$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft File: F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft (raw, json) Hash identifier: 2gVpBMJmqhNxm6VZAoCHkhV+RT8wFtrjP9TabWdDRoI= Subject key identifier: AF:E1:4D:89:D9:AD:2E:D9:D2:77:27:3D:BE:E6:C9:43:BB:DF:01:7F Authority key identifier: F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7 Certificate issuer: /CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7 Certificate serial: 46984C391A7464F68D37BC3D4A9C8B8B29F85B8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 12:17:33 +0000 Manifest this update: Sun 01 Nov 2026 12:12:33 +0000 Manifest next update: Mon 02 Nov 2026 15:06:33 +0000 Files and hashes: 1: F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl (hash: j1k0hZJURZx8T+jDvp+SmaonvPQ2Lx95ugfv+nHQ9nM=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: NkdNebrDVkfVl0amhScWQLHtn/tGL3kLLLGLmXHeXKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:98:4c:39:1a:74:64:f6:8d:37:bc:3d:4a:9c:8b:8b:29:f8:5b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7 Validity Not Before: Nov 1 12:12:33 2026 GMT Not After : Nov 2 15:06:33 2026 GMT Subject: CN=AFE14D89D9AD2ED9D277273DBEE6C943BBDF017F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0b:78:9f:41:bb:b3:ba:a7:de:48:c9:51:de: 47:21:df:d1:e8:cf:79:6f:b4:0e:2c:6c:e8:bf:7e: 31:ed:af:86:fc:bb:97:7f:40:ab:f8:bd:4a:4c:1e: e4:49:bb:6d:98:b6:37:07:d3:38:c4:e0:44:b4:b8: db:34:87:d5:2d:76:7e:47:42:a1:88:6f:4b:eb:c9: 1c:9a:58:bd:78:fd:bd:bb:eb:3c:5a:ab:ba:c4:24: dd:75:c7:a0:73:67:a4:37:d9:36:72:f2:5d:35:84: 0a:53:15:89:b3:64:73:5b:77:d2:a0:66:b3:82:81: 58:71:7b:62:8a:0c:e4:d9:a2:c9:12:89:f0:e6:cd: 98:a0:86:fc:ae:ba:e1:da:a9:1d:99:40:67:a6:38: 34:03:f1:a9:63:a0:bb:a5:09:3f:ab:ef:e9:c8:11: dd:13:47:7e:4d:d1:62:5a:e5:f0:ed:c1:df:1d:01: 67:b6:e8:10:2f:59:d1:c2:c5:b7:9d:1f:9c:ca:6e: ff:25:d4:3a:0c:6e:17:03:dc:ea:9a:fe:5b:15:63: e1:d7:84:5f:02:cd:e3:a7:c4:10:fd:e2:35:42:72: 0e:80:d3:c8:6a:fe:81:2c:ee:6f:1a:c5:fc:43:be: b3:8e:61:d9:bd:c8:be:3c:c8:c5:11:7d:73:95:6f: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:4D:89:D9:AD:2E:D9:D2:77:27:3D:BE:E6:C9:43:BB:DF:01:7F X509v3 Authority Key Identifier: keyid:F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:19:e2:ae:79:cc:dd:05:e3:1f:5d:6c:ea:de:b9:7e:2a:a7: d9:d5:2e:63:4d:07:35:64:c7:9e:19:2d:8a:01:b2:9c:2b:02: fc:87:d5:f0:99:39:a4:2b:35:ff:ad:f7:2a:99:60:36:ca:b5: e5:b3:3f:e8:23:08:22:0d:3e:a0:fa:6f:14:1a:b7:c6:4a:39: 02:1c:b5:c2:17:ab:c6:52:90:71:5c:10:a5:af:9f:fe:0c:7f: c6:6f:d8:4c:d2:20:bc:3e:ac:d0:8b:57:70:cb:49:68:01:a9: 5a:42:82:39:99:cf:c2:00:e8:d3:9b:d8:ec:69:c8:3c:5d:2e: dc:fc:9b:ad:f0:9b:47:e5:87:14:7e:21:f4:ce:30:a0:ea:ea: d9:76:57:7d:13:40:44:2a:7b:fb:75:37:32:ed:47:6c:ab:c2: c2:6a:08:44:d9:71:0d:83:e8:dd:1e:43:fa:34:bb:09:0e:7f: 7a:02:87:af:4b:f1:86:63:10:c5:92:8d:fd:f1:ba:38:9f:03: 8f:aa:9e:36:e3:83:c8:d3:3a:3a:20:3e:2c:67:b6:31:2e:7f: e2:3b:41:a5:2c:74:b1:a8:e5:b8:af:70:a4:a3:66:04:65:23: f4:17:a7:8b:0c:3a:31:48:e0:0d:64:69:4a:2c:86:48:5b:96: aa:81:45:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURphMORp0ZPaNN7w9SpyLiyn4W40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENUU2QTRCMDcyQUFDRTY3MjE4MDgwNEUwOTZENkIw MENCMTdFNzAeFw0yNjExMDExMjEyMzNaFw0yNjExMDIxNTA2MzNaMDMxMTAvBgNV BAMTKEFGRTE0RDg5RDlBRDJFRDlEMjc3MjczREJFRTZDOTQzQkJERjAxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfC3ifQbuzuqfeSMlR3kch39Ho z3lvtA4sbOi/fjHtr4b8u5d/QKv4vUpMHuRJu22YtjcH0zjE4ES0uNs0h9Utdn5H QqGIb0vryRyaWL14/b276zxaq7rEJN11x6BzZ6Q32TZy8l01hApTFYmzZHNbd9Kg ZrOCgVhxe2KKDOTZoskSifDmzZighvyuuuHaqR2ZQGemODQD8aljoLulCT+r7+nI Ed0TR35N0WJa5fDtwd8dAWe26BAvWdHCxbedH5zKbv8l1DoMbhcD3Oqa/lsVY+HX hF8CzeOnxBD94jVCcg6A08hq/oEs7m8axfxDvrOOYdm9yL48yMURfXOVbzkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+FNidmtLtnSdyc9vubJQ7vfAX8wHwYDVR0j BBgwFoAU8dXmpLByqs5nIYCATgltawDLF+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzkxMmFjODgtMDMzZC00OTdlLWJmNjMtNTU1M2Q1ZGM2ZGM5LzAvRjFENUU2QTRC MDcyQUFDRTY3MjE4MDgwNEUwOTZENkIwMENCMTdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMUQ1RTZBNEIwNzJBQUNFNjcyMTgwODA0RTA5NkQ2QjAwQ0Ix N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvRjFENUU2QTRCMDcyQUFDRTY3MjE4MDgwNEUwOTZE NkIwMENCMTdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQZ4q55zN0F4x9dbOreuX4qp9nVLmNNBzVk x54ZLYoBspwrAvyH1fCZOaQrNf+t9yqZYDbKteWzP+gjCCINPqD6bxQat8ZKOQIc tcIXq8ZSkHFcEKWvn/4Mf8Zv2EzSILw+rNCLV3DLSWgBqVpCgjmZz8IA6NOb2Oxp yDxdLtz8m63wm0flhxR+IfTOMKDq6tl2V30TQEQqe/t1NzLtR2yrwsJqCETZcQ2D 6N0eQ/o0uwkOf3oCh69L8YZjEMWSjf3xujifA4+qnjbjg8jTOjogPixntjEuf+I7 QaUsdLGo5bivcKSjZgRlI/QXp4sMOjFI4A1kaUoshkhblqqBRe4= -----END CERTIFICATE-----Generated at Sun Nov 1 23:02:16 2026 by rpki-client