$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: +czHcHxl8MGAKppv6aodPjRx4tJd/M3MStL7S8WjFhI= Subject key identifier: 3A:1E:87:9B:6F:B2:42:E1:23:C3:42:8A:7D:BA:12:E5:2C:AB:D3:28 Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 1DC99D2899C3EFE4CE43D739EEDAF86940299817 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:32:53 +0000 Manifest this update: Thu 17 Sep 2026 03:27:53 +0000 Manifest next update: Fri 18 Sep 2026 06:17:53 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 2: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) 3: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) 4: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: PCEO2Lv9DUlHk0I3sCFIAN+Iv7906uK/EV44NuBz1Go=) 5: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c9:9d:28:99:c3:ef:e4:ce:43:d7:39:ee:da:f8:69:40:29:98:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Sep 17 03:27:53 2026 GMT Not After : Sep 18 06:17:53 2026 GMT Subject: CN=3A1E879B6FB242E123C3428A7DBA12E52CABD328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:a5:3e:db:ad:12:de:3a:c0:04:b5:42:91: 85:7d:54:5e:35:66:b1:79:22:a3:dc:52:10:a3:ba: 47:e7:6b:5d:7a:43:23:7d:b8:9b:f4:5a:82:dd:e4: c3:8a:eb:fb:9b:14:0e:3a:95:c0:a5:9d:02:ed:aa: 77:62:27:55:e1:b8:5e:bc:2e:5e:0b:38:68:84:d6: d0:7d:a0:f9:df:a6:d4:3e:be:4e:0f:c9:22:c3:12: ef:78:f5:3b:bc:b2:49:c0:28:fb:4f:3e:b7:8c:6a: 23:e7:02:f1:50:13:85:c9:ed:04:7b:49:37:3f:a1: 26:e4:f0:9b:7f:8c:05:80:34:58:7a:f2:6f:15:96: 66:4c:61:84:1b:2d:f9:b5:3c:ba:08:00:f6:e3:ff: 38:14:4d:d0:3d:5f:28:06:82:e8:06:21:8c:93:39: 70:33:12:21:c9:a4:87:b8:00:79:98:03:bc:72:5e: 94:73:47:99:5c:4d:b4:d9:e2:3d:60:57:f7:e3:e8: 00:dc:23:f7:4a:0d:f0:60:b5:7a:06:30:43:c2:ea: 93:b5:66:e7:01:25:3c:d1:63:a0:83:67:ae:32:e9: 26:62:b5:1d:67:5d:97:91:45:dd:ba:a4:ee:ba:6b: 45:5a:b6:6c:80:78:dd:1b:bb:8b:a4:f9:e9:4d:cf: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:87:9B:6F:B2:42:E1:23:C3:42:8A:7D:BA:12:E5:2C:AB:D3:28 X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:fe:51:22:5f:e1:84:93:e2:77:9b:34:a2:15:00:25:c4:32: a6:1c:16:b7:e2:bf:5a:57:9d:de:0a:b2:32:1d:ec:bc:e1:9c: 1c:fd:aa:bf:e7:c0:95:b4:25:48:34:20:28:d2:87:8d:d4:58: 6e:7f:29:8d:e3:b5:6d:7c:0e:d6:f1:bd:2d:6c:1e:15:fb:91: e7:b8:c9:18:ff:7b:07:4f:59:8f:2c:a7:2e:35:d0:c2:08:be: 42:7c:c3:e2:9d:f3:2e:7d:ac:3f:dc:83:d5:14:51:33:75:01: 2c:d9:b9:ce:12:90:c4:8f:c3:bc:db:e2:88:d5:e0:39:30:a0: 1a:24:61:25:eb:5f:39:a3:ea:f4:ee:0e:a3:c3:9a:ad:f3:b1: e3:fb:ea:5d:27:a2:12:a3:10:a3:f3:1e:bd:a0:20:d6:8b:d8: 69:f4:23:54:04:79:d9:29:51:7b:7f:5c:e0:a3:ff:3b:6f:21: 4e:0b:9c:b8:f4:3b:25:e5:42:52:49:a1:c5:b1:50:3f:4f:6a: b6:42:3e:de:d6:24:97:a4:31:9b:2a:3c:bb:ec:bd:51:c6:7e: f9:fb:04:b2:84:e9:12:8e:a4:b9:a0:b8:b9:24:a2:f7:cb:b8: 95:0c:93:ee:48:7a:af:1b:dc:56:fe:1c:d7:fd:26:57:ff:5b: ea:23:ac:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcmdKJnD7+TOQ9c57tr4aUApmBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA5MTcwMzI3NTNaFw0yNjA5MTgwNjE3NTNaMDMxMTAvBgNV BAMTKDNBMUU4NzlCNkZCMjQyRTEyM0MzNDI4QTdEQkExMkU1MkNBQkQzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmKU+260S3jrABLVCkYV9VF41 ZrF5IqPcUhCjukfna116QyN9uJv0WoLd5MOK6/ubFA46lcClnQLtqndiJ1XhuF68 Ll4LOGiE1tB9oPnfptQ+vk4PySLDEu949Tu8sknAKPtPPreMaiPnAvFQE4XJ7QR7 STc/oSbk8Jt/jAWANFh68m8VlmZMYYQbLfm1PLoIAPbj/zgUTdA9XygGgugGIYyT OXAzEiHJpIe4AHmYA7xyXpRzR5lcTbTZ4j1gV/fj6ADcI/dKDfBgtXoGMEPC6pO1 ZucBJTzRY6CDZ64y6SZitR1nXZeRRd26pO66a0VatmyAeN0bu4uk+elNz41bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOh6Hm2+yQuEjw0KKfboS5Syr0ygwHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf+USJf4YST4nebNKIVACXEMqYcFrfiv1pX nd4KsjId7LzhnBz9qr/nwJW0JUg0ICjSh43UWG5/KY3jtW18DtbxvS1sHhX7kee4 yRj/ewdPWY8spy410MIIvkJ8w+Kd8y59rD/cg9UUUTN1ASzZuc4SkMSPw7zb4ojV 4DkwoBokYSXrXzmj6vTuDqPDmq3zseP76l0nohKjEKPzHr2gINaL2Gn0I1QEedkp UXt/XOCj/ztvIU4LnLj0OyXlQlJJocWxUD9ParZCPt7WJJekMZsqPLvsvVHGfvn7 BLKE6RKOpLmguLkkovfLuJUMk+5Ieq8b3Fb+HNf9Jlf/W+ojrCU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:08 2026 by rpki-client