$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: BdoadhmnFPP+n8inNks/SiszKs5xUzyHIj5PjQhKvmw= Subject key identifier: 46:5B:6A:C8:74:35:8F:E1:BD:26:72:DE:23:E6:57:4B:AB:BD:B7:16 Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 2A0B5FA1C1A1836B7B2F0306B3148034F2561E3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 12:23:27 +0000 Manifest this update: Mon 02 Nov 2026 12:18:27 +0000 Manifest next update: Tue 03 Nov 2026 15:56:27 +0000 Files and hashes: 1: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) 2: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) 3: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) 4: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: fHHhBW4/IcQBk8xWygqc5IEAz9VKTN2cYFp2Lj465OI=) 5: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0b:5f:a1:c1:a1:83:6b:7b:2f:03:06:b3:14:80:34:f2:56:1e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Nov 2 12:18:27 2026 GMT Not After : Nov 3 15:56:27 2026 GMT Subject: CN=465B6AC874358FE1BD2672DE23E6574BABBDB716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:37:1a:b3:9c:66:4e:26:31:9f:9e:21:5d: 9a:d0:f4:00:0e:a0:b2:ff:67:9e:b7:e7:6e:d4:55: 2f:6f:03:80:af:e0:3b:f7:1d:77:66:da:5d:61:a3: 0e:1f:bf:d8:a1:96:19:aa:eb:f2:74:fc:be:9c:a9: c2:5c:4d:d4:4e:4b:57:c0:5f:1c:2e:a7:a6:e3:2b: 6a:93:be:ef:8a:cd:bd:e0:cb:52:11:64:70:b5:94: be:98:e3:3c:b2:a7:e3:95:72:8d:04:db:19:35:69: 4a:c1:12:c6:df:4d:bc:eb:10:0c:57:f4:65:6f:2b: d8:13:1b:22:1a:1c:aa:e1:99:59:de:4f:8a:ef:80: 76:c7:b9:30:68:7c:a8:40:3e:74:62:ae:8a:b3:b9: 65:0c:e1:a9:bf:aa:e6:c6:11:4c:c1:a9:4c:52:02: fb:1f:e1:8c:8b:d6:48:46:3d:2c:3f:b4:90:bd:36: f1:a9:99:d0:c9:03:63:f0:90:9c:45:32:e3:22:00: b1:29:20:d7:42:51:0c:a3:6b:22:3b:69:24:36:1a: e3:4d:22:c6:b3:25:32:aa:b5:ea:1c:1d:26:45:97: d5:ed:55:43:f2:f8:16:d4:79:bf:85:06:ae:92:91: 89:fd:f8:53:b1:ea:09:54:1e:b6:a5:ef:02:4e:e5: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:6A:C8:74:35:8F:E1:BD:26:72:DE:23:E6:57:4B:AB:BD:B7:16 X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f3:a5:9b:80:24:35:52:27:b3:e5:ac:05:32:fe:d7:f5:1c: ba:c6:6b:1e:7c:13:d4:b0:ee:24:c8:4c:96:b7:be:74:aa:b0: 74:98:5e:ce:be:4b:20:ff:d6:ed:12:cd:c1:b5:22:cd:98:2b: a2:cb:ae:c6:97:24:1a:09:46:1e:5b:ad:ce:26:8c:f7:49:86: c6:d2:ab:39:f9:c2:d1:e4:1e:35:a5:47:71:37:42:7d:fe:dd: a0:17:97:e9:fd:85:0f:0d:74:cb:f0:0f:41:4c:af:97:ca:bf: 98:8b:cc:05:db:6c:e5:ca:65:29:a1:02:12:6b:fb:76:54:30: 4f:6a:21:97:6f:25:71:1f:54:1f:a9:c6:e1:bf:ab:a0:88:5a: 68:57:13:82:93:ac:6f:85:04:d6:2e:49:9e:4f:5a:3a:c9:09: 80:cd:60:22:01:54:6f:a9:3d:93:48:41:98:5f:5f:68:4d:ac: 28:eb:88:fb:85:1c:e2:9d:3a:bc:16:44:13:56:aa:2d:c5:59: 12:ce:b1:44:70:19:6c:90:5d:cb:29:11:b8:da:56:c9:6b:dd: ec:05:8a:90:35:49:13:8d:38:19:1e:45:44:3f:0b:a4:c2:4a: d9:fa:b4:cd:83:b2:33:3f:37:f5:11:3c:91:a3:a1:97:9b:98: a0:f7:7a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgtfocGhg2t7LwMGsxSANPJWHj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjExMDIxMjE4MjdaFw0yNjExMDMxNTU2MjdaMDMxMTAvBgNV BAMTKDQ2NUI2QUM4NzQzNThGRTFCRDI2NzJERTIzRTY1NzRCQUJCREI3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MTcas5xmTiYxn54hXZrQ9AAO oLL/Z563527UVS9vA4Cv4Dv3HXdm2l1how4fv9ihlhmq6/J0/L6cqcJcTdROS1fA Xxwup6bjK2qTvu+Kzb3gy1IRZHC1lL6Y4zyyp+OVco0E2xk1aUrBEsbfTbzrEAxX 9GVvK9gTGyIaHKrhmVneT4rvgHbHuTBofKhAPnRiroqzuWUM4am/qubGEUzBqUxS Avsf4YyL1khGPSw/tJC9NvGpmdDJA2PwkJxFMuMiALEpINdCUQyjayI7aSQ2GuNN IsazJTKqteocHSZFl9XtVUPy+BbUeb+FBq6SkYn9+FOx6glUHral7wJO5SIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURltqyHQ1j+G9JnLeI+ZXS6u9txYwHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXzpZuAJDVSJ7PlrAUy/tf1HLrGax58E9Sw 7iTITJa3vnSqsHSYXs6+SyD/1u0SzcG1Is2YK6LLrsaXJBoJRh5brc4mjPdJhsbS qzn5wtHkHjWlR3E3Qn3+3aAXl+n9hQ8NdMvwD0FMr5fKv5iLzAXbbOXKZSmhAhJr +3ZUME9qIZdvJXEfVB+pxuG/q6CIWmhXE4KTrG+FBNYuSZ5PWjrJCYDNYCIBVG+p PZNIQZhfX2hNrCjriPuFHOKdOrwWRBNWqi3FWRLOsURwGWyQXcspEbjaVslr3ewF ipA1SRONOBkeRUQ/C6TCStn6tM2DsjM/N/URPJGjoZebmKD3ejo= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:04 2026 by rpki-client