$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: FxzoVtDyhzTuzvNQvEz27vJwAO5HSZK+jepg/5byjEY= Subject key identifier: DB:15:3E:BF:E6:9E:02:31:C0:6A:97:F3:2D:CC:6B:82:69:B7:B4:B7 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 2928233D2CE53863C59E991B99436A6EF3C42C57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 02:25:37 +0000 Manifest this update: Mon 02 Nov 2026 02:20:37 +0000 Manifest next update: Tue 03 Nov 2026 05:14:37 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 3: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: LrlCXMCjOlHEiYTR3ZTXSbvP1+uD/NWUeQpmmGFOzfo=) 4: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:28:23:3d:2c:e5:38:63:c5:9e:99:1b:99:43:6a:6e:f3:c4:2c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Nov 2 02:20:37 2026 GMT Not After : Nov 3 05:14:37 2026 GMT Subject: CN=DB153EBFE69E0231C06A97F32DCC6B8269B7B4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:da:1c:cc:4f:2f:b8:a4:4d:ca:53:07:8d: a1:9c:21:fb:f0:0e:a3:40:61:5e:34:78:2b:4f:71: 17:cc:34:97:a7:5c:a9:f2:30:c6:7e:5a:cd:35:3c: 45:0e:3c:63:5c:1e:39:a5:36:3f:1d:fe:be:2d:9b: 7a:2a:b2:c6:60:c8:ef:75:9e:35:94:f8:c9:cb:0a: 74:86:cd:cb:e5:93:78:2e:8f:ea:66:93:9b:dc:29: d4:33:2d:d3:d1:ae:3d:be:ab:17:ff:01:e1:9e:1c: 0b:6b:2b:e1:dd:7a:11:ad:aa:6a:f5:f5:ab:76:81: 1f:b6:0a:b0:51:d0:bd:4a:54:1e:1c:46:85:5d:de: 4c:91:4f:4f:2f:ac:a0:24:46:46:49:84:4f:a2:f7: f2:3e:ea:f9:0a:4b:44:bb:bc:11:70:47:bc:bf:73: e1:62:22:19:c8:1e:69:bb:96:ef:38:f5:6f:41:0e: 29:5b:bb:3c:57:fd:ec:b6:a9:39:f5:32:1a:0f:2a: a4:ae:d7:c9:65:04:a0:b8:96:51:40:c5:4e:27:da: 42:c2:5d:36:20:0c:e1:d1:b7:b1:b1:46:e0:82:43: 07:7e:08:25:92:84:c4:75:61:3d:a5:79:c5:44:69: 95:4a:2b:0f:70:66:74:f5:9e:8a:ba:a7:92:19:08: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:3E:BF:E6:9E:02:31:C0:6A:97:F3:2D:CC:6B:82:69:B7:B4:B7 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b7:a6:fe:85:87:79:45:c9:97:4f:46:06:6b:21:c7:7a:23: ff:4e:c3:df:0d:7b:be:f5:e3:01:0c:18:90:3c:f6:9d:e9:5f: 82:e9:55:c1:fe:ff:fb:f9:19:bc:7f:1a:ce:a5:fa:13:ee:ef: 62:35:37:c1:ae:d3:35:a7:ae:0c:60:f7:0e:ed:cd:d9:7c:ca: c2:7e:64:9e:59:00:fc:66:53:17:98:af:64:25:ee:d1:29:15: c0:19:ce:d0:32:4b:4b:0b:c2:6f:4b:c7:2c:ab:a4:8a:bc:83: 0c:b0:57:4f:52:48:76:6c:7a:70:03:5f:4e:2a:23:9a:71:6b: ab:f5:02:86:e0:d6:cf:0e:f2:11:2b:6d:f3:6d:37:d4:06:17: 50:30:a1:94:b9:e5:15:6a:57:48:ac:10:10:a3:98:09:4d:3d: 80:47:df:c6:25:8f:69:16:67:dd:95:45:20:c7:b8:43:0b:b0: 78:00:0f:a9:24:15:2b:ca:a2:62:22:66:e3:05:36:0a:77:5a: 9c:2e:70:66:58:8a:56:a4:30:41:6e:f7:c6:ff:3d:8d:13:95: 19:14:8b:5f:ed:dc:24:7b:ce:df:d6:dd:e3:6e:da:22:94:f0: 9d:f4:c7:de:84:b5:a2:f3:7f:d6:6f:e3:8a:90:98:9c:91:66: 15:e5:85:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSgjPSzlOGPFnpkbmUNqbvPELFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjExMDIwMjIwMzdaFw0yNjExMDMwNTE0MzdaMDMxMTAvBgNV BAMTKERCMTUzRUJGRTY5RTAyMzFDMDZBOTdGMzJEQ0M2QjgyNjlCN0I0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZNoczE8vuKRNylMHjaGcIfvw DqNAYV40eCtPcRfMNJenXKnyMMZ+Ws01PEUOPGNcHjmlNj8d/r4tm3oqssZgyO91 njWU+MnLCnSGzcvlk3guj+pmk5vcKdQzLdPRrj2+qxf/AeGeHAtrK+HdehGtqmr1 9at2gR+2CrBR0L1KVB4cRoVd3kyRT08vrKAkRkZJhE+i9/I+6vkKS0S7vBFwR7y/ c+FiIhnIHmm7lu849W9BDilbuzxX/ey2qTn1MhoPKqSu18llBKC4llFAxU4n2kLC XTYgDOHRt7GxRuCCQwd+CCWShMR1YT2lecVEaZVKKw9wZnT1noq6p5IZCJ3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xU+v+aeAjHAapfzLcxrgmm3tLcwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK3pv6Fh3lFyZdPRgZrIcd6I/9Ow98Ne771 4wEMGJA89p3pX4LpVcH+//v5Gbx/Gs6l+hPu72I1N8Gu0zWnrgxg9w7tzdl8ysJ+ ZJ5ZAPxmUxeYr2Ql7tEpFcAZztAyS0sLwm9LxyyrpIq8gwywV09SSHZsenADX04q I5pxa6v1Aobg1s8O8hErbfNtN9QGF1AwoZS55RVqV0isEBCjmAlNPYBH38Ylj2kW Z92VRSDHuEMLsHgAD6kkFSvKomIiZuMFNgp3WpwucGZYilakMEFu98b/PY0TlRkU i1/t3CR7zt/W3eNu2iKU8J30x96EtaLzf9Zv44qQmJyRZhXlhUk= -----END CERTIFICATE-----Generated at Mon Nov 2 05:52:43 2026 by rpki-client