$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft File: F03310D1D60B7C8D4880FEE5263129029C23044D.mft (raw, json) Hash identifier: /EwjXug5BnOR7nWEU+K7D4pDjU56J6+G0tyy517wk6U= Subject key identifier: 3D:24:28:4F:F5:78:DE:3B:4E:FB:CB:61:D2:FF:4E:20:1B:E5:D5:A4 Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D Certificate issuer: /CN=F03310D1D60B7C8D4880FEE5263129029C23044D Certificate serial: 6DF6398EFCDFAED00DC92118D6A2A4CF0411FD4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 16:34:15 +0000 Manifest this update: Wed 04 Nov 2026 16:29:15 +0000 Manifest next update: Thu 05 Nov 2026 19:52:15 +0000 Files and hashes: 1: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: oj0326y5Cx12gm92v2QPQwGd5h65A9BVPedBNOtACzM=) 2: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: 0UDfWdK0ccDtOWv3TneU4N8dGsBm8DxDAXGKlhp/dv4=) 3: F03310D1D60B7C8D4880FEE5263129029C23044D.crl (hash: AcbxQfNaWPMgRg3Dyse/I7XJW881P8tcQnAqmo/2/Ic=) 4: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f6:39:8e:fc:df:ae:d0:0d:c9:21:18:d6:a2:a4:cf:04:11:fd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D Validity Not Before: Nov 4 16:29:15 2026 GMT Not After : Nov 5 19:52:15 2026 GMT Subject: CN=3D24284FF578DE3B4EFBCB61D2FF4E201BE5D5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:f4:6a:04:aa:64:21:d8:8e:b2:e4:e7:0e: 94:96:ce:b6:59:5d:10:52:c9:8d:43:84:fb:cb:34: 1b:e7:9e:d2:48:e5:81:a1:0a:ff:c3:fb:16:84:c3: 5d:ce:cf:c3:e8:7f:cd:e1:0e:c6:1d:c3:5d:16:15: 8b:8a:10:e2:2f:d9:29:86:e6:7f:f3:65:08:b8:20: 38:07:e2:b9:94:6a:25:f5:f3:d5:b4:f0:20:c8:da: 11:01:03:5e:6a:be:08:82:09:2b:4f:a3:ec:42:7b: ad:cb:10:89:f0:d9:2e:69:4f:9e:96:c7:36:3c:e4: 56:fc:1a:2b:fb:5b:76:b8:58:5a:9b:f5:ca:b8:82: 4f:a9:b4:a0:1d:39:60:cf:dd:2e:d8:8a:f2:0d:22: f3:b0:16:57:23:18:90:7c:1f:97:7f:fa:6c:a4:e6: 84:fe:23:dd:1b:3d:18:f0:d1:9b:ea:95:95:21:c2: 6c:e5:e7:75:d3:af:ea:8c:c9:a6:24:b3:02:c2:96: 95:40:d2:5a:fe:04:ee:7f:b3:68:ce:79:b4:0f:fd: e6:26:9a:a3:b0:94:ec:42:3f:5e:f0:19:1e:6a:39: e6:fe:07:c3:57:09:f4:c6:94:57:66:41:86:11:4e: cf:19:b9:e9:ba:3f:c1:9f:c4:49:90:3e:33:0f:ee: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:28:4F:F5:78:DE:3B:4E:FB:CB:61:D2:FF:4E:20:1B:E5:D5:A4 X509v3 Authority Key Identifier: keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c6:b2:e3:05:58:ac:01:dd:ca:d6:29:40:0f:4d:ce:b6:d4: 88:b3:b0:9a:4b:3b:d7:8d:9c:ec:04:c6:c1:5d:cf:54:0f:82: 15:b1:b8:a0:54:4c:a3:45:fd:2f:a0:7a:47:88:20:5b:5f:9d: 99:4e:bf:d7:cb:7f:a1:cc:90:1c:83:06:d0:0d:bf:ee:ee:c2: 10:d6:60:68:bc:29:f2:27:8c:b6:7b:47:02:22:ea:ac:33:75: e6:fd:b6:25:30:1f:7f:11:ac:8b:ce:4d:0a:4b:50:bf:69:09: b4:8d:b2:69:a1:72:65:e8:08:3b:11:a2:75:91:83:8b:17:a0: 30:11:9e:d0:05:9c:b8:ae:5b:d8:53:0c:90:79:0a:72:47:52: 9c:e5:dc:2f:5a:74:dc:29:4c:ca:94:10:00:9e:37:ac:ad:5c: 75:e5:f4:00:20:34:e8:fc:11:5b:fa:8d:1d:c9:16:74:05:0f: cf:2d:64:1b:cf:1b:6a:35:18:66:06:04:32:ff:8f:80:77:72: fb:88:5f:20:b0:19:16:2d:41:6c:02:bd:2d:95:86:4d:1b:24: 42:f0:d0:ed:8b:e4:f1:19:3b:72:b1:d5:79:29:2c:55:75:57: 62:72:51:f1:3b:09:a4:c9:b1:8d:9b:cc:08:28:ee:69:c3:9b: ff:69:2f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfY5jvzfrtANySEY1qKkzwQR/U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5 QzIzMDQ0RDAeFw0yNjExMDQxNjI5MTVaFw0yNjExMDUxOTUyMTVaMDMxMTAvBgNV BAMTKDNEMjQyODRGRjU3OERFM0I0RUZCQ0I2MUQyRkY0RTIwMUJFNUQ1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhvRqBKpkIdiOsuTnDpSWzrZZ XRBSyY1DhPvLNBvnntJI5YGhCv/D+xaEw13Oz8Pof83hDsYdw10WFYuKEOIv2SmG 5n/zZQi4IDgH4rmUaiX189W08CDI2hEBA15qvgiCCStPo+xCe63LEInw2S5pT56W xzY85Fb8Giv7W3a4WFqb9cq4gk+ptKAdOWDP3S7YivINIvOwFlcjGJB8H5d/+myk 5oT+I90bPRjw0ZvqlZUhwmzl53XTr+qMyaYkswLClpVA0lr+BO5/s2jOebQP/eYm mqOwlOxCP17wGR5qOeb+B8NXCfTGlFdmQYYRTs8Zuem6P8GfxEmQPjMP7nK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSQoT/V43jtO+8th0v9OIBvl1aQwHwYDVR0j BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw NDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5 MDI5QzIzMDQ0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDGsuMFWKwB3crWKUAPTc621IizsJpLO9eN nOwExsFdz1QPghWxuKBUTKNF/S+gekeIIFtfnZlOv9fLf6HMkByDBtANv+7uwhDW YGi8KfInjLZ7RwIi6qwzdeb9tiUwH38RrIvOTQpLUL9pCbSNsmmhcmXoCDsRonWR g4sXoDARntAFnLiuW9hTDJB5CnJHUpzl3C9adNwpTMqUEACeN6ytXHXl9AAgNOj8 EVv6jR3JFnQFD88tZBvPG2o1GGYGBDL/j4B3cvuIXyCwGRYtQWwCvS2Vhk0bJELw 0O2L5PEZO3Kx1XkpLFV1V2JyUfE7CaTJsY2bzAgo7mnDm/9pLzo= -----END CERTIFICATE-----Generated at Wed Nov 4 19:06:03 2026 by rpki-client