$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: ncYVY1CNwHoHRBjX9gAt6KtNxcmPkub4OkgSGDkdQJE= Subject key identifier: 18:A9:F1:18:2A:EA:F3:54:BF:01:A8:9B:82:59:37:4A:91:1A:FB:B4 Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 08E182E053227D14F63190C802D2B9F89F768164 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 21:39:40 +0000 Manifest this update: Mon 02 Nov 2026 21:34:40 +0000 Manifest next update: Tue 03 Nov 2026 21:48:40 +0000 Files and hashes: 1: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: EXWv9v66XpGhkF0/SSRQXEise9j2sDmQHi7hBTscrWw=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e1:82:e0:53:22:7d:14:f6:31:90:c8:02:d2:b9:f8:9f:76:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: Nov 2 21:34:40 2026 GMT Not After : Nov 3 21:48:40 2026 GMT Subject: CN=18A9F1182AEAF354BF01A89B8259374A911AFBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:2e:6f:69:dc:c5:b3:45:a9:21:47:f0:e7: 12:69:ff:9f:7a:55:af:98:a3:f3:da:f2:6b:f3:d8: 98:a0:2c:e1:d1:c1:0d:27:b7:7d:10:cc:83:01:ab: 22:f6:a3:7e:98:23:36:d6:5a:ba:05:b6:71:0c:6a: 47:d3:90:c5:03:95:07:ae:c3:b4:0d:ce:45:92:7d: 31:e3:0d:48:d7:9d:57:22:47:6e:4c:1f:2e:88:f7: f1:33:83:cd:b8:e9:d3:23:0b:3a:67:e1:a7:33:6d: 39:cd:b6:8f:de:64:13:53:64:42:bd:0c:e6:e3:3c: 3a:c7:b3:29:79:0d:c5:cb:58:a0:4a:cd:dd:46:c4: 54:bc:f0:60:48:3f:6c:b6:01:84:ec:06:64:b1:35: 54:77:4a:2e:cd:f3:97:ca:03:f5:6b:42:34:52:8d: 4c:19:84:76:e3:63:16:b7:40:64:6c:dd:86:cb:e2: fb:1f:30:ea:7e:a1:85:e2:48:76:89:09:78:88:91: d2:19:cf:32:3a:4d:d2:0e:67:23:99:45:60:7c:50: d9:45:2b:52:de:22:98:6a:fc:a4:c3:b2:cc:35:76: f7:56:e1:6c:73:52:cd:22:2e:b4:16:ec:83:c1:45: 42:d2:bf:f4:3b:7b:c4:99:01:f5:64:fc:f8:1a:c0: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:F1:18:2A:EA:F3:54:BF:01:A8:9B:82:59:37:4A:91:1A:FB:B4 X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:79:23:ab:05:74:71:34:09:c8:f5:1a:1c:40:af:e1:f4:c4: 21:3d:3b:09:cd:4d:85:25:c7:bd:7c:10:9d:d9:f6:39:b7:a2: 51:5a:d8:49:5d:13:8d:20:50:d6:f9:82:b0:05:a7:9b:91:72: d5:38:ac:b8:56:87:a8:12:c4:63:52:82:de:78:fb:5f:b9:f8: 37:26:00:64:e7:76:27:c1:5d:9c:33:f5:12:b4:cc:61:8c:ce: 6d:71:f5:0b:2f:33:31:31:5e:d9:05:55:75:20:57:3e:78:45: 25:6c:1b:bf:69:0c:d4:1d:b7:c6:d8:39:b3:77:a7:1f:9b:eb: 43:53:e9:33:b0:70:d1:c9:4f:a8:4c:07:88:b1:44:40:d3:ef: cb:a2:0f:82:ea:e0:68:ef:24:ad:d8:97:56:17:01:45:e5:e9: 39:6c:ef:e3:ca:d7:8d:cb:66:87:c9:97:07:6f:dd:8c:bf:92: 32:69:d3:6c:b1:00:4c:db:70:92:80:4b:f2:df:6d:ca:ad:3e: e3:65:60:a1:e7:5c:e0:5b:1d:19:7f:36:61:cd:f7:47:64:82: 75:8d:32:bf:09:41:08:96:43:4e:49:86:0a:39:4c:72:9b:2e: fe:f8:ca:b1:8d:34:9d:5e:c9:b8:2b:42:2b:ec:8c:c3:17:39: 63:12:8e:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOGC4FMifRT2MZDIAtK5+J92gWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjExMDIyMTM0NDBaFw0yNjExMDMyMTQ4NDBaMDMxMTAvBgNV BAMTKDE4QTlGMTE4MkFFQUYzNTRCRjAxQTg5QjgyNTkzNzRBOTExQUZCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+S5vadzFs0WpIUfw5xJp/596 Va+Yo/Pa8mvz2JigLOHRwQ0nt30QzIMBqyL2o36YIzbWWroFtnEMakfTkMUDlQeu w7QNzkWSfTHjDUjXnVciR25MHy6I9/Ezg8246dMjCzpn4aczbTnNto/eZBNTZEK9 DObjPDrHsyl5DcXLWKBKzd1GxFS88GBIP2y2AYTsBmSxNVR3Si7N85fKA/VrQjRS jUwZhHbjYxa3QGRs3YbL4vsfMOp+oYXiSHaJCXiIkdIZzzI6TdIOZyOZRWB8UNlF K1LeIphq/KTDssw1dvdW4WxzUs0iLrQW7IPBRULSv/Q7e8SZAfVk/PgawDwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKnxGCrq81S/Aaibglk3SpEa+7QwHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH15I6sFdHE0Ccj1GhxAr+H0xCE9OwnNTYUl x718EJ3Z9jm3olFa2EldE40gUNb5grAFp5uRctU4rLhWh6gSxGNSgt54+1+5+Dcm AGTndifBXZwz9RK0zGGMzm1x9QsvMzExXtkFVXUgVz54RSVsG79pDNQdt8bYObN3 px+b60NT6TOwcNHJT6hMB4ixREDT78uiD4Lq4GjvJK3Yl1YXAUXl6Tls7+PK143L ZofJlwdv3Yy/kjJp02yxAEzbcJKAS/LfbcqtPuNlYKHnXOBbHRl/NmHN90dkgnWN Mr8JQQiWQ05Jhgo5THKbLv74yrGNNJ1eybgrQivsjMMXOWMSjhU= -----END CERTIFICATE-----Generated at Tue Nov 3 03:54:13 2026 by rpki-client