$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft File: 677938123D24C0A27D10E007C474D99FC455C86B.mft (raw, json) Hash identifier: +iRNKIBm1bNtjk9o6ZWigZfFEqXJOISpw8NfFBnYQzo= Subject key identifier: 2E:4D:13:59:01:2C:21:E9:12:9C:24:23:32:95:A4:46:BB:6A:60:25 Authority key identifier: 67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B Certificate issuer: /CN=677938123D24C0A27D10E007C474D99FC455C86B Certificate serial: 07F2868541300F79AD33EF3AB6E72E5D1FA07E5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 09:14:35 +0000 Manifest this update: Tue 03 Nov 2026 09:09:35 +0000 Manifest next update: Wed 04 Nov 2026 09:16:35 +0000 Files and hashes: 1: 677938123D24C0A27D10E007C474D99FC455C86B.crl (hash: xQGhScjMeE2t9DOOWoTFoPoeSgQLcHQXZY4EIuxqrdA=) 2: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: 4Cc4QPAN4qbF7Ai91llZsgvFRMCExHlGGbgV9qW0tuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 09:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f2:86:85:41:30:0f:79:ad:33:ef:3a:b6:e7:2e:5d:1f:a0:7e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677938123D24C0A27D10E007C474D99FC455C86B Validity Not Before: Nov 3 09:09:35 2026 GMT Not After : Nov 4 09:16:35 2026 GMT Subject: CN=2E4D1359012C21E9129C24233295A446BB6A6025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:b8:17:4f:08:df:b7:ac:90:d6:08:f6:f7: c3:f7:b1:b8:dc:b2:01:25:1c:43:5c:38:13:09:09: 13:34:8f:db:cb:62:f5:ef:6e:c6:de:0d:6b:19:eb: 7f:9e:e4:d8:83:71:63:0b:24:37:e4:db:94:8b:35: 9e:3b:d8:27:83:f6:8f:e4:21:cc:8b:5f:80:cd:6a: 54:dd:98:43:49:2f:4a:62:e0:0f:c3:97:4e:ff:be: 4c:5c:d3:23:91:6e:db:ad:6b:19:79:e9:6d:f3:e6: f0:cc:89:78:2c:ac:2f:3a:03:6c:21:3d:5b:00:36: 92:8f:53:5d:75:72:97:c5:e2:ef:10:bc:dd:2a:0f: 25:2b:e2:30:71:3d:85:4d:29:38:1f:c0:e6:85:00: 40:cd:fa:bc:a5:c7:66:07:f2:3e:ea:87:07:d1:ba: ff:21:a6:d4:89:f4:c2:06:25:cb:48:1d:3b:74:d1: 75:2c:c8:ce:82:1a:84:9b:13:72:3e:3e:e2:f7:00: b5:a6:a4:2b:8c:04:1d:f9:be:c5:4a:40:2c:5e:eb: 47:11:b7:97:48:69:b9:cf:79:19:93:82:c0:a5:d9: eb:5a:1e:e7:04:ee:9a:63:17:a7:67:db:76:1a:53: 4e:f8:fc:ea:32:e9:65:29:07:75:6d:65:53:86:b0: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4D:13:59:01:2C:21:E9:12:9C:24:23:32:95:A4:46:BB:6A:60:25 X509v3 Authority Key Identifier: keyid:67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:98:6f:af:3f:88:5a:64:fe:37:2a:ae:26:05:fc:1d:6c:72: 38:00:d1:ea:07:74:f2:87:69:60:2d:ad:f0:fb:00:bf:33:f6: f2:6d:70:d5:ec:c3:37:38:85:1b:2d:82:4c:5c:25:cb:ca:71: 2e:ce:44:29:63:3e:19:e3:be:a2:a6:32:a5:cc:e1:da:08:20: 50:49:6d:8a:a4:5d:3d:af:35:d0:1a:60:d3:50:75:9c:d6:d1: 18:34:73:12:49:08:96:f8:58:f2:8d:ca:e2:01:4f:73:7a:52: a7:6b:e5:e2:a8:2b:27:3f:a3:20:44:94:33:08:01:de:4a:94: c8:c1:da:ab:dc:74:9b:33:a1:d4:c2:9b:67:57:9d:79:be:19: 92:f9:71:70:82:22:6f:a3:e8:b0:9b:6a:24:cf:9e:52:51:f3: f0:a3:3b:81:4e:46:24:0d:e9:26:91:4a:30:ad:29:ff:d3:2b: 97:1c:4e:ab:21:be:84:71:2c:1b:fc:12:7b:c3:66:a5:c2:32: 56:48:85:76:23:76:a1:88:13:55:b3:66:7e:d9:f5:60:19:86: c4:a0:35:84:bc:1f:49:d5:7b:1e:1a:97:23:ad:86:3f:05:0f: a2:aa:59:f2:3a:b0:41:26:2d:ac:51:82:16:9c:8f:0f:48:bc: 5c:5b:63:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/KGhUEwD3mtM+86tucuXR+gflwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3OTM4MTIzRDI0QzBBMjdEMTBFMDA3QzQ3NEQ5OUZD NDU1Qzg2QjAeFw0yNjExMDMwOTA5MzVaFw0yNjExMDQwOTE2MzVaMDMxMTAvBgNV BAMTKDJFNEQxMzU5MDEyQzIxRTkxMjlDMjQyMzMyOTVBNDQ2QkI2QTYwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k7gXTwjft6yQ1gj298P3sbjc sgElHENcOBMJCRM0j9vLYvXvbsbeDWsZ63+e5NiDcWMLJDfk25SLNZ472CeD9o/k IcyLX4DNalTdmENJL0pi4A/Dl07/vkxc0yORbtutaxl56W3z5vDMiXgsrC86A2wh PVsANpKPU111cpfF4u8QvN0qDyUr4jBxPYVNKTgfwOaFAEDN+rylx2YH8j7qhwfR uv8hptSJ9MIGJctIHTt00XUsyM6CGoSbE3I+PuL3ALWmpCuMBB35vsVKQCxe60cR t5dIabnPeRmTgsCl2etaHucE7ppjF6dn23YaU074/Ooy6WUpB3VtZVOGsNaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULk0TWQEsIekSnCQjMpWkRrtqYCUwHwYDVR0j BBgwFoAUZ3k4Ej0kwKJ9EOAHxHTZn8RVyGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTViYWUzMGMtYjM2My00MDdiLWEwYWItMzE1NGViMzA5YWU5LzAvNjc3OTM4MTIz RDI0QzBBMjdEMTBFMDA3QzQ3NEQ5OUZDNDU1Qzg2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Nzc5MzgxMjNEMjRDMEEyN0QxMEUwMDdDNDc0RDk5RkM0NTVD ODZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvNjc3OTM4MTIzRDI0QzBBMjdEMTBFMDA3QzQ3NEQ5 OUZDNDU1Qzg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaYb68/iFpk/jcqriYF/B1scjgA0eoHdPKH aWAtrfD7AL8z9vJtcNXswzc4hRstgkxcJcvKcS7ORCljPhnjvqKmMqXM4doIIFBJ bYqkXT2vNdAaYNNQdZzW0Rg0cxJJCJb4WPKNyuIBT3N6Uqdr5eKoKyc/oyBElDMI Ad5KlMjB2qvcdJszodTCm2dXnXm+GZL5cXCCIm+j6LCbaiTPnlJR8/CjO4FORiQN 6SaRSjCtKf/TK5ccTqshvoRxLBv8EnvDZqXCMlZIhXYjdqGIE1WzZn7Z9WAZhsSg NYS8H0nVex4alyOthj8FD6KqWfI6sEEmLaxRghacjw9IvFxbY+4= -----END CERTIFICATE-----Generated at Tue Nov 3 15:38:32 2026 by rpki-client