$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: 5K7qbXTSW6v1vXPazxhNsWh9tYVlnAZ/vBkOsh4pLxw= Subject key identifier: 45:DF:87:54:1C:01:C4:C0:7A:7E:C7:65:02:DD:3F:E8:32:1B:6E:F8 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 1BFC88E41493117D50283EAC807AB3E7FB44F84A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:54:00 +0000 Manifest this update: Sun 20 Sep 2026 21:49:00 +0000 Manifest next update: Mon 21 Sep 2026 22:52:00 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 3: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: 39BCH/gf4SpRTeOaFgCtqtAX3ibpLdTc7goT9KKISuY=) 4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fc:88:e4:14:93:11:7d:50:28:3e:ac:80:7a:b3:e7:fb:44:f8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Sep 20 21:49:00 2026 GMT Not After : Sep 21 22:52:00 2026 GMT Subject: CN=45DF87541C01C4C07A7EC76502DD3FE8321B6EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:44:72:40:3b:63:ae:de:cc:50:75:84:97: b8:18:b2:ea:f9:52:ab:05:b2:28:bb:e6:44:d9:e2: 86:16:a4:34:3f:ed:a0:57:5b:62:d8:09:4e:55:4a: 0a:fe:a2:9d:b9:8d:38:24:a1:bd:e5:29:f0:0c:22: d3:5e:0a:36:43:06:e3:6f:ec:b9:66:b3:c3:25:a2: 7e:c8:8b:93:cd:80:22:35:50:b0:31:1c:2b:0a:83: 8c:5e:93:d2:41:62:35:d8:70:87:91:f4:5c:31:7b: 2d:b0:93:d6:fa:92:f2:a1:a9:14:ba:cb:d5:9b:75: ef:b0:28:14:21:02:ee:40:6d:9f:15:9f:60:97:03: 1a:41:3e:29:61:bc:6a:23:74:dc:fe:c7:56:38:46: d7:22:c2:32:d4:2e:c2:f3:77:1f:c2:66:2a:24:33: 7e:70:f5:1d:25:96:17:7f:35:db:62:b8:a8:66:22: a8:d3:7a:54:3b:5b:30:bf:e1:bb:9b:d6:87:c7:36: 6e:01:15:d2:7e:19:a0:77:f6:25:03:27:52:ff:96: bd:94:86:23:bd:50:b0:09:aa:d4:19:11:8e:0f:81: 4a:8d:61:3f:07:2d:a7:6e:a2:3f:a6:d1:b3:fd:6b: 51:7b:ee:01:7a:cd:d2:af:07:e9:3c:b2:b6:65:16: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:87:54:1C:01:C4:C0:7A:7E:C7:65:02:DD:3F:E8:32:1B:6E:F8 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4f:cf:27:ba:8f:02:a0:25:79:13:81:96:5a:e8:2b:03:7d: 01:61:94:5c:f9:6a:6b:27:5d:98:6d:cc:37:1a:bb:17:fb:69: 35:f3:3f:92:21:68:4c:ef:6d:0f:de:c7:3b:81:e2:e4:51:4e: a3:aa:7c:ea:0f:fe:6e:11:84:b9:41:93:da:3f:80:91:a0:0b: 27:7b:66:57:ec:c7:61:55:9a:ef:c0:c0:cc:cf:8e:ce:b4:8f: 58:f2:0c:4c:b8:89:17:39:3c:3f:4d:b9:2e:0a:71:0a:1f:5e: 56:6e:ed:a8:40:08:9d:d9:29:80:c8:df:81:ea:70:77:e0:38: f5:ec:94:46:10:3b:b3:26:77:5c:ab:7a:41:db:19:b4:96:cf: 11:6c:8b:29:57:fd:a0:6c:a0:5b:3e:34:32:ff:06:de:f4:b3: fd:0e:a8:ca:00:6e:c5:d1:4a:d5:0b:05:b6:da:2a:03:b9:b5: 2e:e1:26:b1:b9:1c:bc:b4:d2:c4:cc:54:57:32:ce:82:a4:bd: fb:50:1d:e6:78:2f:56:93:94:6f:3a:26:57:bb:2c:77:5c:0c: ff:2e:02:af:49:2b:ae:94:2d:26:50:3c:ce:b6:9d:7b:95:a3: fa:62:6e:68:e2:82:48:1f:a5:60:5a:e8:d9:40:ad:ac:51:94: 80:f9:eb:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/yI5BSTEX1QKD6sgHqz5/tE+EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA5MjAyMTQ5MDBaFw0yNjA5MjEyMjUyMDBaMDMxMTAvBgNV BAMTKDQ1REY4NzU0MUMwMUM0QzA3QTdFQzc2NTAyREQzRkU4MzIxQjZFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubURyQDtjrt7MUHWEl7gYsur5 UqsFsii75kTZ4oYWpDQ/7aBXW2LYCU5VSgr+op25jTgkob3lKfAMItNeCjZDBuNv 7Llms8Mlon7Ii5PNgCI1ULAxHCsKg4xek9JBYjXYcIeR9Fwxey2wk9b6kvKhqRS6 y9Wbde+wKBQhAu5AbZ8Vn2CXAxpBPilhvGojdNz+x1Y4RtciwjLULsLzdx/CZiok M35w9R0llhd/NdtiuKhmIqjTelQ7WzC/4bub1ofHNm4BFdJ+GaB39iUDJ1L/lr2U hiO9ULAJqtQZEY4PgUqNYT8HLaduoj+m0bP9a1F77gF6zdKvB+k8srZlFodlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURd+HVBwBxMB6fsdlAt0/6DIbbvgwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANPzye6jwKgJXkTgZZa6CsDfQFhlFz5amsn XZhtzDcauxf7aTXzP5IhaEzvbQ/exzuB4uRRTqOqfOoP/m4RhLlBk9o/gJGgCyd7 Zlfsx2FVmu/AwMzPjs60j1jyDEy4iRc5PD9NuS4KcQofXlZu7ahACJ3ZKYDI34Hq cHfgOPXslEYQO7Mmd1yrekHbGbSWzxFsiylX/aBsoFs+NDL/Bt70s/0OqMoAbsXR StULBbbaKgO5tS7hJrG5HLy00sTMVFcyzoKkvftQHeZ4L1aTlG86Jle7LHdcDP8u Aq9JK66ULSZQPM62nXuVo/pibmjigkgfpWBa6NlAraxRlID568c= -----END CERTIFICATE-----Generated at Mon Sep 21 01:36:40 2026 by rpki-client