$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json) Hash identifier: I9t1C5J25C/g5T+bU9FNTH+gMB2xokHAGiZzDUFy4Wo= Subject key identifier: 80:F0:C7:91:CD:9B:1E:08:05:2E:AE:41:48:08:E8:7E:02:45:B9:9E Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 32F4BCE29AADAEAE976B89F70F245932C5109782 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 06:41:34 +0000 Manifest this update: Wed 04 Nov 2026 06:36:34 +0000 Manifest next update: Thu 05 Nov 2026 06:46:34 +0000 Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: pQbDq0V1MErfVAoDo9/qQ2swQoqqpbxyHCV70xB37Wc=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 06:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f4:bc:e2:9a:ad:ae:ae:97:6b:89:f7:0f:24:59:32:c5:10:97:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: Nov 4 06:36:34 2026 GMT Not After : Nov 5 06:46:34 2026 GMT Subject: CN=80F0C791CD9B1E08052EAE414808E87E0245B99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:8f:ed:fb:e1:59:79:a1:84:3c:7b:63:af: de:4d:c9:ef:13:3d:11:20:e5:6e:84:16:6e:64:6f: 85:3b:16:46:9e:49:08:e7:60:f8:11:99:c7:08:6d: db:45:e8:f1:fc:b6:88:f7:07:19:fe:e1:ff:5e:ec: 39:2c:14:74:a8:03:d0:40:8f:5f:69:9e:6d:99:ce: 69:6d:ca:8d:12:e1:08:36:4e:e5:82:88:1f:cf:e4: c1:26:98:ef:05:3e:32:bb:12:c7:17:6f:e5:c5:de: 85:df:a6:b3:e5:2b:b9:44:41:68:52:90:38:a9:06: 95:84:53:d1:63:f7:e0:b9:1b:d7:3a:8a:d2:d1:5d: 1c:fe:1f:40:94:2c:45:66:41:e2:bd:42:c4:18:12: 32:40:b3:f6:f8:6e:2e:fc:a7:64:a0:3b:68:87:3f: 6e:d3:93:46:60:8e:04:d6:59:5a:b7:54:3b:7c:0b: f7:c4:fb:52:26:9f:a0:98:ff:bb:14:08:e1:82:7f: da:da:d9:8d:e0:c5:ad:7b:d6:e9:87:2b:0d:53:fb: c0:aa:c6:8e:0e:cd:7a:bd:db:3b:8d:e7:db:50:33: 36:ae:03:88:90:c4:b5:f7:c9:07:30:29:98:6f:78: 54:bb:19:2b:79:69:1e:fc:fd:44:d1:2a:b2:4f:04: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F0:C7:91:CD:9B:1E:08:05:2E:AE:41:48:08:E8:7E:02:45:B9:9E X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fa:7a:68:14:f1:37:d5:6a:7b:db:0a:b9:90:3a:ec:9c:ea: fa:26:12:0a:7a:8e:14:dc:b9:cd:67:65:fd:fe:d6:93:a5:8b: 38:20:00:a0:89:e9:8d:a9:35:74:d0:01:2e:58:fc:1a:58:8d: 30:12:5b:46:22:ad:9a:fe:8f:6d:70:52:5b:e5:00:5f:3a:23: 48:85:13:fd:3e:15:e2:34:41:04:1d:f3:77:ce:a3:7d:f8:c6: 2f:6b:ff:6f:d5:c8:2f:03:5b:8f:3f:99:5a:11:f4:bc:13:cf: 2c:34:8b:e9:30:69:46:11:d2:76:76:92:91:10:a5:4d:8c:d6: ad:15:5a:e8:fa:b4:c6:a1:94:3a:66:48:5e:fb:b3:c7:4c:4b: 98:3b:4f:b1:50:da:2f:df:e6:b8:a3:9f:78:c8:6f:16:a8:09: dc:c0:9f:55:c3:90:e3:23:ff:72:fa:5c:9c:5b:ec:25:b4:36: ac:f9:eb:34:17:bc:d3:53:6f:4b:e1:30:06:44:99:2d:48:7d: 0a:10:c5:cd:81:15:3a:de:39:28:aa:2d:8c:1d:07:bd:8e:9d: 73:33:f5:32:57:76:74:1f:48:39:b9:a1:b5:d4:65:9f:4a:87: 95:75:36:10:0f:44:b6:41:d8:9f:15:84:a1:d2:99:37:49:6d: 21:cc:5b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvS84pqtrq6Xa4n3DyRZMsUQl4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjExMDQwNjM2MzRaFw0yNjExMDUwNjQ2MzRaMDMxMTAvBgNV BAMTKDgwRjBDNzkxQ0Q5QjFFMDgwNTJFQUU0MTQ4MDhFODdFMDI0NUI5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwE4/t++FZeaGEPHtjr95Nye8T PREg5W6EFm5kb4U7FkaeSQjnYPgRmccIbdtF6PH8toj3Bxn+4f9e7DksFHSoA9BA j19pnm2Zzmltyo0S4Qg2TuWCiB/P5MEmmO8FPjK7EscXb+XF3oXfprPlK7lEQWhS kDipBpWEU9Fj9+C5G9c6itLRXRz+H0CULEVmQeK9QsQYEjJAs/b4bi78p2SgO2iH P27Tk0ZgjgTWWVq3VDt8C/fE+1Imn6CY/7sUCOGCf9ra2Y3gxa171umHKw1T+8Cq xo4OzXq92zuN59tQMzauA4iQxLX3yQcwKZhveFS7GSt5aR78/UTRKrJPBMf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPDHkc2bHggFLq5BSAjofgJFuZ4wHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz6emgU8TfVanvbCrmQOuyc6vomEgp6jhTc uc1nZf3+1pOlizggAKCJ6Y2pNXTQAS5Y/BpYjTASW0YirZr+j21wUlvlAF86I0iF E/0+FeI0QQQd83fOo334xi9r/2/VyC8DW48/mVoR9LwTzyw0i+kwaUYR0nZ2kpEQ pU2M1q0VWuj6tMahlDpmSF77s8dMS5g7T7FQ2i/f5rijn3jIbxaoCdzAn1XDkOMj /3L6XJxb7CW0Nqz56zQXvNNTb0vhMAZEmS1IfQoQxc2BFTreOSiqLYwdB72OnXMz 9TJXdnQfSDm5obXUZZ9Kh5V1NhAPRLZB2J8VhKHSmTdJbSHMW88= -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:20 2026 by rpki-client