$ rpki-client -vvvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json) Hash identifier: ZOPQG78SllKwPouo96qlp6jNWCion5JMV7dmfOPLgK0= Subject key identifier: 65:72:82:C5:6B:34:30:35:7A:35:35:B1:AD:10:3D:61:7A:67:73:DA Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Certificate serial: 3C8ABB9395D7A82D826FA62D20B767ACB9656BD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 01:50:14 +0000 Manifest this update: Thu 03 Sep 2026 01:45:14 +0000 Manifest next update: Fri 04 Sep 2026 05:43:14 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=) 2: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=) 3: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: npt0jbeKn2oCFxATmMXs7fcusopGUhp4h0WdLcljZ8Y=) 4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8a:bb:93:95:d7:a8:2d:82:6f:a6:2d:20:b7:67:ac:b9:65:6b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Validity Not Before: Sep 3 01:45:14 2026 GMT Not After : Sep 4 05:43:14 2026 GMT Subject: CN=657282C56B3430357A3535B1AD103D617A6773DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:80:85:f0:e7:cb:b7:46:26:57:34:47:06: b2:67:9a:e7:32:41:6a:03:2c:98:ab:08:0a:09:76: 5d:3b:81:3a:d6:95:b2:55:35:9b:8d:be:bc:24:4a: 4c:cd:a9:90:c1:f6:b3:bf:c0:72:46:6e:00:7a:60: 38:34:f2:d3:fa:14:f7:31:e6:33:95:e2:88:22:a9: da:37:dd:d6:a0:57:ad:96:6d:d6:ef:00:ca:04:62: 4f:b0:a0:cd:14:d2:c8:29:38:2c:5d:f8:46:76:35: b0:c6:d6:0d:14:b5:1f:e4:70:52:25:f5:b6:f6:95: 4c:d0:83:dd:eb:69:cc:5b:64:78:f8:9c:2d:59:6e: 43:39:83:7c:cf:4e:96:8c:3c:e6:1b:97:f2:dd:e6: d7:39:2a:9c:ef:b9:19:e9:08:22:27:ee:00:78:07: 8c:2c:58:a9:72:e4:94:1b:db:99:b1:7b:6c:1e:c1: 35:f9:12:fa:2e:b5:f3:53:73:d4:61:7a:2d:58:52: 2a:4f:9b:d7:ff:ce:f5:2b:f4:24:9c:93:44:c8:1f: 14:82:62:29:3f:7e:e3:2d:7e:7b:ed:19:43:2e:33: 35:cc:bc:e4:6c:83:ec:04:56:20:d3:cd:d8:8e:70: 57:12:ac:b1:a5:7f:39:d2:4f:1a:22:6a:0c:17:41: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:82:C5:6B:34:30:35:7A:35:35:B1:AD:10:3D:61:7A:67:73:DA X509v3 Authority Key Identifier: keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:db:dc:b4:86:16:f4:5f:89:98:bb:dd:8b:ef:8e:42:f3:f6: 7b:3d:eb:32:12:07:e2:da:e2:eb:7f:a8:a8:4f:8a:db:64:98: 31:94:58:0d:63:f6:0e:3b:3f:03:25:8a:76:f9:0b:4a:f4:1e: 21:0b:d5:c2:e4:6d:14:f8:a2:3f:00:36:bd:41:8a:c4:53:01: 82:04:7a:98:47:18:c5:4b:0f:4e:42:4b:ee:86:cb:bf:d4:f9: bc:d0:f1:50:ba:39:b8:a3:8b:af:0b:3c:e6:96:ae:bb:a3:b7: ac:f4:03:d2:8b:09:dc:6a:8a:65:35:4d:15:eb:40:b7:6c:a6: dc:51:ed:7a:31:b1:9e:63:15:ef:f0:f1:a8:c1:de:45:d7:6b: 56:49:0a:22:f0:b6:51:b6:61:d2:81:fb:b0:14:d1:41:b0:5f: ea:33:77:f7:86:85:6a:4d:16:8b:f1:6f:42:7d:9b:73:40:ad: 20:d7:22:2e:ac:4c:58:d7:a0:42:02:24:53:19:18:fe:37:6c: db:1b:37:f7:ec:23:d1:d1:8d:84:21:52:a8:00:ee:30:d6:2f: 33:60:1a:59:06:77:f0:ad:17:3d:eb:a5:6e:83:cb:9e:9f:68: 8f:ae:d1:e1:be:46:53:83:32:36:92:df:d6:44:0a:f8:36:85: 68:ba:08:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIq7k5XXqC2Cb6YtILdnrLlla9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3 QTNDMUQ2NjAeFw0yNjA5MDMwMTQ1MTRaFw0yNjA5MDQwNTQzMTRaMDMxMTAvBgNV BAMTKDY1NzI4MkM1NkIzNDMwMzU3QTM1MzVCMUFEMTAzRDYxN0E2NzczREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRRICF8OfLt0YmVzRHBrJnmucy QWoDLJirCAoJdl07gTrWlbJVNZuNvrwkSkzNqZDB9rO/wHJGbgB6YDg08tP6FPcx 5jOV4ogiqdo33dagV62WbdbvAMoEYk+woM0U0sgpOCxd+EZ2NbDG1g0UtR/kcFIl 9bb2lUzQg93racxbZHj4nC1ZbkM5g3zPTpaMPOYbl/Ld5tc5KpzvuRnpCCIn7gB4 B4wsWKly5JQb25mxe2wewTX5EvoutfNTc9Rhei1YUipPm9f/zvUr9CSck0TIHxSC Yik/fuMtfnvtGUMuMzXMvORsg+wEViDTzdiOcFcSrLGlfznSTxoiagwXQUgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXKCxWs0MDV6NTWxrRA9YXpnc9owHwYDVR0j BBgwFoAU8uGdtMniSR083kBj/vZuP3o8HWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFhNmE2N2QtY2JhMy00MjdiLTkwNTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRD OUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3QTNDMUQ2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkUxOURCNEM5RTI0OTFEM0NERTQwNjNGRUY2NkUzRjdBM0Mx RDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZF M0Y3QTNDMUQ2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTb3LSGFvRfiZi73YvvjkLz9ns96zISB+La 4ut/qKhPittkmDGUWA1j9g47PwMlinb5C0r0HiEL1cLkbRT4oj8ANr1BisRTAYIE ephHGMVLD05CS+6Gy7/U+bzQ8VC6Obiji68LPOaWrrujt6z0A9KLCdxqimU1TRXr QLdsptxR7XoxsZ5jFe/w8ajB3kXXa1ZJCiLwtlG2YdKB+7AU0UGwX+ozd/eGhWpN Fovxb0J9m3NArSDXIi6sTFjXoEICJFMZGP43bNsbN/fsI9HRjYQhUqgA7jDWLzNg GlkGd/CtFz3rpW6Dy56faI+u0eG+RlODMjaS39ZECvg2hWi6CAI= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:44 2026 by rpki-client