$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: zS6p1a3EQmt60iAM3fdTdNKC7AtvlknGtScKuAt2Ay0= Subject key identifier: 12:2F:EC:E4:70:E6:B5:18:B6:A6:60:8E:9F:52:90:73:DD:9E:01:E0 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 41AC7649B162282EB879652FE6EC68CB79AE8F90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 16:48:55 +0000 Manifest this update: Mon 02 Nov 2026 16:43:55 +0000 Manifest next update: Tue 03 Nov 2026 18:20:55 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 2: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 3: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 4: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: 6nGtvL7GIRZhfHUiKCRJqoKr2k2HE6w91pi8t/lcrlc=) 5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 6: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 7: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 8: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ac:76:49:b1:62:28:2e:b8:79:65:2f:e6:ec:68:cb:79:ae:8f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Nov 2 16:43:55 2026 GMT Not After : Nov 3 18:20:55 2026 GMT Subject: CN=122FECE470E6B518B6A6608E9F529073DD9E01E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:ac:7d:64:7d:e3:a0:c4:c0:fd:07:98:89: 2e:5f:3f:ed:d1:c8:c6:27:4d:45:e8:0a:d3:3c:8f: cd:ff:ec:68:a8:fb:35:61:aa:c9:e7:2e:6c:60:18: 1b:4e:a7:ae:e3:69:fd:f9:76:34:ed:85:da:fa:9e: 25:7f:1c:c1:d0:51:3d:f6:a0:00:18:d1:2d:cf:ad: ae:38:06:fe:aa:4f:37:b5:17:8b:39:0d:0c:72:ad: 28:3f:3b:05:66:bd:ad:3f:ab:bd:2c:40:60:4d:53: 45:c0:c0:85:dc:78:9b:40:65:01:4f:d5:e6:52:bf: 5b:63:51:28:16:50:7e:6b:97:8d:81:99:9e:b4:be: 8e:3f:c2:64:b3:ba:7d:d3:47:ab:64:98:78:2f:f9: 38:fc:5d:0d:57:bd:cb:ee:3f:72:a3:8c:fa:be:02: 2b:0a:65:bd:bb:d6:33:a7:82:17:30:df:91:96:db: d8:54:b6:a0:2d:ee:27:f8:f7:4e:54:06:bf:24:f3: 88:81:1e:68:a8:91:1c:ee:e8:38:64:35:c6:50:57: d2:84:ca:32:e6:8e:f4:e3:8c:5b:70:2e:f6:1f:13: 9d:89:16:7a:d3:f4:e7:fb:ae:bc:1e:23:54:1d:5e: b5:a3:e4:47:40:84:57:b2:fb:ac:aa:7f:a5:33:f7: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2F:EC:E4:70:E6:B5:18:B6:A6:60:8E:9F:52:90:73:DD:9E:01:E0 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d6:84:06:88:7e:91:9f:3e:a5:fc:82:2c:ef:34:f3:e9:e5: 50:e6:1c:df:df:0e:0c:30:5f:0e:93:6a:fe:01:75:95:75:48: 77:f1:77:37:7e:77:11:05:4c:89:60:e9:a3:d1:d7:41:ff:ad: 05:d2:00:74:33:5a:a6:85:71:40:bc:a1:b0:44:7d:65:03:7f: 8e:a2:9c:e7:d1:84:1c:ff:dc:15:f4:d9:b0:02:f7:1e:65:b0: a8:01:26:9d:40:7d:0a:cb:79:af:ff:ca:da:5c:63:c3:52:e4: 35:9e:f0:5e:0d:2d:48:92:28:30:09:9f:68:a4:d0:96:7f:81: 43:74:0c:37:22:ef:b7:20:c9:34:87:41:32:2c:54:dc:95:56: 7f:6c:ac:81:63:3f:12:09:cf:09:de:48:c6:46:56:b2:ea:8c: 23:51:8e:2b:1e:8a:b8:69:8c:df:b8:e0:2e:5b:a3:3a:87:d8: 98:33:b5:9d:fb:b5:a8:28:58:94:15:e5:14:a6:0c:e9:fd:45: 17:c9:87:0e:a2:a6:44:3a:04:40:ea:95:4c:e5:6d:d4:3c:ac: 48:c3:aa:c7:fe:bc:ed:a7:df:c3:ec:41:1b:ef:fb:75:76:9f: ff:b8:b8:a5:a1:28:46:93:bc:45:83:11:cc:c8:10:57:28:1b: 55:2f:e1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQax2SbFiKC64eWUv5uxoy3muj5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjExMDIxNjQzNTVaFw0yNjExMDMxODIwNTVaMDMxMTAvBgNV BAMTKDEyMkZFQ0U0NzBFNkI1MThCNkE2NjA4RTlGNTI5MDczREQ5RTAxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8qx9ZH3joMTA/QeYiS5fP+3R yMYnTUXoCtM8j83/7Gio+zVhqsnnLmxgGBtOp67jaf35djTthdr6niV/HMHQUT32 oAAY0S3Pra44Bv6qTze1F4s5DQxyrSg/OwVmva0/q70sQGBNU0XAwIXceJtAZQFP 1eZSv1tjUSgWUH5rl42BmZ60vo4/wmSzun3TR6tkmHgv+Tj8XQ1XvcvuP3KjjPq+ AisKZb271jOnghcw35GW29hUtqAt7if4905UBr8k84iBHmiokRzu6DhkNcZQV9KE yjLmjvTjjFtwLvYfE52JFnrT9Of7rrweI1QdXrWj5EdAhFey+6yqf6Uz9wz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEi/s5HDmtRi2pmCOn1KQc92eAeAwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjWhAaIfpGfPqX8gizvNPPp5VDmHN/fDgww Xw6Tav4BdZV1SHfxdzd+dxEFTIlg6aPR10H/rQXSAHQzWqaFcUC8obBEfWUDf46i nOfRhBz/3BX02bAC9x5lsKgBJp1AfQrLea//ytpcY8NS5DWe8F4NLUiSKDAJn2ik 0JZ/gUN0DDci77cgyTSHQTIsVNyVVn9srIFjPxIJzwneSMZGVrLqjCNRjiseirhp jN+44C5bozqH2JgztZ37tagoWJQV5RSmDOn9RRfJhw6ipkQ6BEDqlUzlbdQ8rEjD qsf+vO2n38PsQRvv+3V2n/+4uKWhKEaTvEWDEczIEFcoG1Uv4Sg= -----END CERTIFICATE-----Generated at Mon Nov 2 21:12:34 2026 by rpki-client