$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: hjm6bmVqDWBvJNGuetRZRDGIq0aPWLigxV8Prywr4fw= Subject key identifier: B7:98:82:1A:87:E5:75:9E:12:1B:D2:58:4D:8F:8E:24:9C:CA:5A:B6 Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 2916EAAE5C3AD041CE91C1BCE040161E0CA406F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:29:42 +0000 Manifest this update: Sun 20 Sep 2026 18:24:42 +0000 Manifest next update: Mon 21 Sep 2026 22:25:42 +0000 Files and hashes: 1: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: m0+IITWI8c3yqTQCF/7XMyqtdWR3zAHkwihNcH+z01E=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:16:ea:ae:5c:3a:d0:41:ce:91:c1:bc:e0:40:16:1e:0c:a4:06:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Sep 20 18:24:42 2026 GMT Not After : Sep 21 22:25:42 2026 GMT Subject: CN=B798821A87E5759E121BD2584D8F8E249CCA5AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:01:9a:b1:fe:e5:2a:33:cb:7d:b2:44:8b: 51:57:dd:8a:23:e2:34:ee:ad:a1:52:32:e9:61:47: 3c:9f:10:c8:42:02:5c:98:34:e6:9a:de:41:68:74: f4:56:e9:27:6e:5a:cd:fa:bd:fe:86:67:e6:04:b6: d9:dd:1f:b5:3c:b6:25:2b:15:06:cc:1b:62:1b:d8: 02:e7:60:56:96:62:89:e3:63:0f:da:60:b1:20:89: 8d:01:08:9d:55:de:ff:be:59:43:c2:c8:95:fa:89: e4:60:2f:25:e9:e7:dc:78:eb:ff:2e:66:06:99:c4: 9b:48:5c:26:10:e9:7f:99:58:1f:ea:87:0f:40:0b: d7:01:a8:42:3a:3f:19:24:27:c0:24:9d:c4:94:60: a7:0d:6c:32:d5:55:8e:3b:dd:da:78:3c:cb:ef:0f: 43:91:48:f4:95:de:9c:e7:b9:b7:58:c6:7c:4f:30: 72:be:c3:8a:7c:1f:20:a2:23:c0:1c:c3:5d:06:44: ee:03:a5:6d:51:b7:88:15:27:c3:98:3f:ff:96:e2: 82:2e:b6:89:8c:f5:a6:23:3d:c3:72:da:58:67:d2: 19:1b:bd:08:1c:89:ee:f2:7d:9c:38:80:c0:71:8c: 90:a1:3e:78:eb:12:52:9a:c4:5a:1a:0f:0e:c2:c6: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:82:1A:87:E5:75:9E:12:1B:D2:58:4D:8F:8E:24:9C:CA:5A:B6 X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6b:ea:dd:cc:20:39:25:06:11:2d:fc:2a:14:e8:fa:c3:0b: b7:07:46:55:2a:11:18:85:08:8e:c8:f9:ba:ca:a0:ed:09:e0: 92:cb:c8:72:ee:83:97:34:ef:6b:ce:71:00:55:06:59:0b:0d: 4c:da:38:fc:46:fc:d2:a7:9f:a9:bc:06:03:f4:a9:1b:03:24: 21:a4:98:da:5a:82:2c:0c:81:04:7f:cf:c0:c2:a6:2d:fa:db: 88:57:a6:60:e9:72:68:84:c4:2b:5b:8f:50:54:63:a9:e6:dc: 70:4f:ff:6e:cf:39:7c:bd:ac:15:a7:d2:0a:9b:1c:4f:5c:74: e1:b9:46:aa:b8:e3:d1:86:32:c7:29:07:05:3d:27:f2:2e:79: 04:af:d1:16:82:54:98:11:47:6e:b1:5e:5a:58:63:0c:92:e7: 18:e6:23:19:6d:08:ca:21:80:4c:77:9c:0d:3e:a5:ff:63:58: c3:8e:4b:04:bd:67:8f:f7:64:52:54:d8:ef:36:02:2c:c6:0a: cb:0d:e0:e6:ee:44:33:fd:d7:4c:d4:e9:f2:fe:ed:a4:48:c9: 13:5b:14:9c:93:68:f5:e6:1b:c4:10:47:33:3d:83:fe:1b:57: 27:07:6a:f0:74:6f:49:61:6f:9d:df:a3:8a:ba:26:0e:20:5b: 9c:3f:fc:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRbqrlw60EHOkcG84EAWHgykBvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA5MjAxODI0NDJaFw0yNjA5MjEyMjI1NDJaMDMxMTAvBgNV BAMTKEI3OTg4MjFBODdFNTc1OUUxMjFCRDI1ODREOEY4RTI0OUNDQTVBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NwGasf7lKjPLfbJEi1FX3Yoj 4jTuraFSMulhRzyfEMhCAlyYNOaa3kFodPRW6SduWs36vf6GZ+YEttndH7U8tiUr FQbMG2Ib2ALnYFaWYonjYw/aYLEgiY0BCJ1V3v++WUPCyJX6ieRgLyXp59x46/8u ZgaZxJtIXCYQ6X+ZWB/qhw9AC9cBqEI6PxkkJ8AkncSUYKcNbDLVVY473dp4PMvv D0ORSPSV3pznubdYxnxPMHK+w4p8HyCiI8Acw10GRO4DpW1Rt4gVJ8OYP/+W4oIu tomM9aYjPcNy2lhn0hkbvQgcie7yfZw4gMBxjJChPnjrElKaxFoaDw7CxgdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5iCGofldZ4SG9JYTY+OJJzKWrYwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxr6t3MIDklBhEt/CoU6PrDC7cHRlUqERiF CI7I+brKoO0J4JLLyHLug5c072vOcQBVBlkLDUzaOPxG/NKnn6m8BgP0qRsDJCGk mNpagiwMgQR/z8DCpi3624hXpmDpcmiExCtbj1BUY6nm3HBP/27POXy9rBWn0gqb HE9cdOG5Rqq449GGMscpBwU9J/IueQSv0RaCVJgRR26xXlpYYwyS5xjmIxltCMoh gEx3nA0+pf9jWMOOSwS9Z4/3ZFJU2O82AizGCssN4ObuRDP910zU6fL+7aRIyRNb FJyTaPXmG8QQRzM9g/4bVycHavB0b0lhb53fo4q6Jg4gW5w//Ho= -----END CERTIFICATE-----Generated at Mon Sep 21 14:45:37 2026 by rpki-client