$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: V+B0Hc968a3/guxiY4xVh/6l+4m9cG9ixn912Cg7knY= Subject key identifier: 38:E3:A7:10:11:98:D2:70:32:EB:43:CE:4B:94:92:72:1D:D6:86:E7 Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 2F26385C648E66822557C1CA67BBC510B66E05FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:01:23 +0000 Manifest this update: Wed 16 Sep 2026 17:56:23 +0000 Manifest next update: Thu 17 Sep 2026 19:25:23 +0000 Files and hashes: 1: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: 0WSDzG3JbcLi9Zyh8qPTn85x7K5FEBS3mZ/H8vqabts=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:26:38:5c:64:8e:66:82:25:57:c1:ca:67:bb:c5:10:b6:6e:05:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: Sep 16 17:56:23 2026 GMT Not After : Sep 17 19:25:23 2026 GMT Subject: CN=38E3A7101198D27032EB43CE4B9492721DD686E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:cb:25:ec:6d:6b:9f:96:78:ab:d0:08:5b: 07:b4:50:07:64:7f:91:71:32:a9:d7:3d:fb:8a:35: 55:27:c6:01:9f:da:75:9e:ed:cb:e8:9e:28:79:6b: 8f:0a:ae:80:77:ac:ba:97:18:2f:d5:c4:f4:f7:c7: d0:ce:f1:e0:30:d4:dc:56:0f:75:ff:21:bd:79:0d: 54:f5:77:af:43:a4:95:ac:78:c6:09:64:33:01:4e: 58:04:c8:ed:92:08:a6:f0:30:07:5e:6d:83:a9:8f: a1:2b:69:ca:b4:f9:0f:32:73:4f:5b:f3:88:12:14: 56:0e:69:a1:da:3b:a7:e4:f0:b1:c2:1f:18:9c:41: b3:da:6c:91:c9:b9:b6:df:a0:e1:b8:4c:0c:5c:00: e0:71:b5:89:74:b7:84:2a:f8:af:e8:b9:ed:6c:c9: 4b:62:c3:91:ca:be:cd:38:8a:05:59:82:a9:80:7c: ae:ce:1f:e8:ad:12:48:9a:a8:09:a9:23:20:84:7d: d0:6d:8d:94:36:36:d8:33:1d:9e:10:66:83:4c:ed: 7e:e6:34:bb:8f:12:f2:e8:ce:0a:fc:55:de:cd:41: ab:7d:4c:c1:9a:21:fb:b0:33:19:f2:90:94:a2:db: 60:cd:6e:f8:de:fd:32:5a:bc:cb:f6:e1:39:71:6f: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:A7:10:11:98:D2:70:32:EB:43:CE:4B:94:92:72:1D:D6:86:E7 X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:fe:da:e8:76:94:aa:21:b8:aa:08:bd:31:19:c0:13:5a: ab:a5:59:a0:3d:d5:e0:9a:e6:3e:0d:3a:7e:06:6c:94:f4:2f: 9e:1a:fd:fa:ed:30:d6:a6:9b:16:4a:c7:22:ef:90:a9:b8:1c: 58:96:38:ef:f8:4f:83:04:e9:6a:39:9b:25:41:a1:15:83:73: 64:7a:93:ff:42:4a:0d:29:ec:95:26:79:3d:38:d7:0d:d9:8d: 4f:ac:f4:20:18:9e:b9:8a:7b:1b:85:97:d1:e7:65:e7:88:ea: c9:98:e0:3e:87:fb:27:32:ad:e2:90:eb:b4:8b:07:a9:17:4c: 2e:e8:91:8b:fa:e7:d0:c5:67:ff:fd:43:56:50:6b:c9:f8:8a: 7f:30:08:fa:d1:de:08:56:d7:b6:52:9b:0b:8b:1c:79:a1:8d: 83:86:be:30:cb:25:ab:7e:b9:d3:84:d1:8c:f7:d0:4d:7a:ab: 55:db:ef:c8:27:63:07:6e:23:18:0f:f3:b4:20:0b:60:ef:b2: e4:49:a5:22:6a:96:1e:90:df:c6:75:23:bc:91:68:96:5a:bf: 00:d8:8e:06:24:ee:c7:29:d4:95:1b:46:9e:bd:ef:8f:da:21: f8:5c:97:73:d4:01:02:05:df:d6:14:78:f7:6d:5e:53:e4:7d: 3d:9f:3d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyY4XGSOZoIlV8HKZ7vFELZuBfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA5MTYxNzU2MjNaFw0yNjA5MTcxOTI1MjNaMDMxMTAvBgNV BAMTKDM4RTNBNzEwMTE5OEQyNzAzMkVCNDNDRTRCOTQ5MjcyMURENjg2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ncsl7G1rn5Z4q9AIWwe0UAdk f5FxMqnXPfuKNVUnxgGf2nWe7cvonih5a48KroB3rLqXGC/VxPT3x9DO8eAw1NxW D3X/Ib15DVT1d69DpJWseMYJZDMBTlgEyO2SCKbwMAdebYOpj6Eracq0+Q8yc09b 84gSFFYOaaHaO6fk8LHCHxicQbPabJHJubbfoOG4TAxcAOBxtYl0t4Qq+K/oue1s yUtiw5HKvs04igVZgqmAfK7OH+itEkiaqAmpIyCEfdBtjZQ2NtgzHZ4QZoNM7X7m NLuPEvLozgr8Vd7NQat9TMGaIfuwMxnykJSi22DNbvje/TJavMv24Tlxbw5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOOnEBGY0nAy60POS5SSch3WhucwHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEV/trodpSqIbiqCL0xGcATWqulWaA91eCa 5j4NOn4GbJT0L54a/frtMNammxZKxyLvkKm4HFiWOO/4T4ME6Wo5myVBoRWDc2R6 k/9CSg0p7JUmeT041w3ZjU+s9CAYnrmKexuFl9HnZeeI6smY4D6H+ycyreKQ67SL B6kXTC7okYv659DFZ//9Q1ZQa8n4in8wCPrR3ghW17ZSmwuLHHmhjYOGvjDLJat+ udOE0Yz30E16q1Xb78gnYwduIxgP87QgC2DvsuRJpSJqlh6Q38Z1I7yRaJZavwDY jgYk7scp1JUbRp6974/aIfhcl3PUAQIF39YUePdtXlPkfT2fPVI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:14 2026 by rpki-client