$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft File: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft (raw, json) Hash identifier: Lsr3IUdP4oBkqvVwqfpPwrEgtCyN2qLTUS10hOWhIuk= Subject key identifier: 2E:55:D2:0C:F0:44:BD:0A:AD:03:42:81:54:4B:A0:F4:DF:51:D9:32 Authority key identifier: F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3 Certificate issuer: /CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3 Certificate serial: 12B488D68E4CB8F12DCFF4ABF12E1DADF6614DE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:43:33 +0000 Manifest this update: Mon 21 Sep 2026 13:38:33 +0000 Manifest next update: Tue 22 Sep 2026 15:36:33 +0000 Files and hashes: 1: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl (hash: GEHPgWei39XAzYG+//YOTG7db3+6zPmMVvQXxucnxlE=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: 01F1UoKRV2E0gP5aPTGtczRefIGjQne0iajygCNTbZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b4:88:d6:8e:4c:b8:f1:2d:cf:f4:ab:f1:2e:1d:ad:f6:61:4d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3 Validity Not Before: Sep 21 13:38:33 2026 GMT Not After : Sep 22 15:36:33 2026 GMT Subject: CN=2E55D20CF044BD0AAD034281544BA0F4DF51D932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:53:12:fd:b3:04:37:d1:e8:02:40:d3:9e: 5d:a1:3f:ee:52:ab:8d:57:0e:b6:15:19:1f:9f:30: fe:07:db:01:69:37:e3:12:98:23:5b:99:c5:ae:82: 0d:83:d5:24:08:88:7a:5e:c1:c3:03:2a:31:7b:b1: cf:08:16:41:7c:79:1b:e4:f3:df:a5:01:89:35:52: 9a:67:ad:86:f7:47:e9:44:a2:36:63:a2:ec:9f:b5: e8:99:0f:f4:0b:00:8a:f3:8d:52:f6:13:c3:bf:0b: 14:66:e1:51:ed:e7:45:7c:81:1d:8f:3f:8e:35:55: 0c:36:af:da:33:44:15:c3:8c:b6:3b:bd:73:e0:e9: db:f9:73:ba:bd:49:50:c1:7c:49:87:48:9c:6f:48: 3b:74:9c:38:46:8d:0a:4d:3c:4c:74:f3:6b:cb:e4: c1:6f:c5:de:e6:b3:e7:f4:dd:ab:0d:11:07:dd:e8: 1e:a3:17:a2:50:cf:bc:96:c0:9e:8d:55:6e:6a:20: d4:11:bd:bd:58:16:35:f8:ef:88:79:6a:b3:69:29: db:6b:1a:ad:7e:c0:fa:50:e3:ad:23:7d:92:2d:8d: 70:c0:15:54:bc:9d:de:be:ed:bb:2a:ed:f5:8b:7b: 07:f9:13:17:b8:46:e5:74:4c:de:7b:f7:69:a1:46: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:D2:0C:F0:44:BD:0A:AD:03:42:81:54:4B:A0:F4:DF:51:D9:32 X509v3 Authority Key Identifier: keyid:F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0e:24:7b:4e:53:c6:6e:44:04:2e:0d:eb:d7:1f:20:f3:d3: ad:b8:41:4e:18:2d:b6:c2:f0:6d:f2:65:7c:e7:f3:4c:c4:ca: 1e:80:a7:d7:54:62:de:61:32:43:bb:29:d2:a6:37:5b:54:ea: a9:f8:ef:f9:d7:ee:a3:f7:53:3a:dd:0e:9a:14:c4:dd:b9:8e: 87:33:33:c1:95:a8:4d:9a:2b:71:32:ed:e5:c6:a1:f6:05:f2: ce:84:ec:f7:ad:60:ae:78:78:b2:77:dd:c6:bd:e7:25:46:f2: 54:d1:0e:db:98:d7:46:ae:92:35:21:c3:61:b5:b7:5a:6c:53: 27:45:07:e1:9f:2f:61:b1:b7:55:fa:2c:05:ce:c3:0e:6c:c6: 30:24:ba:a7:8e:43:ea:ba:cd:7f:37:cd:1d:4a:77:23:fc:fa: 65:12:70:87:5e:91:a9:2a:1a:ed:8b:07:0d:9a:17:21:76:ad: 1e:02:10:99:dd:7f:f5:61:39:ff:d0:7c:73:4f:88:9b:75:fa: c2:f7:41:b6:b2:32:e8:4b:7a:55:c1:fd:10:86:13:5d:4b:b6: cc:85:d5:71:12:0f:24:16:f0:3f:32:57:85:ae:18:af:cf:18: b3:88:34:7b:2e:d5:35:1d:c5:9e:6d:08:98:71:19:ad:d5:fc: fd:59:4a:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErSI1o5MuPEtz/Sr8S4drfZhTegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdDOEZFNzM1RTE2QTQyQjBBNEZFNzZBMjk2OEM4QjM3 MkIwOEZFMzAeFw0yNjA5MjExMzM4MzNaFw0yNjA5MjIxNTM2MzNaMDMxMTAvBgNV BAMTKDJFNTVEMjBDRjA0NEJEMEFBRDAzNDI4MTU0NEJBMEY0REY1MUQ5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIG1MS/bMEN9HoAkDTnl2hP+5S q41XDrYVGR+fMP4H2wFpN+MSmCNbmcWugg2D1SQIiHpewcMDKjF7sc8IFkF8eRvk 89+lAYk1UppnrYb3R+lEojZjouyfteiZD/QLAIrzjVL2E8O/CxRm4VHt50V8gR2P P441VQw2r9ozRBXDjLY7vXPg6dv5c7q9SVDBfEmHSJxvSDt0nDhGjQpNPEx082vL 5MFvxd7ms+f03asNEQfd6B6jF6JQz7yWwJ6NVW5qINQRvb1YFjX474h5arNpKdtr Gq1+wPpQ460jfZItjXDAFVS8nd6+7bsq7fWLewf5Exe4RuV0TN5792mhRoTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULlXSDPBEvQqtA0KBVEug9N9R2TIwHwYDVR0j BBgwFoAU98j+c14WpCsKT+dqKWjIs3Kwj+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU1ZWFjOTctMzFiNS00ZjMzLTgyZjQtNTI0MTQ3MGNiYmJlLzAvRjdDOEZFNzM1 RTE2QTQyQjBBNEZFNzZBMjk2OEM4QjM3MkIwOEZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GN0M4RkU3MzVFMTZBNDJCMEE0RkU3NkEyOTY4QzhCMzcyQjA4 RkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvRjdDOEZFNzM1RTE2QTQyQjBBNEZFNzZBMjk2OEM4 QjM3MkIwOEZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwOJHtOU8ZuRAQuDevXHyDz0624QU4YLbbC 8G3yZXzn80zEyh6Ap9dUYt5hMkO7KdKmN1tU6qn47/nX7qP3UzrdDpoUxN25jocz M8GVqE2aK3Ey7eXGofYF8s6E7PetYK54eLJ33ca95yVG8lTRDtuY10aukjUhw2G1 t1psUydFB+GfL2Gxt1X6LAXOww5sxjAkuqeOQ+q6zX83zR1KdyP8+mUScIdekakq Gu2LBw2aFyF2rR4CEJndf/VhOf/QfHNPiJt1+sL3QbayMuhLelXB/RCGE11LtsyF 1XESDyQW8D8yV4WuGK/PGLOINHsu1TUdxZ5tCJhxGa3V/P1ZSqc= -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:39 2026 by rpki-client