$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: dsPQPN8yDGQK789HLAj9lbAKc81HRWrwkYf7xqOisBw= Subject key identifier: 02:4A:12:C5:1D:83:8D:96:3C:68:2B:C4:E1:DC:E1:20:63:E6:34:B4 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 135ADD2E658C902CDAA90C44F527FCA2BBDCE3AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 10:00:12 +0000 Manifest this update: Mon 02 Nov 2026 09:55:12 +0000 Manifest next update: Tue 03 Nov 2026 13:07:12 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 2: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: qHQHEyQvRQjniJpzSLSxY80XLnjWiBddAE8TEQR6u0E=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5a:dd:2e:65:8c:90:2c:da:a9:0c:44:f5:27:fc:a2:bb:dc:e3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Nov 2 09:55:12 2026 GMT Not After : Nov 3 13:07:12 2026 GMT Subject: CN=024A12C51D838D963C682BC4E1DCE12063E634B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:40:4e:b9:5c:25:a0:81:3e:75:f2:5f:d5: 4e:34:e4:2a:e1:1f:63:05:27:b6:e1:18:55:4a:e3: 92:e0:d2:2b:13:43:5d:8f:17:97:46:6b:27:4e:ec: 87:93:ec:3f:3a:17:60:0f:f8:dc:65:3e:e9:e6:2b: 65:40:d9:5d:85:05:d6:26:a8:f0:ab:33:a2:c9:90: e1:3c:3d:d7:b5:38:76:88:4a:9a:a0:e6:78:a1:61: 04:83:c8:95:ff:50:cc:60:45:84:c6:0e:a6:50:e5: 02:b5:4d:17:15:9d:64:66:49:05:8b:78:22:43:12: ef:95:4d:68:45:e3:e8:0c:3d:20:9b:bb:10:ef:80: c3:fc:e3:e8:72:42:03:c4:8a:c5:e3:16:eb:f2:c6: d3:01:ef:1e:97:c1:6f:be:3b:99:a5:f8:46:a9:ed: 4f:db:f2:db:81:c3:ac:1b:88:2f:4f:45:84:65:3e: c2:f2:a7:77:9e:ab:c4:67:3a:08:c0:83:4d:29:08: 5b:5b:1e:02:1d:77:22:18:5e:51:f1:b5:59:60:08: c0:22:24:79:c6:7d:03:8f:47:5b:92:c7:bb:41:73: b1:7c:c5:9f:03:37:f0:81:08:c6:79:2f:5d:b1:6c: 95:c9:d1:ba:ec:98:8b:be:74:e0:f5:ae:99:f8:7f: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4A:12:C5:1D:83:8D:96:3C:68:2B:C4:E1:DC:E1:20:63:E6:34:B4 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:90:01:9a:f9:3b:22:d1:38:a1:de:2b:80:72:50:14:cd:dc: 45:a5:a0:23:c4:79:b6:cb:a9:78:cd:80:68:0a:28:49:35:fd: 02:ec:cb:94:ac:ee:fe:4d:98:b6:d6:15:66:6e:c0:bf:54:9d: ac:a4:1b:1a:3f:b8:94:70:3a:9e:1c:56:de:94:c4:92:7b:c7: 14:55:8f:fb:5a:4f:c7:62:cb:4b:7b:06:0c:0c:4f:f0:35:7a: c0:e8:5c:38:36:87:28:50:9d:6e:db:14:14:6d:7b:0c:04:bf: e4:67:2c:d4:dd:3c:a4:1c:24:85:47:72:d6:5f:5e:a9:bd:8b: f5:a8:5e:41:2b:b0:9f:09:3d:77:e5:68:a4:ac:ff:e0:b4:bd: 0a:3c:76:e5:2f:4f:1b:45:bc:54:5c:4e:b2:69:c6:a1:92:0f: e3:f4:07:78:ea:69:f2:5f:19:76:c4:ff:72:2c:42:77:01:43: 22:6e:35:f9:7d:e4:22:d5:cf:4c:0c:9a:80:2a:d1:c8:96:d1: 41:c4:9c:b0:da:71:b6:38:8d:2a:8f:60:31:7f:c0:02:d7:6a: e7:1f:7f:eb:b5:72:f3:78:29:06:e2:7c:73:6f:83:b0:f3:4d: 39:9a:3d:8b:cf:ae:99:3d:43:81:0d:53:3a:4e:42:58:2e:90: 4e:7b:41:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1rdLmWMkCzaqQxE9Sf8orvc46swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjExMDIwOTU1MTJaFw0yNjExMDMxMzA3MTJaMDMxMTAvBgNV BAMTKDAyNEExMkM1MUQ4MzhEOTYzQzY4MkJDNEUxRENFMTIwNjNFNjM0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgUBOuVwloIE+dfJf1U405Crh H2MFJ7bhGFVK45Lg0isTQ12PF5dGaydO7IeT7D86F2AP+NxlPunmK2VA2V2FBdYm qPCrM6LJkOE8Pde1OHaISpqg5nihYQSDyJX/UMxgRYTGDqZQ5QK1TRcVnWRmSQWL eCJDEu+VTWhF4+gMPSCbuxDvgMP84+hyQgPEisXjFuvyxtMB7x6XwW++O5ml+Eap 7U/b8tuBw6wbiC9PRYRlPsLyp3eeq8RnOgjAg00pCFtbHgIddyIYXlHxtVlgCMAi JHnGfQOPR1uSx7tBc7F8xZ8DN/CBCMZ5L12xbJXJ0brsmIu+dOD1rpn4fzznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkoSxR2DjZY8aCvE4dzhIGPmNLQwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWQAZr5OyLROKHeK4ByUBTN3EWloCPEebbL qXjNgGgKKEk1/QLsy5Ss7v5NmLbWFWZuwL9UnaykGxo/uJRwOp4cVt6UxJJ7xxRV j/taT8diy0t7BgwMT/A1esDoXDg2hyhQnW7bFBRtewwEv+RnLNTdPKQcJIVHctZf Xqm9i/WoXkErsJ8JPXflaKSs/+C0vQo8duUvTxtFvFRcTrJpxqGSD+P0B3jqafJf GXbE/3IsQncBQyJuNfl95CLVz0wMmoAq0ciW0UHEnLDacbY4jSqPYDF/wALXaucf f+u1cvN4KQbifHNvg7DzTTmaPYvPrpk9Q4ENUzpOQlgukE57QaU= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:57 2026 by rpki-client