$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: 6k/mhsctoPhxX3CFuHPVWiUlvPMKjVQvBg2R6usMAyA= Subject key identifier: D4:67:5A:42:45:FB:F8:51:D6:CF:D9:B9:F7:4A:FE:BD:57:7C:BF:4D Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 3553ADA80AF36D917D0DD3B82324E217B1A59B3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 09:14:34 +0000 Manifest this update: Tue 03 Nov 2026 09:09:34 +0000 Manifest next update: Wed 04 Nov 2026 13:03:34 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 2: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: nTriwUhP4FC6kGUEk03u9V9nEnwU0qLQqEMOkm/fujo=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:53:ad:a8:0a:f3:6d:91:7d:0d:d3:b8:23:24:e2:17:b1:a5:9b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Nov 3 09:09:34 2026 GMT Not After : Nov 4 13:03:34 2026 GMT Subject: CN=D4675A4245FBF851D6CFD9B9F74AFEBD577CBF4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:82:f7:52:9c:ff:f2:d2:02:5a:dd:67:09: 7c:81:ed:5b:98:ef:21:7c:61:e0:6b:fb:6e:2b:f3: 25:b5:8e:16:65:8a:f2:e3:db:37:6d:2e:da:10:54: c4:70:e3:38:1d:2f:a9:c8:78:c1:88:de:8d:8e:45: b0:a8:1c:58:4a:52:3a:12:19:9a:a4:7f:ef:1e:4f: e8:7e:5f:bd:34:ed:21:56:a1:23:9b:55:fc:ba:29: d2:cf:2c:a6:8c:36:6a:70:45:cf:5a:f8:ba:a3:23: cc:25:5b:fd:2f:40:5d:a7:56:70:ac:3f:0b:e9:26: 33:a8:1a:26:47:7e:f5:ef:33:85:da:94:41:3d:d0: 12:b6:b2:94:1a:17:aa:44:10:77:2d:22:93:2d:12: 1b:87:71:6b:4e:8b:b8:9e:fe:35:5e:e0:d7:75:74: 70:96:a1:3e:cf:a3:8e:02:38:5a:1b:f6:f8:83:ac: 01:2e:5c:9a:3e:24:66:aa:d9:31:cd:c6:39:a2:13: 71:42:da:8c:be:d5:23:ff:8e:2e:d3:4c:a8:dd:28: 0d:36:07:1b:6c:b3:af:19:6e:52:bc:37:f3:d6:6f: 2f:3d:9b:43:ed:73:1a:45:ce:b5:5f:c4:5b:fd:00: 3c:60:ca:b2:00:37:22:1c:9b:5a:ad:89:1f:a2:ff: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:5A:42:45:FB:F8:51:D6:CF:D9:B9:F7:4A:FE:BD:57:7C:BF:4D X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bf:ec:28:97:e8:12:40:5a:73:00:84:9c:6d:90:87:af:39: 0d:f0:49:71:75:4e:a8:b4:fe:00:6f:3f:88:be:06:46:39:91: 2e:b6:92:30:be:0d:a3:91:c4:07:dc:5c:d9:84:6a:f6:fb:9e: 8f:a8:35:07:aa:3e:af:2d:3c:36:ae:91:7a:bb:02:ce:b2:29: 5c:82:28:24:ed:f4:83:93:52:85:32:39:c4:9d:c6:16:f2:6d: 34:22:1f:f3:3b:52:06:1a:1e:4c:ee:67:a2:78:cf:22:31:55: 48:91:04:fc:18:a3:03:e1:58:7c:3a:d1:00:31:b8:3f:92:0c: 7b:e5:8f:c6:fa:e6:a2:d4:f4:60:31:4d:bd:f3:9b:a7:d9:d4: 6f:aa:07:95:d8:7e:4f:04:d8:00:9a:92:82:75:e9:06:28:16: e0:0a:41:27:4b:93:c9:9b:40:56:a4:2b:df:00:a6:a5:8a:87: b2:e5:b8:b1:22:f6:dc:43:94:ac:34:77:73:b3:26:6d:7a:90: 98:75:a4:f6:4f:00:38:0c:60:6a:14:86:bf:e6:91:70:72:99: 72:17:ca:b0:36:cb:a2:e7:4f:ba:d2:0c:9b:d3:0a:b9:de:66: a6:f7:09:3e:50:c7:6b:73:49:c6:04:9d:dc:16:71:61:c4:a0: 2f:44:64:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVOtqArzbZF9DdO4IyTiF7Glmz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjExMDMwOTA5MzRaFw0yNjExMDQxMzAzMzRaMDMxMTAvBgNV BAMTKEQ0Njc1QTQyNDVGQkY4NTFENkNGRDlCOUY3NEFGRUJENTc3Q0JGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HYL3Upz/8tICWt1nCXyB7VuY 7yF8YeBr+24r8yW1jhZlivLj2zdtLtoQVMRw4zgdL6nIeMGI3o2ORbCoHFhKUjoS GZqkf+8eT+h+X7007SFWoSObVfy6KdLPLKaMNmpwRc9a+LqjI8wlW/0vQF2nVnCs PwvpJjOoGiZHfvXvM4XalEE90BK2spQaF6pEEHctIpMtEhuHcWtOi7ie/jVe4Nd1 dHCWoT7Po44COFob9viDrAEuXJo+JGaq2THNxjmiE3FC2oy+1SP/ji7TTKjdKA02 Bxtss68ZblK8N/PWby89m0PtcxpFzrVfxFv9ADxgyrIANyIcm1qtiR+i/9iXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GdaQkX7+FHWz9m590r+vVd8v00wHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa/7CiX6BJAWnMAhJxtkIevOQ3wSXF1Tqi0 /gBvP4i+BkY5kS62kjC+DaORxAfcXNmEavb7no+oNQeqPq8tPDaukXq7As6yKVyC KCTt9IOTUoUyOcSdxhbybTQiH/M7UgYaHkzuZ6J4zyIxVUiRBPwYowPhWHw60QAx uD+SDHvlj8b65qLU9GAxTb3zm6fZ1G+qB5XYfk8E2ACakoJ16QYoFuAKQSdLk8mb QFakK98ApqWKh7LluLEi9txDlKw0d3OzJm16kJh1pPZPADgMYGoUhr/mkXBymXIX yrA2y6LnT7rSDJvTCrneZqb3CT5Qx2tzScYEndwWcWHEoC9EZI0= -----END CERTIFICATE-----Generated at Tue Nov 3 19:38:11 2026 by rpki-client