$ rpki-client -vvvf rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft File: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft (raw, json) Hash identifier: w/8SRPhzeoLXEQVrOyJNW4yIJmZxupntIDrY6KKbN00= Subject key identifier: 20:8F:2F:E4:21:CA:78:5E:BB:FF:45:8E:43:75:F5:51:58:FB:A8:1B Authority key identifier: F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D Certificate issuer: /CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D Certificate serial: 498D3DF3D714D3C106E634570298196EA545E025 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 08:23:30 +0000 Manifest this update: Tue 03 Nov 2026 08:18:30 +0000 Manifest next update: Wed 04 Nov 2026 09:13:30 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: k/K1jFj/VvSwfTvq1VNLpQ0GgYuMHptjXlWEbYgtnfA=) 2: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl (hash: OuqcmRYD+SAOX9gOruyY9kLjX4CYk7qItyuXoxjwuOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 09:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8d:3d:f3:d7:14:d3:c1:06:e6:34:57:02:98:19:6e:a5:45:e0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D Validity Not Before: Nov 3 08:18:30 2026 GMT Not After : Nov 4 09:13:30 2026 GMT Subject: CN=208F2FE421CA785EBBFF458E4375F55158FBA81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:50:9a:1d:b2:23:05:fb:ea:77:11:8b:32: 9f:8a:c3:e1:af:55:83:63:26:93:22:79:cc:ed:86: 1f:30:21:9e:38:68:aa:0f:76:8c:68:f4:ec:76:87: ba:14:04:5a:d5:88:30:1f:8f:cd:41:e6:f0:fa:bb: e1:0c:df:ee:45:a4:ad:66:29:6c:c0:7a:da:60:f9: 7c:05:57:5a:59:e8:b4:eb:15:56:59:b7:2b:4f:fb: 0a:e6:df:1b:44:1a:90:57:8f:27:5f:3b:3d:f3:9b: 3b:6f:09:0d:f1:32:aa:3f:fc:08:d7:74:06:2e:be: 1d:4e:1b:5b:f6:b2:33:6d:90:28:78:9e:05:9d:3c: 1c:6a:cc:73:d0:e2:30:ea:28:27:f7:9d:6b:b4:e5: 7a:76:ff:b3:09:43:5b:ce:f7:48:8f:8a:83:a7:f8: 2b:55:ad:78:3c:45:a9:85:a9:db:5a:2a:8f:be:28: 12:86:eb:c8:06:31:cf:33:91:dc:4c:b2:0c:f3:c5: 53:01:67:21:30:6a:1d:a9:e7:a2:0f:2d:b1:40:a7: c4:9c:34:91:b4:eb:79:91:6b:bc:05:b2:ef:db:5e: f0:f0:a6:89:3e:43:59:5f:d1:ca:55:a1:a5:43:55: 6e:65:5b:89:5f:a1:8a:64:47:ba:3f:e1:01:37:be: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8F:2F:E4:21:CA:78:5E:BB:FF:45:8E:43:75:F5:51:58:FB:A8:1B X509v3 Authority Key Identifier: keyid:F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:27:64:cd:eb:88:8e:f8:e8:d7:de:a5:1e:e3:20:fd:e7:1f: 8c:09:ac:e6:f2:f2:4e:d8:81:98:c3:e3:3f:c9:77:79:a3:29: 2a:bd:49:bc:0d:55:1b:b2:03:82:73:96:b9:1f:d5:cc:ce:75: 21:63:d9:20:1a:48:1c:cc:dc:14:97:4f:66:8b:e2:a8:df:df: f6:d2:8f:b6:d6:84:d6:a9:8d:f0:cd:fc:b2:2e:76:ae:34:98: de:09:e1:a5:cf:7f:e6:e2:1f:de:b5:f7:fd:e8:50:04:8f:f0: 52:93:d2:15:c1:a4:76:39:4b:37:73:31:1c:24:72:33:14:5c: 25:c5:8a:5f:8d:4a:9c:ec:5c:f0:4d:fe:4f:88:d7:7a:9e:39: 77:95:09:61:e8:86:d0:7f:2a:4f:e6:eb:7e:7d:be:70:e0:2a: 57:cb:f2:44:f3:42:ae:61:ce:3e:46:ca:e8:42:10:42:ce:85: 55:2c:fd:d1:06:c0:06:76:3e:33:0e:c6:de:df:ff:37:e8:f0: a8:f0:76:d8:d5:04:eb:29:51:43:f2:c5:d9:60:19:f6:9f:08: dc:d0:74:82:1c:59:83:8a:9d:9f:f3:ad:b8:90:e7:cc:bc:fd: 91:7c:da:43:54:f6:a8:f7:e6:b0:d0:ba:49:ad:f1:08:d0:c1: 68:27:9c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSY0989cU08EG5jRXApgZbqVF4CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdFMDI1MTc5QzJGQUU3QjVDREMwRDJFQ0FDMEI5NTgz N0IyNDIzRDAeFw0yNjExMDMwODE4MzBaFw0yNjExMDQwOTEzMzBaMDMxMTAvBgNV BAMTKDIwOEYyRkU0MjFDQTc4NUVCQkZGNDU4RTQzNzVGNTUxNThGQkE4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGFCaHbIjBfvqdxGLMp+Kw+Gv VYNjJpMieczthh8wIZ44aKoPdoxo9Ox2h7oUBFrViDAfj81B5vD6u+EM3+5FpK1m KWzAetpg+XwFV1pZ6LTrFVZZtytP+wrm3xtEGpBXjydfOz3zmztvCQ3xMqo//AjX dAYuvh1OG1v2sjNtkCh4ngWdPBxqzHPQ4jDqKCf3nWu05Xp2/7MJQ1vO90iPioOn +CtVrXg8RamFqdtaKo++KBKG68gGMc8zkdxMsgzzxVMBZyEwah2p56IPLbFAp8Sc NJG063mRa7wFsu/bXvDwpok+Q1lf0cpVoaVDVW5lW4lfoYpkR7o/4QE3vlmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUII8v5CHKeF67/0WOQ3X1UVj7qBswHwYDVR0j BBgwFoAU9+AlF5wvrntc3A0uysC5WDeyQj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgxZjQ0YWEtODlhMy00YmMzLWJiMjktZGI2Yzk4MmExMzZiLzAvRjdFMDI1MTc5 QzJGQUU3QjVDREMwRDJFQ0FDMEI5NTgzN0IyNDIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GN0UwMjUxNzlDMkZBRTdCNUNEQzBEMkVDQUMwQjk1ODM3QjI0 MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvRjdFMDI1MTc5QzJGQUU3QjVDREMwRDJFQ0FDMEI5 NTgzN0IyNDIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgnZM3riI746NfepR7jIP3nH4wJrOby8k7Y gZjD4z/Jd3mjKSq9SbwNVRuyA4Jzlrkf1czOdSFj2SAaSBzM3BSXT2aL4qjf3/bS j7bWhNapjfDN/LIudq40mN4J4aXPf+biH9619/3oUASP8FKT0hXBpHY5SzdzMRwk cjMUXCXFil+NSpzsXPBN/k+I13qeOXeVCWHohtB/Kk/m6359vnDgKlfL8kTzQq5h zj5GyuhCEELOhVUs/dEGwAZ2PjMOxt7f/zfo8KjwdtjVBOspUUPyxdlgGfafCNzQ dIIcWYOKnZ/zrbiQ58y8/ZF82kNU9qj35rDQukmt8QjQwWgnnPE= -----END CERTIFICATE-----Generated at Tue Nov 3 15:26:49 2026 by rpki-client