$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: u0fm4R2nf4aVLo3rl7iK6y7LxgyWNiNf025kUPh8KUI= Subject key identifier: B2:B2:E2:13:40:87:48:22:F1:97:8D:0A:3A:C7:6D:0B:23:1E:88:D3 Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 647C7446E50105569E0B6D7DE0086079A93869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 15:01:52 +0000 Manifest this update: Mon 02 Nov 2026 14:56:52 +0000 Manifest next update: Tue 03 Nov 2026 18:47:52 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 2: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 3: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: /F3gx9p6ZxyWCgWcOaewC3RKh4reiaZ45jziT/C5vns=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 5: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7c:74:46:e5:01:05:56:9e:0b:6d:7d:e0:08:60:79:a9:38:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Nov 2 14:56:52 2026 GMT Not After : Nov 3 18:47:52 2026 GMT Subject: CN=B2B2E21340874822F1978D0A3AC76D0B231E88D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:2b:a7:48:03:ce:c6:37:73:d8:53:31:0d: 8a:7a:1e:37:d6:c7:4e:b3:4a:fa:63:be:94:6a:df: 27:19:1a:69:ab:f4:66:31:ca:25:3c:75:e1:15:b1: 61:14:5c:19:d4:78:b4:77:fb:51:4b:da:9d:31:fa: 51:03:c4:68:ef:10:ed:b0:46:0b:dd:b1:5b:df:fb: 13:20:75:ad:69:29:0e:be:0a:c6:27:cc:00:13:9c: d0:07:19:c6:57:49:d2:8c:01:66:ac:2b:a8:19:d3: d9:1b:10:2e:76:e8:1e:fc:c2:69:97:f8:77:da:a4: cf:04:79:cd:fa:e9:2f:96:27:d7:b4:6c:2c:14:2f: a4:74:cb:cb:38:5a:d9:a1:ab:e1:84:00:55:c3:8b: a8:9c:a2:75:f2:d0:cf:60:c4:a5:1d:8c:5a:9d:04: 91:d3:8f:e2:0a:d7:b2:f0:10:4b:6f:79:23:9f:fa: 25:2c:11:4e:26:fc:07:0f:60:f1:18:d4:3e:98:ed: 37:37:5d:04:b0:0d:c5:5f:72:ee:ae:82:bc:d7:b0: bf:a4:1a:62:dd:34:b5:ed:00:37:61:00:2a:b1:a3: 28:05:56:8d:cf:67:db:a2:f1:11:31:9a:1c:45:11: 5e:cc:41:94:7f:f7:dd:e6:5f:6a:c5:b4:b7:63:97: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:E2:13:40:87:48:22:F1:97:8D:0A:3A:C7:6D:0B:23:1E:88:D3 X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:28:cb:16:b0:fe:ac:6f:6b:08:ed:9f:49:7f:2a:49:e7:72: 71:66:26:9c:92:0a:c5:e2:a5:58:6f:cb:ce:1f:1b:93:2c:cd: e7:a9:60:59:51:d6:5a:76:75:7b:5e:63:a6:07:60:fc:e0:4e: ce:50:5a:76:b2:c0:f9:35:5d:b8:5e:89:df:df:de:2d:03:a9: 9d:1f:4b:28:07:76:08:04:c2:ae:42:e9:01:1c:1f:ba:0c:92: 7a:e5:d0:bc:34:0c:bf:ae:73:f3:bd:4d:f8:dc:1b:34:74:ad: f1:1c:5d:85:87:23:7f:28:87:9a:0c:7e:d3:22:c7:e4:f2:c7: 37:7f:8a:a1:f6:1e:cc:38:a8:fe:30:43:4e:c9:9a:60:2f:34: 74:6f:7e:33:d1:2c:09:c2:65:d8:12:e2:0c:9c:40:aa:77:22: bb:0f:8c:ea:23:e3:88:d5:9b:b4:c5:65:60:1f:16:5a:03:70: 09:b8:9e:41:02:24:80:5f:a6:bf:7d:95:37:fc:f4:30:6a:98: 21:61:2f:9f:e1:a8:13:c7:bf:2b:9d:d0:e5:3f:0e:f6:c7:86: a6:0a:bb:4d:e3:56:86:53:41:d3:7a:6b:bf:77:81:6c:21:f3: 48:94:34:cf:96:5f:ef:84:b9:ac:03:5f:c6:37:cd:7d:b5:5e: ad:38:6a:4b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITZHx0RuUBBVaeC2194Ahgeak4aTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2 MzQ2NjMzMB4XDTI2MTEwMjE0NTY1MloXDTI2MTEwMzE4NDc1MlowMzExMC8GA1UE AxMoQjJCMkUyMTM0MDg3NDgyMkYxOTc4RDBBM0FDNzZEMEIyMzFFODhEMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALocK6dIA87GN3PYUzENinoeN9bH TrNK+mO+lGrfJxkaaav0ZjHKJTx14RWxYRRcGdR4tHf7UUvanTH6UQPEaO8Q7bBG C92xW9/7EyB1rWkpDr4KxifMABOc0AcZxldJ0owBZqwrqBnT2RsQLnboHvzCaZf4 d9qkzwR5zfrpL5Yn17RsLBQvpHTLyzha2aGr4YQAVcOLqJyidfLQz2DEpR2MWp0E kdOP4grXsvAQS295I5/6JSwRTib8Bw9g8RjUPpjtNzddBLANxV9y7q6CvNewv6Qa Yt00te0AN2EAKrGjKAVWjc9n26LxETGaHEURXsxBlH/33eZfasW0t2OXIL0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSysuITQIdIIvGXjQo6x20LIx6I0zAfBgNVHSME GDAWgBSIOxEYMjzMVzbqgY/M+vql9jRmMzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC84ODNCMTExODMy M0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2NjMzLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzg4M0IxMTE4MzIzQ0NDNTczNkVBODE4RkNDRkFGQUE1RjYzNDY2 MzMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4 ZS02NGVmNGNmYzA0ZTMvMC84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFB NUY2MzQ2NjMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAwijLFrD+rG9rCO2fSX8qSedycWYmnJIKxeKl WG/Lzh8bkyzN56lgWVHWWnZ1e15jpgdg/OBOzlBadrLA+TVduF6J39/eLQOpnR9L KAd2CATCrkLpARwfugySeuXQvDQMv65z871N+NwbNHSt8RxdhYcjfyiHmgx+0yLH 5PLHN3+KofYezDio/jBDTsmaYC80dG9+M9EsCcJl2BLiDJxAqnciuw+M6iPjiNWb tMVlYB8WWgNwCbieQQIkgF+mv32VN/z0MGqYIWEvn+GoE8e/K53Q5T8O9seGpgq7 TeNWhlNB03prv3eBbCHzSJQ0z5Zf74S5rANfxjfNfbVerThqSw== -----END CERTIFICATE-----Generated at Tue Nov 3 08:25:09 2026 by rpki-client