$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft File: F576D7187FE092471757158DEF85D92023BB827A.mft (raw, json) Hash identifier: 8CNVG/ykjoOOnPcf2gqHNbe9QMPh/WD4M4YouFZ+1Rw= Subject key identifier: 9F:A2:B1:F4:47:20:01:40:59:68:94:6E:19:41:CC:54:0D:E1:7F:30 Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A Certificate serial: 4012C0491DBED8D0E039379D3DECD0E7E7EDCCF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 07:20:38 +0000 Manifest this update: Mon 21 Sep 2026 07:15:38 +0000 Manifest next update: Tue 22 Sep 2026 11:14:38 +0000 Files and hashes: 1: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=) 2: F576D7187FE092471757158DEF85D92023BB827A.crl (hash: 1xCLeBwIcWwapzXv9deUfQcSz4IZPefm3d/qT+X0218=) 3: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: 4zXAf/L+AniN8j9yaENVjCZM42RaS1KRlWjNorgEXzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:12:c0:49:1d:be:d8:d0:e0:39:37:9d:3d:ec:d0:e7:e7:ed:cc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A Validity Not Before: Sep 21 07:15:38 2026 GMT Not After : Sep 22 11:14:38 2026 GMT Subject: CN=9FA2B1F4472001405968946E1941CC540DE17F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:80:80:9b:7e:20:2b:48:be:cd:42:e4:a9: ea:74:52:72:e8:7d:d0:f0:1e:38:ae:a1:1c:34:29: 1d:15:1f:99:95:b5:45:f3:d3:93:90:c7:8c:45:c8: b9:0a:8d:dc:74:29:ba:b6:85:ce:e2:10:a2:b1:97: 21:d3:78:92:2f:34:0f:1c:97:c9:a5:e7:93:0b:89: 59:70:7d:2f:c3:08:c9:e2:c2:d3:a0:86:e5:e9:bf: 38:8a:cb:a2:23:02:ca:39:b9:b2:a9:9c:16:f7:9a: bc:17:5e:2c:80:63:61:73:e1:9b:f1:03:ae:c1:3c: be:e1:74:72:e0:d7:3e:db:ea:b3:d2:ad:f8:aa:2e: f1:21:21:c0:99:e7:b6:fc:5f:21:ee:1a:eb:dc:92: ee:dd:a4:91:af:d8:07:c3:56:bf:00:bb:77:2d:28: 8e:37:83:2d:fa:a2:7b:84:4a:c6:86:b3:ca:72:b9: 43:8e:9b:97:ed:ed:51:fc:02:17:4d:de:d7:77:2a: b5:83:0f:d9:46:15:e5:8d:91:90:69:9f:58:31:cb: 37:4f:de:b6:f4:ce:60:71:21:9a:08:5e:01:8b:19: ca:4e:5c:e4:2c:82:c4:3e:3e:96:f4:90:72:04:30: ac:6e:0a:c1:ab:13:01:f8:b7:38:96:8c:c9:0b:b4: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A2:B1:F4:47:20:01:40:59:68:94:6E:19:41:CC:54:0D:E1:7F:30 X509v3 Authority Key Identifier: keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:d8:a8:c9:90:e7:5e:a9:59:a6:b4:f8:32:16:46:93:ff: c6:b5:b2:50:97:72:3a:c1:d6:de:65:bf:23:15:19:62:4f:7e: d0:ac:e6:40:7b:68:68:62:c9:21:df:1a:81:c6:bf:94:e4:fb: 51:5a:c7:7e:81:bb:54:98:6f:6e:ca:7d:f1:34:66:31:19:c6: aa:50:14:6b:bc:f5:62:55:56:cd:bf:ba:fb:79:23:a0:d4:f9: 0a:66:55:ae:93:fe:d1:4f:10:48:0d:ac:e4:9d:ce:0d:7a:df: d4:8c:ff:ea:ba:92:32:9e:6c:9b:e3:be:80:43:a9:be:22:95: 53:e7:f5:56:cd:70:1f:a9:df:41:6c:0c:24:8d:c4:ab:5a:f8: 53:e5:3d:90:66:24:c6:1f:87:58:41:71:39:80:13:8d:19:37: 22:87:95:ce:5f:4a:d5:cc:93:c5:a8:40:63:58:a3:64:16:42: 24:c5:43:8f:98:4c:b2:d7:77:d8:5e:d7:33:5e:41:48:60:96: 4e:d1:3c:78:51:4c:86:04:0a:5e:44:dc:a3:64:ea:40:37:b8: 5b:30:d7:82:58:a6:4f:1c:ce:69:9b:5b:08:cc:44:03:48:22: 5b:20:83:f8:d2:18:7a:ea:9e:a0:9f:32:8f:70:49:e9:4f:34: ce:ed:31:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBLASR2+2NDgOTedPezQ5+ftzPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAy M0JCODI3QTAeFw0yNjA5MjEwNzE1MzhaFw0yNjA5MjIxMTE0MzhaMDMxMTAvBgNV BAMTKDlGQTJCMUY0NDcyMDAxNDA1OTY4OTQ2RTE5NDFDQzU0MERFMTdGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVICAm34gK0i+zULkqep0UnLo fdDwHjiuoRw0KR0VH5mVtUXz05OQx4xFyLkKjdx0Kbq2hc7iEKKxlyHTeJIvNA8c l8ml55MLiVlwfS/DCMniwtOghuXpvziKy6IjAso5ubKpnBb3mrwXXiyAY2Fz4Zvx A67BPL7hdHLg1z7b6rPSrfiqLvEhIcCZ57b8XyHuGuvcku7dpJGv2AfDVr8Au3ct KI43gy36onuESsaGs8pyuUOOm5ft7VH8AhdN3td3KrWDD9lGFeWNkZBpn1gxyzdP 3rb0zmBxIZoIXgGLGcpOXOQsgsQ+Ppb0kHIEMKxuCsGrEwH4tziWjMkLtG7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn6Kx9EcgAUBZaJRuGUHMVA3hfzAwHwYDVR0j BBgwFoAU9XbXGH/gkkcXVxWN74XZICO7gnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTIwNmRlZmEtZmE0My00ZjkzLTkzY2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3 RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAyM0JCODI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNTc2RDcxODdGRTA5MjQ3MTc1NzE1OERFRjg1RDkyMDIzQkI4 MjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5 MjAyM0JCODI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH82KjJkOdeqVmmtPgyFkaT/8a1slCXcjrB 1t5lvyMVGWJPftCs5kB7aGhiySHfGoHGv5Tk+1Fax36Bu1SYb27KffE0ZjEZxqpQ FGu89WJVVs2/uvt5I6DU+QpmVa6T/tFPEEgNrOSdzg1639SM/+q6kjKebJvjvoBD qb4ilVPn9VbNcB+p30FsDCSNxKta+FPlPZBmJMYfh1hBcTmAE40ZNyKHlc5fStXM k8WoQGNYo2QWQiTFQ4+YTLLXd9he1zNeQUhglk7RPHhRTIYECl5E3KNk6kA3uFsw 14JYpk8czmmbWwjMRANIIlsgg/jSGHrqnqCfMo9wSelPNM7tMdk= -----END CERTIFICATE-----Generated at Mon Sep 21 17:37:03 2026 by rpki-client