$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: pYA1F35PnKw1uwytLrpk81iEjLAwIy1ZbQCOvDi+TsE= Subject key identifier: 42:B4:7F:8F:BB:57:B8:77:E3:26:73:BC:CC:82:81:42:78:11:93:D0 Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 577D2262EE2C81C94B903BBC831F623FA5D1C588 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 06:15:26 +0000 Manifest this update: Mon 02 Nov 2026 06:10:26 +0000 Manifest next update: Tue 03 Nov 2026 08:21:26 +0000 Files and hashes: 1: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: QGYRd3+AO/Wk76Jq4HoM+F+fMdL676z4JCsVxjmp90g=) 2: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 3: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 4: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7d:22:62:ee:2c:81:c9:4b:90:3b:bc:83:1f:62:3f:a5:d1:c5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Nov 2 06:10:26 2026 GMT Not After : Nov 3 08:21:26 2026 GMT Subject: CN=42B47F8FBB57B877E32673BCCC828142781193D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:70:30:2b:38:d2:8d:13:14:18:b6:39:1c: 08:0b:42:bc:db:94:46:50:d4:e5:9c:2a:83:8b:cf: 84:b4:33:31:de:8a:7a:c4:4c:a9:e1:8d:51:2d:12: bf:5b:9a:e5:2f:e9:98:b4:fc:0e:22:61:62:78:44: c3:13:8f:17:58:b2:b7:2d:2d:cf:51:62:22:d1:a6: 89:15:59:cf:29:50:1b:5c:cf:b8:d2:07:2b:04:37: 99:27:a7:03:53:6b:54:98:74:fc:76:4a:07:08:24: 37:5a:4a:ec:75:d5:20:00:85:10:fc:68:a6:48:60: 60:b1:ae:81:23:84:3d:7a:04:ff:c5:c0:c4:ff:02: 77:ea:1b:6c:56:e4:64:f0:d5:9d:7d:63:c1:7a:e9: 6a:bd:79:e5:8c:85:9d:53:32:0c:85:67:e5:7d:24: 32:71:b2:e8:51:31:84:f4:c9:39:74:f8:f8:ac:87: d1:74:96:d4:42:79:81:78:cd:57:4e:fa:c3:eb:52: e0:a6:9b:0c:22:4e:d9:d1:f2:b1:af:f7:ef:a1:9c: 29:28:3f:34:66:e7:db:8b:f6:87:ce:2e:01:3c:21: cb:e4:03:b0:de:49:a7:a1:01:32:8d:6b:ce:44:17: c2:da:c3:2b:54:6e:10:b7:e3:2d:3a:cc:20:84:61: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:7F:8F:BB:57:B8:77:E3:26:73:BC:CC:82:81:42:78:11:93:D0 X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:75:d3:54:ce:b3:0f:53:ef:39:a9:69:bc:28:e6:d9:7e:f8: b1:ec:50:b2:f0:b8:06:2c:4a:00:ce:ef:70:75:83:ba:a6:7d: 9d:41:62:d7:f5:d3:a0:30:4a:2a:89:22:21:ea:27:7f:42:55: 3c:ec:68:e5:75:49:e7:53:b7:37:cf:0e:9e:d8:76:4a:6f:66: 64:ee:f9:d6:fc:b0:1d:76:9c:dd:db:cd:94:50:16:c5:38:30: 44:fd:b0:a5:09:59:1c:80:3e:f2:d3:a3:ba:66:50:b7:74:13: 18:bc:f4:c2:e0:f4:04:33:da:35:d2:0d:21:66:48:86:8f:7a: 2d:b4:14:2b:95:7f:21:06:78:63:fb:ab:d9:97:6b:c5:59:79: 84:71:ae:51:d3:14:95:39:18:b6:63:85:4f:2a:e9:fa:b7:4f: e8:36:19:bb:c0:12:ed:b6:83:71:5a:f6:47:03:9c:d8:48:05: 73:5a:13:a0:af:9e:68:74:4f:fc:3c:32:80:31:e7:4f:34:7f: 2c:7b:b4:37:e8:1a:65:aa:1a:87:08:5e:ad:91:e4:09:9d:90: 22:03:1c:e6:f9:ca:f0:9f:fb:7c:a8:5d:b4:3e:59:af:e2:35: 74:36:8c:5d:8a:05:40:17:ca:e0:5a:ae:c7:8d:f6:28:97:4c: 2c:07:ce:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV30iYu4sgclLkDu8gx9iP6XRxYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjExMDIwNjEwMjZaFw0yNjExMDMwODIxMjZaMDMxMTAvBgNV BAMTKDQyQjQ3RjhGQkI1N0I4NzdFMzI2NzNCQ0NDODI4MTQyNzgxMTkzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOXAwKzjSjRMUGLY5HAgLQrzb lEZQ1OWcKoOLz4S0MzHeinrETKnhjVEtEr9bmuUv6Zi0/A4iYWJ4RMMTjxdYsrct Lc9RYiLRpokVWc8pUBtcz7jSBysEN5knpwNTa1SYdPx2SgcIJDdaSux11SAAhRD8 aKZIYGCxroEjhD16BP/FwMT/AnfqG2xW5GTw1Z19Y8F66Wq9eeWMhZ1TMgyFZ+V9 JDJxsuhRMYT0yTl0+Pish9F0ltRCeYF4zVdO+sPrUuCmmwwiTtnR8rGv9++hnCko PzRm59uL9ofOLgE8IcvkA7DeSaehATKNa85EF8LawytUbhC34y06zCCEYYxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQrR/j7tXuHfjJnO8zIKBQngRk9AwHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB101TOsw9T7zmpabwo5tl++LHsULLwuAYs SgDO73B1g7qmfZ1BYtf106AwSiqJIiHqJ39CVTzsaOV1SedTtzfPDp7YdkpvZmTu +db8sB12nN3bzZRQFsU4MET9sKUJWRyAPvLTo7pmULd0Exi89MLg9AQz2jXSDSFm SIaPei20FCuVfyEGeGP7q9mXa8VZeYRxrlHTFJU5GLZjhU8q6fq3T+g2GbvAEu22 g3Fa9kcDnNhIBXNaE6Cvnmh0T/w8MoAx5080fyx7tDfoGmWqGocIXq2R5AmdkCID HOb5yvCf+3yoXbQ+Wa/iNXQ2jF2KBUAXyuBarseN9iiXTCwHziE= -----END CERTIFICATE-----Generated at Mon Nov 2 16:28:13 2026 by rpki-client