$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json) Hash identifier: UI5mYwi/UIVQ9IqsBYWh6O1IXKyNQKrIeEygXWLx/m4= Subject key identifier: FD:D1:B2:2E:51:4D:28:F4:01:1A:C6:5A:B4:98:CF:08:80:C8:1F:75 Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Certificate serial: 7F1A1C104FC9B24DD2AAAD0DFBB2CE45BCDDCD52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 22:00:16 +0000 Manifest this update: Tue 03 Nov 2026 21:55:16 +0000 Manifest next update: Wed 04 Nov 2026 23:15:16 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=) 2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: GiPaPGOR3C7MDH3n2+6psFpc1vvWu2XgIpmrwCG5Bro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1a:1c:10:4f:c9:b2:4d:d2:aa:ad:0d:fb:b2:ce:45:bc:dd:cd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Validity Not Before: Nov 3 21:55:16 2026 GMT Not After : Nov 4 23:15:16 2026 GMT Subject: CN=FDD1B22E514D28F4011AC65AB498CF0880C81F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:5b:a3:4e:a9:be:4b:78:6b:a5:52:16:67: 83:c2:9a:7a:af:f4:55:20:a7:99:f9:af:22:5f:5b: 29:36:f9:f6:97:1f:20:cc:5f:f3:e3:62:72:7f:c5: b7:47:ad:3f:ce:57:12:8c:4f:ce:f3:a5:6d:34:68: 6c:a0:cc:27:da:28:69:11:3c:75:0f:e4:69:3b:27: fa:11:ea:f7:8b:93:8a:6b:08:0a:b9:d1:15:25:d5: c6:8f:be:c2:e9:e9:85:92:e3:3b:32:f8:4a:da:af: c9:6e:4d:06:f1:95:d6:ed:8b:cf:42:77:30:10:7d: 62:3a:7b:9e:bb:cd:94:36:04:5e:04:27:ec:b8:f5: 2c:82:0c:3a:b5:dd:43:03:ca:36:fe:6e:57:9b:e1: 6c:a0:ed:61:e9:5c:23:5a:7e:94:a8:99:d3:64:5e: 31:1a:89:b6:2d:c8:87:f1:51:af:2b:08:23:bb:98: 80:08:6b:3f:c6:03:3f:00:31:c4:77:b1:73:8b:a1: 0d:f9:56:9b:4c:95:8a:d8:cb:fa:51:85:e2:1a:58: 8c:d5:89:05:cf:c6:b5:4e:a0:5f:80:e5:41:56:93: 49:04:03:74:36:18:37:90:e2:df:01:e0:08:e0:b7: 3e:db:cd:2f:f8:a5:cd:6f:5c:c9:e9:93:46:57:73: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D1:B2:2E:51:4D:28:F4:01:1A:C6:5A:B4:98:CF:08:80:C8:1F:75 X509v3 Authority Key Identifier: keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:44:ea:85:27:e1:b2:ee:16:c7:6c:ad:e1:84:58:7e:0f:b8: 11:65:be:ef:3c:ce:ea:75:f3:a4:d7:72:bf:06:29:44:18:52: c0:44:7b:d2:bc:c2:24:7c:8e:13:3f:bb:52:5d:29:bd:95:86: 42:06:4d:22:96:c9:6e:73:c2:8b:ba:e7:30:e9:a2:26:71:7e: fc:67:16:71:3b:2d:2a:d5:39:14:e2:e6:78:44:6b:a8:a3:57: 12:28:d6:7b:a0:6f:67:55:70:9d:98:9c:73:5a:81:7d:7f:f5: 78:a7:16:05:57:7a:0a:dc:ec:c6:d8:85:00:10:5a:f6:bd:4e: 91:d9:91:b2:53:f1:2b:8e:24:17:dc:c7:98:d4:41:70:e1:c8: f9:ca:7b:ae:94:38:33:83:eb:01:7a:00:08:98:3d:9d:a5:cc: b1:8d:ea:b1:23:42:49:58:60:86:0c:14:cf:b8:41:21:0c:83: 93:ca:bf:30:f8:c7:30:48:42:3c:be:ab:9b:a6:4d:7b:dc:b0: 87:5f:0d:49:88:e7:da:73:c3:d6:ca:a1:a1:79:f2:cf:d8:c0: 15:f4:63:32:cd:c7:48:be:a3:66:95:5a:97:3d:e0:c3:ca:ba: d1:9b:94:03:f6:0f:3d:61:0b:58:66:08:7d:26:00:d9:75:3f: 06:f9:27:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxocEE/Jsk3Sqq0N+7LORbzdzVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgx MDUwMkQzNDAeFw0yNjExMDMyMTU1MTZaFw0yNjExMDQyMzE1MTZaMDMxMTAvBgNV BAMTKEZERDFCMjJFNTE0RDI4RjQwMTFBQzY1QUI0OThDRjA4ODBDODFGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh1ujTqm+S3hrpVIWZ4PCmnqv 9FUgp5n5ryJfWyk2+faXHyDMX/PjYnJ/xbdHrT/OVxKMT87zpW00aGygzCfaKGkR PHUP5Gk7J/oR6veLk4prCAq50RUl1caPvsLp6YWS4zsy+Erar8luTQbxldbti89C dzAQfWI6e567zZQ2BF4EJ+y49SyCDDq13UMDyjb+bleb4Wyg7WHpXCNafpSomdNk XjEaibYtyIfxUa8rCCO7mIAIaz/GAz8AMcR3sXOLoQ35VptMlYrYy/pRheIaWIzV iQXPxrVOoF+A5UFWk0kEA3Q2GDeQ4t8B4Ajgtz7bzS/4pc1vXMnpk0ZXc9P/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/dGyLlFNKPQBGsZatJjPCIDIH3UwHwYDVR0j BBgwFoAUg2loPJxKd/S1qwUYXwHDyBBQLTQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFjYTk0MzUtNzIyNC00N2E4LTk1MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5 QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgxMDUwMkQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzY5NjgzQzlDNEE3N0Y0QjVBQjA1MTg1RjAxQzNDODEwNTAy RDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMz QzgxMDUwMkQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxE6oUn4bLuFsdsreGEWH4PuBFlvu88zup1 86TXcr8GKUQYUsBEe9K8wiR8jhM/u1JdKb2VhkIGTSKWyW5zwou65zDpoiZxfvxn FnE7LSrVORTi5nhEa6ijVxIo1nugb2dVcJ2YnHNagX1/9XinFgVXegrc7MbYhQAQ Wva9TpHZkbJT8SuOJBfcx5jUQXDhyPnKe66UODOD6wF6AAiYPZ2lzLGN6rEjQklY YIYMFM+4QSEMg5PKvzD4xzBIQjy+q5umTXvcsIdfDUmI59pzw9bKoaF58s/YwBX0 YzLNx0i+o2aVWpc94MPKutGblAP2Dz1hC1hmCH0mANl1Pwb5J0M= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:14 2026 by rpki-client