$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft File: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft (raw, json) Hash identifier: iVx7OLF54C8k3P6Yesyp0ZhNEtyOPZjmJUgCvLaEls4= Subject key identifier: 88:39:CA:B8:01:D6:E8:6F:C4:05:D9:47:F4:5C:B3:EF:9B:FB:EF:8C Authority key identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB Certificate issuer: /CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB Certificate serial: 37B1C48CF8A3526986F926D9022E68F778C07EF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 02:10:20 +0000 Manifest this update: Mon 02 Nov 2026 02:05:20 +0000 Manifest next update: Tue 03 Nov 2026 04:15:20 +0000 Files and hashes: 1: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl (hash: 9U+b2c6WjYqRlQ7d+utmq3jtPGHnOG0pRL9UwLsNi9Y=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Fo5NB9vASxOhrtlcTFfuoSfV+Q1Mqfl65n0mUhSShiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b1:c4:8c:f8:a3:52:69:86:f9:26:d9:02:2e:68:f7:78:c0:7e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB Validity Not Before: Nov 2 02:05:20 2026 GMT Not After : Nov 3 04:15:20 2026 GMT Subject: CN=8839CAB801D6E86FC405D947F45CB3EF9BFBEF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:0b:20:a9:54:d3:00:a8:30:07:3f:53:15: 26:a3:db:c8:dd:98:4a:11:97:61:a0:c9:ee:a6:4b: f8:6a:27:50:3c:14:b3:4f:7c:31:9d:4c:f4:95:00: ed:5a:c8:e7:69:67:f4:8e:27:db:a6:94:01:71:8e: d1:45:e9:f4:90:bd:e0:2a:97:8a:a6:2d:e0:31:90: fb:6b:be:cb:5f:91:63:70:9f:c3:5c:f9:26:d0:8c: ff:6b:2d:b8:43:45:59:04:f6:63:fe:e6:a9:54:bb: 76:83:34:fe:38:8a:37:bb:9e:03:a1:50:93:b1:9b: 66:48:dc:da:c0:b7:6e:b1:91:b1:f8:fe:44:21:94: d0:62:47:91:08:19:fc:0a:59:9b:30:41:93:ea:f2: 67:31:55:ce:ef:db:ea:06:97:15:f0:ca:e9:db:68: 9b:dd:11:8f:3a:84:36:59:7c:e3:10:a4:05:79:fa: ab:9d:e1:03:bf:7c:b8:4d:89:42:27:12:84:16:66: 03:b4:ea:c4:25:b5:df:a0:45:ee:52:d6:c6:34:ca: 3e:08:f1:f3:5b:25:d0:09:73:27:63:f6:40:26:44: 54:a0:8b:9f:5b:4e:b0:ae:61:3d:b9:19:62:92:38: 83:4c:5b:a4:e3:a0:30:eb:ee:a5:77:38:3b:8f:9e: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:CA:B8:01:D6:E8:6F:C4:05:D9:47:F4:5C:B3:EF:9B:FB:EF:8C X509v3 Authority Key Identifier: keyid:FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b2:a1:91:a3:92:42:4c:26:cf:69:51:f9:71:b6:7c:6e:bb: 13:3b:29:35:28:52:ae:e4:a5:48:96:54:6f:fa:e6:ec:5c:a8: 16:43:d9:3f:41:04:74:e7:6a:16:36:c2:2c:8b:98:88:99:67: fa:c4:c3:bf:7d:c2:29:33:4e:4b:ad:57:b6:63:a5:5c:f7:75: 64:35:23:54:67:53:89:89:60:85:d6:a3:0d:d7:88:09:9d:7d: d5:3f:61:1d:2e:2a:16:c8:fd:d1:11:9e:64:0c:0d:1a:19:2c: 48:03:64:b5:0d:23:84:7d:81:5c:31:35:a9:b0:09:65:dc:7e: 0d:8c:c0:72:f3:52:fa:4d:e9:32:21:a5:09:7f:46:b4:5a:cb: 46:1c:2c:9f:9d:17:57:6d:7a:63:1a:15:b4:b8:d8:51:4f:74: de:aa:52:99:4b:2e:83:48:43:b2:06:a9:76:9b:d5:53:77:d8: b0:07:86:18:3a:38:90:cb:66:89:24:51:fb:41:df:d5:ed:9d: df:31:0f:e5:10:78:4f:4e:84:3c:ea:b2:9c:86:8a:49:cb:17: 00:81:1c:3a:2e:05:50:0f:26:53:5a:ee:dd:0e:e5:92:f6:ae: 21:a6:cb:94:1b:b5:e1:23:f0:f3:86:52:d2:58:a7:01:64:e0: f2:b9:a2:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7HEjPijUmmG+SbZAi5o93jAfvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENTdCNkEwQ0EwQkIyNTIyREMwMEVDMEQ3OUI0N0Ix MEQyRDZBQjAeFw0yNjExMDIwMjA1MjBaFw0yNjExMDMwNDE1MjBaMDMxMTAvBgNV BAMTKDg4MzlDQUI4MDFENkU4NkZDNDA1RDk0N0Y0NUNCM0VGOUJGQkVGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9AsgqVTTAKgwBz9TFSaj28jd mEoRl2Ggye6mS/hqJ1A8FLNPfDGdTPSVAO1ayOdpZ/SOJ9umlAFxjtFF6fSQveAq l4qmLeAxkPtrvstfkWNwn8Nc+SbQjP9rLbhDRVkE9mP+5qlUu3aDNP44ije7ngOh UJOxm2ZI3NrAt26xkbH4/kQhlNBiR5EIGfwKWZswQZPq8mcxVc7v2+oGlxXwyunb aJvdEY86hDZZfOMQpAV5+qud4QO/fLhNiUInEoQWZgO06sQltd+gRe5S1sY0yj4I 8fNbJdAJcydj9kAmRFSgi59bTrCuYT25GWKSOINMW6TjoDDr7qV3ODuPngrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDnKuAHW6G/EBdlH9Fyz75v774wwHwYDVR0j BBgwFoAU/tV7agyguyUi3ADsDXm0exDS1qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI5NzUyZjYtNjA2Ni00YjM4LTg3Y2MtOWJhNjNkMTllMjJjLzAvRkVENTdCNkEw Q0EwQkIyNTIyREMwMEVDMEQ3OUI0N0IxMEQyRDZBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUQ1N0I2QTBDQTBCQjI1MjJEQzAwRUMwRDc5QjQ3QjEwRDJE NkFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkVENTdCNkEwQ0EwQkIyNTIyREMwMEVDMEQ3OUI0 N0IxMEQyRDZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiyoZGjkkJMJs9pUflxtnxuuxM7KTUoUq7k pUiWVG/65uxcqBZD2T9BBHTnahY2wiyLmIiZZ/rEw799wikzTkutV7ZjpVz3dWQ1 I1RnU4mJYIXWow3XiAmdfdU/YR0uKhbI/dERnmQMDRoZLEgDZLUNI4R9gVwxNamw CWXcfg2MwHLzUvpN6TIhpQl/RrRay0YcLJ+dF1dtemMaFbS42FFPdN6qUplLLoNI Q7IGqXab1VN32LAHhhg6OJDLZokkUftB39Xtnd8xD+UQeE9OhDzqspyGiknLFwCB HDouBVAPJlNa7t0O5ZL2riGmy5QbteEj8POGUtJYpwFk4PK5orc= -----END CERTIFICATE-----Generated at Mon Nov 2 15:34:20 2026 by rpki-client