$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft File: F03310D1D60B7C8D4880FEE5263129029C23044D.mft (raw, json) Hash identifier: +ayCT+XqWTja81ClXzZ67y8lopF4IfMwjWOfjKkmSLc= Subject key identifier: D1:A0:86:33:C3:CC:5B:27:3A:25:EE:8F:D9:68:F2:BE:62:1E:64:7E Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D Certificate issuer: /CN=F03310D1D60B7C8D4880FEE5263129029C23044D Certificate serial: 28DDF66A6A30EFEE549CE8824A0D90F0D6350EAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:52:30 +0000 Manifest this update: Wed 16 Sep 2026 18:47:30 +0000 Manifest next update: Thu 17 Sep 2026 19:00:30 +0000 Files and hashes: 1: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: oj0326y5Cx12gm92v2QPQwGd5h65A9BVPedBNOtACzM=) 2: F03310D1D60B7C8D4880FEE5263129029C23044D.crl (hash: OpIxloAjhu20jA2qWrhHy5Dl5gJgeSX30DKpfAopyXs=) 3: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: 0UDfWdK0ccDtOWv3TneU4N8dGsBm8DxDAXGKlhp/dv4=) 4: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:dd:f6:6a:6a:30:ef:ee:54:9c:e8:82:4a:0d:90:f0:d6:35:0e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D Validity Not Before: Sep 16 18:47:30 2026 GMT Not After : Sep 17 19:00:30 2026 GMT Subject: CN=D1A08633C3CC5B273A25EE8FD968F2BE621E647E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:c2:e1:46:f9:4f:7b:f0:1f:24:45:7d:39: 4c:31:18:3a:22:8c:33:af:83:d3:f7:b9:18:db:75: c7:cd:46:98:24:f5:78:83:f2:eb:40:9c:97:1a:07: 2e:fe:f3:84:f0:8d:21:64:1f:bc:0e:03:cd:09:43: a8:e7:0c:2e:35:1e:eb:1a:ec:93:97:95:c6:d8:e7: 74:2e:28:b5:21:6d:4f:91:48:c5:49:16:d8:7e:9d: 8a:7c:eb:47:71:64:ec:66:e8:ed:53:a4:ba:ca:49: 20:fc:0c:3d:d6:16:45:46:0f:06:63:2e:23:32:eb: ce:86:4a:d0:91:d3:b9:8e:56:24:9f:8f:81:b0:8a: 30:4a:01:ad:ed:57:fd:7f:94:30:1a:51:f4:8b:b3: 80:d7:13:be:1b:c8:7c:cc:41:27:9a:45:39:aa:0a: a5:36:e5:31:8a:e3:1b:32:bf:40:6e:5a:87:86:f5: 86:2f:1c:1b:ab:31:9d:2e:ff:81:c7:ba:c1:bb:cf: 49:11:9d:2c:94:e5:22:8c:67:6b:ce:2c:5f:04:c5: 86:65:61:2e:4f:6b:9d:ca:0a:e1:fd:24:bc:ee:dc: 4b:df:55:39:f0:d6:3d:13:a0:61:20:e3:9a:b7:83: 3c:78:3a:ea:27:f2:0e:27:c6:69:b7:37:f2:0c:04: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A0:86:33:C3:CC:5B:27:3A:25:EE:8F:D9:68:F2:BE:62:1E:64:7E X509v3 Authority Key Identifier: keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:ea:88:21:f2:f4:f0:d2:6b:91:65:a7:49:5e:40:56:13: 3f:95:8d:33:22:ed:8c:da:2b:fe:7c:2d:41:f9:2d:39:b8:bd: ec:f3:d5:0f:9c:9f:18:bf:0b:17:d4:fa:fc:6c:8f:41:52:d7: 1d:93:b0:4c:ec:df:b7:af:a6:9d:fa:48:19:45:11:24:30:79: 31:03:ee:bd:a4:b7:59:f5:89:6d:85:59:d2:a7:66:a8:c7:44: 1f:6d:2d:ba:73:f5:8d:d9:6c:f2:1f:35:19:fb:9a:7f:80:e7: e1:16:d5:ca:23:98:ca:6c:f3:1c:bb:3f:08:8f:99:38:37:cd: a3:55:e5:67:29:37:98:11:82:d3:d1:e3:de:d8:db:7a:a8:50: 72:c4:c8:2a:29:f8:91:0b:d4:31:1b:63:51:30:d4:66:92:10: d9:bb:cf:e5:28:45:e8:70:69:b7:37:ef:d6:3f:9d:0f:d8:55: 3b:8f:8b:b7:42:86:b8:38:60:72:11:b6:63:ab:2b:b6:3d:ac: b0:f0:52:2b:8a:77:16:8c:db:a9:1e:1e:9b:db:3c:db:8f:ef: 88:62:a2:c0:58:a8:0d:ef:86:fb:f9:7f:87:db:52:6e:a1:62: 97:29:11:b7:f0:02:ad:11:b4:a4:fe:7b:13:ba:24:5e:a7:fd: a0:05:a2:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKN32amow7+5UnOiCSg2Q8NY1Dq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5 QzIzMDQ0RDAeFw0yNjA5MTYxODQ3MzBaFw0yNjA5MTcxOTAwMzBaMDMxMTAvBgNV BAMTKEQxQTA4NjMzQzNDQzVCMjczQTI1RUU4RkQ5NjhGMkJFNjIxRTY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzusLhRvlPe/AfJEV9OUwxGDoi jDOvg9P3uRjbdcfNRpgk9XiD8utAnJcaBy7+84TwjSFkH7wOA80JQ6jnDC41Husa 7JOXlcbY53QuKLUhbU+RSMVJFth+nYp860dxZOxm6O1TpLrKSSD8DD3WFkVGDwZj LiMy686GStCR07mOViSfj4GwijBKAa3tV/1/lDAaUfSLs4DXE74byHzMQSeaRTmq CqU25TGK4xsyv0BuWoeG9YYvHBurMZ0u/4HHusG7z0kRnSyU5SKMZ2vOLF8ExYZl YS5Pa53KCuH9JLzu3EvfVTnw1j0ToGEg45q3gzx4Ouon8g4nxmm3N/IMBLsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aCGM8PMWyc6Je6P2WjyvmIeZH4wHwYDVR0j BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw NDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5 MDI5QzIzMDQ0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRs6ogh8vTw0muRZadJXkBWEz+VjTMi7Yza K/58LUH5LTm4vezz1Q+cnxi/CxfU+vxsj0FS1x2TsEzs37evpp36SBlFESQweTED 7r2kt1n1iW2FWdKnZqjHRB9tLbpz9Y3ZbPIfNRn7mn+A5+EW1cojmMps8xy7PwiP mTg3zaNV5WcpN5gRgtPR497Y23qoUHLEyCop+JEL1DEbY1Ew1GaSENm7z+UoRehw abc379Y/nQ/YVTuPi7dChrg4YHIRtmOrK7Y9rLDwUiuKdxaM26keHpvbPNuP74hi osBYqA3vhvv5f4fbUm6hYpcpEbfwAq0RtKT+exO6JF6n/aAFojM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:57 2026 by rpki-client