$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: 1txQH9EPILhPJjv4Flxp7CkCubncVi9mVmL7IUA1NWk= Subject key identifier: 23:87:58:CA:BF:7D:DA:6F:87:DF:EB:2A:5F:81:21:C1:FA:F0:DC:2F Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 73B2EE80CFDB202031C1B17DB528F28219AA1A1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 04:28:25 +0000 Manifest this update: Tue 03 Nov 2026 04:23:25 +0000 Manifest next update: Wed 04 Nov 2026 08:04:25 +0000 Files and hashes: 1: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: SPhluy9SqrWZuK3LF+6Rk5NxWCLMdZ4ONqrswISdNBQ=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b2:ee:80:cf:db:20:20:31:c1:b1:7d:b5:28:f2:82:19:aa:1a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Nov 3 04:23:25 2026 GMT Not After : Nov 4 08:04:25 2026 GMT Subject: CN=238758CABF7DDA6F87DFEB2A5F8121C1FAF0DC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:eb:1d:b8:e3:98:97:1a:02:32:29:7b:e8: 73:22:47:b2:12:f7:b2:33:56:2d:64:c6:a6:25:2f: 75:da:3a:f8:10:3a:e3:2c:fc:74:b9:d4:9f:a6:83: 16:7f:11:78:10:ec:b5:e5:e1:83:88:97:62:13:ec: 7a:3a:15:03:59:fc:d4:e6:92:3f:1a:bc:96:5b:db: b6:21:19:c9:e2:4d:b7:6f:d3:ed:3b:2f:00:92:d4: cd:07:d7:42:c4:b2:d0:8c:b2:3f:67:34:a3:3e:7b: 12:f5:b5:54:45:2c:12:93:b1:48:70:82:ed:e9:f0: 7c:64:f7:ba:bb:fb:83:5d:5e:f1:a6:a4:1f:f2:73: 38:ff:0e:7e:86:73:dd:e2:37:ac:a4:ec:80:f2:4f: 7f:7f:bb:c0:71:8c:6d:05:fc:f4:c0:75:b5:eb:2e: 7e:34:8a:68:5e:7b:ca:ae:82:11:e7:95:d4:d0:75: 17:21:6d:33:9b:e1:f6:d8:2c:78:40:a0:41:3a:22: f8:61:5b:42:ae:32:5b:83:f5:1d:65:78:7e:eb:19: bc:ec:9c:e2:52:4c:9e:f9:f7:0f:46:08:d7:5a:94: 4d:e9:f4:e7:4f:50:2b:e8:71:4a:e1:80:46:08:44: 6a:2e:e6:0a:6c:ad:3b:f4:b4:da:e9:2e:08:df:38: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:87:58:CA:BF:7D:DA:6F:87:DF:EB:2A:5F:81:21:C1:FA:F0:DC:2F X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0c:0f:dc:d9:9e:f1:43:85:e8:0f:66:fb:ab:2a:d6:92:99: 78:04:f4:f7:9b:17:5c:58:13:98:45:6b:73:45:08:45:ec:81: a2:0d:9c:00:be:95:2b:a7:07:37:56:70:17:74:39:59:ee:e6: 2c:b7:5c:15:79:a2:27:5e:64:7d:df:c3:a8:cf:65:2f:47:a4: af:14:12:68:b7:91:fd:e5:5a:6a:4a:fb:f7:9c:f5:bf:ff:2f: 37:55:82:12:62:55:99:59:19:2f:da:c7:52:8e:5b:9f:7f:1b: 49:b9:85:89:79:5d:4e:77:87:29:4f:6d:67:cc:00:1d:6f:ae: 88:2d:8b:8d:93:db:9a:be:71:a5:fa:3e:1f:a3:cc:3a:05:19: be:aa:7b:24:8f:5a:7a:81:6f:b3:6d:74:de:a0:2c:36:b1:ff: d4:a4:db:28:90:c3:22:c3:c8:16:8a:f4:ee:e2:5a:cf:b1:12: 39:63:05:7e:5a:5c:97:bd:fd:d1:00:6a:8f:5b:22:df:63:93: d7:51:7d:7c:12:43:0e:3b:68:a6:ec:e9:f8:08:83:bc:98:ed: 95:67:74:18:f1:8b:9d:06:f1:cc:9d:81:6a:8f:b9:3a:90:63: e7:b0:5e:29:09:96:cb:9b:dd:b6:05:78:5e:94:7e:f7:9c:da: b0:56:9b:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7LugM/bICAxwbF9tSjyghmqGhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjExMDMwNDIzMjVaFw0yNjExMDQwODA0MjVaMDMxMTAvBgNV BAMTKDIzODc1OENBQkY3RERBNkY4N0RGRUIyQTVGODEyMUMxRkFGMERDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1+sduOOYlxoCMil76HMiR7IS 97IzVi1kxqYlL3XaOvgQOuMs/HS51J+mgxZ/EXgQ7LXl4YOIl2IT7Ho6FQNZ/NTm kj8avJZb27YhGcniTbdv0+07LwCS1M0H10LEstCMsj9nNKM+exL1tVRFLBKTsUhw gu3p8Hxk97q7+4NdXvGmpB/yczj/Dn6Gc93iN6yk7IDyT39/u8BxjG0F/PTAdbXr Ln40imhee8qughHnldTQdRchbTOb4fbYLHhAoEE6IvhhW0KuMluD9R1leH7rGbzs nOJSTJ759w9GCNdalE3p9OdPUCvocUrhgEYIRGou5gpsrTv0tNrpLgjfOMdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI4dYyr992m+H3+sqX4Ehwfrw3C8wHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAMD9zZnvFDhegPZvurKtaSmXgE9PebF1xY E5hFa3NFCEXsgaINnAC+lSunBzdWcBd0OVnu5iy3XBV5oideZH3fw6jPZS9HpK8U Emi3kf3lWmpK+/ec9b//LzdVghJiVZlZGS/ax1KOW59/G0m5hYl5XU53hylPbWfM AB1vrogti42T25q+caX6Ph+jzDoFGb6qeySPWnqBb7NtdN6gLDax/9Sk2yiQwyLD yBaK9O7iWs+xEjljBX5aXJe9/dEAao9bIt9jk9dRfXwSQw47aKbs6fgIg7yY7ZVn dBjxi50G8cydgWqPuTqQY+ewXikJlsub3bYFeF6Ufvec2rBWmzA= -----END CERTIFICATE-----Generated at Tue Nov 3 08:28:46 2026 by rpki-client