$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft File: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft (raw, json) Hash identifier: AtNKPKG1N/0zITP7Pk2quThGfufSgfNbVxrHs9PTPYw= Subject key identifier: 4A:D7:CD:51:76:89:37:68:1C:36:F4:0C:50:C1:CF:84:ED:64:5F:64 Authority key identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 Certificate issuer: /CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Certificate serial: 34C84F565DEB93F3F3BED7AE56C7A77280D4BA9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 16:53:42 +0000 Manifest this update: Sun 01 Nov 2026 16:48:42 +0000 Manifest next update: Mon 02 Nov 2026 18:12:42 +0000 Files and hashes: 1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: cIWtTV8yQ7p3PtcGTWoKgsMP07LYm0CdEzenYPsjfco=) 2: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: BfqUHI21QYImi0lr+Z58Iqsa7Onxr7/qLGGPmYicXKE=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: 4qVuLP3oyx7RiJngtOccrj/XkML4ZSk5eigFLJLBWTE=) 4: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: tTM/9NWG3IhzxJoEk+Z1/+wUc0rz0UR/sG3hU3aFT5I=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: xgHgXW996SxponRAZGTpcyeVjDtTlNUeBNA9uYpacKM=) 6: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl (hash: H6ZKDiSv2MS6xhNgJ6qyOF44Mb1rqe6U5xHuqR8mxfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c8:4f:56:5d:eb:93:f3:f3:be:d7:ae:56:c7:a7:72:80:d4:ba:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Validity Not Before: Nov 1 16:48:42 2026 GMT Not After : Nov 2 18:12:42 2026 GMT Subject: CN=4AD7CD51768937681C36F40C50C1CF84ED645F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:e8:31:14:9b:8f:69:c4:97:cc:02:26:2c: 8f:22:4a:b8:66:7a:d7:9c:8b:72:4c:94:61:31:4a: 4e:89:43:4e:27:69:e7:2c:4d:28:f8:d3:17:a3:a3: 1a:13:04:09:71:70:7a:03:aa:f3:20:85:9f:0f:4b: 8e:68:50:15:ba:5f:90:78:92:81:1b:10:fe:39:f1: 9b:c4:bb:00:7d:5a:20:96:e4:92:7d:23:71:00:ef: 8c:81:9e:10:51:12:84:57:3f:21:8f:23:94:ae:3f: 5e:11:e2:c7:33:d3:2f:a6:93:7c:6c:e1:6d:e1:6b: 42:6e:c8:be:73:d8:0d:6c:66:84:28:ac:38:c3:7b: c3:ef:4a:92:a8:eb:d8:15:72:ac:eb:ab:e8:39:5b: f8:d1:1a:2d:53:65:cf:b9:cb:0b:d3:db:88:03:bc: 17:0f:6a:ee:7f:4c:a8:fc:a6:b9:6c:30:92:f2:e5: 85:2d:7f:f2:6e:b5:ce:a8:a0:2a:a6:8e:2d:73:d5: 26:d6:bb:70:03:c6:2a:9d:1e:87:cb:8b:aa:33:64: 8f:8a:4a:6f:54:ea:3c:c1:67:3b:58:ec:60:aa:77: a0:31:21:b4:92:31:20:7d:21:20:1a:40:cf:59:b8: 9b:2e:10:1d:cc:e1:56:d0:dd:5c:a4:2b:b8:f1:44: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:CD:51:76:89:37:68:1C:36:F4:0C:50:C1:CF:84:ED:64:5F:64 X509v3 Authority Key Identifier: keyid:51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:9e:01:45:81:3e:37:4b:77:d1:20:a3:15:f6:76:d4:0b:cb: 9f:be:6c:0f:e0:54:57:3d:3a:7b:a8:f5:c7:ca:ae:a2:42:7a: 08:96:5e:ee:30:17:c3:87:3d:69:4a:76:e9:21:4d:fb:19:5a: d4:1e:e8:51:9f:13:6d:21:d4:de:37:60:41:02:3c:ec:ef:10: 12:53:07:bb:75:5c:8b:71:24:91:d5:ae:1f:65:7e:fc:8e:ee: 03:51:2e:15:88:3f:be:17:81:34:ec:5c:4c:76:82:99:d7:87: 63:7b:5f:45:07:a4:02:a3:18:eb:a1:90:d5:72:d3:2f:14:3f: da:5e:33:5d:85:8c:e6:69:9c:bd:43:44:ac:1d:75:2c:6c:21: dd:ce:99:b6:73:cb:0c:01:37:cb:b0:ca:dc:a0:e9:2c:e1:54: 03:96:36:69:8d:d3:0a:b9:a6:87:aa:5e:23:4a:49:4c:58:30: b3:87:19:ce:63:f2:c6:2a:91:a5:f6:c7:dd:08:db:e6:5d:4a: d7:ae:b7:42:0e:18:5b:5f:00:4b:a6:a5:8c:82:1c:36:18:ee: 87:04:21:a1:5f:96:d5:2d:d0:2a:eb:d0:43:93:95:b5:c1:dc: b8:e4:a3:3e:e0:62:7e:df:80:49:64:0e:6a:1e:a3:24:08:84: 09:fd:db:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMhPVl3rk/PzvteuVsencoDUupowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5 NERDMTBEMTAeFw0yNjExMDExNjQ4NDJaFw0yNjExMDIxODEyNDJaMDMxMTAvBgNV BAMTKDRBRDdDRDUxNzY4OTM3NjgxQzM2RjQwQzUwQzFDRjg0RUQ2NDVGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDegxFJuPacSXzAImLI8iSrhm eteci3JMlGExSk6JQ04naecsTSj40xejoxoTBAlxcHoDqvMghZ8PS45oUBW6X5B4 koEbEP458ZvEuwB9WiCW5JJ9I3EA74yBnhBREoRXPyGPI5SuP14R4scz0y+mk3xs 4W3ha0JuyL5z2A1sZoQorDjDe8PvSpKo69gVcqzrq+g5W/jRGi1TZc+5ywvT24gD vBcPau5/TKj8prlsMJLy5YUtf/Jutc6ooCqmji1z1SbWu3ADxiqdHofLi6ozZI+K Sm9U6jzBZztY7GCqd6AxIbSSMSB9ISAaQM9ZuJsuEB3M4VbQ3VykK7jxROCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUStfNUXaJN2gcNvQMUMHPhO1kX2QwHwYDVR0j BBgwFoAUUQgXnj+1f1rEXxdzJ5ppr5TcENEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2YzNDA0ZTYtYmIyYS00NGIwLWJlZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUz RkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5NERDMTBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA4MTc5RTNGQjU3RjVBQzQ1RjE3NzMyNzlBNjlBRjk0REMx MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5 QUY5NERDMTBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaeAUWBPjdLd9EgoxX2dtQLy5++bA/gVFc9 Onuo9cfKrqJCegiWXu4wF8OHPWlKdukhTfsZWtQe6FGfE20h1N43YEECPOzvEBJT B7t1XItxJJHVrh9lfvyO7gNRLhWIP74XgTTsXEx2gpnXh2N7X0UHpAKjGOuhkNVy 0y8UP9peM12FjOZpnL1DRKwddSxsId3OmbZzywwBN8uwytyg6SzhVAOWNmmN0wq5 poeqXiNKSUxYMLOHGc5j8sYqkaX2x90I2+ZdSteut0IOGFtfAEumpYyCHDYY7ocE IaFfltUt0Crr0EOTlbXB3Ljkoz7gYn7fgElkDmoeoyQIhAn92xk= -----END CERTIFICATE-----Generated at Sun Nov 1 23:21:45 2026 by rpki-client