$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: ndaLEyvqYYn6uKrZVYG6iTMGA+8yOMdsCfTWxd1BRhc= Subject key identifier: AC:89:60:0D:FF:85:7C:16:1B:0A:50:86:A0:F8:FF:0F:EC:F1:34:D4 Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 1301CA2D1979BC10154CC951DE8DB64400103BC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:38:13 +0000 Manifest this update: Wed 16 Sep 2026 23:33:13 +0000 Manifest next update: Fri 18 Sep 2026 03:37:13 +0000 Files and hashes: 1: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: vjEl8JqkrmtLXEK4Qbj/szlQmDnt33qsGR6AyUwmuf0=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:01:ca:2d:19:79:bc:10:15:4c:c9:51:de:8d:b6:44:00:10:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Sep 16 23:33:13 2026 GMT Not After : Sep 18 03:37:13 2026 GMT Subject: CN=AC89600DFF857C161B0A5086A0F8FF0FECF134D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:38:0e:15:c3:2a:94:6f:97:60:20:66:f1: 3a:e2:c5:b0:2e:a8:43:e8:72:d5:32:52:f0:6f:99: 15:82:20:67:0d:4c:be:80:25:9f:c9:ba:17:49:39: a1:b9:bd:2e:71:c7:f5:d6:21:6c:cb:49:40:10:7e: 32:53:77:e9:45:c8:2d:a1:bb:8b:57:2b:f5:a3:af: 0d:4a:4d:60:93:eb:f3:8e:63:29:3f:57:9d:d1:e0: 5b:7c:94:e3:6a:46:78:0d:23:af:05:2f:b6:93:ec: 05:6f:42:2f:24:85:d6:18:b6:fa:da:49:6f:58:a9: d0:10:4b:d8:57:7a:52:c6:ab:e5:3c:55:2c:9f:ad: d7:6c:6d:0e:a9:f9:53:58:97:8d:a8:62:89:9e:89: 0e:c7:2f:1a:c7:41:b9:47:f2:1a:b8:93:9b:d5:b4: e8:ac:04:45:2b:8d:57:e0:b3:2d:50:a6:b5:f3:81: a0:86:70:43:6d:ca:f1:19:3d:75:5e:d2:bb:be:5d: 69:67:7b:d1:93:7e:c0:b1:39:ab:bf:bd:fa:46:c1: 5b:71:c3:f4:b2:a5:26:d0:ff:01:ce:74:13:6c:76: d7:79:1a:77:cd:36:af:41:2c:47:81:5d:b2:8c:bc: 9e:59:69:a5:7c:39:35:b8:54:65:d1:af:be:be:87: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:89:60:0D:FF:85:7C:16:1B:0A:50:86:A0:F8:FF:0F:EC:F1:34:D4 X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cb:b2:ef:be:c4:ab:27:b8:ed:aa:e0:ec:05:a7:66:6e:cb: 24:25:25:76:38:22:f6:eb:c5:ca:e4:aa:c2:55:d0:73:a2:48: 1e:ef:13:10:f4:f3:ea:18:7a:19:4c:4c:df:56:0a:1c:f5:b6: e2:58:88:b2:1a:1a:20:dc:08:2e:ef:2e:14:bc:75:d4:38:a7: 4a:4d:88:c7:6b:8b:33:97:f8:b8:0a:1b:b7:53:27:c8:48:9c: 1a:9a:a6:2e:3c:f6:c5:08:77:d2:97:bf:99:8d:d0:31:80:49: 8f:18:62:9c:a0:5f:25:20:ca:ef:a7:8c:7e:8b:2f:ec:07:b2: 94:46:c1:dd:d2:6e:71:14:b2:c7:63:0d:b8:12:40:cc:68:8b: 5d:98:69:1d:dc:98:a8:03:a1:b7:ac:66:c5:ed:89:0a:23:68: 70:4d:c3:01:ac:ae:14:68:16:0f:f2:45:d3:32:ef:21:19:7d: 1c:6e:9d:03:69:2c:9c:2b:01:96:2d:33:bf:6d:93:49:7c:2e: bf:9e:bb:d8:c4:23:bf:57:70:f3:15:15:f5:33:e9:b3:f1:a0: 36:55:78:3c:77:29:6d:48:77:59:49:fd:47:08:5a:52:da:d1: d1:1a:c0:22:fa:94:ee:ec:84:c6:aa:e6:f6:91:d1:d9:f6:4b: c0:df:94:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwHKLRl5vBAVTMlR3o22RAAQO8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA5MTYyMzMzMTNaFw0yNjA5MTgwMzM3MTNaMDMxMTAvBgNV BAMTKEFDODk2MDBERkY4NTdDMTYxQjBBNTA4NkEwRjhGRjBGRUNGMTM0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruTgOFcMqlG+XYCBm8TrixbAu qEPoctUyUvBvmRWCIGcNTL6AJZ/JuhdJOaG5vS5xx/XWIWzLSUAQfjJTd+lFyC2h u4tXK/Wjrw1KTWCT6/OOYyk/V53R4Ft8lONqRngNI68FL7aT7AVvQi8khdYYtvra SW9YqdAQS9hXelLGq+U8VSyfrddsbQ6p+VNYl42oYomeiQ7HLxrHQblH8hq4k5vV tOisBEUrjVfgsy1QprXzgaCGcENtyvEZPXVe0ru+XWlne9GTfsCxOau/vfpGwVtx w/SypSbQ/wHOdBNsdtd5GnfNNq9BLEeBXbKMvJ5ZaaV8OTW4VGXRr76+h/V/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIlgDf+FfBYbClCGoPj/D+zxNNQwHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILLsu++xKsnuO2q4OwFp2ZuyyQlJXY4Ivbr xcrkqsJV0HOiSB7vExD08+oYehlMTN9WChz1tuJYiLIaGiDcCC7vLhS8ddQ4p0pN iMdrizOX+LgKG7dTJ8hInBqapi489sUId9KXv5mN0DGASY8YYpygXyUgyu+njH6L L+wHspRGwd3SbnEUssdjDbgSQMxoi12YaR3cmKgDobesZsXtiQojaHBNwwGsrhRo Fg/yRdMy7yEZfRxunQNpLJwrAZYtM79tk0l8Lr+eu9jEI79XcPMVFfUz6bPxoDZV eDx3KW1Id1lJ/UcIWlLa0dEawCL6lO7shMaq5vaR0dn2S8DflCc= -----END CERTIFICATE-----Generated at Thu Sep 17 13:55:11 2026 by rpki-client