$ rpki-client -vvvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: oPHvSQMynSvYApSgMqpIOoT7OQxKUxgBOq6sO7GNzOs= Subject key identifier: 2E:44:C4:83:2A:31:C4:2B:3F:01:B6:F2:5D:D1:8F:39:40:E0:FC:84 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 7DF1F5D7BD8BF5283F4E1F27686D879649B89E59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 10:10:55 +0000 Manifest this update: Wed 04 Nov 2026 10:05:55 +0000 Manifest next update: Thu 05 Nov 2026 12:18:55 +0000 Files and hashes: 1: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: VPD27g1bJJzefphNNUryCpOCUk1hdZBOUKFKHV73WXc=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f1:f5:d7:bd:8b:f5:28:3f:4e:1f:27:68:6d:87:96:49:b8:9e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Nov 4 10:05:55 2026 GMT Not After : Nov 5 12:18:55 2026 GMT Subject: CN=2E44C4832A31C42B3F01B6F25DD18F3940E0FC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:d9:78:45:5c:0f:41:15:9a:aa:1a:87:f5: fd:22:c8:d8:9f:84:c3:a0:70:7a:6f:63:00:d5:36: d1:27:85:6e:8c:f6:e5:4e:80:6b:08:58:5c:92:f4: 3b:ce:13:f7:07:b4:be:cb:1a:6a:ef:9b:f6:1e:7f: 55:c7:04:df:6a:f0:74:61:16:e9:2a:cf:78:e6:40: e5:5b:b1:3e:ab:6e:79:51:de:a5:98:41:50:f0:78: fa:50:46:a6:26:b7:e5:90:f7:05:52:17:ca:b5:a7: 59:9d:b7:d2:72:91:12:d9:ff:90:23:36:e8:e8:2b: 1a:8d:c9:ec:da:1d:4f:4d:d5:9b:ab:ab:24:46:8d: ff:2c:ef:e4:74:01:02:19:98:6a:d2:4f:22:da:ec: 5d:3d:b0:16:9b:65:4c:fa:c2:1a:fa:8c:0f:53:ec: 10:49:b2:6b:9a:13:7e:d6:14:23:1c:14:1e:49:08: 35:39:3e:cb:ba:7e:1a:8a:8e:6d:01:bb:76:25:29: dd:9f:97:a2:db:31:25:11:18:fa:ab:69:88:f8:b0: 46:c5:1b:43:69:41:27:87:b5:5f:46:ad:9d:33:88: d8:8d:c1:66:71:4d:3d:d2:24:72:6b:05:62:0f:d0: 7b:46:8e:2a:a7:a2:12:99:54:d7:ef:8d:c8:75:e7: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:C4:83:2A:31:C4:2B:3F:01:B6:F2:5D:D1:8F:39:40:E0:FC:84 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:23:97:ee:40:19:b6:6b:1a:61:25:fa:1e:56:96:26:27:a1: 44:f8:2f:5a:a9:28:7b:08:80:5a:94:16:37:3e:5c:68:b8:74: 3f:a9:bf:9f:f8:ad:d3:30:9a:8e:12:04:4b:d7:f8:97:49:6e: 83:ca:ee:2c:ba:e0:3c:75:da:dd:d0:86:94:e3:75:26:84:81: af:6c:67:cd:1a:12:13:5f:ed:94:84:3a:f4:22:c4:2f:a6:62: 1e:da:91:af:b2:74:14:69:28:91:7c:96:50:91:b0:18:f4:45: 29:50:0a:89:53:ee:f2:28:9a:78:66:cc:12:66:61:10:5d:eb: 3a:ef:c6:e5:2a:d7:ae:93:66:41:e1:8b:fa:bf:c8:3f:50:9b: 12:9c:6a:b2:0f:97:cd:11:06:0b:3a:c0:bb:07:73:79:21:fd: cc:5b:22:57:55:33:cc:79:b6:56:cc:b2:04:65:98:75:e4:0f: a2:2f:b4:d7:67:59:b5:1f:b5:b8:79:a7:c2:7b:3b:fc:64:28: 14:68:b9:fa:2c:6a:0d:28:e0:47:2f:47:d2:ac:e4:e1:1c:33: c4:a1:f3:12:ac:cc:ff:90:12:84:46:fe:9e:0c:91:97:62:bb: 52:b1:09:8e:93:3e:3f:d9:67:cc:1f:2b:fc:0d:81:f9:88:8b: 93:a1:4b:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffH1172L9Sg/Th8naG2Hlkm4nlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjExMDQxMDA1NTVaFw0yNjExMDUxMjE4NTVaMDMxMTAvBgNV BAMTKDJFNDRDNDgzMkEzMUM0MkIzRjAxQjZGMjVERDE4RjM5NDBFMEZDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTc9l4RVwPQRWaqhqH9f0iyNif hMOgcHpvYwDVNtEnhW6M9uVOgGsIWFyS9DvOE/cHtL7LGmrvm/Yef1XHBN9q8HRh Fukqz3jmQOVbsT6rbnlR3qWYQVDwePpQRqYmt+WQ9wVSF8q1p1mdt9JykRLZ/5Aj NujoKxqNyezaHU9N1ZurqyRGjf8s7+R0AQIZmGrSTyLa7F09sBabZUz6whr6jA9T 7BBJsmuaE37WFCMcFB5JCDU5Psu6fhqKjm0Bu3YlKd2fl6LbMSURGPqraYj4sEbF G0NpQSeHtV9GrZ0ziNiNwWZxTT3SJHJrBWIP0HtGjiqnohKZVNfvjch159/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkTEgyoxxCs/AbbyXdGPOUDg/IQwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANkjl+5AGbZrGmEl+h5WliYnoUT4L1qpKHsI gFqUFjc+XGi4dD+pv5/4rdMwmo4SBEvX+JdJboPK7iy64Dx12t3QhpTjdSaEga9s Z80aEhNf7ZSEOvQixC+mYh7aka+ydBRpKJF8llCRsBj0RSlQColT7vIomnhmzBJm YRBd6zrvxuUq166TZkHhi/q/yD9QmxKcarIPl80RBgs6wLsHc3kh/cxbIldVM8x5 tlbMsgRlmHXkD6IvtNdnWbUftbh5p8J7O/xkKBRoufosag0o4EcvR9Ks5OEcM8Sh 8xKszP+QEoRG/p4MkZdiu1KxCY6TPj/ZZ8wfK/wNgfmIi5OhS9M= -----END CERTIFICATE-----Generated at Wed Nov 4 16:13:52 2026 by rpki-client