$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft File: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft (raw, json) Hash identifier: zraWlRbTCLq7ryfeWVEZH2cx6o3GC4izd8ffOloSdcE= Subject key identifier: 69:94:60:76:4F:9F:44:EB:6B:2A:3F:0F:61:EE:48:8D:6A:10:2A:B9 Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A Certificate issuer: /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Certificate serial: 26D4AB3C09CFBD8D96123C3C0D2CC6D2174575C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 16:57:35 +0000 Manifest this update: Mon 21 Sep 2026 16:52:35 +0000 Manifest next update: Tue 22 Sep 2026 20:33:35 +0000 Files and hashes: 1: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl (hash: 5rkHK4Z+xwwYW3f5OAldQsfZ4wpaMIf9OYpTdt1pW5g=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: 5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d4:ab:3c:09:cf:bd:8d:96:12:3c:3c:0d:2c:c6:d2:17:45:75:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Validity Not Before: Sep 21 16:52:35 2026 GMT Not After : Sep 22 20:33:35 2026 GMT Subject: CN=699460764F9F44EB6B2A3F0F61EE488D6A102AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:31:94:ae:64:d7:d9:12:82:d5:63:55:8d: c8:b1:62:c9:11:9b:7e:34:d8:65:0f:b4:bc:13:85: da:c1:6e:52:4c:5b:53:66:24:0b:f1:54:50:70:2f: 97:c2:d7:f0:fa:e5:84:95:c0:20:bd:b3:88:ba:57: c4:c0:03:ba:c7:b8:8b:d9:25:37:7e:06:9a:1b:ec: e7:71:dd:b9:c1:e2:89:df:83:7b:0e:87:24:89:6e: 28:e6:bb:65:2c:c7:b0:3b:ef:10:1a:2d:6e:9c:52: 4d:6a:f0:1d:d5:37:0f:f7:ab:ea:4b:3e:44:39:d9: 0b:d5:83:db:0a:37:31:33:b7:cf:79:84:98:d7:d4: 9f:97:51:cf:e6:c4:89:9c:78:e1:c4:43:5b:cd:e6: a4:84:62:96:6e:53:ef:8c:92:3a:df:d1:d6:30:16: 99:1f:13:65:1b:5e:07:fe:57:6a:03:f9:15:7f:15: dc:14:d2:73:53:09:3a:0c:f7:1f:e4:dd:80:74:c6: 95:91:ff:29:cc:50:b7:a0:1d:a5:ef:0d:1d:05:fe: 9f:7c:17:3e:45:0f:c9:af:d9:db:ea:ed:d0:e1:c2: a7:c0:ca:28:09:d3:43:44:22:12:0b:89:3b:60:8f: 0f:35:51:d5:39:07:67:9c:74:d8:66:8c:4c:76:bd: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:60:76:4F:9F:44:EB:6B:2A:3F:0F:61:EE:48:8D:6A:10:2A:B9 X509v3 Authority Key Identifier: keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:bc:00:31:38:83:1e:31:a8:e7:c8:f6:48:9f:5b:ab:4f: dd:e5:5c:38:78:60:d9:eb:f8:29:b5:27:8d:43:f4:97:5c:dc: f1:fe:02:a4:35:91:8a:b5:aa:09:c5:b0:af:b9:ea:d4:4d:f2: a3:87:4d:28:a5:32:0c:15:12:7f:15:a8:7b:16:8b:71:53:cc: 05:48:fa:7f:4a:b2:2c:4e:e2:6b:7b:2a:34:a5:4e:ba:0f:6a: 58:a4:8a:84:37:53:1b:5d:34:36:f7:7f:74:11:41:11:51:87: 9c:69:f4:99:ba:69:4a:4c:25:7c:83:3e:1f:bf:73:da:78:b7: ce:27:67:92:7b:17:cf:fd:91:21:1c:69:88:40:df:a3:aa:71: fe:08:7a:c8:95:54:f1:b1:2a:04:4e:e8:ea:b5:9b:e3:1f:4a: c7:27:7b:86:0e:06:0c:2a:53:06:a3:84:e9:20:f3:37:1f:dc: 6b:b3:b5:54:97:5d:0e:7a:e7:a3:a2:e3:1c:46:9f:6e:f5:cc: 77:00:a7:3f:3f:84:79:71:64:51:51:22:9a:20:d8:2b:be:ac: 84:ab:c0:71:33:a4:b6:49:76:a4:ea:66:0a:25:64:ca:b7:48: 44:89:16:3e:33:09:92:0e:28:70:b9:2c:b1:78:2c:27:3f:98: 6a:95:f4:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtSrPAnPvY2WEjw8DSzG0hdFdcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4 RDg4Njc4QTAeFw0yNjA5MjExNjUyMzVaFw0yNjA5MjIyMDMzMzVaMDMxMTAvBgNV BAMTKDY5OTQ2MDc2NEY5RjQ0RUI2QjJBM0YwRjYxRUU0ODhENkExMDJBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnjGUrmTX2RKC1WNVjcixYskR m3402GUPtLwThdrBblJMW1NmJAvxVFBwL5fC1/D65YSVwCC9s4i6V8TAA7rHuIvZ JTd+Bpob7Odx3bnB4onfg3sOhySJbijmu2Usx7A77xAaLW6cUk1q8B3VNw/3q+pL PkQ52QvVg9sKNzEzt895hJjX1J+XUc/mxImceOHEQ1vN5qSEYpZuU++Mkjrf0dYw FpkfE2UbXgf+V2oD+RV/FdwU0nNTCToM9x/k3YB0xpWR/ynMULegHaXvDR0F/p98 Fz5FD8mv2dvq7dDhwqfAyigJ00NEIhILiTtgjw81UdU5B2ecdNhmjEx2vVI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZRgdk+fROtrKj8PYe5IjWoQKrkwHwYDVR0j BBgwFoAU+UgR3MUQHxzGJk1pGn4v7o2IZ4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc1MGE2NTEtMWExYS00NTAxLWE4YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExREND NTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4RDg4Njc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTQ4MTFEQ0M1MTAxRjFDQzYyNjRENjkxQTdFMkZFRThEODg2 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJG RUU4RDg4Njc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkavAAxOIMeMajnyPZIn1urT93lXDh4YNnr +Cm1J41D9Jdc3PH+AqQ1kYq1qgnFsK+56tRN8qOHTSilMgwVEn8VqHsWi3FTzAVI +n9KsixO4mt7KjSlTroPalikioQ3UxtdNDb3f3QRQRFRh5xp9Jm6aUpMJXyDPh+/ c9p4t84nZ5J7F8/9kSEcaYhA36Oqcf4IesiVVPGxKgRO6Oq1m+MfSscne4YOBgwq UwajhOkg8zcf3GuztVSXXQ5656Oi4xxGn271zHcApz8/hHlxZFFRIpog2Cu+rISr wHEzpLZJdqTqZgolZMq3SESJFj4zCZIOKHC5LLF4LCc/mGqV9Oo= -----END CERTIFICATE-----Generated at Tue Sep 22 07:14:16 2026 by rpki-client