$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: pW1GcU+fkHwdkxQZ/8fDBwAf72KjsNNE06hdHQxE1bA= Subject key identifier: 8B:EB:08:18:7E:37:43:0B:CB:92:62:41:00:A8:89:BB:1A:43:52:6F Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 040AF8B30E6ACFD455DF998065D4EBB004D73DF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 23:42:19 +0000 Manifest this update: Sun 01 Nov 2026 23:37:19 +0000 Manifest next update: Tue 03 Nov 2026 03:30:19 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) 2: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: T/vsUzt5PmB9V7PM0G70H2tLnqBCG9APNLlII/PTGrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:f8:b3:0e:6a:cf:d4:55:df:99:80:65:d4:eb:b0:04:d7:3d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Nov 1 23:37:19 2026 GMT Not After : Nov 3 03:30:19 2026 GMT Subject: CN=8BEB08187E37430BCB92624100A889BB1A43526F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:ce:01:b0:9c:5c:e7:56:9c:35:a4:70:b6: 56:7f:9b:2e:fc:ab:96:ed:aa:b4:68:ba:ed:b0:09: ba:5a:3c:7e:74:bf:84:e1:f4:66:c5:1e:6e:23:9d: 7d:36:97:f1:7d:21:29:de:c1:8e:00:a8:31:dd:d5: 23:13:b0:01:a3:c5:0b:a2:da:b3:99:80:28:b8:5d: df:09:fe:e8:d8:96:02:1e:bd:1c:0e:71:57:81:ec: 10:a5:15:b5:22:42:d1:f8:35:82:55:41:ce:43:f5: 8f:63:a7:d4:43:40:ac:20:79:7e:c9:2c:83:40:ce: 6b:c7:8b:c8:b1:1d:59:eb:c5:bc:10:f3:5e:f7:31: 9f:38:b1:3e:54:e4:7f:16:99:63:2a:09:de:56:3e: 9c:af:55:53:b2:e5:03:25:ae:5b:1c:af:bc:25:1e: af:00:06:7a:e7:9d:f2:e7:3a:50:64:2e:f9:d0:f2: 88:39:fc:06:25:15:ed:73:a5:3f:16:ff:c2:eb:dd: 90:0f:70:6b:f7:08:74:0e:b6:9e:8f:52:46:98:d2: ca:b4:cc:0b:39:66:8c:4e:a4:a5:f1:4c:27:a7:bb: c2:1e:99:01:f8:78:ec:33:de:55:62:a8:26:f1:b7: f7:46:1d:28:17:a4:26:b9:8a:ad:c6:ee:f7:1c:e0: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:08:18:7E:37:43:0B:CB:92:62:41:00:A8:89:BB:1A:43:52:6F X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:92:67:61:93:95:2b:29:d8:f4:d1:66:f0:1e:2b:21:76:07: 6d:46:70:b2:98:2a:66:8d:77:dc:04:29:e5:c5:95:8e:13:72: ee:7d:36:01:b2:5f:f0:02:93:af:6e:9c:c9:17:69:f5:3c:54: 13:43:37:30:e4:45:27:fc:52:9b:b9:33:e5:fc:db:9a:d9:32: 66:c0:3e:c8:95:56:c3:02:45:0a:29:9c:3b:5f:47:43:44:1d: b2:76:70:09:52:05:ec:31:2e:93:a9:61:08:db:c1:75:c4:f8: 8b:84:ce:29:b3:78:e3:8b:7d:16:d2:e8:70:6d:83:14:be:4b: 3d:c7:69:cc:d0:e7:77:86:6b:ad:c0:c6:5b:c4:3a:78:44:0a: bd:ba:1a:69:e5:bf:8d:70:76:97:4c:fc:d6:1b:6b:af:e4:9f: 6a:8b:c5:66:ec:9d:a7:df:e5:f6:2a:28:99:a6:9c:c1:de:69: 66:d2:6f:bc:9e:cc:f2:de:23:41:89:6c:a3:53:0b:82:47:2e: 1e:9b:50:6a:37:a5:49:40:a2:f5:86:1d:3d:e5:f9:dd:b0:03: dd:30:02:37:7b:9b:d5:ad:ab:28:05:d2:54:d2:08:67:23:28: d3:1d:35:53:81:44:ad:93:fa:41:ad:64:29:5d:b5:e0:8f:60: 69:5c:10:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAr4sw5qz9RV35mAZdTrsATXPfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjExMDEyMzM3MTlaFw0yNjExMDMwMzMwMTlaMDMxMTAvBgNV BAMTKDhCRUIwODE4N0UzNzQzMEJDQjkyNjI0MTAwQTg4OUJCMUE0MzUyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLrs4BsJxc51acNaRwtlZ/my78 q5btqrRouu2wCbpaPH50v4Th9GbFHm4jnX02l/F9ISnewY4AqDHd1SMTsAGjxQui 2rOZgCi4Xd8J/ujYlgIevRwOcVeB7BClFbUiQtH4NYJVQc5D9Y9jp9RDQKwgeX7J LINAzmvHi8ixHVnrxbwQ8173MZ84sT5U5H8WmWMqCd5WPpyvVVOy5QMlrlscr7wl Hq8ABnrnnfLnOlBkLvnQ8og5/AYlFe1zpT8W/8Lr3ZAPcGv3CHQOtp6PUkaY0sq0 zAs5ZoxOpKXxTCenu8IemQH4eOwz3lViqCbxt/dGHSgXpCa5iq3G7vcc4BCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+sIGH43QwvLkmJBAKiJuxpDUm8wHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADySZ2GTlSsp2PTRZvAeKyF2B21GcLKYKmaN d9wEKeXFlY4Tcu59NgGyX/ACk69unMkXafU8VBNDNzDkRSf8Upu5M+X825rZMmbA PsiVVsMCRQopnDtfR0NEHbJ2cAlSBewxLpOpYQjbwXXE+IuEzimzeOOLfRbS6HBt gxS+Sz3HaczQ53eGa63AxlvEOnhECr26Gmnlv41wdpdM/NYba6/kn2qLxWbsnaff 5fYqKJmmnMHeaWbSb7yezPLeI0GJbKNTC4JHLh6bUGo3pUlAovWGHT3l+d2wA90w Ajd7m9WtqygF0lTSCGcjKNMdNVOBRK2T+kGtZCldteCPYGlcEAA= -----END CERTIFICATE-----Generated at Mon Nov 2 21:12:35 2026 by rpki-client