$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: DZCpipibkFyaXnVBNzLEdN0TQpHXhmxDbo9aVbb0cWI= Subject key identifier: E0:1D:CC:25:00:5D:DB:B5:F8:DE:B8:30:3F:3E:90:D3:FC:A5:B1:2C Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 4A2036969DE78265E4F5BCAF1C9852B4C487C8D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:16:43 +0000 Manifest this update: Wed 16 Sep 2026 18:11:43 +0000 Manifest next update: Thu 17 Sep 2026 20:14:43 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) 2: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: j/pmoOgZOCHKDXuSW52Q2tt3qa/Kh2S25HaMiz4vGpE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:20:36:96:9d:e7:82:65:e4:f5:bc:af:1c:98:52:b4:c4:87:c8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Sep 16 18:11:43 2026 GMT Not After : Sep 17 20:14:43 2026 GMT Subject: CN=E01DCC25005DDBB5F8DEB8303F3E90D3FCA5B12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:db:d4:51:b3:78:35:b0:06:b5:8e:ef:e8: ee:a6:85:f7:df:31:05:2c:8c:b5:34:ea:36:ff:80: ba:50:18:e9:38:29:d1:54:ec:67:4b:c9:f6:55:7a: 4f:7e:79:26:b0:6f:95:1a:d3:70:08:98:8d:93:ad: 9b:e8:f6:cf:41:01:28:7b:31:74:17:5c:fd:c8:2e: d0:27:83:ce:36:b3:79:5e:fb:5e:e3:d5:b3:38:1d: 9a:98:b2:c6:b0:5a:fd:08:69:8a:14:93:ee:a8:2a: 17:61:1e:e5:8f:80:ff:9f:fd:a8:e3:ee:ae:ad:c3: 90:33:1a:72:04:29:88:5e:ed:b4:44:44:5a:71:ee: 94:94:c8:da:7c:68:d0:a5:cb:2c:c3:2f:21:b1:52: 08:68:5b:6f:c1:20:f5:53:ef:a6:8a:06:15:d2:ca: 36:02:38:56:6d:a5:90:06:2a:43:8e:fa:7b:ba:1a: 22:c7:8c:08:ea:c9:8f:64:d2:07:36:a3:91:98:a1: eb:43:b3:35:d5:b8:ff:87:93:97:56:c1:4f:08:21: 13:d5:34:a8:dc:ee:10:00:2c:a3:97:16:cd:70:52: b4:49:f6:b9:fa:81:63:f2:84:07:e3:7a:c6:70:2f: 32:7d:37:f0:0d:d6:c0:dd:08:74:fe:ed:6c:26:d3: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:CC:25:00:5D:DB:B5:F8:DE:B8:30:3F:3E:90:D3:FC:A5:B1:2C X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:59:7b:df:ad:ad:80:2a:37:b9:ca:09:a2:7c:58:c1:6c:3b: 1e:7e:58:88:0e:1b:45:53:9a:1f:6e:f8:c6:9c:a9:e6:e4:0a: 87:09:3f:29:b5:8d:df:7d:f5:14:39:09:43:75:05:b7:7a:25: dc:77:38:a3:52:97:d3:6d:bc:40:54:68:56:c3:19:26:05:06: 2d:2f:82:64:22:92:58:21:bd:cc:bc:8a:68:29:02:ac:ae:0e: 8d:93:b6:79:b8:0f:c3:18:fc:ac:6a:e6:81:64:b7:42:94:68: d1:50:4a:b9:da:ed:d7:62:44:6b:67:13:17:00:2e:4a:55:c6: 58:70:bc:56:28:cb:9f:64:26:49:a0:50:7d:df:80:d6:70:88: 89:05:54:05:cd:77:0c:89:15:39:e1:58:ab:49:be:d7:65:45: 66:d8:f1:70:6b:57:e5:b8:49:7e:37:ce:61:8c:8b:ab:8d:9d: 34:39:29:df:49:11:82:92:c7:01:34:da:80:c7:33:4d:a9:0b: 24:2a:69:8f:c5:5c:df:9b:31:25:70:d9:d8:39:2d:fb:2a:2c: f6:60:3d:46:ab:32:7b:70:cf:54:ed:55:70:df:11:7c:42:45: 2a:ed:33:18:38:f6:e1:50:67:ea:1c:05:0d:e2:a9:e3:85:c3: c0:a6:24:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiA2lp3ngmXk9byvHJhStMSHyNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA5MTYxODExNDNaFw0yNjA5MTcyMDE0NDNaMDMxMTAvBgNV BAMTKEUwMURDQzI1MDA1RERCQjVGOERFQjgzMDNGM0U5MEQzRkNBNUIxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq19vUUbN4NbAGtY7v6O6mhfff MQUsjLU06jb/gLpQGOk4KdFU7GdLyfZVek9+eSawb5Ua03AImI2TrZvo9s9BASh7 MXQXXP3ILtAng842s3le+17j1bM4HZqYssawWv0IaYoUk+6oKhdhHuWPgP+f/ajj 7q6tw5AzGnIEKYhe7bRERFpx7pSUyNp8aNClyyzDLyGxUghoW2/BIPVT76aKBhXS yjYCOFZtpZAGKkOO+nu6GiLHjAjqyY9k0gc2o5GYoetDszXVuP+Hk5dWwU8IIRPV NKjc7hAALKOXFs1wUrRJ9rn6gWPyhAfjesZwLzJ9N/AN1sDdCHT+7Wwm0wRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4B3MJQBd27X43rgwPz6Q0/ylsSwwHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBZe9+trYAqN7nKCaJ8WMFsOx5+WIgOG0VT mh9u+MacqebkCocJPym1jd999RQ5CUN1Bbd6Jdx3OKNSl9NtvEBUaFbDGSYFBi0v gmQiklghvcy8imgpAqyuDo2Ttnm4D8MY/Kxq5oFkt0KUaNFQSrna7ddiRGtnExcA LkpVxlhwvFYoy59kJkmgUH3fgNZwiIkFVAXNdwyJFTnhWKtJvtdlRWbY8XBrV+W4 SX43zmGMi6uNnTQ5Kd9JEYKSxwE02oDHM02pCyQqaY/FXN+bMSVw2dg5LfsqLPZg PUarMntwz1TtVXDfEXxCRSrtMxg49uFQZ+ocBQ3iqeOFw8CmJJU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:24 2026 by rpki-client