$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: BpaHt82edeUa5yxRTw1RBfEYFXWdrX0Gq+hHMSTf/Ss= Subject key identifier: 0D:CE:5F:58:FB:87:8C:92:F6:8E:36:8C:F6:AF:C4:EA:FA:63:77:7F Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 2A35506A2A94A5461DB3BE01246D4B2B96B396E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 04:23:02 +0000 Manifest this update: Mon 02 Nov 2026 04:18:02 +0000 Manifest next update: Tue 03 Nov 2026 08:14:02 +0000 Files and hashes: 1: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: OpxB1T6ShnZIVnvuVI83cPM9Qc2aTTdC8wo/EarWUlQ=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 3: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:35:50:6a:2a:94:a5:46:1d:b3:be:01:24:6d:4b:2b:96:b3:96:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Nov 2 04:18:02 2026 GMT Not After : Nov 3 08:14:02 2026 GMT Subject: CN=0DCE5F58FB878C92F68E368CF6AFC4EAFA63777F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:59:b4:91:3e:04:98:96:c3:0b:2f:78:fc: ff:47:f8:44:b5:b6:be:a0:1f:53:26:f2:0e:5e:f4: b6:c8:d7:b8:af:f1:33:29:6a:88:58:29:2a:9a:dd: d5:e3:44:a9:6d:eb:5b:9b:db:07:df:29:03:b9:93: 66:81:8d:78:22:98:52:a5:df:eb:08:3f:15:ae:83: 38:53:60:43:36:fd:6c:14:98:78:e3:f2:02:e4:0f: e0:e6:02:87:22:d6:50:90:1b:9b:dd:44:c4:10:7e: 8c:a3:13:24:ac:b4:d5:b6:27:2d:a0:f9:a7:10:df: 9d:a6:3f:55:34:45:9b:b7:39:76:9f:47:22:a8:89: c8:ac:a6:85:b9:3d:43:35:c9:b5:ca:49:5f:29:2e: 5a:1a:25:87:ed:ff:c1:58:12:c5:6e:b9:7b:b0:c7: d7:fb:30:d2:43:86:3b:bd:f8:d7:d0:e1:d9:94:9b: 48:21:82:70:de:91:e5:1e:37:c4:02:a9:fb:37:17: 17:86:d2:70:76:8a:f9:1c:5d:f3:3f:3d:30:71:59: df:17:ce:9f:51:3c:ba:e4:11:45:11:63:9a:4b:f5: ad:63:32:8d:f2:4a:ba:44:76:b7:f3:89:bf:62:bb: 09:bf:bc:a0:0a:8f:75:f9:06:1d:24:7f:38:97:9c: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:5F:58:FB:87:8C:92:F6:8E:36:8C:F6:AF:C4:EA:FA:63:77:7F X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2e:c3:8d:f2:82:23:17:3a:f0:bd:6d:89:64:15:79:42:d7: 1e:b2:21:3b:bf:c3:16:4b:5a:a0:eb:c8:d9:f0:14:24:89:17: 14:7f:b7:95:35:52:cf:06:eb:66:cb:c1:3a:ce:79:41:4c:d6: 63:bf:5c:a6:5d:c7:d9:78:f6:61:df:97:7d:b2:61:14:c5:cc: ec:5b:dd:9e:45:67:c0:9d:1c:c4:3e:78:b2:5f:21:6a:1d:91: 85:b8:be:be:56:d1:15:b1:b5:10:98:0d:19:f0:c5:0d:41:a7: de:7b:21:7b:44:50:5b:f6:be:0d:bf:c5:df:0d:cc:96:cc:cd: 69:3c:cc:1f:2e:12:39:d0:29:f5:b5:8c:b8:3b:79:89:af:c8: 74:27:eb:55:04:d6:9d:cd:6b:fe:44:30:3d:0b:79:79:5d:df: 58:5f:de:29:ea:b7:35:27:f4:31:1e:c3:60:38:9c:8e:e1:e0: 51:07:ee:03:41:5f:cf:09:a1:db:83:fd:14:80:c8:0a:c0:21: 97:15:8e:6c:25:f4:da:91:4a:ee:ad:b0:e2:99:10:b3:8c:3a: 98:80:6d:e8:b0:c8:63:05:56:ad:a3:de:ac:dd:26:00:92:c4: 69:51:64:c8:89:73:19:0b:38:97:64:f7:27:9f:05:55:73:bf: e0:5f:36:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjVQaiqUpUYds74BJG1LK5azluUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjExMDIwNDE4MDJaFw0yNjExMDMwODE0MDJaMDMxMTAvBgNV BAMTKDBEQ0U1RjU4RkI4NzhDOTJGNjhFMzY4Q0Y2QUZDNEVBRkE2Mzc3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7lm0kT4EmJbDCy94/P9H+ES1 tr6gH1Mm8g5e9LbI17iv8TMpaohYKSqa3dXjRKlt61ub2wffKQO5k2aBjXgimFKl 3+sIPxWugzhTYEM2/WwUmHjj8gLkD+DmAoci1lCQG5vdRMQQfoyjEySstNW2Jy2g +acQ352mP1U0RZu3OXafRyKoicispoW5PUM1ybXKSV8pLloaJYft/8FYEsVuuXuw x9f7MNJDhju9+NfQ4dmUm0ghgnDekeUeN8QCqfs3FxeG0nB2ivkcXfM/PTBxWd8X zp9RPLrkEUURY5pL9a1jMo3ySrpEdrfzib9iuwm/vKAKj3X5Bh0kfziXnHaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDc5fWPuHjJL2jjaM9q/E6vpjd38wHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwuw43ygiMXOvC9bYlkFXlC1x6yITu/wxZL WqDryNnwFCSJFxR/t5U1Us8G62bLwTrOeUFM1mO/XKZdx9l49mHfl32yYRTFzOxb 3Z5FZ8CdHMQ+eLJfIWodkYW4vr5W0RWxtRCYDRnwxQ1Bp957IXtEUFv2vg2/xd8N zJbMzWk8zB8uEjnQKfW1jLg7eYmvyHQn61UE1p3Na/5EMD0LeXld31hf3inqtzUn 9DEew2A4nI7h4FEH7gNBX88JoduD/RSAyArAIZcVjmwl9NqRSu6tsOKZELOMOpiA beiwyGMFVq2j3qzdJgCSxGlRZMiJcxkLOJdk9yefBVVzv+BfNp0= -----END CERTIFICATE-----Generated at Mon Nov 2 20:55:11 2026 by rpki-client