$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft File: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft (raw, json) Hash identifier: j2jBUgU8n6YByMkdfj3q90xD2ACSHXLohzsCWOlJgos= Subject key identifier: A2:FB:43:66:FE:B9:1D:9B:A8:18:D3:7D:E5:2B:ED:EE:E4:19:5C:87 Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C Certificate issuer: /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C Certificate serial: 4D6F059F9970D0135BFABECE551B80D15688F43C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:42:04 +0000 Manifest this update: Tue 22 Sep 2026 12:37:04 +0000 Manifest next update: Wed 23 Sep 2026 13:18:04 +0000 Files and hashes: 1: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: rJ/og/iKUK3xac6RdgdlO70UvsZ6axJQZfH2pg1L5Gs=) 2: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl (hash: LB22OgzB8NYAWBezZioA9/vbwR3gtTEds9wQ4y1Pijs=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6f:05:9f:99:70:d0:13:5b:fa:be:ce:55:1b:80:d1:56:88:f4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C Validity Not Before: Sep 22 12:37:04 2026 GMT Not After : Sep 23 13:18:04 2026 GMT Subject: CN=A2FB4366FEB91D9BA818D37DE52BEDEEE4195C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:b0:e7:25:79:30:f5:54:f9:e2:ee:52:b8: 9b:c2:03:b8:11:88:ee:91:89:1c:da:5c:4b:92:21: 8b:f7:f0:6b:27:c1:60:88:dd:0d:05:19:bd:b1:09: ce:dc:4d:c4:e7:af:f1:8f:da:62:9f:55:fc:79:1c: 5f:5f:d5:44:1c:cf:87:05:a1:44:37:cd:f8:9e:b8: fc:0b:ad:00:0a:49:fd:d5:c3:fa:54:06:30:79:c8: 27:77:dc:1d:bb:bc:e2:77:ab:cb:35:2c:d8:a0:6f: 51:80:c9:51:2a:16:81:18:70:6e:54:bc:4a:04:6d: 48:2f:3c:be:79:3c:9d:d1:a2:de:4f:89:54:de:12: b8:ee:be:db:8a:f1:8b:f2:e2:e3:51:9d:fc:e9:7b: 20:e9:b9:ec:4a:eb:8d:99:c0:8a:1a:2b:aa:c0:55: 46:3c:c8:a1:31:f7:75:17:50:70:6c:a5:35:7c:d8: 49:48:7f:2a:b2:c1:e8:d5:0b:77:4c:fc:59:58:57: 50:bf:27:65:82:c9:a2:7f:de:f6:02:77:7f:e6:ff: b9:11:8a:26:3c:aa:06:09:53:1f:1f:76:95:86:90: d3:e0:bd:36:79:a4:17:92:8b:bf:45:db:7b:69:a6: 99:07:e1:55:ff:77:c6:40:06:0d:45:a6:25:66:24: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:43:66:FE:B9:1D:9B:A8:18:D3:7D:E5:2B:ED:EE:E4:19:5C:87 X509v3 Authority Key Identifier: keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b9:0c:0c:6d:ea:53:48:cb:78:a0:84:d9:4d:3b:d8:1b:99: 9d:2d:bf:14:d4:4f:62:c1:ca:1d:a0:bd:88:ca:0b:8a:2a:e4: 01:51:30:db:a5:9d:e5:6f:0f:5f:c2:76:c2:5c:d1:62:ff:4a: 74:f7:df:dc:36:23:1b:af:d3:16:42:e9:de:f3:0d:39:72:25: cb:9c:96:4d:b7:8e:72:57:de:6b:06:a9:9c:1c:0c:61:d8:1a: ef:e2:a7:d8:b9:03:44:63:86:e0:bc:19:67:a9:5b:4b:96:98: 82:f1:b3:99:0b:1f:cf:6c:3a:13:0f:60:fc:9e:42:02:7e:27: af:24:0c:fa:ca:24:f6:eb:6f:53:a6:80:6d:6c:33:d4:00:49: 01:a0:3e:5b:6f:12:21:45:9c:f9:1a:83:41:4c:8d:80:45:e0: e7:29:39:97:19:d0:5d:6d:5b:44:fa:d8:c9:cf:16:f4:71:c2: a1:0c:dd:12:08:d6:4a:60:ed:c5:9d:e8:ab:0d:65:ba:37:fe: e9:55:a5:7d:a1:e6:27:da:5e:0e:55:25:04:e1:80:57:6f:46: ba:ab:3e:62:99:d1:eb:c7:d2:d5:27:5e:b0:3e:b1:e1:cf:9c: 23:40:ef:36:aa:02:ac:99:ed:c3:23:06:45:8a:54:be:1c:8a: c6:ba:85:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTW8Fn5lw0BNb+r7OVRuA0VaI9DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3 MjdCRkYyQzAeFw0yNjA5MjIxMjM3MDRaFw0yNjA5MjMxMzE4MDRaMDMxMTAvBgNV BAMTKEEyRkI0MzY2RkVCOTFEOUJBODE4RDM3REU1MkJFREVFRTQxOTVDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPFrDnJXkw9VT54u5SuJvCA7gR iO6RiRzaXEuSIYv38GsnwWCI3Q0FGb2xCc7cTcTnr/GP2mKfVfx5HF9f1UQcz4cF oUQ3zfieuPwLrQAKSf3Vw/pUBjB5yCd33B27vOJ3q8s1LNigb1GAyVEqFoEYcG5U vEoEbUgvPL55PJ3Rot5PiVTeErjuvtuK8Yvy4uNRnfzpeyDpuexK642ZwIoaK6rA VUY8yKEx93UXUHBspTV82ElIfyqywejVC3dM/FlYV1C/J2WCyaJ/3vYCd3/m/7kR iiY8qgYJUx8fdpWGkNPgvTZ5pBeSi79F23tpppkH4VX/d8ZABg1FpiVmJNWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovtDZv65HZuoGNN95Svt7uQZXIcwHwYDVR0j BBgwFoAU8aPauQASEtn9b4RjBJ8xLXJ7/ywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmMTcwNmItNmMxNy00Nzg2LWFiZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkw MDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3MjdCRkYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMUEzREFCOTAwMTIxMkQ5RkQ2Rjg0NjMwNDlGMzEyRDcyN0JG RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMx MkQ3MjdCRkYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq5DAxt6lNIy3ighNlNO9gbmZ0tvxTUT2LB yh2gvYjKC4oq5AFRMNulneVvD1/CdsJc0WL/SnT339w2Ixuv0xZC6d7zDTlyJcuc lk23jnJX3msGqZwcDGHYGu/ip9i5A0RjhuC8GWepW0uWmILxs5kLH89sOhMPYPye QgJ+J68kDPrKJPbrb1OmgG1sM9QASQGgPltvEiFFnPkag0FMjYBF4OcpOZcZ0F1t W0T62MnPFvRxwqEM3RII1kpg7cWd6KsNZbo3/ulVpX2h5ifaXg5VJQThgFdvRrqr PmKZ0evH0tUnXrA+seHPnCNA7zaqAqyZ7cMjBkWKVL4cisa6hYI= -----END CERTIFICATE-----Generated at Tue Sep 22 22:47:14 2026 by rpki-client