$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json) Hash identifier: FAkwWiD/CrRCzG7iRc7MNebSz7g1UxkRgdFOl4iIVIg= Subject key identifier: C3:99:1C:17:E6:A6:6A:BF:0B:26:AE:D2:66:40:06:4B:CF:D3:8F:E4 Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303 Certificate serial: 132FC4F9980831212BEE4ACB82A2D3A595638D7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 01:34:54 +0000 Manifest this update: Thu 03 Sep 2026 01:29:54 +0000 Manifest next update: Fri 04 Sep 2026 03:04:54 +0000 Files and hashes: 1: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: Fyo5L48xQW3Xjaa86gxj30gvAyZTYhmGvNpfKiG6mWg=) 2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2f:c4:f9:98:08:31:21:2b:ee:4a:cb:82:a2:d3:a5:95:63:8d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303 Validity Not Before: Sep 3 01:29:54 2026 GMT Not After : Sep 4 03:04:54 2026 GMT Subject: CN=C3991C17E6A66ABF0B26AED26640064BCFD38FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:ca:1b:0d:8a:e5:67:d6:d5:8c:99:e2:22: f8:87:94:f2:d2:13:4f:32:af:28:95:56:2f:8c:76: ad:9d:42:a9:0a:20:d0:b3:88:a1:18:11:4f:40:20: f0:5d:20:d5:56:70:cc:6c:b6:e9:2c:29:9e:f4:a8: 6f:b5:72:bb:11:c1:6a:3e:d6:f1:cd:f6:cb:49:27: e1:0f:48:4e:6d:17:8a:3a:2d:15:e8:e0:ce:f5:9b: 46:87:5e:a6:67:4e:4f:dc:a4:28:18:47:08:1e:20: 14:a4:d3:ab:28:56:c6:4d:df:1b:d0:c4:4c:9f:c5: 9a:c3:8c:71:8a:6c:6e:21:ce:47:30:26:38:23:aa: e9:20:9f:4f:39:56:09:3f:51:9a:cc:67:f5:44:d4: 86:e0:95:d0:8f:ea:e5:22:1c:1c:f1:1c:62:27:10: 07:d9:91:ee:85:34:34:71:79:9c:57:d1:30:24:8b: 54:3c:e7:78:d5:c9:06:23:9a:32:80:d0:61:49:58: ea:eb:0d:ae:b8:5a:2c:94:c5:67:61:7a:06:bd:11: 49:2f:9b:c2:ca:df:be:2d:cb:2b:0c:89:7f:d9:5a: 56:f3:96:40:2b:ae:75:a2:5b:80:a1:44:53:99:cc: e1:4d:d6:2d:fd:7d:3f:a6:62:21:3c:c6:0f:1c:bc: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:99:1C:17:E6:A6:6A:BF:0B:26:AE:D2:66:40:06:4B:CF:D3:8F:E4 X509v3 Authority Key Identifier: keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:a9:a9:8d:0b:14:70:01:43:aa:da:0d:29:23:8e:9d:5f: 6d:7e:bf:d3:9e:6c:69:3c:74:b5:f2:2e:05:86:1e:60:ad:ca: c4:e6:b8:52:11:a2:68:a2:0c:5c:0e:bb:56:37:9e:44:57:ee: 3a:44:5e:d1:44:5c:e1:7a:b1:4a:4c:7f:d1:fe:30:4d:a6:51: 26:a1:c3:55:45:49:87:9e:db:24:83:40:7a:7e:73:83:88:47: e6:ef:af:63:c9:36:bb:19:9f:90:1e:b4:aa:c8:81:b4:2f:bb: c2:6b:47:48:f5:02:58:39:6b:42:b1:d1:9f:14:18:83:7f:30: cc:7c:ae:b4:02:c0:c8:5f:68:19:df:59:b9:84:da:2b:6e:bd: 47:fc:31:57:e4:69:43:87:78:ed:4b:01:39:99:0e:fb:7d:51: f9:22:d2:c4:58:8a:62:55:b1:cd:c7:f5:17:1b:d7:8a:40:10: 8c:36:71:84:64:b5:c2:8b:e0:64:f9:1c:d7:bb:40:ef:f6:9d: b1:6b:ed:28:c9:e1:29:95:c3:87:25:a6:d0:0a:8d:77:a7:ff: fd:ae:30:87:04:7c:99:24:84:f2:57:2c:d0:1a:a7:b5:ec:bc: 77:45:a6:43:85:60:5f:f0:35:3e:6f:0c:aa:e2:85:fe:09:a8: df:35:7e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEy/E+ZgIMSEr7krLgqLTpZVjjXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVD QTI2RDMwMzAeFw0yNjA5MDMwMTI5NTRaFw0yNjA5MDQwMzA0NTRaMDMxMTAvBgNV BAMTKEMzOTkxQzE3RTZBNjZBQkYwQjI2QUVEMjY2NDAwNjRCQ0ZEMzhGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdq8obDYrlZ9bVjJniIviHlPLS E08yryiVVi+Mdq2dQqkKINCziKEYEU9AIPBdINVWcMxstuksKZ70qG+1crsRwWo+ 1vHN9stJJ+EPSE5tF4o6LRXo4M71m0aHXqZnTk/cpCgYRwgeIBSk06soVsZN3xvQ xEyfxZrDjHGKbG4hzkcwJjgjqukgn085Vgk/UZrMZ/VE1IbgldCP6uUiHBzxHGIn EAfZke6FNDRxeZxX0TAki1Q853jVyQYjmjKA0GFJWOrrDa64WiyUxWdhega9EUkv m8LK374tyysMiX/ZWlbzlkArrnWiW4ChRFOZzOFN1i39fT+mYiE8xg8cvD0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5kcF+amar8LJq7SZkAGS8/Tj+QwHwYDVR0j BBgwFoAU8kxieqBoX2jxQgx/KIYCZcom0wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRhYWUzZjAtOWM3MC00MmZjLWFlM2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FB MDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVDQTI2RDMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRDNjI3QUEwNjg1RjY4RjE0MjBDN0YyODg2MDI2NUNBMjZE MzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAy NjVDQTI2RDMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFApqamNCxRwAUOq2g0pI46dX21+v9OebGk8 dLXyLgWGHmCtysTmuFIRomiiDFwOu1Y3nkRX7jpEXtFEXOF6sUpMf9H+ME2mUSah w1VFSYee2ySDQHp+c4OIR+bvr2PJNrsZn5AetKrIgbQvu8JrR0j1Alg5a0Kx0Z8U GIN/MMx8rrQCwMhfaBnfWbmE2ituvUf8MVfkaUOHeO1LATmZDvt9Ufki0sRYimJV sc3H9Rcb14pAEIw2cYRktcKL4GT5HNe7QO/2nbFr7SjJ4SmVw4clptAKjXen//2u MIcEfJkkhPJXLNAap7XsvHdFpkOFYF/wNT5vDKrihf4JqN81fsw= -----END CERTIFICATE-----Generated at Thu Sep 3 09:06:37 2026 by rpki-client