$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: KXAYcsEqECvNDsanV//O7ASQtw7bMfGJIPs0eXYIf0k= Subject key identifier: 29:E5:1E:38:E3:A6:6B:1F:58:65:5A:EF:B0:CD:95:59:8B:D4:4A:BD Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 04009A3388E3D26B389665CCBC62D9B587A0B66A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 23:01:28 +0000 Manifest this update: Sun 01 Nov 2026 22:56:28 +0000 Manifest next update: Tue 03 Nov 2026 02:09:28 +0000 Files and hashes: 1: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 2: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: xAlwmJAdtQC9z2iFL6RCdfhBwYFZTFdbSRCTeRd5VdI=) 3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 4: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) 5: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) 6: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:00:9a:33:88:e3:d2:6b:38:96:65:cc:bc:62:d9:b5:87:a0:b6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Nov 1 22:56:28 2026 GMT Not After : Nov 3 02:09:28 2026 GMT Subject: CN=29E51E38E3A66B1F58655AEFB0CD95598BD44ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:10:4b:fb:11:67:1b:16:76:7b:eb:c2:83: 50:7a:ca:d9:dc:91:ff:ce:46:7e:39:77:09:3e:7a: cf:e1:90:1d:68:28:8e:4a:55:14:b4:de:f5:4e:6b: 38:a5:81:b4:f6:12:5c:a7:ad:a2:a7:3a:3f:b6:78: 6c:91:f2:97:f1:fa:3f:24:66:b1:12:2c:b9:8d:02: 47:79:cd:d5:eb:4c:b5:8e:f4:a4:f3:96:44:79:f8: 5a:05:1f:ba:82:7b:61:37:bd:f2:8b:47:c0:31:db: f6:d4:ec:01:0a:7e:c2:d7:1e:4e:21:c9:a0:e6:c7: 53:df:1e:a8:43:09:1b:0b:f0:a7:10:05:b1:62:c1: e4:18:01:32:1b:b8:2e:fd:39:ff:7b:f3:81:07:a4: 8a:d8:72:31:f0:fd:67:19:80:b2:9d:1d:1f:a2:6a: 8f:92:c5:07:5f:b9:05:50:32:cc:25:6d:3b:36:eb: 0e:af:18:49:ae:e2:6f:89:89:b7:e1:cf:9b:4b:c6: 76:6d:ce:8d:73:79:da:75:8e:6b:ad:b4:a2:d1:6d: 83:6e:ee:88:3f:7f:87:b0:8b:a6:b0:15:2b:37:02: 14:4d:81:ee:95:60:5e:e3:50:73:74:3c:38:8c:5d: 4c:22:6c:b2:16:05:93:26:be:b4:81:63:09:01:df: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:1E:38:E3:A6:6B:1F:58:65:5A:EF:B0:CD:95:59:8B:D4:4A:BD X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:dc:85:38:a1:0a:ad:2b:ca:3c:67:be:56:3f:99:e6:85: 57:16:fb:bf:29:81:53:36:81:d8:3d:15:1a:47:9a:bb:10:1c: 37:de:b1:c8:3a:27:66:41:1b:61:88:ca:24:5b:db:bd:a0:fb: 79:5e:10:42:b1:2c:4a:22:41:68:23:68:e9:0b:43:5b:dc:33: ae:cc:9f:c8:3c:b8:57:d0:e9:54:c3:27:ac:88:e4:6e:70:ec: 73:88:e7:da:1b:1d:55:fe:c5:62:36:47:cc:ee:20:c6:a0:e9: 36:af:40:09:f3:78:72:ea:da:83:e6:22:df:44:91:47:a5:59: 01:92:1b:60:f5:c0:59:e8:d2:dc:eb:4f:00:e2:a0:0c:ec:84: 67:83:86:a3:2b:ca:77:90:bc:96:e6:ee:66:18:5a:87:b5:1f: 2c:8b:03:cd:fc:d3:b8:7d:0a:59:f2:55:cf:0e:16:12:f1:c6: e4:db:93:6e:ba:fa:9a:e0:c1:91:e8:98:a9:6c:f6:8b:91:0f: cb:52:4f:8b:fd:76:b0:35:13:98:f1:d2:db:48:82:cd:e1:e3: 6f:a5:61:6d:83:ef:b7:e9:e7:50:9f:53:08:aa:18:eb:6e:32: e1:f4:76:b9:03:e7:73:84:87:bd:fe:ea:b9:b7:51:7f:60:48: 8d:94:46:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBACaM4jj0ms4lmXMvGLZtYegtmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjExMDEyMjU2MjhaFw0yNjExMDMwMjA5MjhaMDMxMTAvBgNV BAMTKDI5RTUxRTM4RTNBNjZCMUY1ODY1NUFFRkIwQ0Q5NTU5OEJENDRBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4RBL+xFnGxZ2e+vCg1B6ytnc kf/ORn45dwk+es/hkB1oKI5KVRS03vVOazilgbT2ElynraKnOj+2eGyR8pfx+j8k ZrESLLmNAkd5zdXrTLWO9KTzlkR5+FoFH7qCe2E3vfKLR8Ax2/bU7AEKfsLXHk4h yaDmx1PfHqhDCRsL8KcQBbFiweQYATIbuC79Of9784EHpIrYcjHw/WcZgLKdHR+i ao+SxQdfuQVQMswlbTs26w6vGEmu4m+Jibfhz5tLxnZtzo1zedp1jmuttKLRbYNu 7og/f4ewi6awFSs3AhRNge6VYF7jUHN0PDiMXUwibLIWBZMmvrSBYwkB33gBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKeUeOOOmax9YZVrvsM2VWYvUSr0wHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhA3IU4oQqtK8o8Z75WP5nmhVcW+78pgVM2 gdg9FRpHmrsQHDfescg6J2ZBG2GIyiRb272g+3leEEKxLEoiQWgjaOkLQ1vcM67M n8g8uFfQ6VTDJ6yI5G5w7HOI59obHVX+xWI2R8zuIMag6TavQAnzeHLq2oPmIt9E kUelWQGSG2D1wFno0tzrTwDioAzshGeDhqMryneQvJbm7mYYWoe1HyyLA83807h9 ClnyVc8OFhLxxuTbk266+prgwZHomKls9ouRD8tST4v9drA1E5jx0ttIgs3h42+l YW2D77fp51CfUwiqGOtuMuH0drkD53OEh73+6rm3UX9gSI2URgE= -----END CERTIFICATE-----Generated at Mon Nov 2 00:45:51 2026 by rpki-client