$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft File: F92C9917A30302FCE264D46D8FE65A1CEA194138.mft (raw, json) Hash identifier: pnRmp/nk0RcyEG1xkku8AYO2bbEajAwHkzOnz6AUzfs= Subject key identifier: 9C:FE:7A:67:03:D7:DC:34:AA:FD:D9:E1:52:29:99:11:02:A5:06:44 Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 Certificate issuer: /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Certificate serial: 56A7559A58834DA1269253344807D307B7FAC764 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft Manifest number: F8 Signing time: Sun 01 Nov 2026 18:40:53 +0000 Manifest this update: Sun 01 Nov 2026 18:35:53 +0000 Manifest next update: Mon 02 Nov 2026 18:53:53 +0000 Files and hashes: 1: 3130332e3230372e3233392e302f32342d3234203d3e20313334363434.roa (hash: AyEFI+umHykIZ/qO9r1GSk9h+mkinXlMsDJmjNG7swk=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: nJnlMgxQpBrYqZycvGCzonJXiZwDsWr34U7o3OPt3ps=) 3: F92C9917A30302FCE264D46D8FE65A1CEA194138.crl (hash: gfb9/JtQ2qJzMc7fmt/7+xKYHcWQyMkAs3QwaVzsExI=) 4: 3130332e3230372e3233382e302f32342d3234203d3e20313334363434.roa (hash: JTxpplIuLbvb/wIkHn+HBBE3fJ4/SdghGzTObYJPQAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a7:55:9a:58:83:4d:a1:26:92:53:34:48:07:d3:07:b7:fa:c7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Validity Not Before: Nov 1 18:35:53 2026 GMT Not After : Nov 2 18:53:53 2026 GMT Subject: CN=9CFE7A6703D7DC34AAFDD9E15229991102A50644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:ac:b1:64:14:ec:a3:e5:55:b0:46:2a:52: 15:27:ea:f5:3f:34:8d:4a:e3:71:b8:45:dd:c5:a3: 0f:f2:07:0c:30:29:16:97:37:84:50:70:00:b3:a0: 78:89:b2:ff:f1:60:40:04:30:52:d9:d8:5f:57:1f: 5f:d3:45:df:0b:db:81:8e:4c:68:e4:00:ad:ed:99: 76:c4:eb:99:fe:4d:7f:53:35:5b:af:9c:62:fb:a3: e7:dd:59:14:04:fe:4b:78:84:d9:d2:8f:ab:c5:db: 9e:3b:5e:8e:dd:68:ce:8a:ba:8e:87:f1:08:cc:4b: e8:7d:3e:9a:68:5c:f0:c7:40:4c:a4:30:51:37:54: 88:8b:2a:91:25:cc:3f:f5:9f:f2:ff:cc:07:5a:ca: 53:e6:0a:89:6f:59:cc:3c:4e:7f:ca:f3:40:df:cb: 5c:ad:5e:69:e2:86:20:dc:71:96:a3:15:aa:e2:7d: 2f:d9:9f:bf:28:20:da:a8:3a:54:4f:4d:b4:0e:57: d4:9f:4b:ac:7d:c4:33:bd:7d:c9:75:90:1b:93:bf: 0a:5b:c7:8c:a0:6a:05:8f:eb:99:9d:ce:dd:75:3f: 0a:e0:a9:42:7d:70:cb:a5:94:c5:74:b3:e0:a9:01: 7c:ba:fd:eb:c5:e4:e2:e6:fd:f7:fd:ee:f1:6a:f1: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:7A:67:03:D7:DC:34:AA:FD:D9:E1:52:29:99:11:02:A5:06:44 X509v3 Authority Key Identifier: keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:06:98:a1:cf:15:80:43:30:83:c8:95:66:c8:36:7d:d7:f1: c8:77:6e:e8:39:78:bc:a3:05:49:a7:d1:12:48:57:43:6e:dd: 65:52:5e:70:5e:68:0a:f0:74:c1:bb:73:82:88:bd:da:c4:1d: 88:88:ee:43:ea:5c:87:56:a4:c4:d0:84:46:d5:0c:f5:1a:08: e5:46:b3:36:18:c7:86:c8:47:61:3d:a1:89:5c:81:7b:12:45: 9a:ce:79:71:6e:91:5e:95:14:bd:6e:08:52:f6:2d:0c:9a:d9: 42:ad:f4:9f:f0:8f:32:76:9f:60:6b:a3:51:96:2d:70:ac:22: 99:da:5e:e1:72:1f:4e:cf:54:a0:cb:2b:bd:b9:c6:2a:76:1f: db:b2:75:6e:11:db:c2:8c:26:1c:a9:be:77:ce:8a:c2:2e:d7: 71:d1:e6:df:f8:9d:49:a8:e3:3b:52:d4:92:e3:e3:1c:ff:1d: 45:d1:c4:5e:9f:0f:85:b2:1b:a0:68:e9:c5:73:27:e9:1b:4f: 18:7b:55:e8:f9:4c:b4:d9:eb:f6:0b:03:71:92:94:85:d8:c4: 05:e5:df:01:7c:0c:2e:a7:ee:8f:2d:e1:72:43:90:4d:34:ea: 21:b0:cb:7b:49:53:c5:25:78:03:99:ac:4b:11:8f:9c:de:37: 20:e5:99:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqdVmliDTaEmklM0SAfTB7f6x2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNF QTE5NDEzODAeFw0yNjExMDExODM1NTNaFw0yNjExMDIxODUzNTNaMDMxMTAvBgNV BAMTKDlDRkU3QTY3MDNEN0RDMzRBQUZERDlFMTUyMjk5OTExMDJBNTA2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD6yxZBTso+VVsEYqUhUn6vU/ NI1K43G4Rd3Fow/yBwwwKRaXN4RQcACzoHiJsv/xYEAEMFLZ2F9XH1/TRd8L24GO TGjkAK3tmXbE65n+TX9TNVuvnGL7o+fdWRQE/kt4hNnSj6vF2547Xo7daM6Kuo6H 8QjMS+h9PppoXPDHQEykMFE3VIiLKpElzD/1n/L/zAdaylPmColvWcw8Tn/K80Df y1ytXmnihiDccZajFarifS/Zn78oINqoOlRPTbQOV9SfS6x9xDO9fcl1kBuTvwpb x4ygagWP65mdzt11PwrgqUJ9cMullMV0s+CpAXy6/evF5OLm/ff97vFq8SX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnP56ZwPX3DSq/dnhUimZEQKlBkQwHwYDVR0j BBgwFoAU+SyZF6MDAvziZNRtj+ZaHOoZQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwZTdmOGUtYzI5Zi00ZTZiLWFkMGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdB MzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNFQTE5NDEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTJDOTkxN0EzMDMwMkZDRTI2NEQ0NkQ4RkU2NUExQ0VBMTk0 MTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVB MUNFQTE5NDEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcGmKHPFYBDMIPIlWbINn3X8ch3bug5eLyj BUmn0RJIV0Nu3WVSXnBeaArwdMG7c4KIvdrEHYiI7kPqXIdWpMTQhEbVDPUaCOVG szYYx4bIR2E9oYlcgXsSRZrOeXFukV6VFL1uCFL2LQya2UKt9J/wjzJ2n2Bro1GW LXCsIpnaXuFyH07PVKDLK725xip2H9uydW4R28KMJhypvnfOisIu13HR5t/4nUmo 4ztS1JLj4xz/HUXRxF6fD4WyG6Bo6cVzJ+kbTxh7Vej5TLTZ6/YLA3GSlIXYxAXl 3wF8DC6n7o8t4XJDkE006iGwy3tJU8UleAOZrEsRj5zeNyDlmcQ= -----END CERTIFICATE-----Generated at Mon Nov 2 07:03:44 2026 by rpki-client