$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: z3ptLjMZrV+jhNs82fkKelNUBEe5twJJyGal0EivV9c= Subject key identifier: 8C:BF:98:6F:2F:F1:5E:6A:77:D1:9A:FC:A0:25:D9:CA:C2:A0:4A:C9 Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 4389C2988ADF3C3688D38927BF2A09AF9827702D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:09:54 +0000 Manifest this update: Thu 17 Sep 2026 09:04:54 +0000 Manifest next update: Fri 18 Sep 2026 10:41:54 +0000 Files and hashes: 1: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: BZGUnWyykIccVE6rVQ7QTf70pmV0omJAanEczN4hufo=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 4: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:89:c2:98:8a:df:3c:36:88:d3:89:27:bf:2a:09:af:98:27:70:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Sep 17 09:04:54 2026 GMT Not After : Sep 18 10:41:54 2026 GMT Subject: CN=8CBF986F2FF15E6A77D19AFCA025D9CAC2A04AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:d3:f6:68:23:05:09:46:8e:f4:1b:fe:f0: 68:c4:94:c4:1a:ed:f4:97:ac:e5:e1:c6:94:e6:bf: c1:ad:f7:4e:58:90:0a:8f:fc:d3:79:db:3f:2e:70: d4:d7:e2:71:25:66:3c:a0:63:c6:b7:be:7c:1f:9f: 20:8e:7e:f4:43:92:89:76:69:70:69:50:3c:f6:86: b5:75:5d:e5:0a:1b:86:b4:91:b0:9e:15:f4:70:ae: 9d:11:10:f5:64:6c:de:0a:6d:e4:83:36:1d:e7:3e: 47:59:7e:3f:77:3f:7a:19:32:52:11:73:6f:9f:8c: 27:23:04:0d:46:0d:ba:b6:d5:1e:21:8d:27:22:98: 28:1a:18:d6:16:f1:15:e2:a4:c6:34:3e:ee:8e:82: 84:0c:f7:bb:69:97:8c:8e:16:0b:63:c1:57:bc:f0: a8:b3:19:e6:b5:32:5f:e6:80:f1:a1:48:dc:68:ef: af:8e:f2:59:92:ff:52:ea:73:35:eb:24:4e:d6:a7: 7f:f8:2c:7c:51:c7:3e:f4:9e:97:04:9c:80:5b:4f: 59:7e:6c:34:83:35:fb:61:ff:2c:50:da:e4:80:46: 8d:1a:42:8a:b4:16:f3:43:88:15:b5:d2:a8:d9:ae: 45:d1:1e:55:22:d2:24:aa:de:1e:f0:91:e0:b2:d4: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BF:98:6F:2F:F1:5E:6A:77:D1:9A:FC:A0:25:D9:CA:C2:A0:4A:C9 X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4b:2b:2a:0b:6a:e9:ff:82:fb:52:f8:de:0a:90:1c:c0:d9: 58:fe:10:9f:15:a4:8f:b7:5c:50:1e:ad:38:e4:44:8d:ce:1a: 4c:cb:d9:6b:b1:74:60:d9:76:48:d9:92:06:85:f8:0b:37:c2: 34:0a:ff:85:d4:54:b5:cf:d2:29:2a:3e:39:b3:1d:d4:aa:36: 15:79:56:73:07:10:e3:98:46:95:06:80:91:f8:5b:1a:d9:06: 5b:42:2c:5d:b7:e7:80:35:e2:a0:81:9b:90:0d:88:1c:66:69: 17:9a:45:67:ff:27:55:a7:3b:d7:50:25:cc:5b:2f:8f:24:ff: f5:ca:b6:b7:17:04:a4:c8:10:75:c3:79:05:e3:1f:68:34:4d: 78:a8:cf:ec:58:76:33:9f:c4:81:46:fa:56:32:15:f6:55:36: 73:1a:8d:ee:b1:86:11:2f:e8:d2:d9:8c:26:35:42:df:58:1c: 11:53:7a:bd:c8:e9:44:af:1b:37:58:4e:56:4e:66:43:09:8b: c3:80:4b:92:73:a1:49:f8:4e:95:79:f5:f6:9a:b0:35:f4:d0: cc:f8:12:ef:52:87:58:d7:73:27:06:94:6a:8e:6b:9b:b5:8f: e5:9e:7c:c8:7b:00:47:1e:8e:58:43:39:31:0d:28:a4:b8:70: 84:d3:9a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4nCmIrfPDaI04knvyoJr5gncC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA5MTcwOTA0NTRaFw0yNjA5MTgxMDQxNTRaMDMxMTAvBgNV BAMTKDhDQkY5ODZGMkZGMTVFNkE3N0QxOUFGQ0EwMjVEOUNBQzJBMDRBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10tP2aCMFCUaO9Bv+8GjElMQa 7fSXrOXhxpTmv8Gt905YkAqP/NN52z8ucNTX4nElZjygY8a3vnwfnyCOfvRDkol2 aXBpUDz2hrV1XeUKG4a0kbCeFfRwrp0REPVkbN4KbeSDNh3nPkdZfj93P3oZMlIR c2+fjCcjBA1GDbq21R4hjScimCgaGNYW8RXipMY0Pu6OgoQM97tpl4yOFgtjwVe8 8KizGea1Ml/mgPGhSNxo76+O8lmS/1LqczXrJE7Wp3/4LHxRxz70npcEnIBbT1l+ bDSDNfth/yxQ2uSARo0aQoq0FvNDiBW10qjZrkXRHlUi0iSq3h7wkeCy1CzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjL+Yby/xXmp30Zr8oCXZysKgSskwHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtLKyoLaun/gvtS+N4KkBzA2Vj+EJ8VpI+3 XFAerTjkRI3OGkzL2WuxdGDZdkjZkgaF+As3wjQK/4XUVLXP0ikqPjmzHdSqNhV5 VnMHEOOYRpUGgJH4WxrZBltCLF2354A14qCBm5ANiBxmaReaRWf/J1WnO9dQJcxb L48k//XKtrcXBKTIEHXDeQXjH2g0TXioz+xYdjOfxIFG+lYyFfZVNnMaje6xhhEv 6NLZjCY1Qt9YHBFTer3I6USvGzdYTlZOZkMJi8OAS5JzoUn4TpV59faasDX00Mz4 Eu9Sh1jXcycGlGqOa5u1j+WefMh7AEcejlhDOTENKKS4cITTmvQ= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:05 2026 by rpki-client