$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json) Hash identifier: UhrnMBLevj9QlF12ym8Wc2UqqrHVuKO6vhHQVF9K2Ls= Subject key identifier: D7:32:A1:DB:08:BA:B1:6A:80:BA:5E:38:41:78:C3:84:04:A0:04:34 Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Certificate serial: 0EAB85D911559BF79A998A08E5BDF86EC91E9018 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 12:08:17 +0000 Manifest this update: Wed 04 Nov 2026 12:03:17 +0000 Manifest next update: Thu 05 Nov 2026 13:56:17 +0000 Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=) 2: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: t/YphLveuEOnOj9EeYtjDEnBE8zf6qAsu+KCbzshaaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ab:85:d9:11:55:9b:f7:9a:99:8a:08:e5:bd:f8:6e:c9:1e:90:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Validity Not Before: Nov 4 12:03:17 2026 GMT Not After : Nov 5 13:56:17 2026 GMT Subject: CN=D732A1DB08BAB16A80BA5E384178C38404A00434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:0a:50:76:32:39:3f:61:71:58:12:01:95: 71:1b:d8:96:bf:3e:72:82:b2:87:72:80:1e:9d:a0: e3:0d:3d:ab:df:44:58:6d:80:c7:69:4a:78:81:d7: 0c:ac:f7:a1:f2:0c:d6:e0:4c:c7:54:24:fb:7f:0d: f3:46:9a:36:9b:16:37:08:01:db:c1:08:ef:e7:0f: d1:3d:2a:70:44:50:a6:ff:ac:f2:c9:01:a4:26:c6: 83:0d:02:4d:90:b9:bc:c8:90:4d:18:1a:4d:9f:3d: 84:b0:d5:ae:0a:1f:b9:a6:0f:1e:77:b5:44:7d:6f: 62:86:3f:91:a0:06:73:ea:ed:42:38:eb:14:b3:10: 1e:0e:c9:3e:cb:58:63:ef:c9:70:87:1e:64:5d:04: c6:aa:37:40:48:30:88:50:c9:51:0f:03:9b:f4:db: 6d:1c:5b:a0:0f:09:b0:96:56:43:e5:7a:b8:ef:71: 59:da:df:83:0c:f5:00:2d:f5:aa:ec:21:60:da:6c: cc:67:c5:af:9b:12:04:73:c4:2f:00:79:b8:3c:8f: 27:ac:31:a9:aa:7c:8d:3e:fe:3b:1d:d3:3e:7a:36: bc:ed:7d:d5:2a:26:25:87:d5:a6:c4:76:e1:02:78: f2:de:af:6c:c8:2e:a8:4a:37:80:69:e9:13:e8:5d: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:A1:DB:08:BA:B1:6A:80:BA:5E:38:41:78:C3:84:04:A0:04:34 X509v3 Authority Key Identifier: keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:89:92:59:9f:01:b0:57:c6:cc:e1:66:de:6e:80:ed:20:ff: ea:05:ad:d3:73:8f:df:b2:6d:81:be:b9:07:4f:79:fc:f9:eb: d5:64:b4:d4:2f:ac:39:37:33:35:e4:88:df:56:f4:24:11:77: dd:1b:25:33:78:86:a6:86:8e:59:2f:b7:0b:e0:74:36:d4:76: 94:c6:94:bf:ad:13:60:ba:fc:4e:ff:59:3c:0f:76:af:f6:1e: 0f:86:fd:d1:86:ac:d8:0c:cc:82:2c:aa:d7:3e:5d:91:0d:0d: 5a:b2:87:45:34:f5:53:e1:7d:11:58:88:b0:78:62:4f:1b:38: da:c4:7e:2e:9a:c6:9c:22:c3:12:fa:c1:20:79:f5:fd:f1:b7: 81:a6:7f:7c:aa:a9:35:d1:0b:46:42:d8:a3:6b:9a:62:c2:72: da:b5:cc:84:48:3a:c1:87:88:84:50:4d:f3:19:12:8a:6f:53: e5:71:28:a9:38:4a:b7:3d:f3:4a:09:9b:51:d1:5b:b0:aa:4d: e1:a2:6f:f4:91:d1:76:30:80:78:4f:e1:da:62:6c:39:16:45: 34:15:e3:8f:64:8b:f7:52:b5:22:81:36:16:a6:e1:68:c2:64: b2:c3:40:9b:01:9f:0d:9e:fd:ca:0a:8e:c9:c2:fa:56:e2:37: 0f:60:b4:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDquF2RFVm/eamYoI5b34bskekBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgw NzdFRkFBMzAeFw0yNjExMDQxMjAzMTdaFw0yNjExMDUxMzU2MTdaMDMxMTAvBgNV BAMTKEQ3MzJBMURCMDhCQUIxNkE4MEJBNUUzODQxNzhDMzg0MDRBMDA0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClkgpQdjI5P2FxWBIBlXEb2Ja/ PnKCsodygB6doOMNPavfRFhtgMdpSniB1wys96HyDNbgTMdUJPt/DfNGmjabFjcI AdvBCO/nD9E9KnBEUKb/rPLJAaQmxoMNAk2QubzIkE0YGk2fPYSw1a4KH7mmDx53 tUR9b2KGP5GgBnPq7UI46xSzEB4OyT7LWGPvyXCHHmRdBMaqN0BIMIhQyVEPA5v0 220cW6APCbCWVkPlerjvcVna34MM9QAt9arsIWDabMxnxa+bEgRzxC8Aebg8jyes MamqfI0+/jsd0z56NrztfdUqJiWH1abEduECePLer2zILqhKN4Bp6RPoXUVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zKh2wi6sWqAul44QXjDhASgBDQwHwYDVR0j BBgwFoAUEA5aQIZYQdVsWrnQzuchiAd++qMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4 NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgwNzdFRkFBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDBFNUE0MDg2NTg0MUQ1NkM1QUI5RDBDRUU3MjE4ODA3N0VG QUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIx ODgwNzdFRkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6JklmfAbBXxszhZt5ugO0g/+oFrdNzj9+y bYG+uQdPefz569VktNQvrDk3MzXkiN9W9CQRd90bJTN4hqaGjlkvtwvgdDbUdpTG lL+tE2C6/E7/WTwPdq/2Hg+G/dGGrNgMzIIsqtc+XZENDVqyh0U09VPhfRFYiLB4 Yk8bONrEfi6axpwiwxL6wSB59f3xt4Gmf3yqqTXRC0ZC2KNrmmLCctq1zIRIOsGH iIRQTfMZEopvU+VxKKk4Src980oJm1HRW7CqTeGib/SR0XYwgHhP4dpibDkWRTQV 449ki/dStSKBNham4WjCZLLDQJsBnw2e/coKjsnC+lbiNw9gtCE= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:25 2026 by rpki-client