$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft File: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft (raw, json) Hash identifier: g05dsYnZ9vdSBaGsYqF3yRsV1jqctb7NeFKTxH2QCc4= Subject key identifier: F4:84:1D:7D:EE:FF:8D:34:DC:A0:EB:0F:04:75:A8:52:0F:D0:01:B0 Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 Certificate issuer: /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Certificate serial: 3BE274147A391D96B773ECA65010F5C28EF109F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 02:51:10 +0000 Manifest this update: Tue 03 Nov 2026 02:46:10 +0000 Manifest next update: Wed 04 Nov 2026 05:18:10 +0000 Files and hashes: 1: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl (hash: 699O/CCUc7f/IPktpdWKLeyHfi7g3H8yXUoJrbTX8q8=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e2:74:14:7a:39:1d:96:b7:73:ec:a6:50:10:f5:c2:8e:f1:09:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Validity Not Before: Nov 3 02:46:10 2026 GMT Not After : Nov 4 05:18:10 2026 GMT Subject: CN=F4841D7DEEFF8D34DCA0EB0F0475A8520FD001B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:15:66:81:5c:80:66:fa:69:4d:19:d8:e9: 94:9f:01:8a:9f:0e:5b:a5:43:43:95:4f:63:cb:f9: 46:e3:ae:d4:ff:a0:41:8c:b2:00:0d:64:ff:77:2f: a9:04:13:91:ad:8f:80:a3:77:78:2c:34:e1:3f:ec: d4:1b:a2:fd:2f:10:08:32:0c:0a:42:5d:db:f5:e0: dc:07:f8:7c:34:cc:db:2d:0f:6c:95:26:fe:6f:bc: d7:73:e9:94:aa:91:04:a1:b8:79:e2:e7:a0:35:85: b9:42:9d:1d:b1:fc:5e:ec:a6:67:0f:17:1b:69:5d: 92:14:fc:31:dd:2a:84:98:84:7a:d5:70:ea:f2:7e: ef:25:c7:ce:23:e8:35:82:7f:85:db:0e:23:17:16: be:1f:1a:1d:bd:db:06:83:6c:96:33:0c:53:88:4c: 21:68:d4:77:fd:ab:ab:56:76:87:56:6c:11:48:52: 59:2d:49:c2:da:e9:f4:17:3a:77:15:0b:b1:aa:ab: 4d:b3:5d:7a:38:63:f6:ef:bb:87:ec:d1:fa:08:a6: a0:c4:ef:fa:67:d2:fa:40:e5:44:a4:fe:de:c4:82: ac:f0:04:00:b3:d8:db:23:a6:66:8c:94:92:54:ff: db:74:3e:93:ec:4f:37:26:4d:eb:e6:03:f8:07:cc: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:84:1D:7D:EE:FF:8D:34:DC:A0:EB:0F:04:75:A8:52:0F:D0:01:B0 X509v3 Authority Key Identifier: keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:12:9f:b2:ec:1c:11:15:dc:5b:4c:31:ed:b3:a2:fd:bc:23: e7:90:ec:70:c9:77:ff:e0:2a:6a:ff:b8:ba:2d:aa:7a:70:00: 20:42:0f:fa:8f:1f:84:6c:64:4c:6a:ea:26:d5:4d:89:d6:eb: 9c:f9:a2:42:c3:b5:77:b9:3c:f9:69:f5:0e:b0:db:06:82:a0: 9c:a9:06:1d:26:7b:1e:b0:a4:2c:ba:dd:3a:83:d0:89:9a:cd: d8:29:95:49:1c:53:d2:a2:a0:73:e9:2e:fa:a5:e6:23:aa:f4: bc:31:fd:78:b6:f3:39:4d:41:ac:39:67:6d:dd:a3:98:59:19: b7:e9:6c:1c:36:34:97:9e:65:7d:25:12:ad:cb:38:ef:f6:60: b1:9e:5d:e5:e4:07:c0:d6:d3:aa:47:39:3f:4b:8c:a2:03:5e: cf:45:3b:4a:c8:09:0c:ce:ec:98:dc:e3:b5:3a:ea:93:da:1d: c0:76:57:fa:6f:f5:7c:8f:92:f0:ca:09:e9:98:e9:15:9f:78: 8f:9d:11:59:1a:53:da:2d:0e:a8:9c:f2:75:61:61:75:8e:68: 99:71:b2:d3:8b:e6:09:e9:b7:98:aa:f4:40:fa:88:b8:5b:e9: 94:96:a6:97:ed:90:e9:f1:4d:49:c1:32:78:99:f2:82:70:7f: cb:76:5a:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+J0FHo5HZa3c+ymUBD1wo7xCfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNG QzU1MjBBMDAeFw0yNjExMDMwMjQ2MTBaFw0yNjExMDQwNTE4MTBaMDMxMTAvBgNV BAMTKEY0ODQxRDdERUVGRjhEMzREQ0EwRUIwRjA0NzVBODUyMEZEMDAxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXhVmgVyAZvppTRnY6ZSfAYqf DlulQ0OVT2PL+UbjrtT/oEGMsgANZP93L6kEE5Gtj4Cjd3gsNOE/7NQbov0vEAgy DApCXdv14NwH+Hw0zNstD2yVJv5vvNdz6ZSqkQShuHni56A1hblCnR2x/F7spmcP FxtpXZIU/DHdKoSYhHrVcOryfu8lx84j6DWCf4XbDiMXFr4fGh292waDbJYzDFOI TCFo1Hf9q6tWdodWbBFIUlktScLa6fQXOncVC7Gqq02zXXo4Y/bvu4fs0foIpqDE 7/pn0vpA5USk/t7EgqzwBACz2NsjpmaMlJJU/9t0PpPsTzcmTevmA/gHzNRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9IQdfe7/jTTcoOsPBHWoUg/QAbAwHwYDVR0j BBgwFoAUAfP9yGCBz+GzTonMif0T4/xVIKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc5ODA5MWUtYzFhZS00MDQ5LTk2ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2 MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNGQzU1MjBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzRkRDODYwODFDRkUxQjM0RTg5Q0M4OUZEMTNFM0ZDNTUy MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEz RTNGQzU1MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4Sn7LsHBEV3FtMMe2zov28I+eQ7HDJd//g Kmr/uLotqnpwACBCD/qPH4RsZExq6ibVTYnW65z5okLDtXe5PPlp9Q6w2waCoJyp Bh0mex6wpCy63TqD0ImazdgplUkcU9KioHPpLvql5iOq9Lwx/Xi28zlNQaw5Z23d o5hZGbfpbBw2NJeeZX0lEq3LOO/2YLGeXeXkB8DW06pHOT9LjKIDXs9FO0rICQzO 7Jjc47U66pPaHcB2V/pv9XyPkvDKCemY6RWfeI+dEVkaU9otDqic8nVhYXWOaJlx stOL5gnpt5iq9ED6iLhb6ZSWppftkOnxTUnBMniZ8oJwf8t2WuU= -----END CERTIFICATE-----Generated at Tue Nov 3 04:27:54 2026 by rpki-client