$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: 3d/ESDMk+Jv8/wJnCxe9vavu2XVc20P8nCLMJD5L7RY= Subject key identifier: 53:DF:93:C8:F8:12:20:9D:91:AF:18:4C:BF:FC:0D:E8:F7:79:EA:A3 Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 375ACECC6EBFF4A41CEBAA332E799F42BDFC8FBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 22:51:09 +0000 Manifest this update: Mon 02 Nov 2026 22:46:09 +0000 Manifest next update: Wed 04 Nov 2026 00:07:09 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 2: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: 1aKWOyRYyBJSbkUTee3cti8s1cJGmg2ci8DU1T6Y1Lk=) 3: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5a:ce:cc:6e:bf:f4:a4:1c:eb:aa:33:2e:79:9f:42:bd:fc:8f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Nov 2 22:46:09 2026 GMT Not After : Nov 4 00:07:09 2026 GMT Subject: CN=53DF93C8F812209D91AF184CBFFC0DE8F779EAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:26:1d:6d:b1:97:16:b3:ca:e2:70:fc:95: 1b:b1:82:88:7e:ca:23:09:58:13:c3:f3:6a:1c:81: c9:aa:a3:c1:63:2e:65:ec:5a:b2:7c:2f:67:bd:47: ba:8e:d7:f8:b1:5c:89:54:4f:8e:8c:02:1c:95:23: bf:22:81:bb:24:4e:3a:c6:3a:23:8b:b2:4f:b0:a9: d0:b3:f1:4a:65:07:54:00:0a:44:e2:cc:53:f0:ae: 7d:7a:c5:65:fa:81:21:b2:7d:37:b2:63:e3:d7:b2: 4a:8a:4e:a0:b5:aa:93:d2:c4:e6:5d:27:85:93:ae: 18:03:c4:93:c5:f3:4e:30:1f:a7:02:f5:ba:28:da: 7b:39:c4:49:c5:02:7a:59:a0:9d:e4:c4:db:92:bc: 7b:1e:d6:d5:f1:19:75:f0:b8:6e:6c:63:3d:e9:28: fe:75:c8:f2:19:bf:31:14:a8:f5:1a:9f:b9:4b:35: 51:26:73:2c:91:e6:a2:8d:22:e0:71:8b:81:af:6f: 98:f5:e3:38:05:b8:a6:e3:51:cb:e4:a2:3a:73:e9: 6b:4e:db:da:a8:e2:1c:b1:e0:8f:43:b8:79:92:69: 78:b2:65:e5:a5:14:da:10:9d:4a:83:43:3c:79:ab: 6e:4e:9e:43:cb:71:54:f3:92:22:89:d2:d6:8f:f7: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DF:93:C8:F8:12:20:9D:91:AF:18:4C:BF:FC:0D:E8:F7:79:EA:A3 X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:6b:87:73:ac:e6:69:76:d9:d1:8a:73:67:c9:62:8a:c9: e9:c7:cf:5c:f7:cd:04:d3:a4:f9:63:9a:95:e4:43:97:6f:4d: fa:79:13:3b:83:7e:e4:51:a9:ca:98:2c:89:a5:90:77:cb:78: 1c:b8:9c:e7:84:af:0e:e5:68:63:3a:04:12:a1:e0:11:1e:2d: 64:ab:e1:00:2d:ca:81:4c:cd:e7:55:c6:f3:2a:93:18:d8:8f: 98:fe:51:0c:db:22:86:fe:5b:3d:92:4b:33:28:ef:66:ab:0b: 62:51:5e:a2:22:ea:72:93:c8:82:c8:95:0c:97:80:81:71:f5: eb:6c:57:da:81:54:d0:4a:ff:49:7f:cb:03:a8:c1:11:27:5a: 83:aa:f7:aa:62:d1:78:7f:57:3f:2e:d9:5d:da:51:0d:f0:48: f7:ed:89:ce:d7:a4:49:4b:48:9e:e3:cb:6a:63:b0:29:fa:94: e4:f3:cf:30:c7:a2:81:8d:50:46:33:e1:06:47:86:89:62:90: 90:47:12:d7:5d:de:b1:1c:53:b0:58:ff:78:da:c6:ed:6f:bd: af:bf:b4:95:fb:38:98:e9:04:7b:47:35:50:d3:f7:20:4a:14: 3f:57:0e:bf:c1:72:47:6c:58:88:95:d3:c9:57:99:f9:cb:5a: 79:a0:e1:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1rOzG6/9KQc66ozLnmfQr38j7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjExMDIyMjQ2MDlaFw0yNjExMDQwMDA3MDlaMDMxMTAvBgNV BAMTKDUzREY5M0M4RjgxMjIwOUQ5MUFGMTg0Q0JGRkMwREU4Rjc3OUVBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1yYdbbGXFrPK4nD8lRuxgoh+ yiMJWBPD82ocgcmqo8FjLmXsWrJ8L2e9R7qO1/ixXIlUT46MAhyVI78igbskTjrG OiOLsk+wqdCz8UplB1QACkTizFPwrn16xWX6gSGyfTeyY+PXskqKTqC1qpPSxOZd J4WTrhgDxJPF804wH6cC9boo2ns5xEnFAnpZoJ3kxNuSvHse1tXxGXXwuG5sYz3p KP51yPIZvzEUqPUan7lLNVEmcyyR5qKNIuBxi4Gvb5j14zgFuKbjUcvkojpz6WtO 29qo4hyx4I9DuHmSaXiyZeWlFNoQnUqDQzx5q25OnkPLcVTzkiKJ0taP9/cHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9+TyPgSIJ2RrxhMv/wN6Pd56qMwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6ea4dzrOZpdtnRinNnyWKKyenHz1z3zQTT pPljmpXkQ5dvTfp5EzuDfuRRqcqYLImlkHfLeBy4nOeErw7laGM6BBKh4BEeLWSr 4QAtyoFMzedVxvMqkxjYj5j+UQzbIob+Wz2SSzMo72arC2JRXqIi6nKTyILIlQyX gIFx9etsV9qBVNBK/0l/ywOowREnWoOq96pi0Xh/Vz8u2V3aUQ3wSPftic7XpElL SJ7jy2pjsCn6lOTzzzDHooGNUEYz4QZHholikJBHEtdd3rEcU7BY/3jaxu1vva+/ tJX7OJjpBHtHNVDT9yBKFD9XDr/BckdsWIiV08lXmfnLWnmg4e4= -----END CERTIFICATE-----Generated at Tue Nov 3 12:57:13 2026 by rpki-client