$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft File: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json) Hash identifier: OK8DrVQG/u82raQSj7C6jP90+LJ/zTOon5MWQBWeZD0= Subject key identifier: 7F:95:50:D9:17:5B:CE:E7:41:01:29:8E:2A:40:1F:2A:C2:9D:C6:C5 Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17 Certificate issuer: /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17 Certificate serial: 4373FAB2FB24001458F0900C11288689A3B74760 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:28:52 +0000 Manifest this update: Wed 23 Sep 2026 18:23:52 +0000 Manifest next update: Thu 24 Sep 2026 19:30:52 +0000 Files and hashes: 1: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: Jw89YXjlBktN/rJFsOGPpF9y2+gRdVV9P/0EW/gem38=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:73:fa:b2:fb:24:00:14:58:f0:90:0c:11:28:86:89:a3:b7:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17 Validity Not Before: Sep 23 18:23:52 2026 GMT Not After : Sep 24 19:30:52 2026 GMT Subject: CN=7F9550D9175BCEE74101298E2A401F2AC29DC6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:9f:42:bf:71:4b:c5:e2:0a:60:4a:44:96: 6b:3a:37:3d:03:d3:79:8d:14:c7:4b:6c:aa:aa:0d: 04:04:eb:73:77:41:c0:05:32:fd:06:18:f7:b7:63: 74:4d:4a:8a:58:f5:d5:54:78:c9:44:50:97:8f:7d: 2c:bc:43:1f:9d:95:e9:2c:f2:41:96:ce:2f:2c:c8: 7c:d1:4f:d4:35:ee:f8:2f:85:44:db:da:57:2d:e1: c9:6b:fa:e7:94:45:a8:5c:5f:60:50:a9:c3:0f:3b: 01:a3:40:28:c5:64:b6:ce:04:19:7d:11:fa:dc:cc: 2e:93:46:5c:72:d2:96:33:bf:40:5b:19:bc:62:6f: 89:bc:27:94:60:3f:4b:e3:95:20:51:08:d9:ee:37: d0:67:fb:8d:5f:37:ae:e3:ae:88:e7:93:c5:d0:1e: 84:a5:06:66:bd:b4:77:3f:e9:54:77:22:0b:02:52: 4c:65:93:15:25:40:d3:32:d4:4d:c1:50:49:02:13: 36:10:50:c2:e5:91:dd:21:6e:01:97:8b:bd:19:83: 49:31:e3:a3:91:0e:19:2d:77:23:ca:ef:e4:c3:0d: 18:a9:0b:27:9b:3a:be:7c:fe:a5:75:e2:73:ca:7b: c5:a5:91:67:5f:48:e1:a7:79:cf:54:6e:42:fe:10: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:95:50:D9:17:5B:CE:E7:41:01:29:8E:2A:40:1F:2A:C2:9D:C6:C5 X509v3 Authority Key Identifier: keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ca:1e:a3:6c:9f:97:be:0e:c3:db:37:4b:54:e2:6c:b8:cf: 34:9c:44:67:5f:3f:92:d2:fc:52:72:fe:2c:f8:66:d1:b3:5c: 07:2d:b7:31:76:7c:96:8d:ee:5d:68:5c:9f:fb:a0:2d:58:db: 11:7f:12:5f:c0:ae:50:63:e8:e8:46:71:e0:43:97:07:6b:7f: 88:0e:2a:d8:45:54:09:3e:d1:c0:14:f2:d8:0a:8c:d9:6b:c6: 23:96:dd:34:98:db:a2:ac:64:f2:01:ed:f4:64:49:c3:d5:af: 4c:14:88:b1:d0:53:ec:b8:4c:a5:d6:fe:2f:94:6b:bb:52:29: 0e:7f:06:c8:ef:56:11:2e:2f:fd:0d:7b:81:a4:b5:5a:2c:41: 47:2a:4e:e5:ae:40:d8:9c:04:80:c0:57:4d:3c:11:9a:80:b0: 17:0c:cb:06:56:f0:24:8d:02:fc:92:f1:ca:98:72:62:9e:99: 71:c9:07:44:9b:fe:e7:3c:c5:bb:35:ad:cd:b9:d4:f6:cd:bf: 1a:14:9d:2a:ca:df:e5:f0:59:4c:e1:c8:36:b7:8c:24:80:2a: 18:08:ad:63:e1:7f:c7:4b:96:5f:02:37:eb:15:31:be:32:74: 54:74:66:01:50:8d:53:13:38:e3:56:ef:cc:18:2e:d4:70:9c: 21:b8:41:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3P6svskABRY8JAMESiGiaO3R2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0 MkQ3MUYxNzAeFw0yNjA5MjMxODIzNTJaFw0yNjA5MjQxOTMwNTJaMDMxMTAvBgNV BAMTKDdGOTU1MEQ5MTc1QkNFRTc0MTAxMjk4RTJBNDAxRjJBQzI5REM2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArZ9Cv3FLxeIKYEpElms6Nz0D 03mNFMdLbKqqDQQE63N3QcAFMv0GGPe3Y3RNSopY9dVUeMlEUJePfSy8Qx+dleks 8kGWzi8syHzRT9Q17vgvhUTb2lct4clr+ueURahcX2BQqcMPOwGjQCjFZLbOBBl9 EfrczC6TRlxy0pYzv0BbGbxib4m8J5RgP0vjlSBRCNnuN9Bn+41fN67jrojnk8XQ HoSlBma9tHc/6VR3IgsCUkxlkxUlQNMy1E3BUEkCEzYQUMLlkd0hbgGXi70Zg0kx 46ORDhktdyPK7+TDDRipCyebOr58/qV14nPKe8WlkWdfSOGnec9UbkL+EOthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf5VQ2RdbzudBASmOKkAfKsKdxsUwHwYDVR0j BBgwFoAU8kBL1puYc7Md2A6h4/VKjELXHxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5 Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0MkQ3MUYxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjQwNEJENjlCOTg3M0IzMUREODBFQTFFM0Y1NEE4QzQyRDcx RjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRB OEM0MkQ3MUYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHKHqNsn5e+DsPbN0tU4my4zzScRGdfP5LS /FJy/iz4ZtGzXActtzF2fJaN7l1oXJ/7oC1Y2xF/El/ArlBj6OhGceBDlwdrf4gO KthFVAk+0cAU8tgKjNlrxiOW3TSY26KsZPIB7fRkScPVr0wUiLHQU+y4TKXW/i+U a7tSKQ5/BsjvVhEuL/0Ne4GktVosQUcqTuWuQNicBIDAV008EZqAsBcMywZW8CSN AvyS8cqYcmKemXHJB0Sb/uc8xbs1rc251PbNvxoUnSrK3+XwWUzhyDa3jCSAKhgI rWPhf8dLll8CN+sVMb4ydFR0ZgFQjVMTOONW78wYLtRwnCG4Qc0= -----END CERTIFICATE-----Generated at Thu Sep 24 02:37:45 2026 by rpki-client