$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: 6Dtjp38Zs18R109Doojlzg4YIwB2jjYa7ac7wj/HrOE= Subject key identifier: DD:2F:D3:F9:B9:52:88:AF:76:40:6D:04:9D:97:8A:8F:33:CE:FF:29 Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 3594D95D6D023D3D52D043CCE6421872BD7EB9CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:26:31 +0000 Manifest this update: Thu 17 Sep 2026 02:21:31 +0000 Manifest next update: Fri 18 Sep 2026 02:38:31 +0000 Files and hashes: 1: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: TfRqsZhhNnlX3pipMLBlkjZdvhzlX66OgLLMG0Mmv5w=) 2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 3: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:94:d9:5d:6d:02:3d:3d:52:d0:43:cc:e6:42:18:72:bd:7e:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Sep 17 02:21:31 2026 GMT Not After : Sep 18 02:38:31 2026 GMT Subject: CN=DD2FD3F9B95288AF76406D049D978A8F33CEFF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:a9:b6:4d:b6:d4:8f:a0:f7:51:4c:1c:97: 10:76:a1:cb:0e:63:46:39:f6:a4:7a:4c:98:b9:b8: 23:92:ec:96:3a:eb:16:30:d0:b2:95:cf:57:b3:01: 8b:e5:f4:5e:9e:a5:2b:03:56:90:1f:f8:c9:16:d6: 07:7c:60:16:6f:94:87:bd:c9:5c:49:13:91:76:87: fe:74:49:82:e3:08:e3:39:a0:92:1e:e7:ac:67:c7: c9:0d:d8:31:56:75:80:d3:75:6f:1d:1c:dc:d9:98: 22:1a:e1:41:c4:a2:f9:64:0b:95:c5:98:af:e8:67: 82:62:bb:16:a6:47:ec:82:2c:b2:d1:22:79:85:bc: 44:e8:c8:04:62:61:d4:35:9e:02:ca:13:48:dd:92: b0:52:38:b9:53:50:e0:ef:a6:c6:44:15:02:65:32: 22:52:5a:0a:10:78:c5:f5:cb:df:7e:11:46:af:22: 58:0f:82:7f:6a:98:00:f8:f0:6a:28:47:a8:82:fc: 83:16:e6:03:bf:fc:b8:92:a8:a1:1d:6b:a3:e3:c7: ff:8e:7c:db:8e:30:00:8d:31:df:72:47:c7:fa:d7: 85:8b:48:c2:8d:e1:b7:bf:c3:24:af:ed:1a:8a:39: 4a:70:48:bd:40:f1:2b:fc:34:20:cf:ea:5a:6b:8f: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:D3:F9:B9:52:88:AF:76:40:6D:04:9D:97:8A:8F:33:CE:FF:29 X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ed:65:79:09:d1:d1:32:ca:6d:85:3d:99:61:af:6d:c8:0a: 63:71:25:0b:b0:c2:ec:11:e8:1e:68:42:63:77:73:9f:4f:93: 42:29:9e:fa:1e:0d:1f:4b:0a:94:ad:69:4d:c1:48:99:74:69: df:53:9a:11:1a:1d:56:07:ac:b3:b9:12:f3:e5:83:dc:85:08: 6a:ef:d5:55:b9:3e:9f:73:0c:3d:76:7e:8e:f4:e4:55:bb:c6: cb:bc:44:fe:7f:00:44:56:10:71:b4:b8:61:40:3e:12:b3:d8: e2:e2:ef:da:07:01:f2:82:53:85:04:75:93:f8:82:68:1a:e9: 05:8e:6d:d7:3f:9a:4a:e4:94:bf:8d:f9:14:69:95:7c:dd:2c: 34:a4:d5:1f:11:26:12:86:a1:a7:cf:1f:39:7e:a4:71:30:82: 90:65:ac:df:6f:1c:f9:ec:93:7e:f7:93:2e:54:fa:9b:44:4a: d7:3a:8c:c7:8c:5a:0c:cf:fc:46:a6:74:63:0b:02:ea:98:02: c7:e8:8e:47:41:93:32:9c:17:ba:e7:d7:00:b9:46:e9:5e:ab: b0:4e:a3:db:7f:d4:47:f8:18:af:f2:a4:bf:6d:97:32:5d:47: d8:76:f7:2c:c6:6c:60:43:38:dd:1d:2e:b2:eb:e0:af:18:66: c3:d0:88:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZTZXW0CPT1S0EPM5kIYcr1+uc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA5MTcwMjIxMzFaFw0yNjA5MTgwMjM4MzFaMDMxMTAvBgNV BAMTKEREMkZEM0Y5Qjk1Mjg4QUY3NjQwNkQwNDlEOTc4QThGMzNDRUZGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW6m2TbbUj6D3UUwclxB2ocsO Y0Y59qR6TJi5uCOS7JY66xYw0LKVz1ezAYvl9F6epSsDVpAf+MkW1gd8YBZvlIe9 yVxJE5F2h/50SYLjCOM5oJIe56xnx8kN2DFWdYDTdW8dHNzZmCIa4UHEovlkC5XF mK/oZ4JiuxamR+yCLLLRInmFvEToyARiYdQ1ngLKE0jdkrBSOLlTUODvpsZEFQJl MiJSWgoQeMX1y99+EUavIlgPgn9qmAD48GooR6iC/IMW5gO//LiSqKEda6Pjx/+O fNuOMACNMd9yR8f614WLSMKN4be/wySv7RqKOUpwSL1A8Sv8NCDP6lprj53/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3S/T+blSiK92QG0EnZeKjzPO/ykwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABztZXkJ0dEyym2FPZlhr23ICmNxJQuwwuwR 6B5oQmN3c59Pk0IpnvoeDR9LCpStaU3BSJl0ad9TmhEaHVYHrLO5EvPlg9yFCGrv 1VW5Pp9zDD12fo705FW7xsu8RP5/AERWEHG0uGFAPhKz2OLi79oHAfKCU4UEdZP4 gmga6QWObdc/mkrklL+N+RRplXzdLDSk1R8RJhKGoafPHzl+pHEwgpBlrN9vHPns k373ky5U+ptEStc6jMeMWgzP/EamdGMLAuqYAsfojkdBkzKcF7rn1wC5Ruleq7BO o9t/1Ef4GK/ypL9tlzJdR9h29yzGbGBDON0dLrLr4K8YZsPQiIA= -----END CERTIFICATE-----Generated at Thu Sep 17 15:39:27 2026 by rpki-client