$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft File: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json) Hash identifier: u5EzTSZL6Ug06QcSVGVQ+gvchevzcL1flpVFj44f3/0= Subject key identifier: CE:20:21:EA:9D:83:98:C4:FA:CE:2F:65:85:64:5E:C5:C4:38:47:EC Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Certificate serial: 4EA22768049BF0817AE637EA1C85302C6526965D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft Manifest number: FA Signing time: Mon 02 Nov 2026 16:13:14 +0000 Manifest this update: Mon 02 Nov 2026 16:08:14 +0000 Manifest next update: Tue 03 Nov 2026 18:07:14 +0000 Files and hashes: 1: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=) 2: 3130332e39372e37372e302f32342d3234203d3e20313339393832.roa (hash: kjVWGrmA+VHTqA4xjxSxUv9AEMKkgjRqk/NxzJQ1RzM=) 3: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=) 4: 3130332e39372e37362e302f32342d3234203d3e20313532383036.roa (hash: +Asa2FE1R5Iij5c7rQ+dFjTY9Z+ABZa4nraHHa4SLi4=) 5: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=) 6: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=) 7: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: PWg0ZohZ7LBg3fHDDoGhrkiqRa/JAA2Cu3u59rPKrhQ=) 8: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=) 9: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=) 10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a2:27:68:04:9b:f0:81:7a:e6:37:ea:1c:85:30:2c:65:26:96:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Validity Not Before: Nov 2 16:08:14 2026 GMT Not After : Nov 3 18:07:14 2026 GMT Subject: CN=CE2021EA9D8398C4FACE2F6585645EC5C43847EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:18:5d:7f:1a:6d:ff:6f:6e:f4:10:05:fc:29: 6a:8d:b6:08:81:6b:52:b0:1a:a5:21:b8:f4:b8:c8: 5f:86:6c:df:0b:98:97:ac:25:67:19:8c:c7:c6:8b: e9:08:1d:c3:79:76:32:c5:59:e3:d3:5a:7a:6b:7a: 2c:2f:e3:25:e1:4f:3c:2a:6c:f3:a0:ab:64:08:ea: 46:a6:87:92:c0:1b:de:10:1b:33:b0:4d:7f:48:c1: 6b:08:22:5d:37:ee:2f:ee:34:5e:d9:3a:8a:94:17: c8:80:39:1b:7e:64:7b:57:94:cb:01:1d:66:25:d7: 29:99:f4:ee:e8:7a:c9:1d:82:57:43:0a:26:b9:10: 21:a3:a4:7b:49:1c:40:28:9a:ef:86:28:bd:a5:42: ea:16:96:98:b5:40:e9:c0:8e:b9:af:eb:81:9a:a4: cd:33:60:03:e4:39:3c:d6:82:21:17:32:01:1d:72: 40:6c:bd:99:82:31:a6:e4:af:fa:59:31:89:f1:fd: f9:85:c9:d7:1e:a6:3f:9e:77:76:d8:51:cb:b3:96: e9:9e:fc:bc:6f:1f:36:3e:23:13:d8:05:78:a9:9c: d8:1b:e1:90:1a:62:88:c1:87:b7:e5:7f:fb:97:95: 15:66:0a:ae:59:0f:81:fa:89:37:af:37:9e:69:73: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:21:EA:9D:83:98:C4:FA:CE:2F:65:85:64:5E:C5:C4:38:47:EC X509v3 Authority Key Identifier: keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3e:c7:c7:e9:de:a7:59:58:d8:f0:d2:86:cc:d7:4a:e6:52: d1:ad:dc:54:27:dd:02:cb:cd:f5:90:fe:50:29:6b:1d:bb:3d: 8a:63:22:e6:b4:e3:59:fe:23:e7:6c:d5:11:bc:ca:46:ff:27: 45:04:2b:1b:d4:50:42:cd:4c:48:96:97:2d:1f:66:20:08:a1: a9:06:f5:86:15:f0:19:4a:70:c8:d4:b7:39:33:e5:e6:c0:68: a6:9f:57:72:0a:de:a3:0a:ca:43:30:5d:46:3c:c2:0c:bb:0f: 26:3a:be:c5:8b:70:ae:a7:2d:96:26:53:7e:6b:90:7a:0b:dc: 1f:30:82:54:80:54:9d:51:1b:36:d9:04:0c:fc:b5:05:15:aa: 1c:ac:0a:db:66:21:c2:5a:6e:cc:97:dd:d0:e9:17:c2:13:41: 38:1e:f7:13:93:10:de:17:a6:e6:54:55:0d:98:07:52:86:a9: fd:6d:c8:7c:61:41:ac:9e:6b:a4:69:a5:33:4a:2e:8c:84:5c: cb:fc:f5:0d:c5:a2:2b:4d:f3:b9:34:8e:c9:ec:dc:43:84:2a: bb:9a:50:4e:43:fb:34:bf:e4:27:f6:ae:d9:8e:6b:1e:7b:83: 1f:1d:7c:aa:d4:2f:a4:48:1e:a7:4e:3d:6f:c5:43:2b:95:31: 1a:ab:8e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqInaASb8IF65jfqHIUwLGUmll0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4NkRB QkEyMkNBRjAeFw0yNjExMDIxNjA4MTRaFw0yNjExMDMxODA3MTRaMDMxMTAvBgNV BAMTKENFMjAyMUVBOUQ4Mzk4QzRGQUNFMkY2NTg1NjQ1RUM1QzQzODQ3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/GF1/Gm3/b270EAX8KWqNtgiB a1KwGqUhuPS4yF+GbN8LmJesJWcZjMfGi+kIHcN5djLFWePTWnpreiwv4yXhTzwq bPOgq2QI6kamh5LAG94QGzOwTX9IwWsIIl037i/uNF7ZOoqUF8iAORt+ZHtXlMsB HWYl1ymZ9O7oeskdgldDCia5ECGjpHtJHEAomu+GKL2lQuoWlpi1QOnAjrmv64Ga pM0zYAPkOTzWgiEXMgEdckBsvZmCMabkr/pZMYnx/fmFydcepj+ed3bYUcuzlume /LxvHzY+IxPYBXipnNgb4ZAaYojBh7flf/uXlRVmCq5ZD4H6iTevN55pc6I/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziAh6p2DmMT6zi9lhWRexcQ4R+wwHwYDVR0j BBgwFoAU8H3ipgQcTM30JNT+KZtYbauiLK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3YjBkN2UtZWFkZS00MzE4LWFiMjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYw NDFDNENDREY0MjRENEZFMjk5QjU4NkRBQkEyMkNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDdERTJBNjA0MUM0Q0NERjQyNEQ0RkUyOTlCNTg2REFCQTIy Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4 NkRBQkEyMkNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg+x8fp3qdZWNjw0obM10rmUtGt3FQn3QLL zfWQ/lApax27PYpjIua041n+I+ds1RG8ykb/J0UEKxvUUELNTEiWly0fZiAIoakG 9YYV8BlKcMjUtzkz5ebAaKafV3IK3qMKykMwXUY8wgy7DyY6vsWLcK6nLZYmU35r kHoL3B8wglSAVJ1RGzbZBAz8tQUVqhysCttmIcJabsyX3dDpF8ITQTge9xOTEN4X puZUVQ2YB1KGqf1tyHxhQayea6RppTNKLoyEXMv89Q3FoitN87k0jsns3EOEKrua UE5D+zS/5Cf2rtmOax57gx8dfKrUL6RIHqdOPW/FQyuVMRqrjt4= -----END CERTIFICATE-----Generated at Tue Nov 3 03:26:01 2026 by rpki-client