:ba:68:37:30:00:b8:ea:1a:2b:f4:3a:b1: 5f:f4:9b:31:e3:73:a8:e8:2d:11:82:8b:22:60:29: 3f:f4:50:c4:ce:62:a0:4f:41:62:a9:10:6d:53:18: dd:60:5a:4c:12:4a:b8:98:65:ac:29:0b:ee:86:2b: c4:06:31:c9:9d:f2:31:f7:39:97:28:83:f9:5d:66: d4:fb:03:22:2e:15:bb:ac:25:07:70:4b:c6:8b:71: 70:fd:a0:c9:3b:74:5a:ab:27:85:31:c2:2d:0c:c9: b3:30:84:46:e2:c2:10:26:ce:b4:c2:4e:14:2f:5c: 8a:3f:08:b3:ff:2d:c4:4c:35:36:48:fa:ff:d4:51: 90:bd:b4:ed:c4:7e:21:0f:7c:0b:0a:01:3c:70:92: 25:4c:e1:81:eb:00:88:2a:57:48:41:d7:8e:bd:8d: 9c:d2:ef:da:9a:41:e3:4f:bb:79:03:a6:e5:a5:b8: a3:e9:0f:aa:40:fb:a0:24:31:45:f4:b7:e2:48:dc: 8f:a5:48:fb:db:1b:14:d3:90:2d:97:cb:43:31:14: 64:42:4c:c9:e5:b5:e9:be:6d:72:cc:50:72:b3:f1: 8e:bf:76:dd:f6:c1:43:c6:73:83:be:d3:d0:05:29: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:89:60:DC:1B:CD:62:8B:86:68:8F:B1:78:6A:21:67:36:F6:68:96 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:bd:c5:9a:07:a9:f5:37:62:73:05:fb:03:fd:50:04:22: 51:10:6e:36:df:bf:39:c9:ea:8a:eb:cf:d1:df:a5:15:c7:cc: 25:3a:20:80:d8:ad:90:18:6a:e1:ab:ee:b0:d2:70:c1:96:40: 92:28:79:a5:d2:75:c2:e5:d2:93:63:e0:c3:d4:5b:59:57:11: 38:f7:86:29:12:9b:6b:d6:c6:dd:d6:a7:56:9d:08:84:c6:90: 8f:d2:6e:26:c6:84:d3:04:7b:ff:8e:d7:f5:61:d8:1b:b0:cd: 6c:b1:45:0a:e1:2e:e6:b2:bf:7f:ed:37:a1:ff:3e:5c:6c:c3: de:05:f6:26:1e:94:fe:51:0a:40:4a:67:0d:1d:15:ca:e3:09: fe:5d:6f:b0:a3:32:fa:58:50:f8:50:c8:55:69:69:de:bc:32: 5c:73:53:fc:07:1c:c5:c7:93:da:8a:01:4d:a9:77:f9:4f:c5: 17:07:3e:e3:bd:71:c8:6f:6b:5c:3a:64:6a:ae:fd:86:5a:5b: 20:58:8d:b3:ea:98:8b:6a:fa:11:6d:6e:b9:eb:9b:45:fb:71: 6f:38:77:e4:09:36:04:f8:00:d8:6e:c4:02:e4:7b:f6:ef:fd: 08:b2:80:66:95:c5:cf:bb:c7:d4:64:cb:9d:0d:9e:97:0e:0b: 5a:ff:3d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmu1sS4ih/pAGqs7+3qfkLu+F+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA5MjEwOTMzMjlaFw0yNjA5MjIxMjMxMjlaMDMxMTAvBgNV BAMTKDAwODk2MERDMUJDRDYyOEI4NjY4OEZCMTc4NkEyMTY3MzZGNjY4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrG90dHloOmmnV/6iRgi27rpo NzAAuOoaK/Q6sV/0mzHjc6joLRGCiyJgKT/0UMTOYqBPQWKpEG1TGN1gWkwSSriY ZawpC+6GK8QGMcmd8jH3OZcog/ldZtT7AyIuFbusJQdwS8aLcXD9oMk7dFqrJ4Ux wi0MybMwhEbiwhAmzrTCThQvXIo/CLP/LcRMNTZI+v/UUZC9tO3EfiEPfAsKATxw kiVM4YHrAIgqV0hB1469jZzS79qaQeNPu3kDpuWluKPpD6pA+6AkMUX0t+JI3I+l SPvbGxTTkC2Xy0MxFGRCTMnltem+bXLMUHKz8Y6/dt32wUPGc4O+09AFKX+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIlg3BvNYouGaI+xeGohZzb2aJYwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRQvcWaB6n1N2JzBfsD/VAEIlEQbjbfvznJ 6orrz9HfpRXHzCU6IIDYrZAYauGr7rDScMGWQJIoeaXSdcLl0pNj4MPUW1lXETj3 hikSm2vWxt3Wp1adCITGkI/SbibGhNMEe/+O1/Vh2BuwzWyxRQrhLuayv3/tN6H/ Plxsw94F9iYelP5RCkBKZw0dFcrjCf5db7CjMvpYUPhQyFVpad68MlxzU/wHHMXH k9qKAU2pd/lPxRcHPuO9cchva1w6ZGqu/YZaWyBYjbPqmItq+hFtbrnrm0X7cW84 d+QJNgT4ANhuxALke/bv/QiygGaVxc+7x9Rky50NnpcOC1r/PUA= -----END CERTIFICATE-----Generated at Mon Sep 21 13:52:11 2026 by rpki-client