$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: ya8tavAib+fHzDy1dwIn29lcHqCq0XRwKONMyXX0m+U= Subject key identifier: 9C:04:7F:30:33:DF:AA:FF:9D:2C:5B:B8:1D:29:55:D0:5B:64:F5:8A Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 11DCE1780B7436F346BD3E4E47A64663A5659A8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: BA Signing time: Fri 18 Sep 2026 02:16:09 +0000 Manifest this update: Fri 18 Sep 2026 02:11:09 +0000 Manifest next update: Sat 19 Sep 2026 04:08:09 +0000 Files and hashes: 1: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) 2: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 3: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) 4: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) 5: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: 4WOZ5PaEcNk8cFABtX7xJaK8ugKfL2AQQ3JGQfwxSTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 04:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dc:e1:78:0b:74:36:f3:46:bd:3e:4e:47:a6:46:63:a5:65:9a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: Sep 18 02:11:09 2026 GMT Not After : Sep 19 04:08:09 2026 GMT Subject: CN=9C047F3033DFAAFF9D2C5BB81D2955D05B64F58A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:1c:a8:b4:12:a4:a8:81:f2:6c:f9:62:9a: 89:d4:fd:0d:fc:d7:c6:04:bb:59:d6:ab:b9:f7:24: 88:ef:cb:b5:ca:1f:c2:36:8f:9a:17:7f:be:04:04: 6d:0a:1e:c6:0f:99:0a:76:b5:e3:90:1e:27:39:93: 05:91:27:6e:98:e8:02:63:ac:45:a8:59:a2:b1:3c: d1:93:16:f4:d7:87:45:f9:c2:ab:5b:aa:66:84:24: e8:52:02:1f:a4:91:06:05:0c:4f:2a:6c:2c:00:94: 55:27:32:7a:91:3e:ef:9a:39:fc:44:28:dc:84:16: 9a:6c:b6:c3:86:81:73:af:a7:f0:cd:5c:4e:2a:ae: 16:1e:f5:6c:80:c5:2d:81:42:9c:03:15:5d:d1:0a: aa:8a:7e:c9:ed:27:9e:39:1a:97:40:d7:67:df:93: 1e:8c:a3:22:66:43:5c:c6:a6:2a:9f:2c:da:88:f7: 7e:e0:c9:74:3d:52:7d:c9:e7:97:bb:e8:48:a2:51: 54:f4:db:99:f1:40:f0:45:49:66:ff:32:df:65:55: 63:73:b9:da:5a:c8:60:7d:9d:b9:97:db:33:46:7d: 99:c9:84:8a:7d:63:da:de:3f:7d:d3:aa:e0:3d:68: 91:9a:bb:c1:bb:d7:88:82:b7:b6:30:c7:46:a9:cc: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:7F:30:33:DF:AA:FF:9D:2C:5B:B8:1D:29:55:D0:5B:64:F5:8A X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:29:e9:d6:bc:3b:70:bc:52:f8:57:3a:ed:29:a0:2e:20:c4: 09:28:6f:f9:36:21:d0:8c:f0:e1:ff:e0:ab:44:da:c5:fa:82: 6d:e1:35:66:71:82:d4:1b:13:6a:15:28:da:41:31:51:f6:58: 16:1b:11:ee:b6:1f:c0:9a:ee:28:b8:5b:9e:ec:2b:44:b1:44: 98:19:c8:ae:1a:79:8c:4b:57:c0:b2:27:52:9d:47:23:43:01: f3:e4:1f:e0:7c:cf:59:fa:85:9f:ef:79:fd:9f:64:3e:2e:32: 96:a1:c1:3e:7b:9e:51:a0:09:60:d0:85:b5:91:fd:73:7d:52: cc:fb:55:e8:45:10:d6:f9:74:1a:08:fa:fc:35:c9:e2:c5:6f: 76:ee:71:0a:db:93:c0:43:7d:db:7c:06:10:aa:ce:00:c4:b0: 07:44:30:20:75:75:aa:4e:5a:a0:66:09:50:d7:38:c2:b7:66: 27:86:15:63:2e:f3:e9:0a:21:ac:f4:a5:0b:08:fc:42:b3:16: cb:dd:0c:36:55:1f:e6:e6:5b:3e:e6:a5:fd:8b:c8:ad:67:05: 30:ed:49:9a:46:69:8c:1e:d2:50:1f:e9:cd:39:60:9b:a6:5c: 29:a0:0a:91:5d:02:51:10:7c:16:6f:3a:c8:df:20:53:c4:24: 0b:b2:5b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdzheAt0NvNGvT5OR6ZGY6VlmowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA5MTgwMjExMDlaFw0yNjA5MTkwNDA4MDlaMDMxMTAvBgNV BAMTKDlDMDQ3RjMwMzNERkFBRkY5RDJDNUJCODFEMjk1NUQwNUI2NEY1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvRyotBKkqIHybPlimonU/Q38 18YEu1nWq7n3JIjvy7XKH8I2j5oXf74EBG0KHsYPmQp2teOQHic5kwWRJ26Y6AJj rEWoWaKxPNGTFvTXh0X5wqtbqmaEJOhSAh+kkQYFDE8qbCwAlFUnMnqRPu+aOfxE KNyEFppstsOGgXOvp/DNXE4qrhYe9WyAxS2BQpwDFV3RCqqKfsntJ545GpdA12ff kx6MoyJmQ1zGpiqfLNqI937gyXQ9Un3J55e76EiiUVT025nxQPBFSWb/Mt9lVWNz udpayGB9nbmX2zNGfZnJhIp9Y9reP33TquA9aJGau8G714iCt7Ywx0apzFrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAR/MDPfqv+dLFu4HSlV0Ftk9YowHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwp6da8O3C8UvhXOu0poC4gxAkob/k2IdCM 8OH/4KtE2sX6gm3hNWZxgtQbE2oVKNpBMVH2WBYbEe62H8Ca7ii4W57sK0SxRJgZ yK4aeYxLV8CyJ1KdRyNDAfPkH+B8z1n6hZ/vef2fZD4uMpahwT57nlGgCWDQhbWR /XN9Usz7VehFENb5dBoI+vw1yeLFb3bucQrbk8BDfdt8BhCqzgDEsAdEMCB1dapO WqBmCVDXOMK3ZieGFWMu8+kKIaz0pQsI/EKzFsvdDDZVH+bmWz7mpf2LyK1nBTDt SZpGaYwe0lAf6c05YJumXCmgCpFdAlEQfBZvOsjfIFPEJAuyW+c= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:53 2026 by rpki-client