$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft File: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json) Hash identifier: xbuQbSto0GuETvLV/IvvQRxyVjjhdsJ41PAjdkyiqRI= Subject key identifier: AE:64:36:25:FD:6D:F1:A1:1A:CD:CC:4D:E6:F8:6E:16:6B:7F:C5:7E Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17 Certificate issuer: /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17 Certificate serial: 751DEA7FA6E48B4DA6D54292DEB9A5E4BBDD3DC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 07:27:38 +0000 Manifest this update: Wed 04 Nov 2026 07:22:38 +0000 Manifest next update: Thu 05 Nov 2026 10:36:38 +0000 Files and hashes: 1: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: xqkWh0w++5/QXvkRdQGARVUy3kkfHFqKWbSOxR3E6wo=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 10:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1d:ea:7f:a6:e4:8b:4d:a6:d5:42:92:de:b9:a5:e4:bb:dd:3d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17 Validity Not Before: Nov 4 07:22:38 2026 GMT Not After : Nov 5 10:36:38 2026 GMT Subject: CN=AE643625FD6DF1A11ACDCC4DE6F86E166B7FC57E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:15:f5:95:2b:99:14:8a:20:f9:54:40:86: ec:65:57:f7:c9:e6:fc:44:a1:eb:3a:ef:5f:83:eb: 7c:73:8a:15:c1:5f:3b:33:4b:40:e9:65:1e:6c:ed: 08:90:eb:05:e4:95:a4:84:54:49:df:78:6a:ee:0b: 3f:2b:92:a6:70:76:8b:fd:d8:2e:a1:0a:ca:ad:3c: 02:16:78:59:82:67:69:15:42:c1:ed:78:bd:f2:c0: e8:e2:7d:80:80:55:ce:49:3c:2c:bf:62:cb:7c:5b: f2:2c:49:51:4a:30:26:ef:87:ba:52:7f:4b:9b:ac: 9e:45:1a:91:71:e9:bf:1c:a8:3c:2b:9e:3d:7c:67: 7d:91:7f:ee:1e:de:77:76:5e:c2:ac:21:16:8b:ef: a7:65:df:83:89:09:0a:2d:9e:45:a3:9b:26:af:11: ac:42:79:c3:72:8e:fa:c5:45:0c:ca:65:6f:4a:41: 31:27:0e:57:22:72:05:5b:60:fe:05:b1:55:75:79: 1e:ca:c2:af:4c:c3:ec:a0:bc:9b:cf:6c:ba:2f:84: e4:98:d9:52:5e:3b:d8:3d:13:1e:10:9b:25:71:e6: fd:7a:46:82:21:d9:14:1a:2c:17:85:e2:58:e4:5b: 86:5b:40:b1:67:97:8e:0e:ae:e4:f0:9f:93:91:b5: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:64:36:25:FD:6D:F1:A1:1A:CD:CC:4D:E6:F8:6E:16:6B:7F:C5:7E X509v3 Authority Key Identifier: keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:68:56:1e:d5:70:a9:92:ff:44:09:28:39:4c:6f:a1:5c:f7: 80:05:6d:f1:3c:eb:2c:52:95:f2:a5:03:f0:04:82:a5:94:06: 1c:58:d3:85:38:dd:b3:9f:a9:a6:1e:a3:77:ca:d6:02:2c:5b: 1e:0c:69:ea:95:d7:52:8d:cb:33:d3:a8:68:a0:29:32:fd:ad: 3e:2e:21:fe:0a:e4:e6:f9:1f:92:f7:3b:f6:1c:81:90:e0:f5: d7:74:3b:75:3a:c2:dd:e6:9e:8b:d1:f7:0f:86:1c:8f:15:d6: 64:58:47:e9:15:75:b1:f2:69:4a:9f:58:27:6f:64:94:f2:25: 18:20:aa:d2:e1:92:47:fb:5f:3b:07:91:45:41:1b:3c:37:7f: 17:bc:1b:14:94:e7:f5:e6:e9:36:92:db:3c:76:1a:2c:43:e5: 79:a2:8c:84:85:fc:a4:48:74:7d:5b:c9:4c:39:ae:88:52:f0: 6b:b3:c5:b9:f0:91:f2:b9:65:ab:94:0d:0c:89:0a:66:66:e1: 26:b7:33:0e:be:4f:a1:fa:7e:34:ac:84:4f:46:1a:33:5d:5a: 40:72:8e:17:4a:e1:c0:b8:92:9e:c2:6d:14:89:1c:44:a4:df: 37:51:74:55:34:61:8b:66:3d:ed:75:d5:de:7f:fb:d6:86:8b: 96:64:bf:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdR3qf6bki02m1UKS3rml5LvdPcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0 MkQ3MUYxNzAeFw0yNjExMDQwNzIyMzhaFw0yNjExMDUxMDM2MzhaMDMxMTAvBgNV BAMTKEFFNjQzNjI1RkQ2REYxQTExQUNEQ0M0REU2Rjg2RTE2NkI3RkM1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nxX1lSuZFIog+VRAhuxlV/fJ 5vxEoes671+D63xzihXBXzszS0DpZR5s7QiQ6wXklaSEVEnfeGruCz8rkqZwdov9 2C6hCsqtPAIWeFmCZ2kVQsHteL3ywOjifYCAVc5JPCy/Yst8W/IsSVFKMCbvh7pS f0ubrJ5FGpFx6b8cqDwrnj18Z32Rf+4e3nd2XsKsIRaL76dl34OJCQotnkWjmyav EaxCecNyjvrFRQzKZW9KQTEnDlcicgVbYP4FsVV1eR7Kwq9Mw+ygvJvPbLovhOSY 2VJeO9g9Ex4QmyVx5v16RoIh2RQaLBeF4ljkW4ZbQLFnl44OruTwn5ORtT1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmQ2Jf1t8aEazcxN5vhuFmt/xX4wHwYDVR0j BBgwFoAU8kBL1puYc7Md2A6h4/VKjELXHxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5 Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0MkQ3MUYxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjQwNEJENjlCOTg3M0IzMUREODBFQTFFM0Y1NEE4QzQyRDcx RjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRB OEM0MkQ3MUYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFoVh7VcKmS/0QJKDlMb6Fc94AFbfE86yxS lfKlA/AEgqWUBhxY04U43bOfqaYeo3fK1gIsWx4MaeqV11KNyzPTqGigKTL9rT4u If4K5Ob5H5L3O/YcgZDg9dd0O3U6wt3mnovR9w+GHI8V1mRYR+kVdbHyaUqfWCdv ZJTyJRggqtLhkkf7XzsHkUVBGzw3fxe8GxSU5/Xm6TaS2zx2GixD5XmijISF/KRI dH1byUw5rohS8GuzxbnwkfK5ZauUDQyJCmZm4Sa3Mw6+T6H6fjSshE9GGjNdWkBy jhdK4cC4kp7CbRSJHESk3zdRdFU0YYtmPe111d5/+9aGi5Zkv9I= -----END CERTIFICATE-----Generated at Wed Nov 4 19:15:22 2026 by rpki-client