$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json) Hash identifier: 3fL20LHPYpfZ3Vc9WF2E6hu5UGAhjloOZCChzHlkk68= Subject key identifier: 96:1F:AD:0E:8C:D4:0F:4E:CA:97:14:29:37:20:91:52:11:11:91:E0 Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Certificate serial: 202F6EF359495AED4CE878BC430C6545392FA211 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 07:01:52 +0000 Manifest this update: Tue 03 Nov 2026 06:56:52 +0000 Manifest next update: Wed 04 Nov 2026 09:03:52 +0000 Files and hashes: 1: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=) 2: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=) 3: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: wkJrv3piWm73ewGVSDljJJijSud0zruOOz7Z0IfKnvY=) 4: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=) 5: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=) 6: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=) 7: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 09:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2f:6e:f3:59:49:5a:ed:4c:e8:78:bc:43:0c:65:45:39:2f:a2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Validity Not Before: Nov 3 06:56:52 2026 GMT Not After : Nov 4 09:03:52 2026 GMT Subject: CN=961FAD0E8CD40F4ECA97142937209152111191E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:95:31:4f:aa:f4:12:64:20:e6:1e:4f:77: ec:18:2b:d0:23:fc:49:a0:02:37:32:ca:da:3c:e4: 92:fa:85:f6:ec:a9:da:4d:33:a8:90:af:4c:4c:3e: fb:5f:7e:6c:9d:75:18:8d:e0:e8:22:27:95:77:e6: 7f:ac:6f:e7:0f:a1:ce:b4:ba:a8:f6:86:7e:46:a6: 10:0c:d2:ec:d2:6f:5d:4a:8a:df:09:43:5c:09:67: 2f:fc:f4:a1:ce:05:79:94:94:01:1f:cd:91:2c:ba: fe:96:48:b6:9f:b3:19:43:5f:18:d7:c5:e9:59:68: 70:ce:11:7b:02:4a:8b:25:d1:89:a4:0a:b5:cf:4f: 5f:a5:9c:68:b4:88:d4:f6:4a:79:c5:45:d2:e3:4c: 02:01:db:ac:f2:f7:90:df:b7:e6:85:22:a8:d8:57: 8f:35:0f:2d:b0:75:de:c8:4a:03:fb:ee:ba:6c:e7: f3:04:52:52:74:62:0a:81:99:f7:c2:39:79:4f:08: 5c:ff:1d:79:d4:05:25:2d:1d:8b:f9:e8:58:78:d9: c5:a8:83:17:e0:67:7d:93:4e:1d:92:91:e2:b9:5f: 04:df:f7:98:1e:e7:ff:45:a9:d3:c8:c3:51:dc:77: 23:f3:c7:8a:80:0f:86:6e:f2:22:2b:bd:91:1e:54: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:AD:0E:8C:D4:0F:4E:CA:97:14:29:37:20:91:52:11:11:91:E0 X509v3 Authority Key Identifier: keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:63:c1:76:de:40:05:0a:3c:3c:80:4c:2f:a0:bc:64:8d:32: 8a:64:13:39:12:d3:86:c6:77:e5:f0:2f:ae:20:6e:e4:16:25: 6d:6a:31:b6:bd:c5:eb:0d:cf:0f:73:9c:d2:c5:5b:89:a9:b5: 47:81:10:db:1c:76:b3:e9:5a:36:35:b0:f9:00:bc:82:e9:e7: 56:0f:d8:3c:a3:8b:ad:48:c3:7b:6a:9a:10:45:ef:fd:c3:72: b1:5a:97:26:b3:50:cd:7d:db:8c:17:2f:c7:c7:aa:51:0f:83: 63:b2:10:75:dc:5e:3f:e4:37:cc:7d:03:ec:ba:ea:87:28:a9: 30:e5:70:42:c7:79:b6:01:24:12:b7:91:aa:e6:d5:c3:b2:e3: 25:c3:dd:f7:25:e1:c4:0f:75:c6:0b:d1:fb:35:f0:7a:3c:f2: 2b:2d:25:6d:37:96:23:1a:49:77:fc:16:2c:3e:ba:30:cf:de: 44:04:64:e7:67:2d:00:51:f8:0e:35:98:b0:95:66:ca:fd:c7: 47:fc:7b:43:11:73:f4:80:51:e6:05:d7:04:68:6c:86:bc:ba: 11:d9:b4:ff:f2:7f:95:bb:08:3d:ac:4b:f8:5a:fb:bc:2e:19: a4:f9:5b:6d:eb:e8:ab:7a:7a:b1:bf:b1:15:07:2a:35:6b:e1: 62:1f:33:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIC9u81lJWu1M6Hi8QwxlRTkvohEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB RTNGMEQzNjAeFw0yNjExMDMwNjU2NTJaFw0yNjExMDQwOTAzNTJaMDMxMTAvBgNV BAMTKDk2MUZBRDBFOENENDBGNEVDQTk3MTQyOTM3MjA5MTUyMTExMTkxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGJUxT6r0EmQg5h5Pd+wYK9Aj /EmgAjcyyto85JL6hfbsqdpNM6iQr0xMPvtffmyddRiN4OgiJ5V35n+sb+cPoc60 uqj2hn5GphAM0uzSb11Kit8JQ1wJZy/89KHOBXmUlAEfzZEsuv6WSLafsxlDXxjX xelZaHDOEXsCSosl0YmkCrXPT1+lnGi0iNT2SnnFRdLjTAIB26zy95Dft+aFIqjY V481Dy2wdd7ISgP77rps5/MEUlJ0YgqBmffCOXlPCFz/HXnUBSUtHYv56Fh42cWo gxfgZ32TTh2SkeK5XwTf95ge5/9FqdPIw1HcdyPzx4qAD4Zu8iIrvZEeVMTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlh+tDozUD07KlxQpNyCRUhERkeAwHwYDVR0j BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcx RDJBRTNGMEQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVjwXbeQAUKPDyATC+gvGSNMopkEzkS04bG d+XwL64gbuQWJW1qMba9xesNzw9znNLFW4mptUeBENscdrPpWjY1sPkAvILp51YP 2Dyji61Iw3tqmhBF7/3DcrFalyazUM1924wXL8fHqlEPg2OyEHXcXj/kN8x9A+y6 6ocoqTDlcELHebYBJBK3karm1cOy4yXD3fcl4cQPdcYL0fs18Ho88istJW03liMa SXf8Fiw+ujDP3kQEZOdnLQBR+A41mLCVZsr9x0f8e0MRc/SAUeYF1wRobIa8uhHZ tP/yf5W7CD2sS/ha+7wuGaT5W23r6Kt6erG/sRUHKjVr4WIfM6I= -----END CERTIFICATE-----Generated at Tue Nov 3 16:24:53 2026 by rpki-client