$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: H9hpzGClue0koeO2CdMdRKVW/5EK/saX48iBg+Rw1GQ= Subject key identifier: 51:32:18:61:8E:11:6B:80:53:7A:38:96:23:8D:28:A1:86:A0:F3:41 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 2D35F29A15A390FD8BD806BA89D1EFEA14E5940E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:08:33 +0000 Manifest this update: Thu 17 Sep 2026 04:03:33 +0000 Manifest next update: Fri 18 Sep 2026 04:28:33 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 2: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: JG8Oxz9qAYRXH5s/NRAcIBepnXyGCVJC179ph7wAR5k=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 4: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:35:f2:9a:15:a3:90:fd:8b:d8:06:ba:89:d1:ef:ea:14:e5:94:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Sep 17 04:03:33 2026 GMT Not After : Sep 18 04:28:33 2026 GMT Subject: CN=513218618E116B80537A3896238D28A186A0F341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:3c:50:8e:1c:57:ca:69:b4:ef:eb:4e:86: f6:93:49:f2:d6:54:01:7d:d3:c4:f8:09:fc:f4:bf: 09:80:10:7d:95:2c:32:69:df:30:4e:f5:61:3b:8b: a1:29:37:44:b9:04:db:d3:db:90:8e:5f:37:52:f1: 82:0b:f6:dc:b2:3d:78:ef:17:a6:37:74:29:6e:69: c7:d1:08:ce:cd:5d:97:91:71:92:37:f5:14:50:e3: 35:8a:c1:b2:5a:63:43:a4:33:61:0b:cc:2b:3b:83: be:ea:ab:2d:d6:d5:7e:f4:c8:30:cf:91:9c:c8:78: 77:b7:f6:66:ba:3a:3b:48:8b:35:95:5c:02:61:a2: 11:5f:6f:92:9d:31:ea:7d:85:61:d6:a3:5d:f1:30: 8d:aa:27:83:50:c4:a6:2f:07:25:fc:bd:6e:12:ba: 00:dc:56:f5:68:1a:7b:26:03:05:f1:20:ba:ae:69: 62:ce:e8:d1:12:f7:f8:5c:c0:a6:9d:25:b8:b0:95: cd:53:94:9e:97:89:c0:98:be:ce:b5:2b:6a:e6:77: 64:c5:dc:d4:d3:d6:a2:58:d3:a2:c0:21:21:42:d2: 22:69:e1:3a:d5:79:44:4d:b4:a4:c4:c4:dd:3e:17: e2:3d:51:46:ba:ab:0d:50:d5:fd:a3:dc:c3:eb:79: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:18:61:8E:11:6B:80:53:7A:38:96:23:8D:28:A1:86:A0:F3:41 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8d:9c:e1:48:0a:b3:dd:b9:0c:8c:68:e9:77:28:e0:8c:ab: d1:a1:cc:7c:9e:e6:04:82:3a:1b:e2:b2:fc:37:81:b8:79:5f: 73:60:cc:45:b2:6a:15:f5:f7:35:9d:3f:71:74:8f:21:f6:5c: c2:90:bd:7a:26:e9:d0:db:73:6e:77:65:56:af:9c:aa:b4:40: e0:30:b1:f8:2c:1c:0e:00:65:fe:3a:2f:53:be:65:0d:f2:84: 55:f0:38:f1:3e:28:c9:b2:a4:bb:8f:45:3f:ab:04:77:c5:48: ce:c3:e8:0b:c3:00:b6:48:01:d0:7e:32:9f:ea:57:b3:2c:67: 22:0f:fc:54:7e:3d:22:1e:92:b2:3d:76:ab:02:4d:0d:a8:f1: be:df:f7:b8:8c:cd:bb:de:e8:c4:05:c9:a1:27:7e:5f:81:48: 1b:44:a2:31:bd:0f:86:86:0c:46:50:78:f7:2b:4e:1e:b1:c6: d0:ab:c6:00:41:5c:cb:fb:6d:48:73:da:3c:07:32:dd:aa:1a: b0:73:71:df:59:a3:d1:a5:27:b3:db:ba:08:c3:8f:87:9c:6f: 6d:9d:66:9d:a0:44:b9:0c:b2:61:21:5d:8b:49:b5:82:ac:fc: c6:82:cc:12:89:4e:6b:a8:a7:3c:b8:3f:cc:50:79:29:39:4b: 5e:3d:1c:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTXymhWjkP2L2Aa6idHv6hTllA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA5MTcwNDAzMzNaFw0yNjA5MTgwNDI4MzNaMDMxMTAvBgNV BAMTKDUxMzIxODYxOEUxMTZCODA1MzdBMzg5NjIzOEQyOEExODZBMEYzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqkTxQjhxXymm07+tOhvaTSfLW VAF908T4Cfz0vwmAEH2VLDJp3zBO9WE7i6EpN0S5BNvT25COXzdS8YIL9tyyPXjv F6Y3dCluacfRCM7NXZeRcZI39RRQ4zWKwbJaY0OkM2ELzCs7g77qqy3W1X70yDDP kZzIeHe39ma6OjtIizWVXAJhohFfb5KdMep9hWHWo13xMI2qJ4NQxKYvByX8vW4S ugDcVvVoGnsmAwXxILquaWLO6NES9/hcwKadJbiwlc1TlJ6XicCYvs61K2rmd2TF 3NTT1qJY06LAISFC0iJp4TrVeURNtKTExN0+F+I9UUa6qw1Q1f2j3MPrect/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTIYYY4Ra4BTejiWI40ooYag80EwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFONnOFICrPduQyMaOl3KOCMq9GhzHye5gSC Ohvisvw3gbh5X3NgzEWyahX19zWdP3F0jyH2XMKQvXom6dDbc253ZVavnKq0QOAw sfgsHA4AZf46L1O+ZQ3yhFXwOPE+KMmypLuPRT+rBHfFSM7D6AvDALZIAdB+Mp/q V7MsZyIP/FR+PSIekrI9dqsCTQ2o8b7f97iMzbve6MQFyaEnfl+BSBtEojG9D4aG DEZQePcrTh6xxtCrxgBBXMv7bUhz2jwHMt2qGrBzcd9Zo9GlJ7PbugjDj4ecb22d Zp2gRLkMsmEhXYtJtYKs/MaCzBKJTmuopzy4P8xQeSk5S149HNo= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:20 2026 by rpki-client