$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft File: 521B83183A9325633BB6ADA03FF17A79CADB35DF.mft (raw, json) Hash identifier: Q0ZHFEJ9jG9ybhZQyM9QMJ4PSe6yAuwrt715G3WGx/g= Subject key identifier: 2A:E2:7E:B5:A6:BE:18:8A:8B:06:CC:F3:65:EB:AD:A6:FB:B7:47:0E Authority key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF Certificate issuer: /CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Certificate serial: 3C4C932F0079AC8703EC7380D2CD95C1F50B6F69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 00:18:21 +0000 Manifest this update: Wed 04 Nov 2026 00:13:21 +0000 Manifest next update: Thu 05 Nov 2026 03:59:21 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: 6wZBUy40gkIb1BF7mQfsPCPQYb0RKrN3BToc6rY80DQ=) 2: 521B83183A9325633BB6ADA03FF17A79CADB35DF.crl (hash: /E54WQlAQlwkwFLj3/Xbkzqf59V/ljaJFeCFY03Kjzw=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: TTP/IyS3Nws7WQbB4mb0u1b9tLXn20HyAh2jtbcNLlc=) 4: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: JaucgXEEHyqtYGuJV6Iibo3lc6NtVibWI1nY7MEIhPI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4c:93:2f:00:79:ac:87:03:ec:73:80:d2:cd:95:c1:f5:0b:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Validity Not Before: Nov 4 00:13:21 2026 GMT Not After : Nov 5 03:59:21 2026 GMT Subject: CN=2AE27EB5A6BE188A8B06CCF365EBADA6FBB7470E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:14:ab:f7:53:83:7f:d5:5a:c2:52:8f:e8: ca:26:2a:28:49:02:00:36:86:cb:0a:01:ff:b8:80: b2:e7:7e:c6:60:5c:4d:ac:20:b0:87:60:07:42:17: 45:95:af:aa:bb:96:92:d1:4e:6e:b6:c7:bc:28:91: 4b:8b:ca:f8:45:c9:87:d5:f3:1a:35:f8:37:01:fc: b7:10:50:0a:b7:03:03:6f:4a:b6:93:f8:70:f3:3e: b3:84:a6:64:96:29:7a:d7:8f:6f:e3:ed:bc:6a:85: bf:b1:70:ca:fc:50:c1:3a:18:5b:cd:22:73:3f:02: d8:0d:19:ca:47:3b:2f:c5:f7:cf:3c:8b:67:f5:b0: d3:e8:e2:6c:4e:7d:2f:d8:d3:13:cf:e1:7e:c4:a8: 7a:3a:b3:95:c1:2d:72:50:29:1a:2f:c4:aa:0c:d8: ba:18:6f:8c:68:05:21:9d:a5:84:ef:0e:df:86:1a: a2:e6:a3:f8:02:23:27:db:2b:ea:42:6c:38:59:70: 52:f6:1d:65:63:38:b2:ca:8b:cf:26:98:df:34:8c: f6:e3:f0:a2:42:0e:3c:91:16:c7:91:cb:57:d5:81: ce:10:2a:02:f0:dd:f5:e9:c2:8c:3c:c8:d7:78:4b: ae:b0:1a:e9:c9:0e:67:de:d1:70:52:01:8b:12:13: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:7E:B5:A6:BE:18:8A:8B:06:CC:F3:65:EB:AD:A6:FB:B7:47:0E X509v3 Authority Key Identifier: keyid:52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d3:9c:ac:76:ba:10:2b:dd:20:63:5b:10:c8:2e:a9:a0:91: 9e:da:32:66:f4:13:9b:49:bb:b7:1d:ba:3a:91:3e:63:0e:50: 92:52:c6:16:4d:5b:85:39:4f:55:09:f6:dc:2c:25:b8:c9:df: 31:10:97:39:b1:f1:eb:61:84:11:63:9d:6b:80:37:f9:8e:c3: fe:70:1b:b9:86:76:a1:c6:af:49:7a:03:4f:ea:96:5f:6b:3d: 70:2a:a8:c1:57:64:41:07:63:d8:72:a3:c1:de:65:6e:07:f1: 54:75:4d:35:06:b7:33:82:72:2c:a4:df:57:31:fb:81:05:14: d9:08:66:6b:e8:57:c4:86:6b:84:30:4d:53:e3:32:aa:21:57: 2c:fe:ca:8c:48:2c:1c:ed:e8:88:3d:4a:aa:af:8f:82:9d:3d: 55:19:6f:37:3d:4d:90:08:c6:74:04:bc:02:b1:14:97:a3:d6: 7b:30:25:5d:40:1b:67:3e:5b:e9:08:f0:19:dd:82:57:08:7b: 8b:58:71:73:83:26:9e:af:33:32:c6:46:18:6b:69:3d:73:92: b0:34:1d:a4:27:cb:8d:cb:7a:68:43:4e:c0:c0:b3:5f:ec:46: 16:e5:11:27:90:4d:f6:40:75:92:c2:87:66:53:64:6d:41:1c: 42:78:b8:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEyTLwB5rIcD7HOA0s2VwfULb2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlD QURCMzVERjAeFw0yNjExMDQwMDEzMjFaFw0yNjExMDUwMzU5MjFaMDMxMTAvBgNV BAMTKDJBRTI3RUI1QTZCRTE4OEE4QjA2Q0NGMzY1RUJBREE2RkJCNzQ3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiARSr91ODf9VawlKP6MomKihJ AgA2hssKAf+4gLLnfsZgXE2sILCHYAdCF0WVr6q7lpLRTm62x7wokUuLyvhFyYfV 8xo1+DcB/LcQUAq3AwNvSraT+HDzPrOEpmSWKXrXj2/j7bxqhb+xcMr8UME6GFvN InM/AtgNGcpHOy/F9888i2f1sNPo4mxOfS/Y0xPP4X7EqHo6s5XBLXJQKRovxKoM 2LoYb4xoBSGdpYTvDt+GGqLmo/gCIyfbK+pCbDhZcFL2HWVjOLLKi88mmN80jPbj 8KJCDjyRFseRy1fVgc4QKgLw3fXpwow8yNd4S66wGunJDmfe0XBSAYsSE2edAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuJ+taa+GIqLBszzZeutpvu3Rw4wHwYDVR0j BBgwFoAUUhuDGDqTJWM7tq2gP/F6ecrbNd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM5MmY4OTktZTgzYy00NzA2LWE5YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgz QTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlDQURCMzVERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjFCODMxODNBOTMyNTYzM0JCNkFEQTAzRkYxN0E3OUNBREIz NURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdB NzlDQURCMzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTTnKx2uhAr3SBjWxDILqmgkZ7aMmb0E5tJ u7cdujqRPmMOUJJSxhZNW4U5T1UJ9twsJbjJ3zEQlzmx8ethhBFjnWuAN/mOw/5w G7mGdqHGr0l6A0/qll9rPXAqqMFXZEEHY9hyo8HeZW4H8VR1TTUGtzOCciyk31cx +4EFFNkIZmvoV8SGa4QwTVPjMqohVyz+yoxILBzt6Ig9Sqqvj4KdPVUZbzc9TZAI xnQEvAKxFJej1nswJV1AG2c+W+kI8BndglcIe4tYcXODJp6vMzLGRhhraT1zkrA0 HaQny43LemhDTsDAs1/sRhblESeQTfZAdZLCh2ZTZG1BHEJ4uCI= -----END CERTIFICATE-----Generated at Wed Nov 4 03:40:17 2026 by rpki-client