$ rpki-client -vvvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json) Hash identifier: DE9wc/fH6dYCVBums5zv9NqZWzCUvfkXPz1XcbcTaCA= Subject key identifier: 96:0F:06:EC:6F:D5:E2:31:6A:EA:E6:9A:F2:67:A2:62:B2:88:CF:23 Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Certificate serial: 1E4314013D9122E490D12B05A6E48AE1B8DB85FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:36:06 +0000 Manifest this update: Mon 21 Sep 2026 07:31:06 +0000 Manifest next update: Tue 22 Sep 2026 08:51:06 +0000 Files and hashes: 1: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=) 2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=) 4: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: UprQOc0Z30mFC66ekV8E6sA9/4haP1vGp+lnySYdy5E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:43:14:01:3d:91:22:e4:90:d1:2b:05:a6:e4:8a:e1:b8:db:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Validity Not Before: Sep 21 07:31:06 2026 GMT Not After : Sep 22 08:51:06 2026 GMT Subject: CN=960F06EC6FD5E2316AEAE69AF267A262B288CF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:37:59:10:57:a0:ea:86:96:46:1a:b9:bd: dd:73:1d:51:58:0f:6d:7d:f7:2f:6c:c8:a1:de:25: 97:14:9a:2f:70:e1:16:de:7c:2b:56:86:73:8b:a0: 77:fd:7c:c2:b6:46:21:68:e8:6c:c6:11:43:88:60: 2f:6a:91:44:b6:00:0e:aa:52:fd:a1:b3:1c:c8:92: ad:9c:ac:73:9c:15:ff:c3:01:03:01:0b:e0:09:9b: 56:65:a2:7d:7a:d6:b8:5f:9c:5b:82:24:6a:4d:da: 65:ae:f6:d2:a9:86:13:c6:36:c3:bb:8e:a2:42:bc: 39:98:e1:99:6e:15:1e:95:d3:61:aa:7f:ff:fd:5d: 97:b3:25:50:ea:13:94:a7:bc:2a:90:58:0c:b0:e9: 0d:bb:66:06:9e:6f:e4:a3:4c:9c:35:58:00:9c:16: c1:cf:5f:0b:f4:9c:3b:07:0f:3c:82:09:37:ee:7a: de:43:06:47:2d:89:fe:bb:65:dd:47:e3:6f:00:86: c1:1e:11:a9:f0:e3:b5:a2:83:ce:c2:83:cd:63:16: 47:a5:08:44:ed:24:43:5e:b2:ac:9f:c5:40:d8:c3: ac:ae:25:31:9d:3f:4f:cd:b2:3f:3c:e8:61:72:01: 77:50:87:c7:6a:41:4c:84:86:e2:1f:df:2d:40:ff: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:06:EC:6F:D5:E2:31:6A:EA:E6:9A:F2:67:A2:62:B2:88:CF:23 X509v3 Authority Key Identifier: keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e4:25:4b:6c:30:74:a6:6f:f9:00:da:71:14:a0:c3:96:d4: e8:2c:13:97:89:ff:20:f2:7e:44:ce:2a:50:8c:29:4b:cc:81: db:84:f1:fc:e8:4d:a0:be:73:5d:eb:3a:b6:13:50:39:e4:cb: 1b:88:f9:3a:10:32:e7:4f:90:88:85:ba:92:8b:49:77:71:cd: c0:de:eb:05:b4:1f:7c:8d:63:42:f8:27:a5:bd:43:96:22:d0: e3:51:9d:85:b8:0e:b2:f3:7f:b1:e0:be:d0:f6:c4:cb:c9:d9: 0d:dc:d6:03:1b:43:5a:2d:52:c4:f7:5e:59:a7:70:5d:7f:15: cd:29:41:ee:3b:eb:34:81:fb:c9:5c:c0:10:48:81:62:3e:03: ba:f8:c0:1d:6b:1e:36:67:58:0b:52:07:20:8b:bf:17:b5:91: cd:b1:b7:73:43:33:8e:63:e8:6b:22:53:ca:76:7d:de:b4:f3: 00:d0:1d:61:e7:bc:8a:8b:e5:40:de:1c:a7:6d:4c:79:8c:2d: ee:85:8a:89:b8:c7:16:93:2c:3a:a9:0b:2a:30:2c:34:2f:0a: 01:43:20:83:a9:a7:03:9e:08:63:08:39:15:19:a7:2f:3a:87: 39:2c:98:79:8c:e9:17:41:d9:ff:c8:55:f6:a6:11:b8:5e:fb: 1b:cf:8b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkMUAT2RIuSQ0SsFpuSK4bjbhf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3 QTNDMUQ2NjAeFw0yNjA5MjEwNzMxMDZaFw0yNjA5MjIwODUxMDZaMDMxMTAvBgNV BAMTKDk2MEYwNkVDNkZENUUyMzE2QUVBRTY5QUYyNjdBMjYyQjI4OENGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8zdZEFeg6oaWRhq5vd1zHVFY D2199y9syKHeJZcUmi9w4RbefCtWhnOLoHf9fMK2RiFo6GzGEUOIYC9qkUS2AA6q Uv2hsxzIkq2crHOcFf/DAQMBC+AJm1Zlon161rhfnFuCJGpN2mWu9tKphhPGNsO7 jqJCvDmY4ZluFR6V02Gqf//9XZezJVDqE5SnvCqQWAyw6Q27Zgaeb+SjTJw1WACc FsHPXwv0nDsHDzyCCTfuet5DBkctif67Zd1H428AhsEeEanw47Wig87Cg81jFkel CETtJENesqyfxUDYw6yuJTGdP0/Nsj886GFyAXdQh8dqQUyEhuIf3y1A/8wdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlg8G7G/V4jFq6uaa8meiYrKIzyMwHwYDVR0j BBgwFoAU8uGdtMniSR083kBj/vZuP3o8HWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFhNmE2N2QtY2JhMy00MjdiLTkwNTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRD OUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3QTNDMUQ2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkUxOURCNEM5RTI0OTFEM0NERTQwNjNGRUY2NkUzRjdBM0Mx RDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZF M0Y3QTNDMUQ2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzkJUtsMHSmb/kA2nEUoMOW1OgsE5eJ/yDy fkTOKlCMKUvMgduE8fzoTaC+c13rOrYTUDnkyxuI+ToQMudPkIiFupKLSXdxzcDe 6wW0H3yNY0L4J6W9Q5Yi0ONRnYW4DrLzf7HgvtD2xMvJ2Q3c1gMbQ1otUsT3Xlmn cF1/Fc0pQe476zSB+8lcwBBIgWI+A7r4wB1rHjZnWAtSByCLvxe1kc2xt3NDM45j 6GsiU8p2fd608wDQHWHnvIqL5UDeHKdtTHmMLe6Fiom4xxaTLDqpCyowLDQvCgFD IIOppwOeCGMIORUZpy86hzksmHmM6RdB2f/IVfamEbhe+xvPi7Q= -----END CERTIFICATE-----Generated at Mon Sep 21 10:00:14 2026 by rpki-client