$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json) Hash identifier: 6hApgGkUfyJ6yv4/BwC5T66E9sZF84pAGSHNFyl3Cho= Subject key identifier: 36:D6:0A:5C:EB:73:CB:65:27:72:79:9E:F4:3A:9F:FA:70:C0:89:5F Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Certificate serial: 53C2C885A86E291FCBF6C17A100E3C82F1C3A0E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 23:32:23 +0000 Manifest this update: Tue 03 Nov 2026 23:27:23 +0000 Manifest next update: Thu 05 Nov 2026 00:53:23 +0000 Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=) 2: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: DEc4EzVt8Ie5A8yOJXb3ljbZlkcF0E8hA2+3TnR6lso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c2:c8:85:a8:6e:29:1f:cb:f6:c1:7a:10:0e:3c:82:f1:c3:a0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870 Validity Not Before: Nov 3 23:27:23 2026 GMT Not After : Nov 5 00:53:23 2026 GMT Subject: CN=36D60A5CEB73CB652772799EF43A9FFA70C0895F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:9e:16:fc:31:24:c4:55:cc:52:5f:2b:ba: 56:13:c9:12:0a:57:63:a5:bf:02:f3:74:67:28:7e: 19:dc:59:83:3c:39:55:39:f9:1f:68:ca:f8:c5:8e: ba:3e:95:3c:b7:69:ae:81:00:4d:e8:62:df:b2:67: e9:14:30:e6:ba:f8:9b:b0:63:d1:01:db:6a:b0:6d: 52:2c:1e:82:59:fc:6a:84:f6:93:42:fe:d5:29:15: ef:0e:97:e2:eb:8f:eb:24:b8:a7:d6:7b:03:fb:ee: 7b:65:f3:b6:2f:02:8b:c4:84:9c:32:c6:fa:fb:0e: 0c:31:4a:0c:4b:17:a7:e5:6a:e3:8c:2e:a4:1e:99: 2f:c1:04:a8:2c:0d:73:83:ab:c9:24:d0:41:25:9d: 0f:70:8a:48:0a:bf:23:ce:16:f9:45:78:20:6b:21: df:54:f2:40:41:3b:e5:7e:ce:86:60:13:be:dd:57: da:d8:7f:42:d6:cd:90:e3:3d:91:42:10:9b:b2:f6: 48:23:ab:20:b8:67:7f:24:8f:51:51:88:09:ad:b3: 0a:22:bc:f0:e7:cd:58:0d:0b:05:f5:ee:8f:b7:fd: 3d:55:f8:4c:d7:af:92:cf:8b:9a:e3:25:e6:be:ab: 2f:2c:32:ee:ff:b9:22:ce:3d:9d:7f:06:33:29:24: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D6:0A:5C:EB:73:CB:65:27:72:79:9E:F4:3A:9F:FA:70:C0:89:5F X509v3 Authority Key Identifier: keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:28:5e:33:82:d3:50:9e:e5:c9:0d:c3:22:41:f5:5e:2c: 44:98:a9:5a:9d:35:f9:32:c3:6e:5d:1f:05:08:da:8e:3b:78: 55:fd:68:25:3f:d1:2f:97:db:15:c0:66:0d:12:37:af:0f:ca: e4:1f:2e:56:1d:b4:bd:62:04:2a:07:ce:24:8e:8a:f4:9d:59: fb:0f:1a:7a:ba:cb:ff:8b:97:98:d2:a7:64:0c:57:64:ad:0a: 75:b9:b1:ca:c4:ee:26:c7:45:d5:a8:50:74:5c:9b:2b:8e:c3: c1:49:3f:27:b7:6d:6c:13:1d:be:75:99:1b:f5:2e:92:1c:f1: 43:54:28:cf:1d:4d:73:f2:20:a5:ce:3a:35:b8:17:c0:3d:0a: b5:23:e7:de:86:35:98:2e:7d:9a:33:97:ab:0e:87:03:7b:bb: 84:6e:46:ef:7e:27:6c:5e:b7:89:50:f5:3c:cc:88:34:53:85: 77:c1:09:6b:69:94:f2:ca:af:b4:0e:b8:5b:a4:4a:f6:96:29: 99:2c:fe:14:1a:50:68:51:15:2f:f5:74:df:df:80:27:42:f6: fd:fb:ce:88:79:9d:d7:fe:b6:80:c4:b1:11:c7:9f:f4:d7:c4: c1:82:46:b9:0e:30:3d:a9:66:7a:b3:cc:1c:94:f3:42:93:f7: ed:d7:20:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8LIhahuKR/L9sF6EA48gvHDoOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRB OENCODg3MDAeFw0yNjExMDMyMzI3MjNaFw0yNjExMDUwMDUzMjNaMDMxMTAvBgNV BAMTKDM2RDYwQTVDRUI3M0NCNjUyNzcyNzk5RUY0M0E5RkZBNzBDMDg5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyip4W/DEkxFXMUl8rulYTyRIK V2OlvwLzdGcofhncWYM8OVU5+R9oyvjFjro+lTy3aa6BAE3oYt+yZ+kUMOa6+Juw Y9EB22qwbVIsHoJZ/GqE9pNC/tUpFe8Ol+Lrj+skuKfWewP77ntl87YvAovEhJwy xvr7DgwxSgxLF6flauOMLqQemS/BBKgsDXODq8kk0EElnQ9wikgKvyPOFvlFeCBr Id9U8kBBO+V+zoZgE77dV9rYf0LWzZDjPZFCEJuy9kgjqyC4Z38kj1FRiAmtswoi vPDnzVgNCwX17o+3/T1V+EzXr5LPi5rjJea+qy8sMu7/uSLOPZ1/BjMpJGc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNtYKXOtzy2Uncnme9Dqf+nDAiV8wHwYDVR0j BBgwFoAUJpXFhwoCXvLl1Xrq4GAZFKjLiHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkNTcyMDEtN2UyZi00OWJiLTk0MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcw QTAyNUVGMkU1RDU3QUVBRTA2MDE5MTRBOENCODg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjk1QzU4NzBBMDI1RUYyRTVENTdBRUFFMDYwMTkxNEE4Q0I4 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvMjY5NUM1ODcwQTAyNUVGMkU1RDU3QUVBRTA2MDE5 MTRBOENCODg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgoKF4zgtNQnuXJDcMiQfVeLESYqVqdNfky w25dHwUI2o47eFX9aCU/0S+X2xXAZg0SN68PyuQfLlYdtL1iBCoHziSOivSdWfsP Gnq6y/+Ll5jSp2QMV2StCnW5scrE7ibHRdWoUHRcmyuOw8FJPye3bWwTHb51mRv1 LpIc8UNUKM8dTXPyIKXOOjW4F8A9CrUj596GNZgufZozl6sOhwN7u4RuRu9+J2xe t4lQ9TzMiDRThXfBCWtplPLKr7QOuFukSvaWKZks/hQaUGhRFS/1dN/fgCdC9v37 zoh5ndf+toDEsRHHn/TXxMGCRrkOMD2pZnqzzByU80KT9+3XIJA= -----END CERTIFICATE-----Generated at Wed Nov 4 15:27:52 2026 by rpki-client