$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json) Hash identifier: SEDpVZQtmhuXjQA9LCdya/xiqy+yFkIDCH0Om905YVY= Subject key identifier: FF:98:91:16:39:F1:DE:1D:3D:1B:12:79:68:61:9F:EA:00:25:62:20 Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Certificate serial: 41405B52EA0D2BBCEA367C2FBF27B3D38987955F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:27:57 +0000 Manifest this update: Wed 16 Sep 2026 23:22:57 +0000 Manifest next update: Fri 18 Sep 2026 01:25:57 +0000 Files and hashes: 1: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: zYW+a866Yn5YccGOuLOyjEb0q/i0c/6P5WWjLMIlDIo=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:40:5b:52:ea:0d:2b:bc:ea:36:7c:2f:bf:27:b3:d3:89:87:95:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Validity Not Before: Sep 16 23:22:57 2026 GMT Not After : Sep 18 01:25:57 2026 GMT Subject: CN=FF98911639F1DE1D3D1B127968619FEA00256220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:f3:3a:54:bc:5f:7c:5b:f9:c7:86:56:87: 1d:3a:00:e4:8a:63:47:78:66:53:7d:bd:31:b3:84: cc:1c:ac:40:78:b8:ea:31:e3:a6:7d:3c:9d:e4:58: 9f:8b:7f:19:83:af:2d:bd:ca:c5:b6:63:28:3e:07: b1:7e:0d:0e:5b:d5:aa:e1:71:dd:86:03:3e:f2:bf: 2d:ae:d6:e7:80:1d:d0:84:6d:13:66:70:5c:1e:36: ed:8c:97:cc:5b:2f:53:e4:b3:60:df:3d:81:24:97: 2f:25:a2:55:f2:dd:6c:da:06:3d:7e:6f:67:a7:69: 5b:c8:88:6b:36:23:ed:43:40:a8:a0:89:99:dc:1e: 5f:a2:d7:4e:1f:ff:63:e7:72:c4:fc:91:d8:76:2c: b1:06:3f:0b:9a:b0:c4:2a:bd:f5:e6:0a:f9:99:90: b9:0d:25:23:57:c0:d9:30:27:2c:60:d7:2e:6f:e4: 2b:c4:fd:d1:f5:ce:05:f5:47:13:3b:30:0f:ac:25: 96:09:4f:be:fb:7d:ed:c8:8c:c8:62:db:59:4c:1f: bd:49:18:b8:5d:6c:50:67:1c:7d:e2:cf:ff:d2:0b: 29:37:a3:e3:f2:32:02:48:5e:5a:b6:60:ae:ba:67: ae:b0:7e:c5:cd:8c:d1:4e:e6:9b:71:ea:94:19:50: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:98:91:16:39:F1:DE:1D:3D:1B:12:79:68:61:9F:EA:00:25:62:20 X509v3 Authority Key Identifier: keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:18:c4:b5:fb:7c:25:f3:3f:95:ae:b9:e5:5d:cb:e1:e9:21: 83:42:79:f7:8e:dc:2a:b0:16:08:1e:d0:07:bc:25:da:75:76: b3:04:a1:10:e2:bf:db:b2:72:c2:d2:ee:20:b3:eb:7e:8a:6b: f5:6f:8a:1d:c2:f3:8b:e6:51:ce:c8:de:b1:dc:9a:6f:00:8d: e8:65:f3:ca:c8:85:ea:83:9e:04:99:aa:62:a2:e4:8f:80:25: 69:eb:49:12:09:fa:d1:07:07:ea:c8:7f:1c:92:41:b3:50:ce: 2c:52:e2:f4:f0:65:8d:95:d5:d9:03:40:95:1d:d8:df:ce:c9: a5:93:85:af:89:72:d1:cc:47:08:3b:cd:0c:b6:47:9f:13:35: eb:a7:2e:ac:84:04:20:fc:84:ae:d9:eb:38:4e:29:26:3f:01: 50:82:ae:e0:79:a5:70:68:70:31:85:b0:4f:1b:62:89:79:d4: 50:1a:4c:c4:95:17:df:c0:50:9c:d2:0e:80:32:60:57:f5:ad: e2:e2:9b:50:2b:c5:78:6b:8e:e9:cc:15:77:93:a1:1c:cf:11: 4b:d2:ea:6d:9f:a2:c7:5c:d7:fb:99:29:99:fc:96:60:23:89: 61:0b:e3:41:84:d6:b9:ab:c3:37:5c:1a:41:c6:dc:c8:6b:74: f5:4c:59:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUBbUuoNK7zqNnwvvyez04mHlV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2 MTQzREJCQzAeFw0yNjA5MTYyMzIyNTdaFw0yNjA5MTgwMTI1NTdaMDMxMTAvBgNV BAMTKEZGOTg5MTE2MzlGMURFMUQzRDFCMTI3OTY4NjE5RkVBMDAyNTYyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEjvM6VLxffFv5x4ZWhx06AOSK Y0d4ZlN9vTGzhMwcrEB4uOox46Z9PJ3kWJ+LfxmDry29ysW2Yyg+B7F+DQ5b1arh cd2GAz7yvy2u1ueAHdCEbRNmcFweNu2Ml8xbL1Pks2DfPYEkly8lolXy3WzaBj1+ b2enaVvIiGs2I+1DQKigiZncHl+i104f/2PncsT8kdh2LLEGPwuasMQqvfXmCvmZ kLkNJSNXwNkwJyxg1y5v5CvE/dH1zgX1RxM7MA+sJZYJT777fe3IjMhi21lMH71J GLhdbFBnHH3iz//SCyk3o+PyMgJIXlq2YK66Z66wfsXNjNFO5ptx6pQZUCQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5iRFjnx3h09GxJ5aGGf6gAlYiAwHwYDVR0j BBgwFoAU9CxbB2GD9KvanOh3BhE/0mFD27wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmRiMDEzMGQtY2FhMy00NzZmLWFmODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2 MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2MTQzREJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNDJDNUIwNzYxODNGNEFCREE5Q0U4NzcwNjExM0ZEMjYxNDNE QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNG RDI2MTQzREJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoYxLX7fCXzP5WuueVdy+HpIYNCefeO3Cqw Fgge0Ae8Jdp1drMEoRDiv9uycsLS7iCz636Ka/Vvih3C84vmUc7I3rHcmm8Ajehl 88rIheqDngSZqmKi5I+AJWnrSRIJ+tEHB+rIfxySQbNQzixS4vTwZY2V1dkDQJUd 2N/OyaWTha+JctHMRwg7zQy2R58TNeunLqyEBCD8hK7Z6zhOKSY/AVCCruB5pXBo cDGFsE8bYol51FAaTMSVF9/AUJzSDoAyYFf1reLim1ArxXhrjunMFXeToRzPEUvS 6m2fosdc1/uZKZn8lmAjiWEL40GE1rmrwzdcGkHG3MhrdPVMWb0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:14 2026 by rpki-client