$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json) Hash identifier: f1uD3nwPJYbIQa2QtkIEN7DpNiy+Zm6E3jaVM8d1Z7A= Subject key identifier: 46:D5:77:0C:55:0D:1F:3C:1D:45:8A:DA:BF:21:11:9D:86:7D:5B:D9 Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 36144CA4680DE0F434948A3A5C2A76B1974B8451 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 02:00:27 +0000 Manifest this update: Wed 04 Nov 2026 01:55:27 +0000 Manifest next update: Thu 05 Nov 2026 02:50:27 +0000 Files and hashes: 1: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: SQ+y5ZgT5LCgHwWJD7kpsCRLvN8wNTe+Sui+7WCxv8c=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:14:4c:a4:68:0d:e0:f4:34:94:8a:3a:5c:2a:76:b1:97:4b:84:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: Nov 4 01:55:27 2026 GMT Not After : Nov 5 02:50:27 2026 GMT Subject: CN=46D5770C550D1F3C1D458ADABF21119D867D5BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:d9:b4:f3:d0:9f:0f:c6:df:79:9b:e7:58: 3e:3f:2c:d6:30:ea:fd:3e:62:10:58:91:e3:9b:af: 17:77:14:b3:52:2c:11:20:03:35:0d:2d:c2:97:d7: 86:e9:19:7a:e5:61:c7:cd:da:3b:16:f2:6f:2f:93: d4:e8:63:e3:64:a0:05:4d:80:d1:90:6e:2b:34:c4: 29:14:92:9e:04:42:14:c4:35:fe:e8:66:00:b5:af: 5a:f6:66:6d:2e:10:33:49:41:92:28:c0:c8:69:b6: f6:36:dd:af:a3:75:30:d4:d0:bd:99:a3:76:f7:53: 29:19:51:2a:85:d0:cd:12:bd:13:1c:e7:50:a0:60: a4:e5:ac:c6:99:88:84:33:ca:33:74:d3:98:13:86: 80:11:91:0e:5b:61:df:22:5b:3b:cc:d1:32:f6:b4: 37:a1:b1:bc:22:ca:51:f5:a9:92:a2:2e:71:02:cf: a9:a4:51:9d:87:6e:a2:72:96:67:15:99:86:bd:0a: 10:ee:2e:f2:07:9a:0d:c1:a5:52:b4:70:f4:ae:a2: 95:3a:df:12:ab:6d:5d:36:cc:fd:f3:1f:4d:a4:9d: 56:91:c9:6e:d9:29:53:93:d7:3b:da:cc:86:eb:38: ca:59:9f:d8:b6:a1:fc:89:3c:c2:30:b1:86:3d:09: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:77:0C:55:0D:1F:3C:1D:45:8A:DA:BF:21:11:9D:86:7D:5B:D9 X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:56:f1:22:d4:4f:16:a7:f3:50:91:ac:0c:be:b9:a1:85:df: 04:6f:c7:cb:28:37:54:7b:8b:fd:72:33:a4:6d:c1:74:95:98: a2:86:65:6e:dc:50:10:c7:6c:52:78:03:98:cc:db:30:49:90: 95:7a:27:c1:4e:5a:f5:89:d1:a8:2d:64:ba:5a:8a:8d:2d:e7: 37:46:6a:21:5f:0e:bc:c9:a5:0f:82:c6:aa:a7:74:47:92:e7: 3b:9f:0f:ef:b7:94:04:51:34:be:be:fc:7f:2e:95:a2:23:ed: a8:d4:a4:dd:ab:0b:49:08:64:fb:33:83:8a:38:c6:a4:02:91: dd:9d:4c:aa:7d:6e:3d:0f:00:46:29:3e:35:7b:1e:7b:d9:91: 50:ba:98:7a:8d:c6:c0:7a:52:f8:65:76:76:03:74:75:29:c4: d8:26:2d:6f:b6:f0:92:37:8d:f6:10:7f:90:81:6b:0b:91:0e: 88:17:2d:5f:b6:f3:e5:fb:4b:c4:91:16:83:f0:f3:99:ae:b5: 20:9a:dd:05:01:64:b7:74:17:9c:9a:df:26:9b:78:c6:a2:db: 18:c7:85:fd:77:d3:41:78:c3:35:da:d3:c3:6e:af:41:c0:0d: 4f:ce:da:77:1b:67:e2:ec:78:4d:74:51:d7:83:2d:cf:3a:96: 38:d9:3d:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhRMpGgN4PQ0lIo6XCp2sZdLhFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjExMDQwMTU1MjdaFw0yNjExMDUwMjUwMjdaMDMxMTAvBgNV BAMTKDQ2RDU3NzBDNTUwRDFGM0MxRDQ1OEFEQUJGMjExMTlEODY3RDVCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmNm089CfD8bfeZvnWD4/LNYw 6v0+YhBYkeObrxd3FLNSLBEgAzUNLcKX14bpGXrlYcfN2jsW8m8vk9ToY+NkoAVN gNGQbis0xCkUkp4EQhTENf7oZgC1r1r2Zm0uEDNJQZIowMhptvY23a+jdTDU0L2Z o3b3UykZUSqF0M0SvRMc51CgYKTlrMaZiIQzyjN005gThoARkQ5bYd8iWzvM0TL2 tDehsbwiylH1qZKiLnECz6mkUZ2HbqJylmcVmYa9ChDuLvIHmg3BpVK0cPSuopU6 3xKrbV02zP3zH02knVaRyW7ZKVOT1zvazIbrOMpZn9i2ofyJPMIwsYY9CenjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURtV3DFUNHzwdRYravyERnYZ9W9kwHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRW8SLUTxan81CRrAy+uaGF3wRvx8soN1R7 i/1yM6RtwXSVmKKGZW7cUBDHbFJ4A5jM2zBJkJV6J8FOWvWJ0agtZLpaio0t5zdG aiFfDrzJpQ+CxqqndEeS5zufD++3lARRNL6+/H8ulaIj7ajUpN2rC0kIZPszg4o4 xqQCkd2dTKp9bj0PAEYpPjV7HnvZkVC6mHqNxsB6UvhldnYDdHUpxNgmLW+28JI3 jfYQf5CBawuRDogXLV+28+X7S8SRFoPw85mutSCa3QUBZLd0F5ya3yabeMai2xjH hf1300F4wzXa08Nur0HADU/O2ncbZ+LseE10UdeDLc86ljjZPeo= -----END CERTIFICATE-----Generated at Wed Nov 4 16:12:46 2026 by rpki-client