$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft File: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft (raw, json) Hash identifier: sPPIePA9+w2lHetJG+fE4fuRaHqqQHFDWF1X6QpNTEY= Subject key identifier: 79:05:ED:2E:97:F5:1C:64:CC:BC:14:5B:C1:11:51:49:0D:07:80:C0 Authority key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 Certificate issuer: /CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Certificate serial: 169D4B3D03035646BB0F97C8FC89C80EC471D7BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:14:21 +0000 Manifest this update: Mon 21 Sep 2026 06:09:21 +0000 Manifest next update: Tue 22 Sep 2026 06:36:21 +0000 Files and hashes: 1: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: VsBGao6wJ+D9luytrcOpRnST1DbJomPxjbQHafMOBCc=) 2: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl (hash: Dd0ezkH/C5dkKN3JHtZSWmD0KUhzYBjSSVHnGI5OA6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9d:4b:3d:03:03:56:46:bb:0f:97:c8:fc:89:c8:0e:c4:71:d7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Validity Not Before: Sep 21 06:09:21 2026 GMT Not After : Sep 22 06:36:21 2026 GMT Subject: CN=7905ED2E97F51C64CCBC145BC11151490D0780C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c5:77:34:55:1e:6a:bb:a6:e8:35:0b:c4:22: 16:0b:1e:2e:16:02:40:e5:76:fd:de:69:1b:bf:94: 5c:72:d0:2d:7f:cd:0f:f1:f0:af:4f:36:36:e1:28: 7f:62:d3:df:9c:86:08:08:e0:e6:e7:1e:59:03:66: d7:ec:04:2f:a2:29:39:37:0c:8f:7f:ed:69:32:33: b0:07:de:d7:30:99:b2:a4:10:c9:ee:d3:93:a3:80: 79:c9:31:ca:4a:c8:bc:38:61:ed:c6:5c:e4:8f:25: 3f:c2:63:c4:79:18:6b:b3:c0:5e:91:3b:89:27:c8: 4b:95:3d:92:5a:22:76:c8:04:69:d4:c1:34:d7:2e: 8b:0b:b5:5a:2b:aa:b6:17:20:c5:e4:af:1b:51:9f: 6e:00:ac:31:f4:95:60:a0:ca:b6:5b:6b:b0:d4:bd: 85:0c:b1:54:bd:1f:63:3d:11:8e:0b:ff:48:2b:c4: 2e:54:d4:ee:69:70:84:62:f5:32:3f:18:bc:29:9c: 4a:5e:da:f3:ce:73:0e:ab:70:4c:d0:c4:a2:e4:2c: 8b:4d:e7:69:db:d2:3c:f8:7f:44:aa:1f:d6:56:95: 43:99:91:20:d1:02:ca:59:9d:87:c3:51:19:84:75: a1:6a:ac:0b:1b:75:9b:f4:11:ef:91:9c:e8:03:94: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:ED:2E:97:F5:1C:64:CC:BC:14:5B:C1:11:51:49:0D:07:80:C0 X509v3 Authority Key Identifier: keyid:F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:19:c8:08:28:b2:9f:5b:8a:8c:bf:75:23:38:ca:75:6c:68: 91:71:91:43:df:12:a6:56:7b:4f:ec:dd:c2:cd:d8:67:51:5d: f3:0f:d6:91:e6:9a:dd:d0:e3:26:4c:f1:0f:c7:0a:3f:54:9e: b6:0d:a8:16:90:0a:d8:f5:96:ed:8f:4d:05:cc:cb:d3:be:ae: f0:b7:e7:6a:69:99:50:64:4a:e4:96:d7:d7:14:e1:9a:e3:86: f3:14:40:63:b9:82:e3:12:06:a7:5d:a2:40:01:d4:3e:2b:ce: e7:3c:f6:f5:50:81:05:7e:a9:4a:81:8c:4e:73:2a:24:47:f3: e3:a9:49:78:06:8f:5b:b8:a9:67:61:84:b3:2f:2e:c1:2b:df: a5:04:54:e4:42:67:3b:86:02:19:dc:27:df:59:98:6f:ce:d2: cf:b3:99:b5:81:5e:d5:7c:11:44:30:ba:2e:43:ec:3e:5e:1e: 0b:8a:8a:30:b9:3d:fe:33:65:e4:9f:f9:83:1c:bd:e8:00:33: 59:3c:f2:1c:61:30:a8:22:56:99:92:8f:8f:19:94:66:90:16: 80:83:0e:f3:e7:ae:30:af:9e:b7:77:87:3e:6d:36:55:0e:c0: f3:ef:43:1b:32:75:f6:e2:21:e0:05:cf:31:68:e0:a1:e4:0b: 20:b8:fa:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFp1LPQMDVka7D5fI/InIDsRx17owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3MkMy MDhEOTE5MjAeFw0yNjA5MjEwNjA5MjFaFw0yNjA5MjIwNjM2MjFaMDMxMTAvBgNV BAMTKDc5MDVFRDJFOTdGNTFDNjRDQ0JDMTQ1QkMxMTE1MTQ5MEQwNzgwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxXc0VR5qu6boNQvEIhYLHi4W AkDldv3eaRu/lFxy0C1/zQ/x8K9PNjbhKH9i09+chggI4ObnHlkDZtfsBC+iKTk3 DI9/7WkyM7AH3tcwmbKkEMnu05OjgHnJMcpKyLw4Ye3GXOSPJT/CY8R5GGuzwF6R O4knyEuVPZJaInbIBGnUwTTXLosLtVorqrYXIMXkrxtRn24ArDH0lWCgyrZba7DU vYUMsVS9H2M9EY4L/0grxC5U1O5pcIRi9TI/GLwpnEpe2vPOcw6rcEzQxKLkLItN 52nb0jz4f0SqH9ZWlUOZkSDRAspZnYfDURmEdaFqrAsbdZv0Ee+RnOgDlMUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQXtLpf1HGTMvBRbwRFRSQ0HgMAwHwYDVR0j BBgwFoAU9DyLlj2p3wOHfFv/DaH3LCCNkZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczNWUxNWYtZDQ0OS00NmQ4LWJlMGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYz REE5REYwMzg3N0M1QkZGMERBMUY3MkMyMDhEOTE5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDNDOEI5NjNEQTlERjAzODc3QzVCRkYwREExRjcyQzIwOEQ5 MTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3 MkMyMDhEOTE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsZyAgosp9bioy/dSM4ynVsaJFxkUPfEqZW e0/s3cLN2GdRXfMP1pHmmt3Q4yZM8Q/HCj9UnrYNqBaQCtj1lu2PTQXMy9O+rvC3 52ppmVBkSuSW19cU4ZrjhvMUQGO5guMSBqddokAB1D4rzuc89vVQgQV+qUqBjE5z KiRH8+OpSXgGj1u4qWdhhLMvLsEr36UEVORCZzuGAhncJ99ZmG/O0s+zmbWBXtV8 EUQwui5D7D5eHguKijC5Pf4zZeSf+YMcvegAM1k88hxhMKgiVpmSj48ZlGaQFoCD DvPnrjCvnrd3hz5tNlUOwPPvQxsydfbiIeAFzzFo4KHkCyC4+gc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:37 2026 by rpki-client