$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: DE9f1nc+JquLqgrXFbMLGXsPOsLBjd4F12sfSXH2LqI= Subject key identifier: AA:53:88:01:94:55:E8:E5:6E:20:6D:F3:AB:5B:16:3B:23:E9:A4:1E Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 0537E2352B7A365C2BEE021A1B54206A9474A375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:36:06 +0000 Manifest this update: Sun 20 Sep 2026 19:31:06 +0000 Manifest next update: Mon 21 Sep 2026 23:34:06 +0000 Files and hashes: 1: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 2: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: UxV+7w6MxPBaMylQU0vWgsKFwcL8zglMm3EASHIRqbQ=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:37:e2:35:2b:7a:36:5c:2b:ee:02:1a:1b:54:20:6a:94:74:a3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Sep 20 19:31:06 2026 GMT Not After : Sep 21 23:34:06 2026 GMT Subject: CN=AA5388019455E8E56E206DF3AB5B163B23E9A41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:a0:ec:64:a4:68:df:17:18:46:a8:76:8f: 29:66:b5:ab:96:0f:e0:98:ad:ee:38:2b:75:f6:50: d1:14:37:08:b7:33:0c:1b:7e:ad:7f:8d:89:0a:d4: 43:f9:d6:55:6e:2b:ad:13:66:af:9d:e4:db:f4:84: 12:b5:d1:39:54:09:21:36:21:f7:97:c0:29:67:fb: 4b:79:a1:c7:1c:11:2d:4a:95:6a:55:45:f7:8f:82: c7:2c:c6:1c:b9:1e:cd:9f:a2:66:4f:31:af:8d:ae: 13:c6:84:84:3f:f7:08:cd:51:4d:86:28:2a:ab:04: 61:42:48:b3:77:17:8d:46:55:3c:7a:f8:47:ca:b2: c6:45:91:63:75:d8:c9:53:f5:94:e5:50:22:9e:d9: f2:a7:27:ac:71:af:5e:58:65:a7:04:de:bb:e7:85: 1b:7e:93:50:6e:6f:76:23:d4:50:4c:22:25:b9:93: b9:af:f7:15:e1:15:5e:cb:40:ca:3f:f0:26:5e:41: cd:1a:aa:a9:7e:2f:92:d4:dc:80:50:b1:aa:17:2a: 10:cb:eb:1b:3d:7a:88:86:c8:78:da:7b:19:79:3f: f9:c8:3c:ce:ff:b1:4c:9b:5e:dc:c6:f0:65:3a:50: 13:f9:76:ab:43:6a:cf:81:ba:e9:23:04:35:01:b1: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:53:88:01:94:55:E8:E5:6E:20:6D:F3:AB:5B:16:3B:23:E9:A4:1E X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:7b:72:87:95:85:ee:98:8c:d9:df:7b:b5:3f:01:a2:e8:5d: 56:4d:0a:0f:eb:4f:62:bd:9a:9c:7d:95:7d:29:d4:a0:0e:a6: 76:37:53:2b:91:4e:95:f9:30:08:d5:c1:bd:69:f5:08:b0:b8: 9b:59:b1:81:a7:62:53:8e:eb:78:cc:77:cb:d7:13:81:cb:b7: b2:c7:ff:57:1a:3c:05:a7:bc:d6:06:95:f7:18:09:43:4f:a0: 18:ce:ea:1c:3d:f5:be:18:38:f9:1b:88:d4:2a:38:6b:5e:df: 63:fa:dc:87:d7:35:cd:47:6b:8c:13:58:9f:56:6f:08:25:28: 04:f6:13:bb:02:10:2c:33:a6:05:4e:07:07:e3:15:b5:c7:32: d7:66:94:21:e3:9c:42:3d:4a:72:26:19:df:34:e6:12:c6:0a: 00:53:d6:47:44:85:40:7b:65:2f:b7:ef:ad:28:0f:ee:a7:e6: 28:92:36:90:65:a4:fb:d4:48:c6:af:fc:92:89:77:b3:1b:23: e3:83:01:3b:97:ad:c0:1e:c8:0a:62:9d:a8:94:1d:90:10:69: a4:db:6d:55:3b:09:e6:26:6f:3e:54:a1:d4:d3:ea:b3:e6:b7: 26:0e:57:12:d3:52:56:3d:41:c8:8a:ad:64:6f:48:08:bb:c6: 5f:c7:54:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTfiNSt6Nlwr7gIaG1QgapR0o3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA5MjAxOTMxMDZaFw0yNjA5MjEyMzM0MDZaMDMxMTAvBgNV BAMTKEFBNTM4ODAxOTQ1NUU4RTU2RTIwNkRGM0FCNUIxNjNCMjNFOUE0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAKDsZKRo3xcYRqh2jylmtauW D+CYre44K3X2UNEUNwi3Mwwbfq1/jYkK1EP51lVuK60TZq+d5Nv0hBK10TlUCSE2 IfeXwCln+0t5occcES1KlWpVRfePgscsxhy5Hs2fomZPMa+NrhPGhIQ/9wjNUU2G KCqrBGFCSLN3F41GVTx6+EfKssZFkWN12MlT9ZTlUCKe2fKnJ6xxr15YZacE3rvn hRt+k1Bub3Yj1FBMIiW5k7mv9xXhFV7LQMo/8CZeQc0aqql+L5LU3IBQsaoXKhDL 6xs9eoiGyHjaexl5P/nIPM7/sUybXtzG8GU6UBP5dqtDas+BuukjBDUBsS+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlOIAZRV6OVuIG3zq1sWOyPppB4wHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOF7coeVhe6YjNnfe7U/AaLoXVZNCg/rT2K9 mpx9lX0p1KAOpnY3UyuRTpX5MAjVwb1p9QiwuJtZsYGnYlOO63jMd8vXE4HLt7LH /1caPAWnvNYGlfcYCUNPoBjO6hw99b4YOPkbiNQqOGte32P63IfXNc1Ha4wTWJ9W bwglKAT2E7sCECwzpgVOBwfjFbXHMtdmlCHjnEI9SnImGd805hLGCgBT1kdEhUB7 ZS+3760oD+6n5iiSNpBlpPvUSMav/JKJd7MbI+ODATuXrcAeyApinaiUHZAQaaTb bVU7CeYmbz5UodTT6rPmtyYOVxLTUlY9QciKrWRvSAi7xl/HVB4= -----END CERTIFICATE-----Generated at Mon Sep 21 16:38:11 2026 by rpki-client