$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: tb8Jr6JMLZm9Weq+nZl1wUUJgOKoeOQ2AxRSGppopZI= Subject key identifier: 28:07:8E:F4:A2:9D:1B:52:E8:A4:3C:C8:06:EE:71:DB:B7:1E:85:9C Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 6806CD7FDBE9D196CD648EF939E6FCE49DA2552B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: BA Signing time: Fri 18 Sep 2026 01:24:58 +0000 Manifest this update: Fri 18 Sep 2026 01:19:58 +0000 Manifest next update: Sat 19 Sep 2026 04:52:58 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: t6HDprV7b4efAu/jSuCMCEZh59coDIbrDv1uzrXLbc0=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 04:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:06:cd:7f:db:e9:d1:96:cd:64:8e:f9:39:e6:fc:e4:9d:a2:55:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Sep 18 01:19:58 2026 GMT Not After : Sep 19 04:52:58 2026 GMT Subject: CN=28078EF4A29D1B52E8A43CC806EE71DBB71E859C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:8c:36:f2:41:bd:b7:30:f7:9a:1c:6d:81: 8c:e6:c6:d9:f0:2c:cf:fe:fe:c0:82:de:e2:ff:d6: 3f:40:12:d6:15:96:c6:82:c6:79:2c:cb:a3:7d:14: 9b:f9:95:a7:71:28:39:07:93:bf:1f:87:26:9f:30: 59:c9:6f:41:3a:df:fd:90:b4:9f:66:15:ad:24:4c: 9f:51:99:14:e3:4a:6c:92:af:77:52:8c:74:85:05: 36:99:90:7c:9f:7c:f0:4e:fa:35:4d:77:2a:ed:56: 16:fb:67:bb:b6:d6:49:ef:30:88:b9:67:4b:25:1c: 7b:df:57:ac:28:31:4a:ab:81:1b:71:8d:34:3d:61: ac:ad:ef:7f:05:7d:2e:a0:f1:be:54:cc:19:2a:aa: 13:60:88:7c:8d:38:46:26:be:a7:53:e4:d0:68:ed: db:f2:03:d3:12:a1:0e:b6:1e:69:c2:1b:79:0c:6e: 94:a4:96:d8:a5:6d:89:4a:74:e6:72:33:2d:5d:a5: 3d:49:0b:5b:08:27:98:7a:d2:1b:ff:12:93:35:5c: a6:a6:14:f7:4d:ad:04:8a:1d:b1:80:cd:cb:ea:c0: 50:fb:19:77:d9:07:80:72:ab:62:e7:61:e3:20:b2: 2f:8b:19:61:1f:a0:c4:8e:68:c1:0b:9f:9f:47:99: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:8E:F4:A2:9D:1B:52:E8:A4:3C:C8:06:EE:71:DB:B7:1E:85:9C X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:42:02:6b:a3:f3:f5:b1:d0:35:af:c8:a7:73:73:3d:0a:a0: e1:24:b5:cd:54:ec:dd:38:ff:e3:6b:49:ec:dc:80:26:98:d8: 5e:e5:99:4b:4b:86:c5:0c:10:2f:dd:70:0d:52:5a:26:88:46: 98:98:83:22:80:b8:bf:b7:37:36:97:9e:ad:c6:65:51:a7:d1: 2d:0b:19:b5:28:80:4e:e5:98:17:37:90:f4:86:b8:c8:1d:a1: cd:79:a3:a7:9e:03:76:93:dd:22:68:9e:37:80:ff:e7:0d:36: 96:18:3c:21:15:a1:b0:11:41:3c:47:fa:0f:35:bf:aa:48:32: 01:59:ad:5e:a3:fb:df:22:22:0d:5a:90:7d:c9:af:a2:86:e3: f2:78:b7:11:c2:62:9c:f1:21:39:b4:5c:f2:83:e1:4a:57:e9: 61:9f:29:6c:d6:eb:eb:1b:b7:c6:5f:3e:82:e5:1a:28:ce:89: 8e:8e:81:08:5f:76:a0:f6:77:ff:15:9e:7e:b4:d3:02:ee:78: 34:f1:42:d5:7f:90:d0:fa:f2:f5:fd:ca:c6:06:72:31:de:79: c4:33:27:32:46:9d:c1:5d:90:f9:53:0a:f1:6a:c9:19:c8:fe: 4c:16:9d:4c:a1:52:98:ef:8e:86:f7:d8:1c:73:b1:59:2f:b9: 22:31:d3:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAbNf9vp0ZbNZI75Oeb85J2iVSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA5MTgwMTE5NThaFw0yNjA5MTkwNDUyNThaMDMxMTAvBgNV BAMTKDI4MDc4RUY0QTI5RDFCNTJFOEE0M0NDODA2RUU3MURCQjcxRTg1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhow28kG9tzD3mhxtgYzmxtnw LM/+/sCC3uL/1j9AEtYVlsaCxnksy6N9FJv5ladxKDkHk78fhyafMFnJb0E63/2Q tJ9mFa0kTJ9RmRTjSmySr3dSjHSFBTaZkHyffPBO+jVNdyrtVhb7Z7u21knvMIi5 Z0slHHvfV6woMUqrgRtxjTQ9Yayt738FfS6g8b5UzBkqqhNgiHyNOEYmvqdT5NBo 7dvyA9MSoQ62HmnCG3kMbpSkltilbYlKdOZyMy1dpT1JC1sIJ5h60hv/EpM1XKam FPdNrQSKHbGAzcvqwFD7GXfZB4Byq2LnYeMgsi+LGWEfoMSOaMELn59HmS/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAeO9KKdG1LopDzIBu5x27cehZwwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVCAmuj8/Wx0DWvyKdzcz0KoOEktc1U7N04 /+NrSezcgCaY2F7lmUtLhsUMEC/dcA1SWiaIRpiYgyKAuL+3NzaXnq3GZVGn0S0L GbUogE7lmBc3kPSGuMgdoc15o6eeA3aT3SJonjeA/+cNNpYYPCEVobARQTxH+g81 v6pIMgFZrV6j+98iIg1akH3Jr6KG4/J4txHCYpzxITm0XPKD4UpX6WGfKWzW6+sb t8ZfPoLlGijOiY6OgQhfdqD2d/8Vnn600wLueDTxQtV/kND68vX9ysYGcjHeecQz JzJGncFdkPlTCvFqyRnI/kwWnUyhUpjvjob32BxzsVkvuSIx0+Y= -----END CERTIFICATE-----Generated at Fri Sep 18 15:09:49 2026 by rpki-client