$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: Mf4IbKjhaN5VGrJT+TzWnxFntrCv5AhLsKfnhu7/axA= Subject key identifier: 40:0E:47:85:60:90:9E:C4:43:B9:4E:25:F3:B7:CF:C7:B4:D7:BC:85 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 688EBD7B49CD79A39DF56536C8053B8BB4671800 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 21:14:14 +0000 Manifest this update: Mon 02 Nov 2026 21:09:14 +0000 Manifest next update: Wed 04 Nov 2026 01:08:14 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: XtNH4fd/MXnq8bvJsu7khLw+VdmufzEcapZABhXMAuw=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 01:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8e:bd:7b:49:cd:79:a3:9d:f5:65:36:c8:05:3b:8b:b4:67:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Nov 2 21:09:14 2026 GMT Not After : Nov 4 01:08:14 2026 GMT Subject: CN=400E478560909EC443B94E25F3B7CFC7B4D7BC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:64:29:30:a8:bd:74:d0:5f:91:f3:58:9b:71: 03:41:61:44:70:78:ab:5f:29:92:ff:2b:3c:38:fd: 13:ee:8d:5e:b2:13:4a:e4:3a:dc:05:aa:df:e0:aa: 74:5d:ef:f2:04:c2:04:d6:40:e7:89:0f:e4:b9:14: 6b:9d:8e:8e:3e:d5:f9:6b:16:37:95:a0:24:3d:f5: 7c:8f:66:b9:a3:a8:81:59:4c:94:19:b8:38:5c:70: b1:4d:05:6c:00:c8:f2:ef:7d:2d:99:14:f1:6c:1e: ab:e5:76:d0:0b:a1:87:c0:70:85:d9:75:0d:25:11: e5:6c:22:eb:5f:1f:58:f5:0c:30:5f:80:b4:04:49: 32:94:57:1f:4f:37:b0:4b:db:29:8a:dd:17:49:46: a6:b2:02:5c:43:33:8b:35:07:8d:6c:06:09:1c:24: 1c:d1:44:c6:84:80:16:b5:0b:13:30:5d:08:33:89: 29:08:03:8a:1f:90:5d:5a:f4:10:d1:df:f3:68:13: e9:6f:13:19:d6:81:b7:24:d7:5d:b6:05:57:3d:62: 85:9f:19:38:74:1e:20:83:7c:08:be:8b:53:14:45: ea:4f:49:e1:54:ec:03:e1:bb:e6:f1:5a:5d:d8:39: a1:52:6f:21:b1:0f:f8:b4:52:77:71:e5:b1:4d:0c: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:47:85:60:90:9E:C4:43:B9:4E:25:F3:B7:CF:C7:B4:D7:BC:85 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2b:5e:09:4a:f5:ec:55:cc:77:73:32:49:82:5c:7e:7f:6f: 51:ff:52:e2:9a:a2:d7:ab:46:58:4e:57:76:49:65:90:6d:e6: 5a:fa:98:96:68:b0:c1:93:36:eb:8f:fc:b9:2a:ee:68:91:db: 3a:f9:e5:6d:61:be:a9:38:f8:4a:9c:7d:cb:57:04:a5:2c:23: d3:c5:6f:56:31:8c:ec:d8:99:48:09:80:bb:5b:aa:49:3d:20: 2a:31:06:45:14:f8:ea:33:5f:3d:b6:99:e4:3c:fb:14:ef:d0: 96:9d:65:e6:bd:c4:b0:13:d3:07:76:ee:82:1a:ef:1b:1e:92: 4c:4d:49:29:1c:e6:0b:cc:14:ed:d7:c6:82:01:57:3f:77:0e: 80:2a:e5:7f:7d:d5:55:d2:d1:c1:09:4f:e3:2f:48:ed:d7:12: 7b:cb:e1:1c:ee:d5:84:7c:13:ed:cc:8c:f7:58:07:85:b5:04: 24:72:31:2d:18:46:a1:2d:29:3e:4f:9e:21:b5:f2:6f:26:7b: 90:e8:a2:2f:43:df:c8:6f:c0:b9:fa:dd:fe:e0:4d:87:a8:55: fa:50:f2:e4:44:4a:3a:c9:11:22:c8:54:d9:32:b8:40:d5:48: 49:1a:7c:b2:45:2c:c1:0c:0d:67:27:88:52:14:e3:c4:86:cc: fa:28:41:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaI69e0nNeaOd9WU2yAU7i7RnGAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjExMDIyMTA5MTRaFw0yNjExMDQwMTA4MTRaMDMxMTAvBgNV BAMTKDQwMEU0Nzg1NjA5MDlFQzQ0M0I5NEUyNUYzQjdDRkM3QjREN0JDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZCkwqL100F+R81ibcQNBYURw eKtfKZL/Kzw4/RPujV6yE0rkOtwFqt/gqnRd7/IEwgTWQOeJD+S5FGudjo4+1flr FjeVoCQ99XyPZrmjqIFZTJQZuDhccLFNBWwAyPLvfS2ZFPFsHqvldtALoYfAcIXZ dQ0lEeVsIutfH1j1DDBfgLQESTKUVx9PN7BL2ymK3RdJRqayAlxDM4s1B41sBgkc JBzRRMaEgBa1CxMwXQgziSkIA4ofkF1a9BDR3/NoE+lvExnWgbck1122BVc9YoWf GTh0HiCDfAi+i1MURepPSeFU7APhu+bxWl3YOaFSbyGxD/i0Undx5bFNDHm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQA5HhWCQnsRDuU4l87fPx7TXvIUwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMrXglK9exVzHdzMkmCXH5/b1H/UuKaoter RlhOV3ZJZZBt5lr6mJZosMGTNuuP/Lkq7miR2zr55W1hvqk4+EqcfctXBKUsI9PF b1YxjOzYmUgJgLtbqkk9ICoxBkUU+OozXz22meQ8+xTv0JadZea9xLAT0wd27oIa 7xsekkxNSSkc5gvMFO3XxoIBVz93DoAq5X991VXS0cEJT+MvSO3XEnvL4Rzu1YR8 E+3MjPdYB4W1BCRyMS0YRqEtKT5PniG18m8me5Dooi9D38hvwLn63f7gTYeoVfpQ 8uRESjrJESLIVNkyuEDVSEkafLJFLMEMDWcniFIU48SGzPooQYg= -----END CERTIFICATE-----Generated at Tue Nov 3 12:57:08 2026 by rpki-client