$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: l+0syw/eXq8bVTPw5jDpgbfja3tlioBGNWXjZRSHGVI= Subject key identifier: FD:2B:C6:51:F3:F5:82:AF:1F:BA:B9:08:E5:B0:F0:2F:A7:E7:27:B4 Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 410C9A55ACB5FC3A4883B3373DCCD3B31B6FDEC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 06:10:21 +0000 Manifest this update: Mon 02 Nov 2026 06:05:21 +0000 Manifest next update: Tue 03 Nov 2026 08:51:21 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) 2: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: 7uxEJ4QwsHnuUIAtsYDZWHrkc2ONhKqS9oo9MLuwNJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0c:9a:55:ac:b5:fc:3a:48:83:b3:37:3d:cc:d3:b3:1b:6f:de:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: Nov 2 06:05:21 2026 GMT Not After : Nov 3 08:51:21 2026 GMT Subject: CN=FD2BC651F3F582AF1FBAB908E5B0F02FA7E727B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:68:b1:c7:4d:44:15:46:8f:c2:43:bd:77: fc:45:57:f3:04:47:98:85:ef:bf:1d:a3:90:b0:6d: fb:15:4f:5e:a4:0e:48:72:ba:5e:af:94:9f:0e:52: 15:55:03:18:64:42:4a:9b:21:20:0b:79:ee:0f:2b: 34:a1:a9:9e:f3:85:45:c8:1e:a6:b6:d7:b2:6f:e4: 87:54:32:8f:76:59:4a:5b:48:6e:cf:ac:31:e3:6e: 98:83:8c:7f:f5:55:43:b1:01:eb:89:8d:2f:28:80: 34:20:14:a7:0c:41:4f:8b:cf:b2:60:99:87:1b:11: 5c:a0:9f:f5:0f:65:d0:e8:7c:8a:e5:fb:5e:45:6f: cf:85:9f:c7:28:9b:80:c0:84:2c:20:d9:a3:53:98: 1c:7b:4c:48:00:5e:8a:5f:da:28:17:2d:44:42:bd: 5a:b4:6b:aa:b7:70:11:0d:11:e4:3f:1f:4b:69:0f: e9:f6:cc:e4:f8:3e:e7:de:76:88:1b:88:d1:00:0e: 65:bf:01:97:b3:b8:b6:d4:94:68:4e:2b:07:2b:ec: 6f:ff:d7:e5:f2:28:b1:04:3c:e6:a3:48:c3:01:a7: 47:4b:d3:41:f9:b5:52:d3:a4:64:88:91:a5:cd:2b: eb:99:ce:4d:6b:8e:69:2e:65:52:12:94:d0:89:6f: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2B:C6:51:F3:F5:82:AF:1F:BA:B9:08:E5:B0:F0:2F:A7:E7:27:B4 X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ab:11:d8:7f:7b:be:84:f6:12:47:e7:cc:ee:c8:5f:7a:b5: 1a:04:48:f9:e3:ac:e7:f3:01:24:6a:e3:b2:3e:ae:96:a7:a2: 82:11:cb:a1:ab:97:b9:67:d9:1d:ae:a9:a7:90:28:89:66:e4: 49:6f:92:c3:3f:1d:35:53:79:67:8f:4f:9c:e1:f7:4c:f6:d5: 76:a0:f6:d3:2b:51:4c:e5:3b:95:04:ec:9c:d4:4a:1e:8e:45: 6d:d8:b5:01:47:f2:56:56:8b:97:13:55:6b:2c:a0:a5:2a:b1: db:7d:9f:03:d3:b3:d4:83:0c:63:7d:f7:74:62:77:f9:9c:cb: a2:31:8a:27:43:c7:6d:72:c4:d0:8a:65:f3:59:e3:b4:b7:28: c3:f0:2b:7e:1c:51:1d:ec:a9:d4:76:8c:b1:05:cd:7a:99:da: 6e:a1:25:9a:b9:70:fb:54:cb:1e:af:3d:05:c6:3b:f5:2e:b6: 85:14:62:50:37:a4:d1:03:39:9a:45:70:fc:88:a3:21:e1:80: 73:24:a8:0e:12:0c:6f:ba:9d:7f:b1:d0:ba:b7:cb:77:72:9d: 64:95:f4:7d:50:4f:e3:70:b5:f2:d1:24:cb:e7:2c:f1:d6:97: b2:01:93:f3:ed:84:76:13:de:be:3a:c5:e2:2c:b5:6c:2c:9d: f8:11:a3:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQyaVay1/DpIg7M3PczTsxtv3sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjExMDIwNjA1MjFaFw0yNjExMDMwODUxMjFaMDMxMTAvBgNV BAMTKEZEMkJDNjUxRjNGNTgyQUYxRkJBQjkwOEU1QjBGMDJGQTdFNzI3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr92ixx01EFUaPwkO9d/xFV/ME R5iF778do5CwbfsVT16kDkhyul6vlJ8OUhVVAxhkQkqbISALee4PKzShqZ7zhUXI Hqa217Jv5IdUMo92WUpbSG7PrDHjbpiDjH/1VUOxAeuJjS8ogDQgFKcMQU+Lz7Jg mYcbEVygn/UPZdDofIrl+15Fb8+Fn8com4DAhCwg2aNTmBx7TEgAXopf2igXLURC vVq0a6q3cBENEeQ/H0tpD+n2zOT4PufedogbiNEADmW/AZezuLbUlGhOKwcr7G// 1+XyKLEEPOajSMMBp0dL00H5tVLTpGSIkaXNK+uZzk1rjmkuZVISlNCJb+a/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/SvGUfP1gq8furkI5bDwL6fnJ7QwHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+rEdh/e76E9hJH58zuyF96tRoESPnjrOfz ASRq47I+rpanooIRy6Grl7ln2R2uqaeQKIlm5ElvksM/HTVTeWePT5zh90z21Xag 9tMrUUzlO5UE7JzUSh6ORW3YtQFH8lZWi5cTVWssoKUqsdt9nwPTs9SDDGN993Ri d/mcy6IxiidDx21yxNCKZfNZ47S3KMPwK34cUR3sqdR2jLEFzXqZ2m6hJZq5cPtU yx6vPQXGO/UutoUUYlA3pNEDOZpFcPyIoyHhgHMkqA4SDG+6nX+x0Lq3y3dynWSV 9H1QT+NwtfLRJMvnLPHWl7IBk/PthHYT3r46xeIstWwsnfgRox8= -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:27 2026 by rpki-client