$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: 7rS+/Y8+29NUIcOAETSZ5aHxXAugNjplH5plP8npTyQ= Subject key identifier: E6:F4:88:8E:09:22:33:85:E8:15:36:F6:A5:D1:93:F2:7E:16:08:0E Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 6BD5007C694820342F4DF53DE4DB604AE9F8626B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 03:35:55 +0000 Manifest this update: Mon 21 Sep 2026 03:30:55 +0000 Manifest next update: Tue 22 Sep 2026 04:18:55 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) 2: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: TJ3W+yXTbhgxqIKD9IqzEI+k8HbVTGij6Pv9fapIqo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d5:00:7c:69:48:20:34:2f:4d:f5:3d:e4:db:60:4a:e9:f8:62:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: Sep 21 03:30:55 2026 GMT Not After : Sep 22 04:18:55 2026 GMT Subject: CN=E6F4888E09223385E81536F6A5D193F27E16080E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:d0:d9:83:d7:8f:7f:fc:f8:69:bd:e8:37: 6c:20:43:e9:d7:7c:bf:c0:28:59:da:ef:48:f7:b9: 62:a7:8b:b9:4a:92:86:f0:ee:54:aa:62:42:1d:ca: 1f:07:a3:fe:a2:cb:0e:7a:fc:53:7c:a2:b7:62:61: 50:d7:ad:62:41:b4:1c:56:6a:cf:e2:eb:93:e2:e6: d3:71:55:8d:7a:69:47:70:c9:de:6e:24:9a:f9:7f: 72:a6:eb:78:69:6b:1a:40:95:c4:ce:45:6f:42:a7: 03:9d:6c:a2:48:6c:4b:5e:e6:54:4b:e7:0d:64:b2: 06:a0:05:f7:4f:b9:ea:13:e2:f2:d7:39:79:86:1d: 66:04:93:c7:cc:e5:d9:cb:6f:4b:d3:66:5f:d3:f0: 57:47:80:24:69:1e:47:7a:a5:88:d5:20:a7:2e:13: 3b:65:d2:8b:21:2e:7a:de:c2:b8:25:9b:62:52:5d: 3b:b0:f2:0c:40:d9:13:5a:0f:1b:dd:16:76:fe:76: 68:4a:a6:80:8a:ec:40:dc:1e:9d:1c:3b:bb:49:0a: 1b:5d:7e:5c:42:78:ef:bd:54:44:77:66:b7:1c:06: e8:20:2f:d6:03:23:0e:0d:9f:30:df:cb:63:ec:9d: 65:d7:ec:27:34:b1:47:bc:96:1a:d2:2e:45:5d:13: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:88:8E:09:22:33:85:E8:15:36:F6:A5:D1:93:F2:7E:16:08:0E X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f9:60:1e:7f:fb:52:b6:eb:cb:38:50:82:5c:0e:6a:43:63: 34:4f:66:60:dc:06:11:b9:76:04:f5:c0:70:8d:88:7b:f6:57: 7d:41:a5:2a:aa:e2:5f:30:11:33:f1:dd:bc:73:1d:d2:1b:d8: 4c:14:84:2e:a0:2a:fe:48:b8:0f:01:7b:6f:b6:79:38:ea:76: 83:b1:23:0d:16:c4:8e:a4:65:48:bb:73:b0:a0:1c:fe:87:38: 28:5f:5d:75:08:72:85:ef:87:ca:f1:e4:63:b1:57:1d:3b:4f: cb:d1:87:f5:48:11:9d:52:95:ed:28:4a:a3:a5:85:e6:36:77: 79:7f:40:32:d2:06:b3:9d:13:95:a4:79:29:67:3c:6a:38:3c: a2:50:24:21:04:89:6a:7e:84:97:55:28:c5:fa:ff:13:0e:ae: 00:77:cc:5e:32:cd:a9:bb:4b:03:b6:5b:46:a0:ec:e2:3d:be: 1f:f2:ef:82:7f:56:72:9f:83:00:6f:a0:6c:69:dd:74:48:5d: 20:95:60:ed:5e:52:f3:e3:05:b2:6f:b6:75:76:56:6c:95:9c: 8d:2c:dd:48:8b:0c:ca:41:24:ce:99:e3:61:4e:c4:0f:45:5c: cf:75:37:d8:d1:6d:7e:a3:4c:4f:14:5d:c6:8c:0e:8f:b0:ac: 76:4d:24:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9UAfGlIIDQvTfU95NtgSun4YmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA5MjEwMzMwNTVaFw0yNjA5MjIwNDE4NTVaMDMxMTAvBgNV BAMTKEU2RjQ4ODhFMDkyMjMzODVFODE1MzZGNkE1RDE5M0YyN0UxNjA4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ydDZg9ePf/z4ab3oN2wgQ+nX fL/AKFna70j3uWKni7lKkobw7lSqYkIdyh8Ho/6iyw56/FN8ordiYVDXrWJBtBxW as/i65Pi5tNxVY16aUdwyd5uJJr5f3Km63hpaxpAlcTORW9CpwOdbKJIbEte5lRL 5w1ksgagBfdPueoT4vLXOXmGHWYEk8fM5dnLb0vTZl/T8FdHgCRpHkd6pYjVIKcu Eztl0oshLnrewrglm2JSXTuw8gxA2RNaDxvdFnb+dmhKpoCK7EDcHp0cO7tJChtd flxCeO+9VER3ZrccBuggL9YDIw4NnzDfy2PsnWXX7Cc0sUe8lhrSLkVdE2Z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vSIjgkiM4XoFTb2pdGT8n4WCA4wHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb5YB5/+1K268s4UIJcDmpDYzRPZmDcBhG5 dgT1wHCNiHv2V31BpSqq4l8wETPx3bxzHdIb2EwUhC6gKv5IuA8Be2+2eTjqdoOx Iw0WxI6kZUi7c7CgHP6HOChfXXUIcoXvh8rx5GOxVx07T8vRh/VIEZ1Sle0oSqOl heY2d3l/QDLSBrOdE5WkeSlnPGo4PKJQJCEEiWp+hJdVKMX6/xMOrgB3zF4yzam7 SwO2W0ag7OI9vh/y74J/VnKfgwBvoGxp3XRIXSCVYO1eUvPjBbJvtnV2VmyVnI0s 3UiLDMpBJM6Z42FOxA9FXM91N9jRbX6jTE8UXcaMDo+wrHZNJNQ= -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:26 2026 by rpki-client