$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: 7h7w2aIbackFj9dwbvrvZst5ZxMjbmc+Jcou2TmSIwc= Subject key identifier: BA:5A:D5:4E:FF:8A:AE:50:C8:9F:E6:9A:E3:82:F2:DB:18:59:FE:F8 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 4C93C08B397566B407E24A9DA43719D1DEF41FF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:32:52 +0000 Manifest this update: Thu 17 Sep 2026 03:27:52 +0000 Manifest next update: Fri 18 Sep 2026 04:02:52 +0000 Files and hashes: 1: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: BI5rE6S17JICRsRwa5vRNvXhtz36jbtQxwo8TftgpaY=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:93:c0:8b:39:75:66:b4:07:e2:4a:9d:a4:37:19:d1:de:f4:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: Sep 17 03:27:52 2026 GMT Not After : Sep 18 04:02:52 2026 GMT Subject: CN=BA5AD54EFF8AAE50C89FE69AE382F2DB1859FEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:84:28:e1:90:ea:df:92:62:29:b5:e6:54: 1b:a0:47:ee:0b:ab:db:c7:37:c7:e5:84:72:31:4a: ca:93:18:a5:9d:40:2a:08:4b:ce:e5:be:ec:67:09: e0:c9:ad:a3:be:f8:8d:fc:c5:97:c9:c0:c6:18:29: 66:ae:f7:82:2b:74:4d:24:64:4d:37:aa:56:c8:da: c2:77:14:70:bf:f7:9b:dc:29:09:ef:58:f5:f9:dc: 61:63:10:4d:79:2d:98:24:e0:e6:de:f8:49:9e:08: d9:2e:32:ab:e9:01:17:77:97:13:37:0a:85:ae:5f: cf:5d:d4:39:4f:2d:00:56:d8:3d:20:ba:8a:eb:ca: d9:b6:ac:3a:45:30:4d:47:af:5f:9d:a7:42:0f:45: 64:97:5c:ca:c3:63:9c:e1:47:2a:45:aa:91:92:0c: 0e:73:bd:85:b8:2e:1f:1f:de:2a:67:d4:fc:c2:e7: 95:e4:9c:dc:3c:d4:ee:6f:3e:ab:74:6e:0e:27:99: 6c:dd:51:9b:8b:62:aa:b6:79:ec:78:e4:1d:58:a9: 47:04:68:b5:0d:06:51:c2:51:97:6f:bd:fb:89:31: 72:a9:b1:73:83:fc:b7:45:78:2b:2f:64:45:35:4f: 07:56:54:c4:fd:44:4f:de:ee:1e:e1:86:15:67:5b: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5A:D5:4E:FF:8A:AE:50:C8:9F:E6:9A:E3:82:F2:DB:18:59:FE:F8 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:41:df:df:69:0d:f9:c3:40:f5:8c:89:a6:2a:b2:33:fb: 4e:36:4a:16:76:af:81:f8:d4:0a:0d:60:23:ae:9e:12:00:53: b5:31:03:15:00:ae:cd:3f:64:27:90:7a:59:da:30:90:3d:6d: aa:cb:5b:b3:c9:55:22:5e:d4:3a:72:e0:f0:6c:4f:ff:76:ac: 4d:23:5e:f8:9f:94:3f:00:a1:ea:ec:39:7a:33:f5:f9:28:ea: f5:85:a0:0b:81:50:66:92:65:45:4e:3b:72:4d:22:c1:fc:86: 70:7c:fd:ab:36:b1:04:8d:6d:aa:60:55:fb:f6:2b:9c:d9:37: e2:51:21:0b:bc:2f:96:dd:d0:1b:7a:d6:85:57:a4:18:11:7d: da:f5:45:f6:0e:8f:da:73:4e:6e:dc:78:49:13:3e:ad:8d:70: c8:74:76:ef:05:74:2d:55:da:15:0c:e4:e8:fb:dd:32:cc:b6: 39:37:8b:91:8a:ab:31:54:67:31:32:fb:7d:2d:b0:61:60:9b: 98:1f:42:b5:00:36:9f:cb:c2:a7:28:23:5e:d8:dc:36:70:4b: 33:23:3b:f0:5b:67:88:1d:e0:61:c4:5a:0a:cd:7b:87:cb:19: 12:1a:0f:b1:9c:00:a3:59:08:24:3e:e9:5a:0a:cb:d4:89:7a: cf:58:49:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJPAizl1ZrQH4kqdpDcZ0d70H/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA5MTcwMzI3NTJaFw0yNjA5MTgwNDAyNTJaMDMxMTAvBgNV BAMTKEJBNUFENTRFRkY4QUFFNTBDODlGRTY5QUUzODJGMkRCMTg1OUZFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRIQo4ZDq35JiKbXmVBugR+4L q9vHN8flhHIxSsqTGKWdQCoIS87lvuxnCeDJraO++I38xZfJwMYYKWau94IrdE0k ZE03qlbI2sJ3FHC/95vcKQnvWPX53GFjEE15LZgk4Obe+EmeCNkuMqvpARd3lxM3 CoWuX89d1DlPLQBW2D0guorrytm2rDpFME1Hr1+dp0IPRWSXXMrDY5zhRypFqpGS DA5zvYW4Lh8f3ipn1PzC55XknNw81O5vPqt0bg4nmWzdUZuLYqq2eex45B1YqUcE aLUNBlHCUZdvvfuJMXKpsXOD/LdFeCsvZEU1TwdWVMT9RE/e7h7hhhVnW7ZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulrVTv+KrlDIn+aa44Ly2xhZ/vgwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqcQd/faQ35w0D1jImmKrIz+042ShZ2r4H4 1AoNYCOunhIAU7UxAxUArs0/ZCeQelnaMJA9barLW7PJVSJe1Dpy4PBsT/92rE0j XviflD8AoersOXoz9fko6vWFoAuBUGaSZUVOO3JNIsH8hnB8/as2sQSNbapgVfv2 K5zZN+JRIQu8L5bd0Bt61oVXpBgRfdr1RfYOj9pzTm7ceEkTPq2NcMh0du8FdC1V 2hUM5Oj73TLMtjk3i5GKqzFUZzEy+30tsGFgm5gfQrUANp/LwqcoI17Y3DZwSzMj O/BbZ4gd4GHEWgrNe4fLGRIaD7GcAKNZCCQ+6VoKy9SJes9YSV4= -----END CERTIFICATE-----Generated at Thu Sep 17 14:41:09 2026 by rpki-client