$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: dKqsPSoFVAgNhngJDQcQEIVzOSpN/jymi+DI8pbshcA= Subject key identifier: 89:72:D7:33:87:3C:99:70:93:09:3D:9B:5C:78:25:EF:3B:4B:87:ED Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 5B5D32D4A41F92779AAE31A21DA2D48B7D311BA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 08:18:39 +0000 Manifest this update: Wed 04 Nov 2026 08:13:39 +0000 Manifest next update: Thu 05 Nov 2026 11:21:39 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) 4: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: qSRGQmWBPbLX1m1Ox5iBgv2Nj5KAIgxF1wW8y8eMWOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5d:32:d4:a4:1f:92:77:9a:ae:31:a2:1d:a2:d4:8b:7d:31:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: Nov 4 08:13:39 2026 GMT Not After : Nov 5 11:21:39 2026 GMT Subject: CN=8972D733873C997093093D9B5C7825EF3B4B87ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:96:68:00:59:0b:6d:3f:a0:95:64:c5:9b: bf:95:5b:fe:37:8f:f2:95:1d:4f:6f:84:2f:de:b1: 44:a9:0c:64:fc:eb:28:95:28:65:0f:26:92:a5:db: b5:43:82:47:c0:24:03:42:14:27:ab:f5:a3:b4:03: 03:60:b8:1f:58:49:ff:ca:08:5a:38:06:6c:0e:1a: 73:3a:da:a9:48:0d:c9:38:2e:82:96:85:6c:c8:31: 50:07:62:bc:ce:43:6a:b1:a8:60:90:ff:92:46:52: d4:66:3c:fc:81:a9:39:7b:8a:28:5b:e3:ff:d7:40: 1b:be:3d:33:74:6b:88:a0:fa:49:97:17:86:12:85: 54:78:51:38:73:d8:20:14:9c:bf:e1:6c:15:1b:8a: 67:bb:29:c1:21:df:a3:19:84:90:9a:e1:91:f5:1d: b1:43:63:0b:49:f3:9c:27:4a:73:9b:1e:61:65:34: 53:72:d8:04:db:d2:c1:11:2e:9b:40:60:1a:e2:ab: 33:26:f2:e3:99:5d:64:39:e0:74:db:c8:f3:f0:dc: c5:32:09:7e:32:62:9d:de:82:72:8d:7e:28:cc:2e: ce:51:3d:ce:70:1f:9c:7f:84:29:14:53:72:81:f2: 6d:91:24:e9:ec:a5:ef:93:d1:14:9e:04:26:dd:8f: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:72:D7:33:87:3C:99:70:93:09:3D:9B:5C:78:25:EF:3B:4B:87:ED X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:29:0e:c7:6a:a2:0f:a3:cd:e2:b6:ef:05:bd:b1:57:7e:b8: 21:ae:79:be:30:2a:92:39:8a:bd:09:11:f2:38:4c:e1:e9:b1: d7:03:59:80:2c:0b:ca:21:dd:ea:f0:27:c1:b5:05:28:1a:cc: 9a:4e:38:e0:c3:ed:20:62:4d:e8:7d:e8:1b:39:ee:76:9b:99: b9:8e:57:e2:08:ac:b0:d3:6e:a2:ef:d8:78:b0:96:37:58:01: 08:81:90:0f:8d:4e:da:17:86:13:f9:62:6b:ed:dd:1d:2a:e9: 43:15:61:15:a6:8d:fc:06:a4:86:be:f9:84:38:d5:05:28:56: 8a:75:6d:80:4b:2f:c6:39:c7:41:23:96:3a:36:30:79:00:10: cd:f9:e4:45:00:27:f4:8d:1c:39:54:a4:37:89:a2:9b:34:3c: 2d:d2:52:98:98:40:45:35:2a:80:42:ca:20:39:12:61:46:bd: 7b:e9:ea:bd:17:85:8a:7c:b1:12:ad:9b:b3:e8:d2:3f:3b:1f: 58:fb:48:19:c3:28:08:56:8d:a8:35:d3:7d:21:48:7a:25:33: 15:e0:65:54:ae:78:88:1e:1f:f7:b8:22:af:de:84:93:3e:4b: cf:24:c1:65:4f:1d:57:39:2a:ff:d1:84:44:58:87:9c:88:cd: d5:12:38:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW10y1KQfknearjGiHaLUi30xG6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjExMDQwODEzMzlaFw0yNjExMDUxMTIxMzlaMDMxMTAvBgNV BAMTKDg5NzJENzMzODczQzk5NzA5MzA5M0Q5QjVDNzgyNUVGM0I0Qjg3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3pZoAFkLbT+glWTFm7+VW/43 j/KVHU9vhC/esUSpDGT86yiVKGUPJpKl27VDgkfAJANCFCer9aO0AwNguB9YSf/K CFo4BmwOGnM62qlIDck4LoKWhWzIMVAHYrzOQ2qxqGCQ/5JGUtRmPPyBqTl7iihb 4//XQBu+PTN0a4ig+kmXF4YShVR4UThz2CAUnL/hbBUbime7KcEh36MZhJCa4ZH1 HbFDYwtJ85wnSnObHmFlNFNy2ATb0sERLptAYBriqzMm8uOZXWQ54HTbyPPw3MUy CX4yYp3egnKNfijMLs5RPc5wH5x/hCkUU3KB8m2RJOnspe+T0RSeBCbdjwYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXLXM4c8mXCTCT2bXHgl7ztLh+0wHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0pDsdqog+jzeK27wW9sVd+uCGueb4wKpI5 ir0JEfI4TOHpsdcDWYAsC8oh3erwJ8G1BSgazJpOOODD7SBiTeh96Bs57nabmbmO V+IIrLDTbqLv2HiwljdYAQiBkA+NTtoXhhP5Ymvt3R0q6UMVYRWmjfwGpIa++YQ4 1QUoVop1bYBLL8Y5x0Ejljo2MHkAEM355EUAJ/SNHDlUpDeJops0PC3SUpiYQEU1 KoBCyiA5EmFGvXvp6r0XhYp8sRKtm7Po0j87H1j7SBnDKAhWjag1030hSHolMxXg ZVSueIgeH/e4Iq/ehJM+S88kwWVPHVc5Kv/RhERYh5yIzdUSOOg= -----END CERTIFICATE-----Generated at Wed Nov 4 12:13:55 2026 by rpki-client