$ rpki-client -vvvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json) Hash identifier: 3FdB3aHRSr6E2w1nxMV8nbZN0jZo44w1xL7NmFpG7LI= Subject key identifier: FF:6A:91:EE:20:15:D1:02:1E:5D:F7:FE:12:D5:C8:A7:C8:17:2F:58 Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Certificate serial: 56CB232C663C19E9BF803517679999A7C065DE93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 03:57:37 +0000 Manifest this update: Mon 02 Nov 2026 03:52:37 +0000 Manifest next update: Tue 03 Nov 2026 04:05:37 +0000 Files and hashes: 1: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=) 2: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=) 3: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=) 4: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=) 5: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=) 6: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: 4xD9W7h+1HqrFMelwyig7hFOId66kGQ5NnxnPm9mkBQ=) 7: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=) 8: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=) 9: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=) 10: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=) 11: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:23:2c:66:3c:19:e9:bf:80:35:17:67:99:99:a7:c0:65:de:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Validity Not Before: Nov 2 03:52:37 2026 GMT Not After : Nov 3 04:05:37 2026 GMT Subject: CN=FF6A91EE2015D1021E5DF7FE12D5C8A7C8172F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:16:86:da:71:55:98:3d:eb:7d:13:e0:4f: 6f:a4:88:14:c3:3f:4a:5d:4d:c0:fa:b7:2e:76:9e: 2e:0c:92:07:0d:53:2a:77:8c:41:e0:a4:3a:b0:fd: 1c:57:14:5c:a8:fe:86:d6:87:3f:7f:47:a9:2e:46: 6b:d9:1d:66:68:15:a2:32:73:b9:5d:b1:af:33:26: 82:f6:38:0e:ce:a2:b5:ae:bb:eb:87:da:fc:c4:39: ca:2c:8c:9c:7a:93:a3:c3:96:3d:77:0d:77:c2:4e: 9d:f3:6c:da:fe:42:83:73:c1:e7:aa:bd:58:45:78: 88:88:31:f6:9c:82:f4:29:49:44:17:b6:94:6e:b4: 33:a8:61:fa:12:a8:ad:2c:94:7d:ff:81:44:b6:6a: da:73:cd:0a:ac:6a:45:2a:24:f5:e6:8c:f2:7c:ac: 4b:b3:4c:d2:1a:b1:a7:9b:e6:00:79:2a:d2:bb:97: e9:51:81:cc:38:2f:a3:7d:84:bc:25:8e:5a:9d:f8: f1:c5:55:22:ac:20:ea:c6:a8:d0:3f:2e:93:bf:31: b1:77:ab:82:d9:11:e0:21:5b:77:9c:1f:a0:99:20: 19:9a:2d:20:4a:c2:1a:a0:ed:a4:65:b1:7e:10:e8: 4a:f5:5b:29:f1:00:2f:60:40:10:c8:a5:a4:63:f9: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:91:EE:20:15:D1:02:1E:5D:F7:FE:12:D5:C8:A7:C8:17:2F:58 X509v3 Authority Key Identifier: keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:48:63:aa:94:60:c1:f1:b7:7e:7b:17:49:3e:69:f9:28:f1: ad:e2:5e:de:ed:cf:8e:ac:41:f9:bd:3d:9e:e2:a2:d8:3a:3a: d4:38:ff:c3:6a:e6:ad:62:23:59:92:fb:09:ed:77:1c:2b:80: ff:b8:78:53:7f:f7:de:b0:54:3e:d2:92:d0:95:84:16:be:c6: 2b:72:54:84:ec:c9:62:f1:23:85:a8:25:2f:6c:2b:ba:9b:de: 65:e2:7b:5a:f7:eb:00:12:18:ac:45:f3:ca:b5:16:d1:af:4d: 32:2b:e3:28:47:70:0c:dc:a5:06:dd:e6:1f:93:ae:34:b5:d0: 43:cf:4e:35:0b:e8:cc:0b:89:11:cc:6c:6f:06:aa:1f:da:2c: 31:e3:d5:97:8a:97:a1:f2:5c:e8:2a:58:3a:4f:66:da:e1:6d: 75:c3:65:fd:69:93:88:f1:06:bd:56:fb:48:21:b1:85:ec:d1: e8:16:f3:90:b7:63:49:69:8d:b4:29:9c:31:69:f5:fa:ce:81: 40:04:28:da:37:2a:44:33:d6:0a:f3:81:c3:e2:b8:b0:ee:c0: dc:fa:cc:df:1a:ba:ec:23:0b:36:a5:d2:59:b6:a8:81:da:46: 30:a4:06:cc:3d:79:33:80:25:99:3d:ed:6f:b1:eb:e9:d6:3a: 2b:38:d1:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVssjLGY8Gem/gDUXZ5mZp8Bl3pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0 Mjg1M0FERTAeFw0yNjExMDIwMzUyMzdaFw0yNjExMDMwNDA1MzdaMDMxMTAvBgNV BAMTKEZGNkE5MUVFMjAxNUQxMDIxRTVERjdGRTEyRDVDOEE3QzgxNzJGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpxaG2nFVmD3rfRPgT2+kiBTD P0pdTcD6ty52ni4MkgcNUyp3jEHgpDqw/RxXFFyo/obWhz9/R6kuRmvZHWZoFaIy c7ldsa8zJoL2OA7OorWuu+uH2vzEOcosjJx6k6PDlj13DXfCTp3zbNr+QoNzweeq vVhFeIiIMfacgvQpSUQXtpRutDOoYfoSqK0slH3/gUS2atpzzQqsakUqJPXmjPJ8 rEuzTNIasaeb5gB5KtK7l+lRgcw4L6N9hLwljlqd+PHFVSKsIOrGqNA/LpO/MbF3 q4LZEeAhW3ecH6CZIBmaLSBKwhqg7aRlsX4Q6Er1WynxAC9gQBDIpaRj+cn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/2qR7iAV0QIeXff+EtXIp8gXL1gwHwYDVR0j BBgwFoAU6IvIp/J9Klt1IOh3YIic0EKFOt4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc3YmMzZDItNGFiMy00Y2ZiLTkyMjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdG MjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0Mjg1M0FERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODhCQzhBN0YyN0QyQTVCNzUyMEU4Nzc2MDg4OUNEMDQyODUz QURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlD RDA0Mjg1M0FERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdIY6qUYMHxt357F0k+afko8a3iXt7tz46s Qfm9PZ7iotg6OtQ4/8Nq5q1iI1mS+wntdxwrgP+4eFN/996wVD7SktCVhBa+xity VITsyWLxI4WoJS9sK7qb3mXie1r36wASGKxF88q1FtGvTTIr4yhHcAzcpQbd5h+T rjS10EPPTjUL6MwLiRHMbG8Gqh/aLDHj1ZeKl6HyXOgqWDpPZtrhbXXDZf1pk4jx Br1W+0ghsYXs0egW85C3Y0lpjbQpnDFp9frOgUAEKNo3KkQz1grzgcPiuLDuwNz6 zN8auuwjCzal0lm2qIHaRjCkBsw9eTOAJZk97W+x6+nWOis40aI= -----END CERTIFICATE-----Generated at Mon Nov 2 17:16:19 2026 by rpki-client