$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft File: F5C77B8E76386E06F7C5963580F72FFDB6260833.mft (raw, json) Hash identifier: t8hs66Vc+LnImFIaZWRcOs93gY9RCwLMkFJLXid0tBg= Subject key identifier: CD:1A:8D:1C:29:B7:FD:33:10:1D:7C:F2:96:43:07:0A:64:CB:F2:89 Authority key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 Certificate issuer: /CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Certificate serial: 35BEF2D25B1D7D41F10192463652C0C43F1F4C3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:37:20 +0000 Manifest this update: Mon 21 Sep 2026 04:32:20 +0000 Manifest next update: Tue 22 Sep 2026 05:26:20 +0000 Files and hashes: 1: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: joivasnFvxLt2RiLhnE95QqxHVQvNgax7JJNC23DuLI=) 2: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: tCQps77ttUsG2B2A/jlIdsatXSph5WwOuMOklCzgjjQ=) 3: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: mV8+z8wbwRTe9z/LKU+76l90oXuk9i0hW/AMDNlrHl4=) 4: F5C77B8E76386E06F7C5963580F72FFDB6260833.crl (hash: n6OtOIl5xQQSuGicGH6kSjOiogHeplSM+Rr4s6ecFMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:f2:d2:5b:1d:7d:41:f1:01:92:46:36:52:c0:c4:3f:1f:4c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Validity Not Before: Sep 21 04:32:20 2026 GMT Not After : Sep 22 05:26:20 2026 GMT Subject: CN=CD1A8D1C29B7FD33101D7CF29643070A64CBF289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:d9:01:9e:2e:fd:43:f0:4a:53:f0:95:98: 77:e4:23:07:ea:6b:89:37:f8:dd:38:f7:99:c4:ff: 46:52:3b:e8:86:69:1d:fa:b8:6c:3d:30:e3:25:10: 53:d4:8b:41:c7:10:92:67:42:28:9c:e8:84:8f:e4: 28:aa:1d:83:f7:41:78:e6:71:0f:01:1d:f0:1f:fd: 80:32:69:fa:29:76:47:f5:1b:9a:2f:2f:58:24:62: a5:b8:d1:13:a1:52:77:af:58:e3:d4:0f:c0:c8:1e: 6a:6b:47:4d:5c:94:6e:4d:e2:bd:54:f2:75:f0:ce: 54:3f:60:86:e3:a2:45:d4:61:00:be:a7:81:28:9d: b2:c7:38:2e:38:e8:8f:a4:ed:9b:3a:7d:45:44:2c: 87:ec:ef:7f:20:07:56:89:61:17:4f:ee:59:44:34: 1e:8f:9e:c5:ed:43:a6:a4:a4:41:57:56:fc:1b:6b: 04:0e:df:d0:7c:fa:31:93:fb:4a:70:7d:3e:6c:0f: ec:b3:1e:59:e2:54:36:61:14:e9:08:17:5d:22:a6: 6c:bb:9c:c2:8b:81:24:5b:81:8c:c7:c5:24:71:ea: ff:c6:b3:35:99:93:88:e8:47:aa:4c:c9:60:05:46: 14:6d:f3:57:22:a2:b3:f6:95:97:70:f0:ee:a1:8f: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:8D:1C:29:B7:FD:33:10:1D:7C:F2:96:43:07:0A:64:CB:F2:89 X509v3 Authority Key Identifier: keyid:F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:94:4e:e3:a3:5c:7e:17:a8:26:9a:65:25:85:8f:1c:0b:7c: 91:ab:73:6a:55:0d:52:50:5a:44:f6:1a:00:9e:cd:89:ec:e1: b9:ca:d6:e2:c6:52:df:95:f3:86:31:13:de:fa:a1:9c:12:bb: 21:4c:9d:b0:3a:cd:6d:e3:a8:aa:20:dd:0c:17:92:2e:a5:e4: 0c:8f:53:14:7c:63:08:3d:c5:b2:77:6d:08:de:83:b9:c1:e2: 9d:7d:e6:02:2c:3f:8f:83:4c:6a:ab:d3:0a:1a:5a:14:91:7a: 1c:53:76:86:c7:3c:13:f9:3b:71:c9:91:c7:e5:32:28:bb:71: f1:84:02:b3:c3:c2:43:9f:a4:bc:d4:65:47:35:46:6f:f9:85: 6d:32:bb:41:a6:8f:63:9a:5b:3f:ad:29:65:27:75:ac:17:a8: ea:2b:16:b5:4a:5b:8d:75:22:6b:f3:a1:45:07:5c:37:da:ae: be:5d:53:41:be:f0:21:cf:73:c4:78:48:24:01:67:a9:d8:67: 7f:8c:43:c7:67:1c:01:31:69:23:d3:bd:7c:f6:05:af:a8:51: 2c:91:7c:16:c6:cd:f0:fa:30:af:6e:50:64:25:27:bc:a3:1a: 67:06:07:35:42:86:97:64:bf:bc:fa:a2:75:60:ae:7d:8a:93: 5f:0b:24:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNb7y0lsdfUHxAZJGNlLAxD8fTD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRC NjI2MDgzMzAeFw0yNjA5MjEwNDMyMjBaFw0yNjA5MjIwNTI2MjBaMDMxMTAvBgNV BAMTKENEMUE4RDFDMjlCN0ZEMzMxMDFEN0NGMjk2NDMwNzBBNjRDQkYyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvtkBni79Q/BKU/CVmHfkIwfq a4k3+N0495nE/0ZSO+iGaR36uGw9MOMlEFPUi0HHEJJnQiic6ISP5CiqHYP3QXjm cQ8BHfAf/YAyafopdkf1G5ovL1gkYqW40ROhUnevWOPUD8DIHmprR01clG5N4r1U 8nXwzlQ/YIbjokXUYQC+p4EonbLHOC446I+k7Zs6fUVELIfs738gB1aJYRdP7llE NB6PnsXtQ6akpEFXVvwbawQO39B8+jGT+0pwfT5sD+yzHlniVDZhFOkIF10ipmy7 nMKLgSRbgYzHxSRx6v/GszWZk4joR6pMyWAFRhRt81ciorP2lZdw8O6hjwKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRqNHCm3/TMQHXzylkMHCmTL8okwHwYDVR0j BBgwFoAU9cd7jnY4bgb3xZY1gPcv/bYmCDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZjMzBjNzEtZGYyZC00ZmM3LWI0MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3 NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRCNjI2MDgzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUM3N0I4RTc2Mzg2RTA2RjdDNTk2MzU4MEY3MkZGREI2MjYw ODMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJG RkRCNjI2MDgzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiUTuOjXH4XqCaaZSWFjxwLfJGrc2pVDVJQ WkT2GgCezYns4bnK1uLGUt+V84YxE976oZwSuyFMnbA6zW3jqKog3QwXki6l5AyP UxR8Ywg9xbJ3bQjeg7nB4p195gIsP4+DTGqr0woaWhSRehxTdobHPBP5O3HJkcfl Mii7cfGEArPDwkOfpLzUZUc1Rm/5hW0yu0Gmj2OaWz+tKWUndawXqOorFrVKW411 ImvzoUUHXDfarr5dU0G+8CHPc8R4SCQBZ6nYZ3+MQ8dnHAExaSPTvXz2Ba+oUSyR fBbGzfD6MK9uUGQlJ7yjGmcGBzVChpdkv7z6onVgrn2Kk18LJM8= -----END CERTIFICATE-----Generated at Mon Sep 21 11:09:24 2026 by rpki-client