$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: nCPR/nFWa4oqC4UK4oj89MRY/BtRccRXvTzwklJ3qHw= Subject key identifier: 7F:8E:F4:20:C4:B8:56:71:0C:A1:1C:DC:16:FF:CF:35:A0:67:42:97 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 7EC8728A9BF3528333781AFB1619F97265900720 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 08:37:12 +0000 Manifest this update: Tue 22 Sep 2026 08:32:12 +0000 Manifest next update: Wed 23 Sep 2026 11:40:12 +0000 Files and hashes: 1: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: N236bhyQ3SGde8otdRB96Pjhh1EZTfGdCZG4bNQ6JTw=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c8:72:8a:9b:f3:52:83:33:78:1a:fb:16:19:f9:72:65:90:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: Sep 22 08:32:12 2026 GMT Not After : Sep 23 11:40:12 2026 GMT Subject: CN=7F8EF420C4B856710CA11CDC16FFCF35A0674297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:f0:89:25:42:45:36:cb:fe:62:64:c4:0e: 26:2d:0c:d5:5e:bf:49:e6:42:9a:9b:06:d1:77:60: ed:68:d5:7c:5a:66:e0:8c:de:c4:58:59:e1:2c:41: 55:9c:7e:d2:6b:41:e5:82:eb:a5:67:d5:98:d9:4e: a0:5e:e7:a4:20:df:a0:6a:aa:71:c7:26:e7:6a:71: 14:f3:85:33:64:15:f9:75:d8:58:a4:2d:66:57:0c: 18:49:1d:3b:9d:ee:da:b5:f0:90:5d:60:88:47:3f: 39:4e:f9:25:42:29:f6:05:a9:04:f4:e7:04:b4:31: b1:13:9d:b6:9e:e7:f8:ef:56:40:27:6d:3b:4d:a7: 13:67:7a:e4:8b:58:ed:e8:5e:ee:31:65:96:85:c2: 72:d0:b8:3d:6b:70:0d:71:e1:c9:2c:67:f9:03:36: 66:43:81:ee:56:51:c2:ca:cc:3c:a7:b0:ae:7c:5e: 6f:bc:c1:b1:2d:30:bc:12:46:12:79:fd:61:58:73: 28:1e:21:e9:c4:34:39:3c:27:1d:c6:2d:07:40:b5: 70:7c:fb:c1:66:20:0f:12:f0:d3:c8:20:d0:cb:bf: 32:ab:f3:34:9f:d1:30:55:27:8f:3d:a3:2e:05:c1: 6f:0b:56:bc:a1:1c:72:1d:b1:f1:4b:17:21:14:96: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:F4:20:C4:B8:56:71:0C:A1:1C:DC:16:FF:CF:35:A0:67:42:97 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cb:10:55:8f:3f:60:bb:7c:03:55:c5:c3:b6:08:87:82:61: 24:9e:00:62:09:26:88:48:88:10:6c:f4:87:0d:c0:b5:93:b6: c0:a7:6d:c6:87:79:34:51:6c:9a:c6:b5:e4:ff:75:09:3e:d0: dd:10:21:f5:46:09:06:66:8d:c1:f1:ac:e0:c6:39:d9:21:99: 02:64:e9:96:81:71:49:f5:1a:f7:d1:ba:4b:39:83:4f:6c:db: 6c:1d:06:4e:b1:55:1d:19:ae:41:b7:d6:15:ae:f4:92:f4:2d: 4a:d5:05:37:22:97:e4:c8:17:39:78:1e:14:b5:b6:f1:82:06: e1:ee:b3:fd:c8:aa:69:14:f7:00:69:06:d7:bf:07:03:95:98: 04:d2:e8:84:f7:67:61:6f:5f:46:f4:9b:47:75:d7:6b:af:8c: 43:75:f0:c1:85:65:a5:67:c9:28:e3:27:e8:a2:9e:f3:60:54: ee:e5:0f:a7:7a:8f:5f:fb:b6:eb:5b:40:5e:07:90:d6:eb:08: 9e:6e:6d:34:9e:5e:8f:9a:6d:99:27:ae:be:f0:1a:9d:09:43: 69:0c:f2:f2:75:39:80:b5:d5:5c:29:bf:34:d9:54:78:23:9e: b1:ae:b9:ad:39:7f:73:c3:aa:ff:6c:19:7d:ca:b1:65:4b:88: af:93:57:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfshyipvzUoMzeBr7Fhn5cmWQByAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA5MjIwODMyMTJaFw0yNjA5MjMxMTQwMTJaMDMxMTAvBgNV BAMTKDdGOEVGNDIwQzRCODU2NzEwQ0ExMUNEQzE2RkZDRjM1QTA2NzQyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPk/CJJUJFNsv+YmTEDiYtDNVe v0nmQpqbBtF3YO1o1XxaZuCM3sRYWeEsQVWcftJrQeWC66Vn1ZjZTqBe56Qg36Bq qnHHJudqcRTzhTNkFfl12FikLWZXDBhJHTud7tq18JBdYIhHPzlO+SVCKfYFqQT0 5wS0MbETnbae5/jvVkAnbTtNpxNneuSLWO3oXu4xZZaFwnLQuD1rcA1x4cksZ/kD NmZDge5WUcLKzDynsK58Xm+8wbEtMLwSRhJ5/WFYcygeIenENDk8Jx3GLQdAtXB8 +8FmIA8S8NPIINDLvzKr8zSf0TBVJ489oy4FwW8LVryhHHIdsfFLFyEUlqHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf470IMS4VnEMoRzcFv/PNaBnQpcwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/LEFWPP2C7fANVxcO2CIeCYSSeAGIJJohI iBBs9IcNwLWTtsCnbcaHeTRRbJrGteT/dQk+0N0QIfVGCQZmjcHxrODGOdkhmQJk 6ZaBcUn1GvfRuks5g09s22wdBk6xVR0ZrkG31hWu9JL0LUrVBTcil+TIFzl4HhS1 tvGCBuHus/3IqmkU9wBpBte/BwOVmATS6IT3Z2FvX0b0m0d112uvjEN18MGFZaVn ySjjJ+iinvNgVO7lD6d6j1/7tutbQF4HkNbrCJ5ubTSeXo+abZknrr7wGp0JQ2kM 8vJ1OYC11VwpvzTZVHgjnrGuua05f3PDqv9sGX3KsWVLiK+TVxU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:49:51 2026 by rpki-client