$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json) Hash identifier: jCn8/0qAzIxEHLvcQaIX1ABTzEGc5lIBiDorfgdfYss= Subject key identifier: B6:BE:B7:AF:9A:D3:AE:15:1A:4F:DD:D6:E1:F4:F3:96:08:28:02:66 Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Certificate serial: 40D96D4675B8530AEB0A2D04D18236742B4DB138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 09:49:56 +0000 Manifest this update: Mon 02 Nov 2026 09:44:56 +0000 Manifest next update: Tue 03 Nov 2026 12:44:56 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=) 2: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: HTIM3wLczhq+3w8AMyjjtD/E42uN6dk2zptLKqu6no8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d9:6d:46:75:b8:53:0a:eb:0a:2d:04:d1:82:36:74:2b:4d:b1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Validity Not Before: Nov 2 09:44:56 2026 GMT Not After : Nov 3 12:44:56 2026 GMT Subject: CN=B6BEB7AF9AD3AE151A4FDDD6E1F4F39608280266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:3b:e9:c1:18:ae:e1:d3:ae:c7:eb:6e:ae: 0c:e3:4d:0d:95:16:d8:e0:79:5a:1d:3d:ce:bb:8e: 7a:64:1c:83:ce:21:a9:c1:a3:32:b0:ba:07:f0:81: d0:a6:58:86:99:17:0b:ab:c4:16:9d:f7:3a:cd:fc: 15:0f:6d:a7:d1:c7:04:88:17:b4:e6:42:9c:f3:ce: 2b:32:cc:12:df:68:01:03:4c:4e:80:fa:57:91:9f: d8:26:28:2c:3f:a0:57:45:85:53:68:68:fa:6d:d6: 9f:51:4e:09:2a:c9:b7:e4:82:9f:3e:46:35:ac:51: d9:70:32:97:31:d2:de:15:31:bb:70:ee:43:09:a9: 84:d5:2c:d9:4b:18:ed:e3:8f:4d:d2:99:af:76:c8: fd:45:72:cc:d7:dd:eb:06:05:ae:02:0b:cf:10:a5: d2:16:5c:63:d9:8e:81:13:08:ff:0b:11:19:7e:0f: 92:0c:ad:e3:c6:69:b4:b3:ad:7a:61:84:4e:a0:8e: eb:1c:6e:18:63:8f:fe:e7:38:8e:71:4e:98:5d:46: a2:b2:a3:e1:4a:c2:43:e9:3a:0b:ed:d0:95:ba:66: b7:2f:d5:74:83:be:78:ef:a9:ca:43:08:89:e1:23: 33:91:1b:4f:8e:56:d0:c5:77:fd:8a:51:16:7b:37: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:B7:AF:9A:D3:AE:15:1A:4F:DD:D6:E1:F4:F3:96:08:28:02:66 X509v3 Authority Key Identifier: keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:59:dc:4b:9a:97:a5:a6:7e:a7:fc:b7:14:5f:57:dd:69: 96:19:c2:74:ce:2e:5f:fa:c5:3a:5d:4e:26:03:87:85:69:ec: 90:1e:a3:97:c7:53:f6:09:fd:84:fa:ad:a7:f9:bc:e9:99:cd: 0f:7d:88:8f:e3:cf:e8:4c:ed:9d:b3:e8:c0:39:0e:32:b8:b2: a4:23:7b:b5:96:ab:3a:12:b6:30:d2:bc:aa:51:85:26:6d:5f: 11:eb:d8:22:36:7d:cc:3a:8e:a6:c9:85:64:de:6a:23:2d:36: 1d:52:f2:db:6d:5f:dd:1e:1f:4f:fd:d7:90:fc:24:42:a2:88: 1e:5c:c7:60:14:9d:96:e9:e3:fa:6e:39:e1:4b:a5:d9:26:66: cd:97:ed:bb:88:3a:b8:7a:8c:d3:24:2c:67:46:92:83:be:81: f9:02:5f:35:fd:f3:23:24:44:b5:fa:52:ca:9c:52:67:17:45: 70:09:79:98:4a:d1:a6:d2:6b:1e:9b:07:4e:01:32:e4:1f:74: 4c:78:67:96:92:04:a2:b9:9d:5d:de:d8:0c:0b:f0:b0:ed:6e: 22:6f:df:5c:c6:75:60:43:3f:07:b1:eb:be:2c:92:4e:a4:f6: 1b:26:70:4f:0c:38:9d:62:e6:26:f7:33:7d:de:11:a6:09:bd: fa:c1:fd:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNltRnW4UwrrCi0E0YI2dCtNsTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC NTk5MDcyMTAeFw0yNjExMDIwOTQ0NTZaFw0yNjExMDMxMjQ0NTZaMDMxMTAvBgNV BAMTKEI2QkVCN0FGOUFEM0FFMTUxQTRGRERENkUxRjRGMzk2MDgyODAyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdjzvpwRiu4dOux+turgzjTQ2V FtjgeVodPc67jnpkHIPOIanBozKwugfwgdCmWIaZFwurxBad9zrN/BUPbafRxwSI F7TmQpzzzisyzBLfaAEDTE6A+leRn9gmKCw/oFdFhVNoaPpt1p9RTgkqybfkgp8+ RjWsUdlwMpcx0t4VMbtw7kMJqYTVLNlLGO3jj03Sma92yP1FcszX3esGBa4CC88Q pdIWXGPZjoETCP8LERl+D5IMrePGabSzrXphhE6gjuscbhhjj/7nOI5xTphdRqKy o+FKwkPpOgvt0JW6Zrcv1XSDvnjvqcpDCInhIzORG0+OVtDFd/2KURZ7N+MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtr63r5rTrhUaT93W4fTzlggoAmYwHwYDVR0j BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5 RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLEWdxLmpelpn6n/LcUX1fdaZYZwnTOLl/6 xTpdTiYDh4Vp7JAeo5fHU/YJ/YT6raf5vOmZzQ99iI/jz+hM7Z2z6MA5DjK4sqQj e7WWqzoStjDSvKpRhSZtXxHr2CI2fcw6jqbJhWTeaiMtNh1S8tttX90eH0/915D8 JEKiiB5cx2AUnZbp4/puOeFLpdkmZs2X7buIOrh6jNMkLGdGkoO+gfkCXzX98yMk RLX6UsqcUmcXRXAJeZhK0abSax6bB04BMuQfdEx4Z5aSBKK5nV3e2AwL8LDtbiJv 31zGdWBDPwex674skk6k9hsmcE8MOJ1i5ib3M33eEaYJvfrB/WQ= -----END CERTIFICATE-----Generated at Mon Nov 2 20:17:33 2026 by rpki-client