$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: jXYZd2y023MY/0mX38ZWD+8qrMrgceyEgIBSXxEmSH4= Subject key identifier: FF:F5:D9:18:B4:A2:C5:7A:86:65:AC:26:3B:D1:E3:1D:D0:73:47:29 Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 0B53E213BC83D268427DC534FA5EB1E6A6E23DAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:25:05 +0000 Manifest this update: Thu 17 Sep 2026 05:20:05 +0000 Manifest next update: Fri 18 Sep 2026 08:32:05 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: hgUWDBYwfuq5bw5iO+bXsAsCIkTyXgI0Z5qbDU75Bm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:53:e2:13:bc:83:d2:68:42:7d:c5:34:fa:5e:b1:e6:a6:e2:3d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: Sep 17 05:20:05 2026 GMT Not After : Sep 18 08:32:05 2026 GMT Subject: CN=FFF5D918B4A2C57A8665AC263BD1E31DD0734729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:db:d7:a4:4b:79:ee:34:95:04:f8:80:10: 37:c0:a9:28:78:52:c2:fc:68:c8:21:96:10:8d:e8: 10:61:dc:8b:44:ca:de:e7:d8:62:20:e6:8b:be:97: d9:b5:05:8f:67:a5:d7:17:72:b9:38:a8:1c:ee:66: 5a:df:47:d0:d6:c3:c1:74:a5:5a:dd:d0:83:03:2f: 61:00:c7:dc:f6:3f:6b:17:d2:50:88:fe:d0:4a:83: cb:16:68:63:99:8f:c7:f3:e9:09:f6:f1:63:ed:1f: 70:0f:f4:51:99:6f:66:0d:cc:55:88:3b:1e:1c:c7: ac:94:8a:76:43:f0:84:f3:4d:14:3f:7f:a3:fd:98: 42:c5:59:81:34:24:fc:40:91:d6:23:e8:6b:88:9b: 2d:78:ed:3c:a5:3c:da:23:eb:54:38:c1:be:9c:33: 3f:4f:e3:3c:5f:14:51:68:76:01:c0:91:cc:3b:79: d8:45:4f:78:17:0f:d3:da:59:12:48:50:75:16:70: ea:84:cc:d8:ed:28:0e:bb:5d:01:f5:d6:bb:4a:96: 63:3a:14:e2:e4:bc:88:d9:5a:cc:9e:6d:1a:fc:8b: f2:02:cf:93:eb:15:1a:02:6b:76:1b:36:cf:9d:b9: bc:79:50:ec:b3:58:15:76:be:d5:55:fe:2b:ce:af: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F5:D9:18:B4:A2:C5:7A:86:65:AC:26:3B:D1:E3:1D:D0:73:47:29 X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:35:ac:47:63:35:b5:ea:00:71:6f:cb:9d:a4:ad:0d:bd:00: 52:7c:84:89:ec:ec:f6:90:8f:45:40:e7:bf:e6:55:a3:13:e1: f9:7e:0c:b6:d1:af:26:ba:ab:0a:b7:d5:a0:82:ba:55:9b:7b: a3:ee:83:05:05:de:89:9c:41:6b:5b:f9:4d:26:f4:57:69:d4: 96:16:d3:38:72:ac:ce:ab:33:1b:d8:25:c0:05:a2:64:99:0b: a4:b6:97:d3:10:53:ac:cf:ba:bd:25:98:8a:73:06:18:a0:1c: 37:12:a4:53:4d:bf:6a:0b:37:94:69:b3:f9:39:66:c9:d5:05: 46:83:a9:d9:bc:b9:fd:60:78:c1:34:31:dd:6e:aa:5f:8d:c8: 54:80:b7:13:0f:a8:c2:c3:ea:f2:02:cf:83:b7:09:4a:8e:3e: 9a:9a:f0:fb:e3:ef:f8:e0:b7:ed:33:ff:43:a8:28:d2:51:4a: 0e:8f:71:50:69:c9:ae:c4:12:38:5d:ba:0c:3c:8a:66:4c:1d: 73:7d:a9:1d:5e:1f:38:1d:bd:ee:0f:2f:71:8c:af:7c:f0:b2: 6f:ea:70:52:47:a4:87:51:5b:86:38:91:f6:0b:bb:3d:d0:3e: d4:2b:8f:9f:2d:de:98:b2:a9:5a:7c:4b:ab:dc:a9:b0:0c:08: a5:40:0a:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1PiE7yD0mhCfcU0+l6x5qbiPa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA5MTcwNTIwMDVaFw0yNjA5MTgwODMyMDVaMDMxMTAvBgNV BAMTKEZGRjVEOTE4QjRBMkM1N0E4NjY1QUMyNjNCRDFFMzFERDA3MzQ3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmadvXpEt57jSVBPiAEDfAqSh4 UsL8aMghlhCN6BBh3ItEyt7n2GIg5ou+l9m1BY9npdcXcrk4qBzuZlrfR9DWw8F0 pVrd0IMDL2EAx9z2P2sX0lCI/tBKg8sWaGOZj8fz6Qn28WPtH3AP9FGZb2YNzFWI Ox4cx6yUinZD8ITzTRQ/f6P9mELFWYE0JPxAkdYj6GuImy147TylPNoj61Q4wb6c Mz9P4zxfFFFodgHAkcw7edhFT3gXD9PaWRJIUHUWcOqEzNjtKA67XQH11rtKlmM6 FOLkvIjZWsyebRr8i/ICz5PrFRoCa3YbNs+dubx5UOyzWBV2vtVV/ivOr6rlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//XZGLSixXqGZawmO9HjHdBzRykwHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc1rEdjNbXqAHFvy52krQ29AFJ8hIns7PaQ j0VA57/mVaMT4fl+DLbRrya6qwq31aCCulWbe6PugwUF3omcQWtb+U0m9Fdp1JYW 0zhyrM6rMxvYJcAFomSZC6S2l9MQU6zPur0lmIpzBhigHDcSpFNNv2oLN5Rps/k5 ZsnVBUaDqdm8uf1geME0Md1uql+NyFSAtxMPqMLD6vICz4O3CUqOPpqa8Pvj7/jg t+0z/0OoKNJRSg6PcVBpya7EEjhdugw8imZMHXN9qR1eHzgdve4PL3GMr3zwsm/q cFJHpIdRW4Y4kfYLuz3QPtQrj58t3piyqVp8S6vcqbAMCKVACkc= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:44 2026 by rpki-client