$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: 1x/rAFz8mC45mAJNfm2wpUfOs9ohq2PleXJEcsOHwzE= Subject key identifier: FE:8E:35:61:87:F9:82:3D:7D:1B:5B:18:03:DC:D3:8B:88:A6:27:0F Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 26EE1A7D2881F9A68341F2CF136BD1F00E2A88DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 06:00:46 +0000 Manifest this update: Wed 04 Nov 2026 05:55:46 +0000 Manifest next update: Thu 05 Nov 2026 09:40:46 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) 3: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: 3AixotBw8svT4WMzCqT1EvF7fDyY32Ne8swM8zEsxik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ee:1a:7d:28:81:f9:a6:83:41:f2:cf:13:6b:d1:f0:0e:2a:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Nov 4 05:55:46 2026 GMT Not After : Nov 5 09:40:46 2026 GMT Subject: CN=FE8E356187F9823D7D1B5B1803DCD38B88A6270F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:de:89:81:a2:c8:5d:4a:08:b8:0f:29:df:9e: 6a:e3:5d:31:c5:54:e9:24:dc:7f:36:ec:6e:ef:8f: c8:a9:23:8d:40:5b:46:d2:16:4c:fb:01:08:e9:d3: f0:b8:b9:a4:16:3b:d3:c8:ba:a9:e3:f8:9b:88:73: 8c:af:94:86:a2:28:ce:f6:f0:2c:65:dd:6d:89:c1: 6c:a4:18:bd:47:f2:58:ba:af:84:54:33:5c:a2:60: 11:2b:cb:7d:a5:62:45:52:5e:0e:99:b2:09:76:96: 5f:2e:bd:68:df:e0:44:ce:22:67:12:e0:7e:97:d4: 9b:8b:cd:e6:66:98:ea:75:86:af:f5:3c:da:a5:03: cd:7a:b9:c2:6c:5a:18:f3:39:12:3d:92:e0:0e:70: fa:60:bc:7b:e4:4c:8a:a0:d5:51:dd:05:d4:07:7b: c5:76:28:bc:a6:bb:34:4c:df:1b:ad:28:8c:95:ea: 37:18:fa:af:51:a3:5e:ff:c8:af:cb:6a:40:e8:a8: e1:b4:8e:fd:41:d3:be:4f:3a:c5:88:12:2d:db:8b: f1:bb:58:c7:bc:3b:df:ba:59:5d:aa:a8:eb:86:9e: 1a:8e:4f:52:2c:0f:d9:0e:d0:49:98:22:6c:87:13: 61:f6:54:9f:33:46:66:21:f5:e4:3d:2f:43:a9:86: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:35:61:87:F9:82:3D:7D:1B:5B:18:03:DC:D3:8B:88:A6:27:0F X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:07:eb:22:6f:fc:98:ea:4c:43:b5:ff:e2:ff:95:d7:56:82: 33:a9:85:2a:cb:08:fd:90:23:77:4c:be:45:d7:1a:bc:f5:fc: 48:33:a7:f0:e7:c3:0d:66:39:e7:0a:b3:53:f3:a2:fd:02:cc: b7:0c:bb:73:10:b7:61:ce:3d:55:65:f2:0a:eb:9d:a9:e6:1b: 2f:2c:ef:1c:ac:ca:aa:d7:d7:ed:6a:94:3a:35:25:55:26:c8: 37:32:7f:59:b2:e3:87:18:28:28:95:c7:a4:7e:a1:f5:3d:05: 0b:0e:c3:9a:40:92:65:f9:1c:b6:00:07:be:a5:ab:2f:62:81: f5:94:62:63:20:65:91:8f:83:56:f8:68:29:82:ad:c0:66:d5: 3a:45:34:6b:13:7a:04:82:9e:e1:78:a5:98:39:20:f8:e2:99: 01:8f:66:9d:07:e2:f6:13:2e:7b:fc:d1:70:d5:85:9d:78:61: 6c:42:fc:c4:1f:15:94:db:2b:68:10:2f:1c:34:2a:6e:94:6b: 31:e5:1a:c5:bd:ca:d3:b9:bc:57:fa:66:28:48:05:1f:6d:17: e7:a1:99:87:bf:d8:20:89:70:a8:3a:17:3d:a8:db:b3:5d:60: 54:96:fc:f1:c6:43:fd:9d:66:e2:34:d3:31:37:a8:5d:6d:10: d5:ec:d1:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJu4afSiB+aaDQfLPE2vR8A4qiNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjExMDQwNTU1NDZaFw0yNjExMDUwOTQwNDZaMDMxMTAvBgNV BAMTKEZFOEUzNTYxODdGOTgyM0Q3RDFCNUIxODAzRENEMzhCODhBNjI3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3omBoshdSgi4DynfnmrjXTHF VOkk3H827G7vj8ipI41AW0bSFkz7AQjp0/C4uaQWO9PIuqnj+JuIc4yvlIaiKM72 8Cxl3W2JwWykGL1H8li6r4RUM1yiYBEry32lYkVSXg6Zsgl2ll8uvWjf4ETOImcS 4H6X1JuLzeZmmOp1hq/1PNqlA816ucJsWhjzORI9kuAOcPpgvHvkTIqg1VHdBdQH e8V2KLymuzRM3xutKIyV6jcY+q9Ro17/yK/LakDoqOG0jv1B075POsWIEi3bi/G7 WMe8O9+6WV2qqOuGnhqOT1IsD9kO0EmYImyHE2H2VJ8zRmYh9eQ9L0OphjlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/o41YYf5gj19G1sYA9zTi4imJw8wHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAH6yJv/JjqTEO1/+L/lddWgjOphSrLCP2Q I3dMvkXXGrz1/Egzp/Dnww1mOecKs1Pzov0CzLcMu3MQt2HOPVVl8grrnanmGy8s 7xysyqrX1+1qlDo1JVUmyDcyf1my44cYKCiVx6R+ofU9BQsOw5pAkmX5HLYAB76l qy9igfWUYmMgZZGPg1b4aCmCrcBm1TpFNGsTegSCnuF4pZg5IPjimQGPZp0H4vYT Lnv80XDVhZ14YWxC/MQfFZTbK2gQLxw0Km6UazHlGsW9ytO5vFf6ZihIBR9tF+eh mYe/2CCJcKg6Fz2o27NdYFSW/PHGQ/2dZuI00zE3qF1tENXs0Sw= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:24 2026 by rpki-client