$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: NnDQeMWXQlzDVSvSHwYxNSapLTQDlhCUqPgzUJNuOaE= Subject key identifier: 7E:97:94:46:1F:19:BC:01:7C:B9:1B:B6:CC:22:1C:6F:8A:8A:57:89 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 25AC3DFF409AD5016D8E77A8897BE7566EA257EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:20:20 +0000 Manifest this update: Wed 16 Sep 2026 21:15:20 +0000 Manifest next update: Fri 18 Sep 2026 00:13:20 +0000 Files and hashes: 1: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: 1MSEBHCQOy+X+vWRNCmEaZCtdvdsHzEIem70+s+ceP8=) 2: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 3: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ac:3d:ff:40:9a:d5:01:6d:8e:77:a8:89:7b:e7:56:6e:a2:57:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Sep 16 21:15:20 2026 GMT Not After : Sep 18 00:13:20 2026 GMT Subject: CN=7E9794461F19BC017CB91BB6CC221C6F8A8A5789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:ed:42:48:9a:5d:4b:44:b2:b7:80:72:62: a1:49:ff:c1:ac:cf:d9:18:fd:b8:b0:f7:a1:f2:46: d1:d8:fb:c7:3d:44:63:97:6c:d1:8d:04:95:21:a8: 2f:07:5f:9f:43:de:83:aa:43:ad:1e:5a:2d:0b:1e: ad:d9:f0:be:cc:32:ee:c6:e6:45:39:e4:45:02:40: ae:2d:4c:25:3d:12:d6:a2:cb:5e:18:c0:c9:e7:22: 8e:15:a6:d4:16:46:e5:17:0c:be:41:0d:5b:0b:b4: e1:34:16:95:8a:4c:2a:d2:23:4f:f9:8c:81:78:c5: 69:64:5c:62:a7:62:58:52:1a:55:60:0f:ea:f2:d9: 22:59:84:c9:f7:1b:7a:10:9d:f6:68:58:aa:06:1c: 74:c3:77:eb:35:39:e8:37:c5:59:f4:ee:01:77:8d: 4d:f7:b5:33:76:dd:80:82:b5:09:b4:d8:7d:e5:e5: 7d:7f:46:87:a0:41:81:ac:84:84:f1:8f:06:53:b6: 24:50:17:67:02:81:07:33:d7:5e:2f:31:64:19:94: e7:97:19:e7:82:56:08:51:f9:f0:12:d3:29:20:1f: 78:a9:62:6f:28:44:1e:96:d7:cf:5e:25:51:4c:d4: 20:da:30:61:f9:63:b2:21:9f:13:3a:82:26:2b:8a: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:94:46:1F:19:BC:01:7C:B9:1B:B6:CC:22:1C:6F:8A:8A:57:89 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ed:f5:ff:dc:62:ab:99:35:b8:a0:a8:db:e7:5e:c3:9c:cd: e7:91:c8:15:33:ad:d7:8d:7e:45:49:da:55:c4:69:be:0d:5b: 62:7a:ce:51:41:aa:c0:a5:e5:e7:96:75:7c:72:d4:5b:d1:c5: b5:f1:8d:c6:e2:cd:3a:10:ad:37:9c:af:d7:c5:dd:d9:43:6d: 27:ea:ff:c1:d3:25:a5:49:1a:95:d0:7a:15:f0:e3:4d:1e:52: 87:1e:f4:f3:c5:aa:91:b6:c3:c8:29:a0:08:d2:9f:f4:01:13: 1d:23:23:8a:31:e4:eb:56:a6:8a:36:a8:1f:21:70:9b:a0:cc: fe:37:99:d4:0b:4d:b9:c3:dd:87:b8:d2:59:9e:2c:56:d2:6d: 01:eb:8e:5e:0e:63:96:9d:a8:ba:c8:c6:b7:f3:5a:6a:e6:1e: c3:f8:49:e9:cf:50:25:a3:c0:5c:3f:54:bf:fd:eb:3e:78:43: 30:4c:bc:82:16:1f:41:07:48:9e:aa:26:15:3a:e8:1c:71:10: db:d2:20:c4:d8:19:04:2d:d4:54:7e:e7:3b:7d:38:ea:06:20: 50:67:a5:d8:d0:14:3d:ba:82:4c:17:c1:15:36:59:89:5b:cc: f6:30:82:d3:3d:d3:96:34:22:48:6f:88:03:28:30:a9:ed:0f: 76:cc:b6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaw9/0Ca1QFtjneoiXvnVm6iV+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA5MTYyMTE1MjBaFw0yNjA5MTgwMDEzMjBaMDMxMTAvBgNV BAMTKDdFOTc5NDQ2MUYxOUJDMDE3Q0I5MUJCNkNDMjIxQzZGOEE4QTU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8+1CSJpdS0Syt4ByYqFJ/8Gs z9kY/biw96HyRtHY+8c9RGOXbNGNBJUhqC8HX59D3oOqQ60eWi0LHq3Z8L7MMu7G 5kU55EUCQK4tTCU9Etaiy14YwMnnIo4VptQWRuUXDL5BDVsLtOE0FpWKTCrSI0/5 jIF4xWlkXGKnYlhSGlVgD+ry2SJZhMn3G3oQnfZoWKoGHHTDd+s1Oeg3xVn07gF3 jU33tTN23YCCtQm02H3l5X1/RoegQYGshITxjwZTtiRQF2cCgQcz114vMWQZlOeX GeeCVghR+fAS0ykgH3ipYm8oRB6W189eJVFM1CDaMGH5Y7IhnxM6giYrihv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpeURh8ZvAF8uRu2zCIcb4qKV4kwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIft9f/cYquZNbigqNvnXsOczeeRyBUzrdeN fkVJ2lXEab4NW2J6zlFBqsCl5eeWdXxy1FvRxbXxjcbizToQrTecr9fF3dlDbSfq /8HTJaVJGpXQehXw400eUoce9PPFqpG2w8gpoAjSn/QBEx0jI4ox5OtWpoo2qB8h cJugzP43mdQLTbnD3Ye40lmeLFbSbQHrjl4OY5adqLrIxrfzWmrmHsP4SenPUCWj wFw/VL/96z54QzBMvIIWH0EHSJ6qJhU66BxxENvSIMTYGQQt1FR+5zt9OOoGIFBn pdjQFD26gkwXwRU2WYlbzPYwgtM905Y0IkhviAMoMKntD3bMtvk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:08 2026 by rpki-client