$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: hFsy0j07pm116gSAUinsMXQeE1mrTbvGc020Mr3QUSI= Subject key identifier: D8:C1:A1:61:56:EB:1F:C4:87:C7:F4:CD:2C:87:43:28:EA:D5:1F:E4 Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 4EDA7D46E1E9BE944838713D271D293CB6406F82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 14:56:40 +0000 Manifest this update: Mon 02 Nov 2026 14:51:40 +0000 Manifest next update: Tue 03 Nov 2026 17:37:40 +0000 Files and hashes: 1: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) 2: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) 3: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) 4: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: 8s28apNJ4k/PgcmTcXXspvnGV+zbw2kA44YHFv3O9vI=) 5: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:da:7d:46:e1:e9:be:94:48:38:71:3d:27:1d:29:3c:b6:40:6f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: Nov 2 14:51:40 2026 GMT Not After : Nov 3 17:37:40 2026 GMT Subject: CN=D8C1A16156EB1FC487C7F4CD2C874328EAD51FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:d0:56:be:37:27:ff:63:e2:a4:ae:18:07: 02:3b:a3:50:60:69:51:54:75:9f:57:28:54:71:3a: 0a:3d:b0:43:8d:b9:c3:fb:7f:fc:34:93:59:e0:49: 8f:da:cc:33:29:26:86:ce:69:4a:51:f9:a6:02:75: 41:c0:53:b4:65:7c:83:84:97:d8:74:5b:27:01:2f: 0d:4b:ea:e1:83:9d:a7:ab:cf:1c:7d:72:ed:70:22: 66:24:3f:2e:62:9f:6b:a3:5d:ec:b3:f3:f2:98:d9: 11:bf:51:a2:1c:93:b6:ae:2d:b4:ba:c4:10:b3:f8: 4d:3a:be:50:5c:a0:e3:8d:dc:00:c5:b9:86:7c:c4: 5d:cd:06:df:10:85:b1:82:cd:f3:1f:53:58:e0:7b: b2:e4:cf:ec:cc:e5:75:5c:1d:bb:c6:17:e2:73:31: 5c:2f:d2:a9:c6:f6:4d:72:d6:58:b9:ca:51:4b:6c: d0:13:3c:f7:09:07:32:04:76:10:27:3a:1c:02:ae: 5b:bb:d3:f6:5f:3b:74:1d:b1:2d:a2:44:27:cb:0c: 26:c7:a2:1a:71:6a:c2:d3:ad:80:74:e6:37:bb:dc: 34:2f:81:1b:22:38:c6:66:e6:f3:6d:50:ad:02:37: f0:51:f0:9d:c0:b0:a1:11:72:ae:03:2b:50:d7:4a: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:A1:61:56:EB:1F:C4:87:C7:F4:CD:2C:87:43:28:EA:D5:1F:E4 X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:53:9d:6d:76:67:6d:e2:03:d2:52:68:ac:98:f4:9b:a4:bb: b9:f3:9a:11:fc:df:99:9d:17:db:4d:14:71:93:d2:0a:96:65: 5f:50:23:87:cb:a5:4b:a0:92:33:ac:41:65:ca:1d:05:f1:36: ed:af:56:cc:46:f8:93:b6:77:a1:11:4b:6e:95:b9:e4:d6:ff: 78:b5:ff:cb:82:c1:ac:12:4a:56:9c:d2:7a:25:23:a5:71:f6: e4:22:7c:59:2f:b8:4b:de:07:9a:41:ea:c8:16:7f:01:98:14: 3b:5b:8e:74:9f:6a:b9:26:a3:a2:b1:d2:ce:29:a7:ce:63:8a: e5:ef:92:33:c9:d3:f9:78:5c:75:c9:24:df:49:4d:66:7a:27: b1:f1:ac:e4:51:5f:35:a5:88:86:68:c5:ac:f3:95:37:8f:45: 0f:35:93:6b:4a:6f:cb:c2:87:c0:1c:50:85:bc:d0:f6:49:db: 26:0b:4f:8f:32:af:25:2d:92:ef:31:5b:a4:5a:1a:34:25:b1: 5b:03:2d:cb:75:73:16:db:e2:8f:95:a2:1b:23:40:6f:26:c6: 46:9a:d0:c6:7f:1d:07:17:9c:ab:d8:b3:64:38:4f:6d:3a:4c: bd:c9:1d:ac:94:b6:cd:d2:c0:95:e7:1a:62:fe:4c:37:17:44: 5d:42:14:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtp9RuHpvpRIOHE9Jx0pPLZAb4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjExMDIxNDUxNDBaFw0yNjExMDMxNzM3NDBaMDMxMTAvBgNV BAMTKEQ4QzFBMTYxNTZFQjFGQzQ4N0M3RjRDRDJDODc0MzI4RUFENTFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDisNBWvjcn/2PipK4YBwI7o1Bg aVFUdZ9XKFRxOgo9sEONucP7f/w0k1ngSY/azDMpJobOaUpR+aYCdUHAU7RlfIOE l9h0WycBLw1L6uGDnaerzxx9cu1wImYkPy5in2ujXeyz8/KY2RG/UaIck7auLbS6 xBCz+E06vlBcoOON3ADFuYZ8xF3NBt8QhbGCzfMfU1jge7Lkz+zM5XVcHbvGF+Jz MVwv0qnG9k1y1li5ylFLbNATPPcJBzIEdhAnOhwCrlu70/ZfO3QdsS2iRCfLDCbH ohpxasLTrYB05je73DQvgRsiOMZm5vNtUK0CN/BR8J3AsKERcq4DK1DXSuLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MGhYVbrH8SHx/TNLIdDKOrVH+QwHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJTnW12Z23iA9JSaKyY9Juku7nzmhH835md F9tNFHGT0gqWZV9QI4fLpUugkjOsQWXKHQXxNu2vVsxG+JO2d6ERS26VueTW/3i1 /8uCwawSSlac0nolI6Vx9uQifFkvuEveB5pB6sgWfwGYFDtbjnSfarkmo6Kx0s4p p85jiuXvkjPJ0/l4XHXJJN9JTWZ6J7HxrORRXzWliIZoxazzlTePRQ81k2tKb8vC h8AcUIW80PZJ2yYLT48yryUtku8xW6RaGjQlsVsDLct1cxbb4o+VohsjQG8mxkaa 0MZ/HQcXnKvYs2Q4T206TL3JHayUts3SwJXnGmL+TDcXRF1CFAQ= -----END CERTIFICATE-----Generated at Mon Nov 2 20:17:56 2026 by rpki-client