$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: F2Y4X0M64levRsLzYX1xP0fWsvFQzf4pbslkcdkjghY= Subject key identifier: A2:41:26:AA:F6:46:4B:DB:35:9C:38:EA:A6:B2:39:62:79:65:7F:6D Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 7E8C690822B29B76343ECA17AA62916778C5C6A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:17:40 +0000 Manifest this update: Wed 16 Sep 2026 23:12:40 +0000 Manifest next update: Fri 18 Sep 2026 02:11:40 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 2: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: uRNk6N1jwxRgosUycWbhnju+xsjfbzrlHcNAS8C54kM=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:69:08:22:b2:9b:76:34:3e:ca:17:aa:62:91:67:78:c5:c6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Sep 16 23:12:40 2026 GMT Not After : Sep 18 02:11:40 2026 GMT Subject: CN=A24126AAF6464BDB359C38EAA6B2396279657F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:48:6f:c8:4e:ae:ad:b7:fe:34:1f:af:07: e7:37:68:fc:78:1f:a8:93:90:d2:24:93:99:41:25: 51:ce:42:69:d5:1d:19:41:98:a1:72:f2:32:1a:1a: b9:8d:06:d5:f4:38:ce:ae:d8:dd:e4:fa:5b:e0:b3: 54:dc:ce:53:f9:05:79:a7:1e:55:d8:0c:64:23:04: 3c:95:0b:de:e1:c0:fa:7e:b7:e2:17:9b:23:dc:45: c2:11:c8:90:a2:d6:82:d7:78:e9:cb:a2:d3:54:70: 19:04:ef:0d:ac:75:66:dc:c4:17:f1:63:6a:50:24: 1e:16:10:13:6a:d0:56:c9:f0:b7:6d:b0:df:00:24: 05:81:60:bd:fa:dc:c7:08:6e:19:9a:9f:64:ac:94: d9:2b:9f:c7:85:fe:d5:99:ff:06:18:11:9a:83:5f: d1:f1:ab:aa:62:fb:a3:fd:30:b9:a1:48:73:d3:fa: f5:77:b4:44:81:19:24:fe:f9:55:b5:fd:f2:c4:bc: 54:86:49:35:26:95:6d:18:67:4f:84:04:45:20:c0: 63:d8:f7:22:b1:f0:e0:7a:d0:66:61:9a:f6:37:6e: 4c:85:f1:d4:76:4d:ee:83:3d:b6:33:5b:34:18:b0: 88:91:9e:a2:1c:87:dd:c5:04:dd:55:b1:5e:b1:65: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:41:26:AA:F6:46:4B:DB:35:9C:38:EA:A6:B2:39:62:79:65:7F:6D X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e6:cd:f9:64:d1:b5:c2:2a:b0:fa:a2:08:79:05:b3:94:0c: 6b:c8:57:3e:98:25:b4:fe:d2:77:54:44:3d:2a:ae:03:7e:52: 08:47:c1:d7:c8:0d:04:71:56:3c:d2:82:89:82:9a:42:98:2b: 6d:24:9b:46:aa:fc:07:e3:63:e9:a1:3f:80:b3:76:49:31:c4: f9:22:ab:20:80:1c:26:59:c0:09:d5:e5:06:e4:7f:50:88:07: 32:45:7f:fe:5d:55:5f:f0:28:f2:fa:c6:a6:32:e2:cf:45:d0: 76:01:82:fc:18:e4:87:e9:e1:7a:d1:ba:bb:97:6f:bb:92:c0: 20:7c:c6:b2:c6:b4:8f:05:44:94:a6:5f:53:30:40:62:96:76: 4f:1c:2a:da:03:83:96:0a:85:4b:0b:a3:90:ca:ce:90:22:2a: 8e:d7:69:2b:35:2d:86:8f:5c:a4:43:99:37:a7:c5:78:d8:95: 95:61:41:ae:5e:65:42:6c:2d:b9:83:2a:95:c2:ec:1b:9b:72: 53:23:e8:ad:64:2f:90:94:c9:da:98:61:ec:67:34:96:0c:09: cd:e1:95:91:2d:ad:27:45:9a:a6:cd:d4:8a:56:3c:bc:58:bd: 15:d4:63:c8:9a:37:19:81:18:d6:3d:f1:7d:66:aa:e4:3d:7c: 1b:51:21:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoxpCCKym3Y0PsoXqmKRZ3jFxqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA5MTYyMzEyNDBaFw0yNjA5MTgwMjExNDBaMDMxMTAvBgNV BAMTKEEyNDEyNkFBRjY0NjRCREIzNTlDMzhFQUE2QjIzOTYyNzk2NTdGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnkhvyE6urbf+NB+vB+c3aPx4 H6iTkNIkk5lBJVHOQmnVHRlBmKFy8jIaGrmNBtX0OM6u2N3k+lvgs1TczlP5BXmn HlXYDGQjBDyVC97hwPp+t+IXmyPcRcIRyJCi1oLXeOnLotNUcBkE7w2sdWbcxBfx Y2pQJB4WEBNq0FbJ8LdtsN8AJAWBYL363McIbhman2SslNkrn8eF/tWZ/wYYEZqD X9Hxq6pi+6P9MLmhSHPT+vV3tESBGST++VW1/fLEvFSGSTUmlW0YZ0+EBEUgwGPY 9yKx8OB60GZhmvY3bkyF8dR2Te6DPbYzWzQYsIiRnqIch93FBN1VsV6xZcazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokEmqvZGS9s1nDjqprI5Ynllf20wHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLmzflk0bXCKrD6ogh5BbOUDGvIVz6YJbT+ 0ndURD0qrgN+UghHwdfIDQRxVjzSgomCmkKYK20km0aq/AfjY+mhP4CzdkkxxPki qyCAHCZZwAnV5Qbkf1CIBzJFf/5dVV/wKPL6xqYy4s9F0HYBgvwY5Ifp4XrRuruX b7uSwCB8xrLGtI8FRJSmX1MwQGKWdk8cKtoDg5YKhUsLo5DKzpAiKo7XaSs1LYaP XKRDmTenxXjYlZVhQa5eZUJsLbmDKpXC7BubclMj6K1kL5CUydqYYexnNJYMCc3h lZEtrSdFmqbN1IpWPLxYvRXUY8iaNxmBGNY98X1mquQ9fBtRIbQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:52 2026 by rpki-client