$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: aB5I1er3zb4FRK8Dz9ccOUPocpuhQFMt4l0aPg3F9Rg= Subject key identifier: BE:50:9B:5E:29:C3:8B:6E:3B:4E:90:22:2C:D3:4E:BA:AF:05:19:20 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 12E0AA44E6BEBA40802FA4F2E90ACCCA5B8A4E1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 16:48:57 +0000 Manifest this update: Mon 02 Nov 2026 16:43:57 +0000 Manifest next update: Tue 03 Nov 2026 19:41:57 +0000 Files and hashes: 1: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 3: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: HeQCX8wjv9QIcDI4jWJIaMR+UnQHCqoMaem2CD+1q3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e0:aa:44:e6:be:ba:40:80:2f:a4:f2:e9:0a:cc:ca:5b:8a:4e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Nov 2 16:43:57 2026 GMT Not After : Nov 3 19:41:57 2026 GMT Subject: CN=BE509B5E29C38B6E3B4E90222CD34EBAAF051920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:d2:37:de:de:4b:1f:6e:6b:52:2e:7c:ef: b6:2f:55:39:d0:73:c1:d8:56:1f:cc:54:76:41:c8: fb:9a:87:ca:fa:86:74:bc:a8:ea:2e:8c:5a:6d:d4: 46:e6:10:86:6e:8e:51:1a:d9:e1:55:1e:9d:24:35: 50:4b:58:20:79:ff:0a:54:39:dd:5c:0b:38:80:4e: b1:9f:16:0c:e4:93:16:28:fd:20:a2:8b:23:c4:e4: 61:e7:d0:17:cb:eb:93:83:17:79:00:f1:16:32:63: c0:90:29:77:e5:3a:8b:7e:55:8f:bf:10:9a:55:7e: 74:fb:fd:77:06:e2:5e:c4:ac:b6:24:3b:fa:ae:ca: 0f:9b:4b:4e:3e:cc:f0:f1:65:f5:67:e5:dd:31:7d: 97:eb:2f:d9:d8:ea:1f:84:12:f6:7e:ad:cc:29:4f: 54:4b:aa:ea:c1:d2:b7:f6:d4:e3:58:3e:91:b1:47: b3:d4:76:6b:6c:86:c7:e3:ec:8a:02:1e:16:ee:36: a0:60:db:0f:97:ae:ec:6a:77:ef:92:f0:b3:f7:3a: 57:d2:2a:39:5f:6f:52:20:4c:c2:61:b4:93:ff:60: 4e:1b:0f:0d:66:c3:3f:ba:b0:df:b6:ba:36:81:b8: 4d:01:e4:3a:f2:b0:a1:a3:79:f4:02:fb:69:d0:65: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:50:9B:5E:29:C3:8B:6E:3B:4E:90:22:2C:D3:4E:BA:AF:05:19:20 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:83:95:fc:8e:e8:4c:b8:85:ed:31:ff:05:f5:5d:af:83:68: fd:7b:6f:8d:af:57:38:f1:bc:cc:53:78:cc:b3:3a:7c:b1:3b: 80:9d:df:52:48:2d:be:38:ad:fe:57:3b:76:ce:33:4b:c2:75: ee:77:a3:14:19:33:07:9b:ea:a7:3e:d1:71:37:71:3c:24:0a: c0:78:8d:60:0c:02:23:79:a5:e8:cd:d3:06:d3:cd:81:f2:5f: 37:40:c0:7d:96:6a:6c:62:31:b6:64:79:77:54:8c:08:9d:07: 5c:b9:d5:3b:e1:3e:67:74:3a:2c:2c:04:3b:6f:bc:61:7b:60: 0d:05:fe:7a:1a:f4:98:a4:d9:85:9e:d1:e3:dd:26:64:27:85: ee:3e:ed:5b:83:de:57:bd:f6:c4:02:27:f9:98:e5:72:b5:c4: 77:a7:65:ff:cf:4c:29:7f:a1:7c:bc:76:27:39:1c:88:0b:3f: 3c:fd:ee:e4:ab:9b:b9:5e:33:fa:01:68:66:3a:4f:9c:23:fc: 5a:f3:7a:ee:7e:ce:08:14:4b:86:5a:ec:07:28:79:b5:73:8a: 5c:65:f3:0c:f0:b5:c9:53:81:6a:2e:a8:da:b3:ac:4e:b9:7f: cd:d2:a4:e1:41:24:3b:18:90:05:8d:ad:41:ba:24:56:a4:c4: f7:f5:5a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuCqROa+ukCAL6Ty6QrMyluKThwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjExMDIxNjQzNTdaFw0yNjExMDMxOTQxNTdaMDMxMTAvBgNV BAMTKEJFNTA5QjVFMjlDMzhCNkUzQjRFOTAyMjJDRDM0RUJBQUYwNTE5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOdI33t5LH25rUi5877YvVTnQ c8HYVh/MVHZByPuah8r6hnS8qOoujFpt1EbmEIZujlEa2eFVHp0kNVBLWCB5/wpU Od1cCziATrGfFgzkkxYo/SCiiyPE5GHn0BfL65ODF3kA8RYyY8CQKXflOot+VY+/ EJpVfnT7/XcG4l7ErLYkO/quyg+bS04+zPDxZfVn5d0xfZfrL9nY6h+EEvZ+rcwp T1RLqurB0rf21ONYPpGxR7PUdmtshsfj7IoCHhbuNqBg2w+Xruxqd++S8LP3OlfS Kjlfb1IgTMJhtJP/YE4bDw1mwz+6sN+2ujaBuE0B5DrysKGjefQC+2nQZS/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvlCbXinDi247TpAiLNNOuq8FGSAwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2DlfyO6Ey4he0x/wX1Xa+DaP17b42vVzjx vMxTeMyzOnyxO4Cd31JILb44rf5XO3bOM0vCde53oxQZMweb6qc+0XE3cTwkCsB4 jWAMAiN5pejN0wbTzYHyXzdAwH2WamxiMbZkeXdUjAidB1y51TvhPmd0OiwsBDtv vGF7YA0F/noa9Jik2YWe0ePdJmQnhe4+7VuD3le99sQCJ/mY5XK1xHenZf/PTCl/ oXy8dic5HIgLPzz97uSrm7leM/oBaGY6T5wj/Frzeu5+zggUS4Za7AcoebVzilxl 8wzwtclTgWouqNqzrE65f83SpOFBJDsYkAWNrUG6JFakxPf1WuI= -----END CERTIFICATE-----Generated at Tue Nov 3 01:33:30 2026 by rpki-client