$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json) Hash identifier: HXN1gwTVObtdAD5XnrgTu7Buuqg5CfutT/DgAJEjWHE= Subject key identifier: AD:D7:CB:E9:10:B4:81:24:3B:50:95:20:90:4F:DC:2D:CF:38:35:E8 Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Certificate serial: 13003E79E3858E0B3DB95C3EE5057BE584860673 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:15:07 +0000 Manifest this update: Thu 17 Sep 2026 01:10:07 +0000 Manifest next update: Fri 18 Sep 2026 01:29:07 +0000 Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=) 2: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: V7swtcSqNQ3VVP8bZlR1+6I5wVGbNiMB8H1aWTF77wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:00:3e:79:e3:85:8e:0b:3d:b9:5c:3e:e5:05:7b:e5:84:86:06:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Validity Not Before: Sep 17 01:10:07 2026 GMT Not After : Sep 18 01:29:07 2026 GMT Subject: CN=ADD7CBE910B481243B509520904FDC2DCF3835E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:79:32:c5:4b:32:6c:ef:4a:22:0c:bc:01: 77:2f:c6:a2:b0:bf:5c:be:6c:07:93:87:01:92:25: 9c:22:2e:12:a1:25:74:85:a8:04:13:fb:dc:7a:ea: 69:0f:f5:16:67:37:4d:26:33:da:d9:32:59:8d:85: d8:8f:e6:03:52:fd:89:12:d5:3b:79:91:df:45:94: a5:49:46:23:d0:75:71:c7:65:fa:a3:b6:af:f6:a5: 52:74:0a:1a:11:93:ba:e5:6c:70:b6:35:e8:db:af: ec:8e:78:02:7b:59:cb:c8:39:a8:e0:70:c4:1c:d0: 4f:50:37:53:a0:12:25:e2:39:69:e7:3b:d6:f9:4f: 3e:d0:ea:e1:d2:7c:d4:55:7e:fd:4f:a3:62:b3:e4: c2:2d:d6:2a:31:08:5d:b7:3e:31:d1:d8:5d:5c:07: 7d:99:34:27:13:de:42:05:35:d7:f5:a6:63:b2:66: e2:81:40:a5:ee:ab:72:bc:ae:a0:1e:86:71:e5:d1: 18:cc:14:51:52:89:37:c7:5e:fa:07:58:47:64:cc: a2:ef:9d:ba:53:33:62:d7:a1:02:f9:0d:b9:8e:f8: 5e:74:c9:ea:6b:a5:b2:98:4e:e9:d7:98:80:5c:b7: 69:a9:02:b6:54:25:e0:38:94:4a:51:eb:e3:29:7c: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:CB:E9:10:B4:81:24:3B:50:95:20:90:4F:DC:2D:CF:38:35:E8 X509v3 Authority Key Identifier: keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c2:ff:81:e8:14:1d:25:43:0e:fc:52:ae:9b:2e:42:d9:9a: 84:ce:b8:62:72:ee:cd:a2:57:b8:09:43:3f:e4:59:3a:2e:e0: a3:13:13:5e:a5:f1:a3:98:6b:77:ee:8f:e9:c9:d1:fe:f9:ce: cf:36:55:22:dd:d5:78:2b:fb:ae:16:0d:86:6a:e0:a0:fe:fa: 57:d7:80:2b:d2:d6:4b:03:a8:78:cb:35:3a:ab:f6:9e:75:c8: 14:64:91:0e:7b:0a:ed:08:b2:52:08:69:a6:48:87:02:7a:2d: 1e:21:72:65:9f:a3:ec:6c:22:82:1d:90:2a:51:ba:25:7d:8d: 4d:2f:b3:41:28:aa:0e:23:8f:96:09:bb:6b:23:36:c3:c9:04: 7b:f9:da:c7:ba:a2:8f:b3:56:3e:7c:55:51:04:c4:50:72:d9: 3b:cb:c4:6d:ce:25:16:44:dd:1b:29:67:18:de:b9:7c:e3:b3: 59:8d:96:3c:b8:c9:c0:b4:5d:8c:e6:e3:c9:48:36:be:16:8f: e0:0c:f3:b8:bb:06:3d:96:49:5d:f9:c3:df:66:d2:3e:f8:76: 94:2a:1b:63:24:38:57:6c:49:0a:4e:7b:3a:a5:3a:07:93:75: bb:6d:8d:a4:59:35:33:04:c5:20:e8:c8:b9:64:b0:62:42:60: 84:fd:44:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwA+eeOFjgs9uVw+5QV75YSGBnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5RjE4 MzNCNTZDQTAeFw0yNjA5MTcwMTEwMDdaFw0yNjA5MTgwMTI5MDdaMDMxMTAvBgNV BAMTKEFERDdDQkU5MTBCNDgxMjQzQjUwOTUyMDkwNEZEQzJEQ0YzODM1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG5nkyxUsybO9KIgy8AXcvxqKw v1y+bAeThwGSJZwiLhKhJXSFqAQT+9x66mkP9RZnN00mM9rZMlmNhdiP5gNS/YkS 1Tt5kd9FlKVJRiPQdXHHZfqjtq/2pVJ0ChoRk7rlbHC2Nejbr+yOeAJ7WcvIOajg cMQc0E9QN1OgEiXiOWnnO9b5Tz7Q6uHSfNRVfv1Po2Kz5MIt1ioxCF23PjHR2F1c B32ZNCcT3kIFNdf1pmOyZuKBQKXuq3K8rqAehnHl0RjMFFFSiTfHXvoHWEdkzKLv nbpTM2LXoQL5DbmO+F50yeprpbKYTunXmIBct2mpArZUJeA4lEpR6+MpfKebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdfL6RC0gSQ7UJUgkE/cLc84NegwHwYDVR0j BBgwFoAU8PxX/yTa41fgeSsEGK358YM7VsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkY2YwYTQtYWQxYi00YjcyLTg0MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYy NERBRTM1N0UwNzkyQjA0MThBREY5RjE4MzNCNTZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEZDNTdGRjI0REFFMzU3RTA3OTJCMDQxOEFERjlGMTgzM0I1 NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5 RjE4MzNCNTZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7C/4HoFB0lQw78Uq6bLkLZmoTOuGJy7s2i V7gJQz/kWTou4KMTE16l8aOYa3fuj+nJ0f75zs82VSLd1Xgr+64WDYZq4KD++lfX gCvS1ksDqHjLNTqr9p51yBRkkQ57Cu0IslIIaaZIhwJ6LR4hcmWfo+xsIoIdkCpR uiV9jU0vs0Eoqg4jj5YJu2sjNsPJBHv52se6oo+zVj58VVEExFBy2TvLxG3OJRZE 3RspZxjeuXzjs1mNljy4ycC0XYzm48lINr4Wj+AM87i7Bj2WSV35w99m0j74dpQq G2MkOFdsSQpOezqlOgeTdbttjaRZNTMExSDoyLlksGJCYIT9RCw= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:26 2026 by rpki-client