$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft File: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft (raw, json) Hash identifier: 3k2h35WOvAqTDAW5BDD3uL6gyBTfXKso/9aMht5Ja6c= Subject key identifier: 93:01:35:1A:E1:D4:64:44:05:67:F6:37:03:31:FA:A2:BF:2B:6E:1D Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68 Certificate issuer: /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68 Certificate serial: 058363CC6DD2808B7D70DD414EDC3007E099FCD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 06:36:31 +0000 Manifest this update: Wed 04 Nov 2026 06:31:31 +0000 Manifest next update: Thu 05 Nov 2026 09:48:31 +0000 Files and hashes: 1: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl (hash: GPn6YrtwyMcgz4+755YGJptTTc/7gt//qFUo8mWOY3E=) 2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:83:63:cc:6d:d2:80:8b:7d:70:dd:41:4e:dc:30:07:e0:99:fc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68 Validity Not Before: Nov 4 06:31:31 2026 GMT Not After : Nov 5 09:48:31 2026 GMT Subject: CN=9301351AE1D464440567F6370331FAA2BF2B6E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:48:b1:32:a1:f4:9b:27:58:56:0d:5b:3c: 6d:57:75:45:15:ae:48:77:1b:71:68:4d:3e:28:7d: 5e:eb:29:e2:e7:4f:01:00:bd:fe:ba:0e:4f:97:22: 92:99:04:c8:92:2f:8d:b9:31:57:8f:fe:0f:83:a0: 37:09:b1:7b:64:d3:f0:c1:0a:bf:35:d8:54:75:d0: 04:fa:d3:66:b8:56:80:2f:ac:db:76:18:37:7e:8d: 00:a9:16:0e:4a:9d:1f:c5:a7:14:4d:d7:19:67:44: c0:1f:05:08:c7:d3:e3:08:e5:35:30:6d:a5:e4:3e: c7:b2:51:d4:33:06:cf:96:65:3a:31:49:29:22:75: dd:b1:14:6f:0f:69:1e:67:ff:d5:1e:d9:bb:cd:57: 0d:a0:40:a1:79:22:94:7d:50:78:2e:ef:c2:db:ea: fc:e1:2b:11:45:0c:49:f5:15:b3:59:76:25:34:46: 93:f9:33:0a:a2:1b:14:bb:3b:47:03:4d:2d:c0:e1: 28:1e:ed:31:f9:b0:9c:0f:84:b4:91:4d:cd:69:21: 12:5b:76:90:3b:6f:94:6d:b0:c6:d6:90:8f:0e:db: 26:77:a6:07:a9:0b:bb:7b:23:d8:8b:c9:bd:a4:d8: f9:fc:37:91:f5:d6:38:14:07:95:76:d0:08:4c:d8: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:35:1A:E1:D4:64:44:05:67:F6:37:03:31:FA:A2:BF:2B:6E:1D X509v3 Authority Key Identifier: keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:66:47:95:3d:35:0c:e1:e4:a3:fe:fa:16:8b:0c:12:09: 8f:55:b6:41:8d:60:7e:31:2d:71:0a:53:8e:1c:07:1a:30:18: 2e:cf:6b:af:05:af:e1:8e:91:e7:c9:da:96:75:dc:1a:0a:31: 99:c1:1e:6d:ce:7f:4b:88:1b:95:d1:b1:59:fe:3d:b0:d5:97: c9:2a:bf:7e:66:f0:1a:16:4a:10:e1:4c:cb:19:e3:94:f8:d0: 5e:65:43:57:53:04:13:86:8e:ef:a9:46:54:6b:7e:23:b4:28: 22:ef:90:1c:cd:a2:e2:e5:68:2b:87:d3:31:1e:f7:50:d6:8a: 17:04:e8:17:c9:98:15:30:4e:3c:f8:0e:de:19:4c:b2:94:58: f9:d9:4b:05:36:2d:e7:70:6c:10:0f:19:80:3e:c8:d7:d5:9d: 1f:9a:e3:55:29:ba:67:42:93:91:fc:0c:bf:67:e7:1d:b1:81: 9c:e0:02:07:10:23:2f:8c:a0:ec:8d:18:06:96:12:30:4c:34: a7:bc:03:9b:ca:0e:60:18:2d:1d:bd:bf:77:22:db:92:4d:ed: 06:94:8e:ef:42:2a:38:50:27:da:f7:f1:ed:26:46:a3:e6:16: 9f:ba:78:36:69:89:d1:7c:2c:e9:9b:21:30:37:d8:d8:d8:4f: 33:a8:fa:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYNjzG3SgIt9cN1BTtwwB+CZ/NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5M0I0QjdCNkMwOTMyRUQ0NTkwQkRGODEzMjlEMEVB RTVFRUI2ODAeFw0yNjExMDQwNjMxMzFaFw0yNjExMDUwOTQ4MzFaMDMxMTAvBgNV BAMTKDkzMDEzNTFBRTFENDY0NDQwNTY3RjYzNzAzMzFGQUEyQkYyQjZFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOzkixMqH0mydYVg1bPG1XdUUV rkh3G3FoTT4ofV7rKeLnTwEAvf66Dk+XIpKZBMiSL425MVeP/g+DoDcJsXtk0/DB Cr812FR10AT602a4VoAvrNt2GDd+jQCpFg5KnR/FpxRN1xlnRMAfBQjH0+MI5TUw baXkPseyUdQzBs+WZToxSSkidd2xFG8PaR5n/9Ue2bvNVw2gQKF5IpR9UHgu78Lb 6vzhKxFFDEn1FbNZdiU0RpP5MwqiGxS7O0cDTS3A4Sge7TH5sJwPhLSRTc1pIRJb dpA7b5RtsMbWkI8O2yZ3pgepC7t7I9iLyb2k2Pn8N5H11jgUB5V20AhM2AIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkwE1GuHUZEQFZ/Y3AzH6or8rbh0wHwYDVR0j BBgwFoAU9JO0t7bAky7UWQvfgTKdDq5e62gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDcxMWMxMTAtN2FiMS00YTM5LWI5Y2EtM2E5YjBlODFiY2Y1LzAvRjQ5M0I0QjdC NkMwOTMyRUQ0NTkwQkRGODEzMjlEMEVBRTVFRUI2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDkzQjRCN0I2QzA5MzJFRDQ1OTBCREY4MTMyOUQwRUFFNUVF QjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvRjQ5M0I0QjdCNkMwOTMyRUQ0NTkwQkRGODEzMjlE MEVBRTVFRUI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk6ZkeVPTUM4eSj/voWiwwSCY9VtkGNYH4x LXEKU44cBxowGC7Pa68Fr+GOkefJ2pZ13BoKMZnBHm3Of0uIG5XRsVn+PbDVl8kq v35m8BoWShDhTMsZ45T40F5lQ1dTBBOGju+pRlRrfiO0KCLvkBzNouLlaCuH0zEe 91DWihcE6BfJmBUwTjz4Dt4ZTLKUWPnZSwU2LedwbBAPGYA+yNfVnR+a41UpumdC k5H8DL9n5x2xgZzgAgcQIy+MoOyNGAaWEjBMNKe8A5vKDmAYLR29v3ci25JN7QaU ju9CKjhQJ9r38e0mRqPmFp+6eDZpidF8LOmbITA32NjYTzOo+l4= -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:13 2026 by rpki-client