$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json) Hash identifier: 8asdHwLLrZ1fXQWZqRlPfTAR54bWAIk8sZgrWkIcOXo= Subject key identifier: DB:7A:25:97:CE:1C:C8:F5:B8:2A:D8:3D:F1:FA:71:8B:01:7F:61:5B Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Certificate serial: 027EEECA045EDCABC0FC8F7C53AAC7BB31F1E97C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:52:26 +0000 Manifest this update: Mon 21 Sep 2026 12:47:26 +0000 Manifest next update: Tue 22 Sep 2026 15:08:26 +0000 Files and hashes: 1: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: WLH4yhYyoBF2HU0fMwgzpPiP80vRbbsul1l9EqkIkYM=) 2: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7e:ee:ca:04:5e:dc:ab:c0:fc:8f:7c:53:aa:c7:bb:31:f1:e9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Validity Not Before: Sep 21 12:47:26 2026 GMT Not After : Sep 22 15:08:26 2026 GMT Subject: CN=DB7A2597CE1CC8F5B82AD83DF1FA718B017F615B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:82:f8:77:38:0b:e9:d7:bf:70:c8:21:72: 58:97:39:6d:b7:57:83:65:d5:05:b6:3b:cf:51:3e: e7:45:7d:7e:91:be:72:20:63:50:d3:24:15:9e:43: 18:2b:16:a4:14:17:ba:1d:6d:49:2c:99:aa:51:d2: fe:71:24:85:dd:90:2f:79:e6:c5:64:88:04:86:a3: 78:b2:12:a8:46:55:cc:f6:18:11:12:15:b3:f3:20: 63:06:40:77:a1:fb:c9:97:2a:72:8a:55:4c:53:d1: 38:c3:3c:d4:0f:75:ab:db:11:c4:95:31:43:e8:e2: cd:a1:b1:71:f6:2c:da:7e:89:6e:63:3e:75:b0:ed: 84:d5:03:69:c4:8e:ed:f6:34:77:22:3a:99:65:26: 4e:99:3b:8a:a2:83:ee:c3:a3:0c:16:2c:a9:49:e7: b8:20:29:ef:c8:c4:68:14:17:da:b6:89:6d:68:12: ac:b3:ff:1d:f6:ec:37:4d:cb:6b:3e:59:47:06:cc: 32:2e:89:64:68:df:87:13:6a:32:92:5f:fb:67:e5: 34:5d:a3:8e:1e:64:72:4f:9b:5e:5d:5b:02:c4:0c: 89:ce:5a:55:90:df:bc:4c:e7:96:80:5f:14:3f:34: 49:db:53:db:4c:02:d3:e4:13:23:69:18:9c:d8:83: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:25:97:CE:1C:C8:F5:B8:2A:D8:3D:F1:FA:71:8B:01:7F:61:5B X509v3 Authority Key Identifier: keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6c:03:18:fc:91:dd:7c:02:8c:4f:41:00:ef:3d:72:f2:a9: 18:36:be:4f:98:a1:94:86:e6:1d:6a:41:47:0d:df:80:2b:e2: 3d:cc:6f:38:ed:8e:94:25:a9:2c:2a:79:40:a7:7b:45:49:8f: 81:38:cb:c1:7c:3e:dd:00:ce:5f:cf:61:2e:dc:9b:65:85:c5: 5f:9e:0c:b6:05:73:bd:bb:25:af:11:61:59:d7:d7:a3:f7:cf: 15:b3:25:f8:17:40:63:dd:2d:ef:03:15:fd:9c:d0:e0:3a:3d: 48:31:7a:7f:a2:0c:c4:14:62:06:11:23:ce:da:4b:0b:e7:ac: 75:2e:1c:df:25:14:b5:2f:33:4a:b5:1d:ab:8e:af:e0:e9:cf: 5f:03:5e:77:f8:a6:69:23:32:1c:7d:c2:05:53:98:6b:a1:15: bd:68:64:cb:7f:d6:89:96:92:d4:ef:15:08:69:8a:e9:f8:b4: 4c:0d:e3:41:45:6c:9c:85:ec:9c:e5:6d:3b:e9:ed:f9:3e:97: 95:fd:ac:b6:84:56:e9:eb:75:54:95:cf:c9:72:be:2b:ec:87: b8:71:a2:4e:f9:40:81:8e:c6:e3:9c:4c:02:34:b6:ff:1b:6b: e0:9b:53:3f:b1:0f:93:dc:c4:f1:c7:2a:aa:1a:4a:68:a5:e4: bc:92:5a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn7uygRe3KvA/I98U6rHuzHx6XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2 MTQzREJCQzAeFw0yNjA5MjExMjQ3MjZaFw0yNjA5MjIxNTA4MjZaMDMxMTAvBgNV BAMTKERCN0EyNTk3Q0UxQ0M4RjVCODJBRDgzREYxRkE3MThCMDE3RjYxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeS4L4dzgL6de/cMghcliXOW23 V4Nl1QW2O89RPudFfX6RvnIgY1DTJBWeQxgrFqQUF7odbUksmapR0v5xJIXdkC95 5sVkiASGo3iyEqhGVcz2GBESFbPzIGMGQHeh+8mXKnKKVUxT0TjDPNQPdavbEcSV MUPo4s2hsXH2LNp+iW5jPnWw7YTVA2nEju32NHciOpllJk6ZO4qig+7DowwWLKlJ 57ggKe/IxGgUF9q2iW1oEqyz/x327DdNy2s+WUcGzDIuiWRo34cTajKSX/tn5TRd o44eZHJPm15dWwLEDInOWlWQ37xM55aAXxQ/NEnbU9tMAtPkEyNpGJzYg4SVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23oll84cyPW4Ktg98fpxiwF/YVswHwYDVR0j BBgwFoAU9CxbB2GD9KvanOh3BhE/0mFD27wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmRiMDEzMGQtY2FhMy00NzZmLWFmODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2 MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2MTQzREJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNDJDNUIwNzYxODNGNEFCREE5Q0U4NzcwNjExM0ZEMjYxNDNE QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNG RDI2MTQzREJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1sAxj8kd18AoxPQQDvPXLyqRg2vk+YoZSG 5h1qQUcN34Ar4j3MbzjtjpQlqSwqeUCne0VJj4E4y8F8Pt0Azl/PYS7cm2WFxV+e DLYFc727Ja8RYVnX16P3zxWzJfgXQGPdLe8DFf2c0OA6PUgxen+iDMQUYgYRI87a SwvnrHUuHN8lFLUvM0q1HauOr+Dpz18DXnf4pmkjMhx9wgVTmGuhFb1oZMt/1omW ktTvFQhpiun4tEwN40FFbJyF7JzlbTvp7fk+l5X9rLaEVunrdVSVz8lyvivsh7hx ok75QIGOxuOcTAI0tv8ba+CbUz+xD5PcxPHHKqoaSmil5LySWro= -----END CERTIFICATE-----Generated at Mon Sep 21 16:25:46 2026 by rpki-client