$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json) Hash identifier: 4vHP2Kd0ui+nX6UF40fNKkGz64Je6iSt+guwRDD3vBs= Subject key identifier: 76:1D:38:BF:5C:C0:65:55:49:5A:0A:D2:9F:73:29:DA:EB:2E:FD:5A Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46 Certificate serial: 426B643B86AA89EA550F1EA135081C82FB9DCCFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 11:37:35 +0000 Manifest this update: Tue 03 Nov 2026 11:32:35 +0000 Manifest next update: Wed 04 Nov 2026 12:46:35 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=) 2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=) 3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: 4J1YaNw40jChxX5wRXdvUIKLCXbNNJyvVd1y7RgkxsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6b:64:3b:86:aa:89:ea:55:0f:1e:a1:35:08:1c:82:fb:9d:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46 Validity Not Before: Nov 3 11:32:35 2026 GMT Not After : Nov 4 12:46:35 2026 GMT Subject: CN=761D38BF5CC06555495A0AD29F7329DAEB2EFD5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:dd:c7:36:59:19:71:9b:f9:e1:21:b8:f6: 8a:31:b4:75:17:c7:0f:5c:8d:a6:00:8d:9b:ee:77: 46:4e:9c:13:c0:a3:b1:5f:54:88:dc:97:45:a8:4e: 7b:15:0e:67:ec:ab:aa:1c:b8:db:73:e5:78:5f:27: 37:b7:0b:bd:ff:f2:dc:4d:a1:a4:4d:97:9d:29:b1: 97:3e:4f:31:03:2f:08:11:ae:7c:be:13:fa:5f:b4: 8b:b4:0e:6b:93:02:46:ce:68:9f:30:1b:0e:cf:0f: 33:67:5d:93:a9:ca:f5:de:34:13:f3:25:d0:9d:c7: 19:c4:08:e3:d4:a1:93:b7:06:47:16:1c:ce:5a:92: ac:58:ff:3f:ac:63:da:78:29:da:f6:f0:b3:01:d5: f3:c2:35:59:44:64:61:ff:02:47:b0:80:18:57:15: 02:07:4a:f4:ad:13:74:f6:c5:a6:e4:f3:ab:2b:71: b2:bb:d0:6c:73:91:49:a7:84:02:f0:f5:d6:59:05: 60:9b:7a:78:a1:e9:88:69:71:c2:d9:05:23:5a:95: 57:43:37:d2:d9:da:c7:1b:d9:3d:68:b6:b7:46:21: b0:c2:08:94:bf:d2:a9:fe:6d:8e:d0:c6:d9:b3:ce: fe:45:ea:6d:21:9c:6c:b9:18:5b:dd:4d:e8:48:81: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:38:BF:5C:C0:65:55:49:5A:0A:D2:9F:73:29:DA:EB:2E:FD:5A X509v3 Authority Key Identifier: keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:e9:36:af:3b:09:5b:91:e2:7c:b4:3a:8d:9f:68:fb:d6: 9b:d1:12:48:03:1f:a2:c9:63:0b:d6:a3:a3:18:23:47:35:9e: 37:86:ba:79:30:fb:6f:c7:c1:91:0f:90:14:b4:3d:e5:1e:6a: 08:6d:08:19:ca:3f:7a:31:d5:af:0f:d1:34:d8:c1:af:35:bb: 74:fd:86:48:e7:5e:54:c8:a8:28:96:47:25:7d:e7:80:51:5d: 1a:de:ff:12:a2:fa:ba:b9:ee:4c:56:4b:4f:3b:ed:20:6c:01: 45:e5:a1:92:64:f6:2c:05:bd:54:59:26:cb:c0:19:bf:b5:92: 9d:71:56:b3:92:45:d2:b3:37:02:da:0e:33:36:4b:5f:6f:18: 46:b2:19:fe:0e:d8:96:c8:ae:1a:9c:03:4d:a4:03:27:d5:34: d5:37:83:ff:90:f9:d6:d3:f4:cf:cc:3c:2c:4e:8a:46:6b:9c: ca:08:1d:71:2f:8f:63:b7:93:7d:fe:16:30:f4:dc:96:e8:54: e3:5d:29:5b:80:61:ad:b2:bf:de:cc:73:ac:e9:1c:d7:07:e4: 4c:53:c3:c5:17:cc:1b:f8:14:a1:22:74:0a:07:cc:42:94:b9: 33:99:8b:d6:a1:09:74:83:27:9c:b2:b1:12:89:56:73:b6:0d: b3:45:3b:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmtkO4aqiepVDx6hNQgcgvudzPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0 MDRBM0E0NjAeFw0yNjExMDMxMTMyMzVaFw0yNjExMDQxMjQ2MzVaMDMxMTAvBgNV BAMTKDc2MUQzOEJGNUNDMDY1NTU0OTVBMEFEMjlGNzMyOURBRUIyRUZENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+N3HNlkZcZv54SG49ooxtHUX xw9cjaYAjZvud0ZOnBPAo7FfVIjcl0WoTnsVDmfsq6ocuNtz5XhfJze3C73/8txN oaRNl50psZc+TzEDLwgRrny+E/pftIu0DmuTAkbOaJ8wGw7PDzNnXZOpyvXeNBPz JdCdxxnECOPUoZO3BkcWHM5akqxY/z+sY9p4Kdr28LMB1fPCNVlEZGH/AkewgBhX FQIHSvStE3T2xabk86srcbK70GxzkUmnhALw9dZZBWCbenih6YhpccLZBSNalVdD N9LZ2scb2T1otrdGIbDCCJS/0qn+bY7Qxtmzzv5F6m0hnGy5GFvdTehIgVMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdh04v1zAZVVJWgrSn3Mp2usu/VowHwYDVR0j BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1 Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkJ6TavOwlbkeJ8tDqNn2j71pvREkgDH6LJ YwvWo6MYI0c1njeGunkw+2/HwZEPkBS0PeUeaghtCBnKP3ox1a8P0TTYwa81u3T9 hkjnXlTIqCiWRyV954BRXRre/xKi+rq57kxWS0877SBsAUXloZJk9iwFvVRZJsvA Gb+1kp1xVrOSRdKzNwLaDjM2S19vGEayGf4O2JbIrhqcA02kAyfVNNU3g/+Q+dbT 9M/MPCxOikZrnMoIHXEvj2O3k33+FjD03JboVONdKVuAYa2yv97Mc6zpHNcH5ExT w8UXzBv4FKEidAoHzEKUuTOZi9ahCXSDJ5yysRKJVnO2DbNFO5M= -----END CERTIFICATE-----Generated at Tue Nov 3 15:57:58 2026 by rpki-client