$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: xzuioSSv+FuNgc7yuSEyKXvYEsb2GGMp7dfs/bBlVic= Subject key identifier: B2:69:DE:C7:64:B1:CF:18:7A:57:30:B8:45:81:EF:CE:0C:DE:79:FA Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 4C0E7118947235CD664243479DCCDFF096ABB315 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 10:20:38 +0000 Manifest this update: Mon 02 Nov 2026 10:15:38 +0000 Manifest next update: Tue 03 Nov 2026 12:30:38 +0000 Files and hashes: 1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 2: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 3: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 4: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: Cr7h0YRBv5dReJx35oNiOrJ5/Q7M8vbTzuteuWbsol4=) 5: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 6: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 7: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (hash: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=) 8: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 9: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 10: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0e:71:18:94:72:35:cd:66:42:43:47:9d:cc:df:f0:96:ab:b3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Nov 2 10:15:38 2026 GMT Not After : Nov 3 12:30:38 2026 GMT Subject: CN=B269DEC764B1CF187A5730B84581EFCE0CDE79FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:4f:bf:20:e0:41:17:44:ff:d5:74:73:e4: c1:43:7c:2f:e4:0d:6a:b8:1b:1d:01:81:1c:32:2e: 49:fd:78:d7:d2:b2:e7:51:76:f9:7b:24:45:a6:c9: 3f:70:56:97:d7:71:8c:7e:c8:bc:c5:25:75:b6:d2: d5:92:12:56:d7:ac:14:09:88:58:a4:4d:1c:b3:d8: 46:32:7b:e4:13:44:02:17:7c:40:c0:d6:13:ed:25: 91:31:4d:f7:22:fc:33:10:42:da:cd:6a:d1:de:5c: d3:c1:23:9f:34:da:81:d9:3c:a5:e8:32:eb:8a:4e: a8:4d:dc:12:9d:61:e9:8d:cb:cc:ef:e4:d8:14:85: 93:95:cc:1e:9c:f3:3b:49:fa:01:3d:1c:6f:8c:e7: 17:4f:62:7b:5e:c6:a6:2d:20:d7:4a:5c:74:9a:6a: 2e:13:2f:13:7d:92:46:60:c6:00:5e:f8:b3:a1:ea: d0:1b:15:c1:dd:ab:dc:34:54:51:06:19:37:43:c3: 13:dd:02:3d:6a:ec:89:5e:7c:1b:15:f7:cb:05:7a: bf:03:2f:d3:11:21:40:a7:e1:45:12:87:e6:0a:3f: 6f:0f:1f:38:29:60:2d:7f:a4:2d:4f:5f:de:c9:ba: 2f:ce:ba:29:53:07:2b:a1:61:18:9d:23:f7:67:5c: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:DE:C7:64:B1:CF:18:7A:57:30:B8:45:81:EF:CE:0C:DE:79:FA X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:65:d7:0a:8c:d2:94:59:3b:06:ed:06:83:7b:dd:22:93:23: b3:2f:7e:31:b7:20:ca:10:c8:f4:e3:42:04:96:f9:c3:50:f3: c5:dd:e5:ff:57:30:50:98:5a:b9:b6:ba:45:4e:85:5f:57:05: 0c:8d:35:02:6e:c2:e9:fc:8f:26:93:11:5e:e1:6f:db:e8:73: ed:a8:bf:6e:b8:56:a3:90:6c:a4:af:79:84:45:1f:3a:e2:13: ba:cf:65:da:0d:9b:95:21:d1:10:3a:b2:a2:60:16:a6:97:27: 63:4f:68:aa:00:b6:6b:8f:27:96:68:09:59:f6:94:91:9e:7b: 69:8b:04:26:c4:c7:59:5f:8f:9b:6f:de:09:89:2e:0f:87:7d: 9f:0f:2b:0b:22:be:8b:4e:3d:37:59:68:da:a4:30:64:96:95: 7e:38:6f:a2:45:eb:09:cf:6e:47:e2:2c:b3:ca:d0:bd:7f:a4: b4:d9:0a:70:f4:2a:bd:4f:23:04:62:b7:42:86:5b:17:36:a9: 58:44:ab:77:95:9b:94:f5:76:5f:da:22:60:27:9f:f4:03:fe: dd:ca:15:8c:3b:3e:11:66:9c:c9:8e:4c:43:e0:58:e9:a6:ff: 53:fe:98:0d:ca:ad:4f:96:e5:ee:dc:b3:31:8e:d6:25:5b:24: 7f:35:c7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTA5xGJRyNc1mQkNHnczf8JarsxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjExMDIxMDE1MzhaFw0yNjExMDMxMjMwMzhaMDMxMTAvBgNV BAMTKEIyNjlERUM3NjRCMUNGMTg3QTU3MzBCODQ1ODFFRkNFMENERTc5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXk+/IOBBF0T/1XRz5MFDfC/k DWq4Gx0BgRwyLkn9eNfSsudRdvl7JEWmyT9wVpfXcYx+yLzFJXW20tWSElbXrBQJ iFikTRyz2EYye+QTRAIXfEDA1hPtJZExTfci/DMQQtrNatHeXNPBI5802oHZPKXo MuuKTqhN3BKdYemNy8zv5NgUhZOVzB6c8ztJ+gE9HG+M5xdPYntexqYtINdKXHSa ai4TLxN9kkZgxgBe+LOh6tAbFcHdq9w0VFEGGTdDwxPdAj1q7IlefBsV98sFer8D L9MRIUCn4UUSh+YKP28PHzgpYC1/pC1PX97Jui/OuilTByuhYRidI/dnXB6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmnex2Sxzxh6VzC4RYHvzgzeefowHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdl1wqM0pRZOwbtBoN73SKTI7MvfjG3IMoQ yPTjQgSW+cNQ88Xd5f9XMFCYWrm2ukVOhV9XBQyNNQJuwun8jyaTEV7hb9voc+2o v264VqOQbKSveYRFHzriE7rPZdoNm5Uh0RA6sqJgFqaXJ2NPaKoAtmuPJ5ZoCVn2 lJGee2mLBCbEx1lfj5tv3gmJLg+HfZ8PKwsivotOPTdZaNqkMGSWlX44b6JF6wnP bkfiLLPK0L1/pLTZCnD0Kr1PIwRit0KGWxc2qVhEq3eVm5T1dl/aImAnn/QD/t3K FYw7PhFmnMmOTEPgWOmm/1P+mA3KrU+W5e7cszGO1iVbJH81x4E= -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:52 2026 by rpki-client