$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: Fs/H5cO3NrsHcI409zoLJwGkGaibFcLyZT/26fAMr3s= Subject key identifier: A8:DB:B6:6B:C1:7C:24:3D:BB:6B:36:3C:4E:58:3C:0E:C1:5D:C8:6B Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 22EC55F05E164DA0FF93211CF9F21DA1161EF86A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 02:15:21 +0000 Manifest this update: Tue 03 Nov 2026 02:10:21 +0000 Manifest next update: Wed 04 Nov 2026 03:09:21 +0000 Files and hashes: 1: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: oYlhx/un52i46JU2aFrZNqLIlRiIuXjWGQaMvd8Ri2o=) 2: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) 3: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) 4: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 5: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ec:55:f0:5e:16:4d:a0:ff:93:21:1c:f9:f2:1d:a1:16:1e:f8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Nov 3 02:10:21 2026 GMT Not After : Nov 4 03:09:21 2026 GMT Subject: CN=A8DBB66BC17C243DBB6B363C4E583C0EC15DC86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:2a:23:e9:10:26:b8:e7:33:c4:33:2d:e6: 5a:58:49:a9:ef:b7:8e:5b:b1:e0:fc:51:6a:ca:bf: a6:d2:1e:79:2c:8a:0b:14:c5:8f:3b:d3:4c:9d:bd: 0e:e2:df:b2:fb:ff:bf:99:92:e1:73:be:2c:a8:f0: 5b:14:5e:3d:b1:05:59:3e:2e:88:24:0a:6c:15:cf: 68:ec:32:2e:9d:af:72:13:33:b1:9a:be:36:64:55: 8c:e6:f5:e4:a3:df:50:11:f0:54:c6:5d:e1:05:6d: 90:a3:d3:ae:e2:60:79:ce:42:0c:79:7c:83:7d:c0: b3:4a:ca:16:5a:be:fd:8a:27:c3:a7:39:91:40:bd: 67:80:51:76:52:c9:db:ff:1e:ca:af:6a:c6:27:e6: 45:8f:f7:61:8e:f1:dd:8e:2c:d6:0d:44:4e:5d:47: af:6c:dc:18:c8:d2:60:b5:47:ee:ab:3c:0d:ac:a2: c6:dd:3b:4d:4e:5a:94:9f:24:26:64:d2:f2:61:cd: 78:73:79:55:e6:7b:5f:0a:94:47:68:12:e6:07:65: 14:b6:5a:65:52:d9:99:98:fd:13:2e:d4:b4:dc:eb: 7c:bc:ca:02:78:ce:b0:fe:73:ff:34:1a:cf:25:cc: 21:a8:16:76:6d:b5:1c:8a:19:00:00:b4:4e:62:25: 34:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DB:B6:6B:C1:7C:24:3D:BB:6B:36:3C:4E:58:3C:0E:C1:5D:C8:6B X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6b:3c:d0:8f:af:d9:0b:a7:60:7a:34:2c:a5:be:8e:f6:66: 12:b1:c5:a0:c2:cd:72:94:e1:c0:ec:86:4f:d7:c3:f5:67:8c: a0:95:c5:51:7f:a6:a9:f0:29:46:86:87:6c:75:f3:04:1d:2d: 2d:63:60:72:ae:7e:20:1b:46:45:95:62:71:f4:be:23:3f:a4: c5:5a:bc:fd:bc:94:38:e3:ef:3b:13:bf:7c:eb:bf:cc:9f:3b: e4:61:1b:b7:57:a9:07:d4:67:b3:45:9b:51:ed:07:b9:05:66: ed:b0:93:6f:6a:42:1e:92:11:84:70:82:49:ef:12:d5:c2:1c: d2:0b:14:42:78:a3:19:1c:e4:ad:04:2b:69:07:b2:fc:47:c9: 06:84:26:49:34:16:48:56:9e:a3:e7:d6:c1:db:b7:38:a8:55: 40:a8:0c:31:2b:8e:11:40:73:42:71:1d:c7:ad:29:24:8c:41: 33:b3:10:f0:3e:c5:84:67:c5:f3:95:05:8c:85:60:ec:6d:e1: 20:99:da:89:3c:e3:1c:3a:6a:86:90:1c:06:9f:27:42:7b:e0: 5e:c3:c6:34:de:79:17:6e:1c:e0:eb:86:2f:55:fc:0c:6c:92: 94:0e:d8:b8:b3:ff:22:8f:78:ba:a4:b0:11:6e:42:1b:03:7a: a9:36:8e:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuxV8F4WTaD/kyEc+fIdoRYe+GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjExMDMwMjEwMjFaFw0yNjExMDQwMzA5MjFaMDMxMTAvBgNV BAMTKEE4REJCNjZCQzE3QzI0M0RCQjZCMzYzQzRFNTgzQzBFQzE1REM4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwSoj6RAmuOczxDMt5lpYSanv t45bseD8UWrKv6bSHnksigsUxY8700ydvQ7i37L7/7+ZkuFzviyo8FsUXj2xBVk+ LogkCmwVz2jsMi6dr3ITM7GavjZkVYzm9eSj31AR8FTGXeEFbZCj067iYHnOQgx5 fIN9wLNKyhZavv2KJ8OnOZFAvWeAUXZSydv/HsqvasYn5kWP92GO8d2OLNYNRE5d R69s3BjI0mC1R+6rPA2sosbdO01OWpSfJCZk0vJhzXhzeVXme18KlEdoEuYHZRS2 WmVS2ZmY/RMu1LTc63y8ygJ4zrD+c/80Gs8lzCGoFnZttRyKGQAAtE5iJTTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqNu2a8F8JD27azY8Tlg8DsFdyGswHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhrPNCPr9kLp2B6NCylvo72ZhKxxaDCzXKU 4cDshk/Xw/VnjKCVxVF/pqnwKUaGh2x18wQdLS1jYHKufiAbRkWVYnH0viM/pMVa vP28lDjj7zsTv3zrv8yfO+RhG7dXqQfUZ7NFm1HtB7kFZu2wk29qQh6SEYRwgknv EtXCHNILFEJ4oxkc5K0EK2kHsvxHyQaEJkk0FkhWnqPn1sHbtzioVUCoDDErjhFA c0JxHcetKSSMQTOzEPA+xYRnxfOVBYyFYOxt4SCZ2ok84xw6aoaQHAafJ0J74F7D xjTeeRduHODrhi9V/AxskpQO2Liz/yKPeLqksBFuQhsDeqk2jiw= -----END CERTIFICATE-----Generated at Tue Nov 3 06:39:35 2026 by rpki-client