$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: +EGikW5wVHaQf1W3y3cJOXvULOLeyv4A/Z3eZKDx2WY= Subject key identifier: CA:8D:E4:88:A4:E5:61:4B:10:5E:27:0D:AE:8C:D0:40:50:39:D3:F0 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 76590E33D046B6459079D66B25AD5D1F8A0BB99D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 20:49:43 +0000 Manifest this update: Wed 16 Sep 2026 20:44:43 +0000 Manifest next update: Fri 18 Sep 2026 00:28:43 +0000 Files and hashes: 1: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) 2: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: /+a5UmQKlU2dyw7CL2o0S6xM3XH3wihoyDrNuw0hiuk=) 3: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 4: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:59:0e:33:d0:46:b6:45:90:79:d6:6b:25:ad:5d:1f:8a:0b:b9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Sep 16 20:44:43 2026 GMT Not After : Sep 18 00:28:43 2026 GMT Subject: CN=CA8DE488A4E5614B105E270DAE8CD0405039D3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:d8:d6:5e:0c:90:f2:77:4e:09:c1:93:b1: 17:ce:24:2d:3b:20:0e:50:9d:61:70:34:02:df:7e: 7f:90:f7:d4:eb:24:c3:92:ba:08:22:6b:a3:ce:d5: dd:70:30:29:66:d0:ee:60:a8:7f:63:66:f6:fb:41: d8:4c:ce:14:8c:6d:26:9a:d8:86:65:20:af:fa:4e: 49:41:f9:bf:0c:91:f6:d1:50:ef:92:ed:55:62:16: e5:e1:4c:26:c1:e7:65:38:be:a8:a5:d2:5a:52:fa: 78:58:6b:3a:4e:a8:56:68:58:80:bd:0f:d9:c8:d0: 5f:8d:bd:3c:ca:e9:28:4a:23:68:ac:97:bd:5b:94: 13:f2:76:c7:9e:17:25:16:dd:20:e0:1a:c7:b8:47: d0:4e:e9:82:25:bf:f5:26:61:d3:23:23:1a:1d:10: 27:64:e2:dc:fe:4a:ad:0c:b5:23:9b:6e:fb:b9:45: f7:79:89:df:80:38:c4:bf:80:8f:82:7b:2d:ce:ed: 7b:83:2e:ba:23:30:15:2a:f9:92:f6:73:a1:58:b9: b0:ed:3e:ec:ee:57:66:56:f5:a1:f2:8b:da:38:d3: ba:91:d6:ac:e5:eb:ed:a6:b7:bb:24:56:fa:ed:34: ae:6d:03:8b:a5:4c:ad:0b:36:47:7a:38:fd:83:27: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:E4:88:A4:E5:61:4B:10:5E:27:0D:AE:8C:D0:40:50:39:D3:F0 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:97:96:07:47:66:d1:e6:bd:8e:12:0b:24:c0:a0:9f:2a:1e: 72:54:31:b2:c3:f2:e4:2a:be:a0:31:37:ec:4e:61:e6:a5:31: cb:58:a8:e0:30:18:a4:bf:5c:8a:bf:54:87:43:a4:b9:46:a4: d2:ed:6f:4e:ec:4c:90:ed:78:37:62:29:ed:f4:f3:3b:53:3d: e3:19:e8:bd:a8:88:c1:64:6f:21:c0:bb:46:73:4b:51:e2:e3: 5a:c6:c0:2e:dd:d1:42:90:24:23:e8:34:4a:ab:c5:c1:dc:77: 77:9e:90:ac:21:11:41:ef:56:09:4e:2e:5d:86:5a:86:8e:0a: 98:62:cc:67:b3:45:c8:1c:4a:e5:c7:6d:db:f2:ca:aa:73:29: fc:d1:e9:d9:a7:04:70:21:77:fd:d1:84:38:f1:9c:b7:c4:88: b2:9c:e5:88:5a:9f:8a:90:b2:1a:cb:4d:2c:57:74:f2:3c:ea: b3:a2:ca:1e:ef:76:79:ca:6b:5a:83:dc:e2:87:96:f4:f9:aa: 4a:aa:a7:bb:82:05:17:aa:5e:30:39:d1:31:c3:75:72:8d:46: f2:78:43:8c:0c:26:23:3c:22:1f:2d:26:40:7c:b5:71:3a:ad: 54:aa:c1:8c:f3:97:8f:d8:a8:2d:f4:1a:13:78:c0:73:ca:f3: a6:8c:20:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlkOM9BGtkWQedZrJa1dH4oLuZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA5MTYyMDQ0NDNaFw0yNjA5MTgwMDI4NDNaMDMxMTAvBgNV BAMTKENBOERFNDg4QTRFNTYxNEIxMDVFMjcwREFFOENEMDQwNTAzOUQzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqdjWXgyQ8ndOCcGTsRfOJC07 IA5QnWFwNALffn+Q99TrJMOSuggia6PO1d1wMClm0O5gqH9jZvb7QdhMzhSMbSaa 2IZlIK/6TklB+b8MkfbRUO+S7VViFuXhTCbB52U4vqil0lpS+nhYazpOqFZoWIC9 D9nI0F+NvTzK6ShKI2isl71blBPydseeFyUW3SDgGse4R9BO6YIlv/UmYdMjIxod ECdk4tz+Sq0MtSObbvu5Rfd5id+AOMS/gI+Cey3O7XuDLrojMBUq+ZL2c6FYubDt PuzuV2ZW9aHyi9o407qR1qzl6+2mt7skVvrtNK5tA4ulTK0LNkd6OP2DJ7eDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyo3kiKTlYUsQXicNrozQQFA50/AwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeXlgdHZtHmvY4SCyTAoJ8qHnJUMbLD8uQq vqAxN+xOYealMctYqOAwGKS/XIq/VIdDpLlGpNLtb07sTJDteDdiKe308ztTPeMZ 6L2oiMFkbyHAu0ZzS1Hi41rGwC7d0UKQJCPoNEqrxcHcd3eekKwhEUHvVglOLl2G WoaOCphizGezRcgcSuXHbdvyyqpzKfzR6dmnBHAhd/3RhDjxnLfEiLKc5Yhan4qQ shrLTSxXdPI86rOiyh7vdnnKa1qD3OKHlvT5qkqqp7uCBReqXjA50THDdXKNRvJ4 Q4wMJiM8Ih8tJkB8tXE6rVSqwYzzl4/YqC30GhN4wHPK86aMIEM= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:25 2026 by rpki-client