$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: K3Q6HDucJMCq3rPgrujU1HjlH+XXXVYAu1TZoTzRrXI= Subject key identifier: C0:F7:81:F9:22:C6:4E:D6:9D:1C:99:EF:EF:0D:96:A4:24:83:DF:51 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 0E1A678448BEB727799B668BC726A687A9B3A48C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: FA Signing time: Thu 05 Nov 2026 09:31:07 +0000 Manifest this update: Thu 05 Nov 2026 09:26:07 +0000 Manifest next update: Fri 06 Nov 2026 10:31:07 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 2: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) 5: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: WYzDLQNJl0WQPXWL3lLP8YQWNchKU23pjTpvLIuOSbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 10:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:67:84:48:be:b7:27:79:9b:66:8b:c7:26:a6:87:a9:b3:a4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Nov 5 09:26:07 2026 GMT Not After : Nov 6 10:31:07 2026 GMT Subject: CN=C0F781F922C64ED69D1C99EFEF0D96A42483DF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:dc:ed:de:97:eb:42:99:23:87:1a:48:fa: 00:f3:3c:54:bf:70:4b:e2:5e:06:fd:09:8f:6f:94: 89:a5:be:ad:09:cd:2e:26:47:1e:d5:27:ae:72:1e: ae:b3:5e:6f:4f:43:1e:0e:0d:dc:89:c5:15:93:76: 3e:1a:5d:d3:8e:86:e4:91:3b:d1:63:8d:2e:6e:a1: 11:06:30:3c:4c:f2:14:81:a8:aa:ff:e5:aa:49:4c: 29:b4:c0:61:5e:af:ca:7d:f8:85:3e:9f:34:31:c1: ee:ab:30:33:e9:62:bd:5c:23:af:f0:aa:9e:5a:43: 03:2f:64:c7:62:7a:72:4a:11:77:a1:e5:b6:6a:27: f5:1b:ee:a9:f3:5d:b9:03:d9:f8:f1:69:fc:9c:8e: ff:09:51:81:55:96:4f:3f:00:02:05:e2:df:b2:33: bc:03:c5:9d:08:2f:32:7b:68:79:46:9b:19:11:16: 7e:1f:f7:0e:98:8f:b2:0e:ff:75:59:d2:58:a2:ad: d1:1c:d2:f8:9c:fe:dd:2c:a4:9b:b1:e1:50:70:81: 89:de:c4:73:eb:9b:3c:54:c3:8f:85:49:55:70:bd: ed:06:22:6d:a0:4b:e2:d3:74:1c:66:31:75:35:60: fa:a8:b4:6e:fa:ee:51:c3:37:c3:d5:05:65:72:ba: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F7:81:F9:22:C6:4E:D6:9D:1C:99:EF:EF:0D:96:A4:24:83:DF:51 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9e:6f:ca:b6:90:6e:04:65:c1:4c:75:d7:ad:27:34:76:b0: 25:bb:1e:8a:92:58:ac:a3:8f:8e:a8:31:a7:32:28:c6:0d:26: 00:36:ef:28:12:df:d7:4a:8d:6b:80:eb:b3:39:35:8b:84:10: c1:a0:e6:68:b2:4c:08:f2:cd:28:ea:a1:84:3e:f3:d6:fb:aa: d1:95:17:e8:35:b0:e8:8d:a2:83:39:3e:a6:2c:63:27:56:31: 41:f5:f5:42:f9:b7:e1:17:05:44:cd:62:41:62:90:ba:fe:28: 59:7f:d9:8c:49:2b:5a:5f:ac:3e:26:12:00:a5:d5:2c:e5:39: 8f:57:11:43:9c:45:f5:6b:32:f1:3f:4e:9d:53:6d:31:8c:a9: 1c:ea:eb:29:ab:65:ac:20:c6:20:3c:38:e2:a3:e4:66:fc:9f: 80:ed:28:a9:42:55:8d:81:3f:97:b4:11:01:30:24:96:81:5d: 0d:c2:6b:3d:1b:4b:f5:32:a9:78:1f:1e:7d:72:94:40:b1:2a: 19:0d:bd:39:b3:bb:9b:95:a4:85:e6:2c:78:1d:24:2c:86:79: 78:af:3a:87:c1:a2:3d:c6:1a:03:ef:56:c4:30:d0:19:d6:ab: e0:f6:d1:13:7a:6d:22:53:9b:0c:ee:8e:87:bd:a8:50:f9:3c: 6e:5f:ee:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhpnhEi+tyd5m2aLxyamh6mzpIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjExMDUwOTI2MDdaFw0yNjExMDYxMDMxMDdaMDMxMTAvBgNV BAMTKEMwRjc4MUY5MjJDNjRFRDY5RDFDOTlFRkVGMEQ5NkE0MjQ4M0RGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMdzt3pfrQpkjhxpI+gDzPFS/ cEviXgb9CY9vlImlvq0JzS4mRx7VJ65yHq6zXm9PQx4ODdyJxRWTdj4aXdOOhuSR O9FjjS5uoREGMDxM8hSBqKr/5apJTCm0wGFer8p9+IU+nzQxwe6rMDPpYr1cI6/w qp5aQwMvZMdienJKEXeh5bZqJ/Ub7qnzXbkD2fjxafycjv8JUYFVlk8/AAIF4t+y M7wDxZ0ILzJ7aHlGmxkRFn4f9w6Yj7IO/3VZ0liirdEc0vic/t0spJux4VBwgYne xHPrmzxUw4+FSVVwve0GIm2gS+LTdBxmMXU1YPqotG767lHDN8PVBWVyukjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPeB+SLGTtadHJnv7w2WpCSD31EwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSeb8q2kG4EZcFMddetJzR2sCW7HoqSWKyj j46oMacyKMYNJgA27ygS39dKjWuA67M5NYuEEMGg5miyTAjyzSjqoYQ+89b7qtGV F+g1sOiNooM5PqYsYydWMUH19UL5t+EXBUTNYkFikLr+KFl/2YxJK1pfrD4mEgCl 1SzlOY9XEUOcRfVrMvE/Tp1TbTGMqRzq6ymrZawgxiA8OOKj5Gb8n4DtKKlCVY2B P5e0EQEwJJaBXQ3Caz0bS/UyqXgfHn1ylECxKhkNvTmzu5uVpIXmLHgdJCyGeXiv OofBoj3GGgPvVsQw0BnWq+D20RN6bSJTmwzujoe9qFD5PG5f7kA= -----END CERTIFICATE-----Generated at Thu Nov 5 15:35:01 2026 by rpki-client