$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: yFlG+ThTrGHwDsYgfxsmAYWBUiPFqfY7xCdgpeICVzc= Subject key identifier: C2:B3:45:E4:63:4C:A9:A6:B7:E6:20:AB:D5:09:7C:B2:42:5E:24:A1 Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 424285A838FEF124F1C5E764D0BFE078B6DEB295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 10:25:42 +0000 Manifest this update: Mon 02 Nov 2026 10:20:42 +0000 Manifest next update: Tue 03 Nov 2026 13:00:42 +0000 Files and hashes: 1: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: JDad1LOLElI6JB6Hqn2ZTnLJ3d1axKRrRL6qUGdvSFg=) 2: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 3: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) 4: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:42:85:a8:38:fe:f1:24:f1:c5:e7:64:d0:bf:e0:78:b6:de:b2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Nov 2 10:20:42 2026 GMT Not After : Nov 3 13:00:42 2026 GMT Subject: CN=C2B345E4634CA9A6B7E620ABD5097CB2425E24A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:0c:b7:d3:ec:40:74:7f:35:59:1b:f4:13: 82:f3:be:22:f2:8d:f6:f3:09:fd:e1:01:fd:a1:16: 04:80:79:ca:8f:fb:e4:9b:0a:fc:3c:09:39:e2:e3: 39:ae:dd:35:9f:2a:81:6f:09:c7:fe:ed:b7:a4:5e: 18:2b:ac:ef:f3:4d:63:ca:d5:af:a5:e5:e7:0e:60: 5d:da:c0:35:15:ad:bc:b4:1a:1a:f6:e0:d6:15:19: 24:78:ed:30:04:88:88:c6:fa:38:a9:89:08:e3:5e: c7:f2:0d:8b:31:4e:f3:da:a5:91:ea:74:0a:af:43: 67:4a:65:09:54:98:14:4f:15:ed:fc:68:b8:d8:2c: 7d:52:58:75:8a:3f:0b:c2:42:48:f9:10:66:fb:d9: 43:cd:4b:e9:2e:65:77:cf:37:0d:a9:51:54:62:6c: 54:7c:aa:6e:76:5b:16:63:14:09:b9:3c:69:98:34: 2d:72:55:38:5f:d1:40:7f:93:a6:ad:ab:b8:dc:36: e4:14:17:bc:dd:e0:49:9e:41:b4:9c:2c:80:dd:3c: da:c0:a3:83:be:9a:a9:e9:61:7f:6c:53:ef:a1:3a: 97:80:49:36:0b:e4:8f:c0:91:9c:6b:02:8d:13:27: c7:fe:ac:ce:af:7c:c4:93:e5:2a:7e:f8:bb:98:68: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:45:E4:63:4C:A9:A6:B7:E6:20:AB:D5:09:7C:B2:42:5E:24:A1 X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:76:d1:c7:08:d3:7f:f9:da:c3:c6:9c:39:1c:3d:f5:02: 4f:8b:0a:63:63:0e:f6:74:dd:d7:36:f8:b1:c4:4c:eb:a1:d9: 51:bf:be:87:35:aa:40:85:03:8c:34:e3:32:60:e8:77:fa:50: 57:c8:38:b8:c5:ec:34:5b:fd:55:d8:77:3f:69:01:9f:b3:87: 9f:f3:0e:7e:a5:da:cf:3d:8d:29:fd:ae:50:23:1d:0e:1d:76: fe:ce:fd:3c:2c:31:5f:c4:38:7a:df:c7:a4:37:96:cf:2b:96: 82:c5:2c:ce:55:9b:36:4d:53:05:bb:22:47:32:24:d9:f3:b3: 0a:f0:bf:0c:32:ff:53:03:da:9e:a5:67:0e:38:b2:51:24:73: 97:9e:6c:74:89:8c:3a:0b:cb:6e:3e:36:66:39:07:27:9c:bd: 9d:ec:19:87:13:f0:58:35:e6:67:9d:4c:e5:e1:46:3a:45:e9: 70:36:f7:f9:e0:87:d4:05:2e:83:d7:66:8f:5f:06:8a:cc:d6: 7d:ae:20:a9:7a:d3:e6:a3:4d:62:27:45:15:9f:76:ab:73:7a: 4b:3e:fe:b6:ee:38:f5:f0:d2:45:92:61:11:c9:f2:34:53:59: 0b:60:7e:88:62:43:06:b4:63:bf:ed:07:da:0d:8b:f0:ca:dc: b9:73:dc:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkKFqDj+8STxxedk0L/geLbespUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjExMDIxMDIwNDJaFw0yNjExMDMxMzAwNDJaMDMxMTAvBgNV BAMTKEMyQjM0NUU0NjM0Q0E5QTZCN0U2MjBBQkQ1MDk3Q0IyNDI1RTI0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI9gy30+xAdH81WRv0E4LzviLy jfbzCf3hAf2hFgSAecqP++SbCvw8CTni4zmu3TWfKoFvCcf+7bekXhgrrO/zTWPK 1a+l5ecOYF3awDUVrby0Ghr24NYVGSR47TAEiIjG+jipiQjjXsfyDYsxTvPapZHq dAqvQ2dKZQlUmBRPFe38aLjYLH1SWHWKPwvCQkj5EGb72UPNS+kuZXfPNw2pUVRi bFR8qm52WxZjFAm5PGmYNC1yVThf0UB/k6atq7jcNuQUF7zd4EmeQbScLIDdPNrA o4O+mqnpYX9sU++hOpeASTYL5I/AkZxrAo0TJ8f+rM6vfMST5Sp++LuYaHG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrNF5GNMqaa35iCr1Ql8skJeJKEwHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr2dtHHCNN/+drDxpw5HD31Ak+LCmNjDvZ0 3dc2+LHETOuh2VG/voc1qkCFA4w04zJg6Hf6UFfIOLjF7DRb/VXYdz9pAZ+zh5/z Dn6l2s89jSn9rlAjHQ4ddv7O/TwsMV/EOHrfx6Q3ls8rloLFLM5VmzZNUwW7Ikcy JNnzswrwvwwy/1MD2p6lZw44slEkc5eebHSJjDoLy24+NmY5ByecvZ3sGYcT8Fg1 5medTOXhRjpF6XA29/ngh9QFLoPXZo9fBorM1n2uIKl60+ajTWInRRWfdqtzeks+ /rbuOPXw0kWSYRHJ8jRTWQtgfohiQwa0Y7/tB9oNi/DK3Llz3Ow= -----END CERTIFICATE-----Generated at Mon Nov 2 14:32:42 2026 by rpki-client