$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: kaQghzx/osqWQsxbYwUB4vNprcoqPzTsDyB3qcWheEo= Subject key identifier: 13:9A:3F:65:97:47:77:3B:16:3D:F1:F7:C4:85:51:9B:E1:14:AA:17 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 45BF2E9EA0CCB086BC57750078467C2D1C4F19CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 22:15:35 +0000 Manifest this update: Tue 03 Nov 2026 22:10:35 +0000 Manifest next update: Thu 05 Nov 2026 01:04:35 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) 2: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: /Um51tc2uHCc5Bq4b98zZsveHoir0Tr9n2SXK7pkR3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bf:2e:9e:a0:cc:b0:86:bc:57:75:00:78:46:7c:2d:1c:4f:19:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: Nov 3 22:10:35 2026 GMT Not After : Nov 5 01:04:35 2026 GMT Subject: CN=139A3F659747773B163DF1F7C485519BE114AA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:73:21:6c:ee:44:2d:64:b0:d1:3c:55:d3: 5b:07:20:68:38:23:7f:a5:9c:08:de:6e:0a:fa:24: 30:17:40:89:75:b2:6d:0d:d6:1c:63:34:d1:7c:35: 3e:5b:a7:e3:63:d1:a9:de:9d:fc:d0:0e:17:dc:6c: fc:7b:6a:85:7c:fd:a6:7c:95:3c:7e:da:d3:cc:9e: 05:b8:dc:13:c9:6b:eb:45:19:9a:28:ec:9a:9c:68: 3b:67:7b:f6:ee:ca:c0:f0:02:10:88:6d:7b:46:a8: e5:91:9b:a4:42:7d:33:e0:36:a6:b0:3c:8a:00:9b: 30:7e:75:20:bb:a0:0e:ba:e8:39:72:26:aa:91:db: bc:38:51:3c:8c:ae:5d:41:d0:59:cc:35:1b:78:3e: da:81:80:02:5d:ec:4d:e4:a9:ac:e2:22:e8:6c:72: 62:46:0c:dd:8f:b2:cc:6e:4d:d5:fa:10:bf:f8:1a: 90:30:5c:39:a2:12:15:21:ee:91:04:d9:7b:f9:23: f5:17:07:ae:04:5b:bb:d9:ab:cb:33:fd:1a:1d:da: 60:f4:61:11:dc:f0:8f:3a:ed:3b:d9:6c:55:3a:85: 07:74:2c:7d:f8:8c:f2:d8:23:4f:5c:18:2e:19:90: cb:c1:76:7a:8d:b1:a9:1a:91:61:d7:da:3c:b7:54: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:3F:65:97:47:77:3B:16:3D:F1:F7:C4:85:51:9B:E1:14:AA:17 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:88:d2:37:b8:b5:ee:c2:b5:1a:69:d7:f3:8c:27:ca:16:e6: 34:3c:47:48:c6:8a:04:2b:a7:4e:cf:ad:8a:f1:c2:ee:3e:82: 26:72:a9:36:ea:c3:69:80:24:55:64:dc:fe:1a:1a:4a:53:16: b7:78:6d:20:47:32:a1:68:f6:8f:a3:a1:fe:03:3a:7f:e9:46: 36:50:38:5e:55:05:8a:bf:72:70:3b:dc:29:4e:c6:ff:87:c8: f6:03:86:a6:90:9f:f5:18:62:86:2a:b3:f5:7e:4f:5a:0b:c2: 69:e6:b3:9a:dc:15:10:e5:7d:69:f5:0b:f0:04:46:41:ea:27: 33:a8:80:71:2e:b0:20:dd:e3:99:8e:8e:d1:47:60:f2:1f:4f: da:1a:29:f6:93:2e:bb:36:91:60:e1:f8:46:c7:5c:7d:ee:02: a6:f6:a3:f1:cf:b4:f0:a7:aa:89:b8:03:3d:70:15:eb:e0:8d: 6a:34:f4:c0:ef:00:ca:37:99:b6:47:42:3b:8c:2f:fd:f2:3a: 2c:81:16:50:d9:da:07:51:e2:e3:c4:8f:51:ae:8a:36:44:78: ba:2e:dd:01:76:f4:6b:c0:98:22:ed:60:c3:7f:06:36:41:8c: 4c:c1:6f:8b:8b:3e:e4:41:3c:a1:6c:61:ac:e4:f0:c4:13:9d: 3b:82:cd:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURb8unqDMsIa8V3UAeEZ8LRxPGcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjExMDMyMjEwMzVaFw0yNjExMDUwMTA0MzVaMDMxMTAvBgNV BAMTKDEzOUEzRjY1OTc0Nzc3M0IxNjNERjFGN0M0ODU1MTlCRTExNEFBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6inMhbO5ELWSw0TxV01sHIGg4 I3+lnAjebgr6JDAXQIl1sm0N1hxjNNF8NT5bp+Nj0anenfzQDhfcbPx7aoV8/aZ8 lTx+2tPMngW43BPJa+tFGZoo7JqcaDtne/buysDwAhCIbXtGqOWRm6RCfTPgNqaw PIoAmzB+dSC7oA666DlyJqqR27w4UTyMrl1B0FnMNRt4PtqBgAJd7E3kqaziIuhs cmJGDN2PssxuTdX6EL/4GpAwXDmiEhUh7pEE2Xv5I/UXB64EW7vZq8sz/Rod2mD0 YRHc8I867TvZbFU6hQd0LH34jPLYI09cGC4ZkMvBdnqNsakakWHX2jy3VFMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5o/ZZdHdzsWPfH3xIVRm+EUqhcwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+I0je4te7CtRpp1/OMJ8oW5jQ8R0jGigQr p07PrYrxwu4+giZyqTbqw2mAJFVk3P4aGkpTFrd4bSBHMqFo9o+jof4DOn/pRjZQ OF5VBYq/cnA73ClOxv+HyPYDhqaQn/UYYoYqs/V+T1oLwmnms5rcFRDlfWn1C/AE RkHqJzOogHEusCDd45mOjtFHYPIfT9oaKfaTLrs2kWDh+EbHXH3uAqb2o/HPtPCn qom4Az1wFevgjWo09MDvAMo3mbZHQjuML/3yOiyBFlDZ2gdR4uPEj1GuijZEeLou 3QF29GvAmCLtYMN/BjZBjEzBb4uLPuRBPKFsYazk8MQTnTuCzSo= -----END CERTIFICATE-----Generated at Wed Nov 4 13:44:13 2026 by rpki-client