$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft File: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft (raw, json) Hash identifier: G1x6pPZHif51zGheWSrp0sJpI9PcDGXXQr8l+nMMmvw= Subject key identifier: 8B:59:DD:36:9C:0D:04:25:13:80:DB:FB:56:8C:7D:E6:7A:C7:42:D1 Authority key identifier: F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA Certificate issuer: /CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA Certificate serial: 45A1A8D404892A46089EEAFE448ADD2437C9DF16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:30:16 +0000 Manifest this update: Thu 17 Sep 2026 05:25:16 +0000 Manifest next update: Fri 18 Sep 2026 07:52:16 +0000 Files and hashes: 1: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl (hash: Ha2AtR/9pJiNLlm+38ZCkO5cxVO4crRC94/P9dr1kqM=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: itZ+8oqZQEHdOx3DPzPsElXFujBFH/zjw2oYoQ+F7xc=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: P6O2GRvb5cY6yS3BwOz9xCf5V2VK8SPqxHthNi6b0ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a1:a8:d4:04:89:2a:46:08:9e:ea:fe:44:8a:dd:24:37:c9:df:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA Validity Not Before: Sep 17 05:25:16 2026 GMT Not After : Sep 18 07:52:16 2026 GMT Subject: CN=8B59DD369C0D04251380DBFB568C7DE67AC742D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:3c:f1:5e:01:12:a6:85:b1:8b:bd:b1:61: fc:ac:cf:9f:77:7d:08:5f:1c:4c:4e:fe:4b:02:d5: 5c:9d:8f:59:5a:ba:ee:97:9e:3c:d7:be:52:ef:7f: 85:69:38:47:0c:01:a4:1c:bf:89:3b:29:f2:bd:93: 85:77:e7:ec:c3:f2:35:d9:22:dc:29:b5:ab:34:be: e4:48:56:1d:2f:9a:08:c1:09:75:2a:c0:0c:74:79: 44:8f:d4:ef:ee:89:eb:96:f9:59:ad:bb:3a:24:bd: f5:d4:5b:9b:3b:f1:5e:8c:7b:cd:d3:9a:f7:af:bf: c0:af:89:fd:37:f5:bd:c2:4f:01:77:3e:ee:76:04: 0e:22:80:f8:a1:eb:cc:a7:e2:06:8f:86:bf:75:43: ca:05:1f:64:8d:e0:04:5b:ea:29:cb:c1:a3:91:0e: 62:e2:e3:18:28:11:c5:e9:55:fe:7c:02:04:0f:f0: 02:c0:54:bd:12:90:70:48:3c:f6:b6:7a:8d:77:36: 88:d8:8d:2b:24:db:e1:cc:7c:5c:4a:ad:28:db:01: 58:bc:44:8d:56:bc:5f:d6:39:ab:a1:18:05:eb:b8: 78:61:4e:68:ac:31:63:08:3c:fa:d7:02:f3:9f:46: 1b:04:55:45:2b:10:51:8b:f4:d0:2e:19:53:f6:f6: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:DD:36:9C:0D:04:25:13:80:DB:FB:56:8C:7D:E6:7A:C7:42:D1 X509v3 Authority Key Identifier: keyid:F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2c:da:c3:13:77:d8:30:32:a5:ec:a3:50:9a:e3:f4:6c:22: 75:ba:69:60:fd:a9:3e:22:d9:f6:49:7e:77:b9:93:0d:48:96: 12:e2:63:e0:cc:20:00:4b:f4:9f:56:55:46:ed:ac:4a:93:25: dc:cc:21:c0:b8:57:f0:5d:ad:46:54:f4:1f:2d:00:5a:4d:15: 3c:67:56:d9:d7:5b:20:58:c7:b4:c9:b0:d5:44:1b:5f:43:55: 4d:55:36:82:2b:75:87:38:06:df:f7:bb:0f:ab:80:c1:49:8c: 9a:4d:94:8d:56:f7:5b:3b:f2:3e:04:5a:98:a5:b1:be:43:a5: 0f:05:63:4d:e4:01:17:47:a5:90:d4:63:7e:02:12:11:44:f1: c8:02:9c:ba:e5:ce:56:d7:cb:ce:63:0c:77:43:61:23:c5:5f: c3:c1:f2:55:ab:6b:8b:c5:43:94:f6:f5:ba:eb:17:ee:17:24: 05:f3:e6:cc:0f:b0:ec:ea:11:7f:01:90:f6:5e:d8:30:58:10: 04:d2:cd:c6:fe:b7:1b:fa:45:33:a7:77:4e:65:45:10:8c:16: 45:c6:a4:d7:41:ff:22:d0:1f:36:e3:a5:b6:42:8d:34:be:09: 6a:98:8c:97:e4:41:db:eb:94:ee:17:81:59:a6:b4:21:20:5c: 8e:cd:50:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaGo1ASJKkYInur+RIrdJDfJ3xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGQzZDRTg0NTg4RjYxQ0Q3REQwNTUyREVBMzJFMUU1 NjU2MzZCQTAeFw0yNjA5MTcwNTI1MTZaFw0yNjA5MTgwNzUyMTZaMDMxMTAvBgNV BAMTKDhCNTlERDM2OUMwRDA0MjUxMzgwREJGQjU2OEM3REU2N0FDNzQyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMzzxXgESpoWxi72xYfysz593 fQhfHExO/ksC1Vydj1lauu6XnjzXvlLvf4VpOEcMAaQcv4k7KfK9k4V35+zD8jXZ Itwptas0vuRIVh0vmgjBCXUqwAx0eUSP1O/uieuW+VmtuzokvfXUW5s78V6Me83T mvevv8Cvif039b3CTwF3Pu52BA4igPih68yn4gaPhr91Q8oFH2SN4ARb6inLwaOR DmLi4xgoEcXpVf58AgQP8ALAVL0SkHBIPPa2eo13NojYjSsk2+HMfFxKrSjbAVi8 RI1WvF/WOauhGAXruHhhTmisMWMIPPrXAvOfRhsEVUUrEFGL9NAuGVP29kQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1ndNpwNBCUTgNv7Vox95nrHQtEwHwYDVR0j BBgwFoAU+fxs6EWI9hzX3QVS3qMuHlZWNrowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE2MmQxNWItMTAyYi00MzFmLWE1MzktMGE5MzJiMzEzNjZjLzAvRjlGQzZDRTg0 NTg4RjYxQ0Q3REQwNTUyREVBMzJFMUU1NjU2MzZCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUZDNkNFODQ1ODhGNjFDRDdERDA1NTJERUEzMkUxRTU2NTYz NkJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvRjlGQzZDRTg0NTg4RjYxQ0Q3REQwNTUyREVBMzJF MUU1NjU2MzZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8s2sMTd9gwMqXso1Ca4/RsInW6aWD9qT4i 2fZJfne5kw1IlhLiY+DMIABL9J9WVUbtrEqTJdzMIcC4V/BdrUZU9B8tAFpNFTxn VtnXWyBYx7TJsNVEG19DVU1VNoIrdYc4Bt/3uw+rgMFJjJpNlI1W91s78j4EWpil sb5DpQ8FY03kARdHpZDUY34CEhFE8cgCnLrlzlbXy85jDHdDYSPFX8PB8lWra4vF Q5T29brrF+4XJAXz5swPsOzqEX8BkPZe2DBYEATSzcb+txv6RTOnd05lRRCMFkXG pNdB/yLQHzbjpbZCjTS+CWqYjJfkQdvrlO4XgVmmtCEgXI7NUHE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:35 2026 by rpki-client