$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: w2/XgdkkJOAgqPBio2sapDvP/Ke19v5EVI3gN8tXM4I= Subject key identifier: E0:69:D6:50:E7:F7:7C:74:EE:82:8C:35:C0:23:B5:74:99:5D:07:8E Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 0A5BFCABACBB913F373F9CC80F783F26FB876CF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 08:38:17 +0000 Manifest this update: Sun 01 Nov 2026 08:33:17 +0000 Manifest next update: Mon 02 Nov 2026 12:18:17 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 2: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 4: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: CRvkDEn3cC3T8iiBVPS67UnUrgayQybdY7jm7Eyvo8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 12:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5b:fc:ab:ac:bb:91:3f:37:3f:9c:c8:0f:78:3f:26:fb:87:6c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Nov 1 08:33:17 2026 GMT Not After : Nov 2 12:18:17 2026 GMT Subject: CN=E069D650E7F77C74EE828C35C023B574995D078E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:27:41:88:d0:32:d0:7a:8d:cb:b8:70:e7: d5:44:a5:40:f7:ba:73:0f:11:2e:f0:16:ff:3e:76: d5:03:ec:79:58:13:83:d5:ec:85:a4:0a:26:5d:73: 89:5b:a9:34:e0:24:a1:6b:88:0f:71:ad:4d:52:73: 90:ae:77:95:72:87:e1:12:17:e8:5c:25:78:2a:b2: ab:6f:82:e7:18:cf:1f:33:d2:a4:6d:6d:fb:82:00: 04:2a:17:c8:04:af:c8:68:9e:7d:f8:d6:53:58:08: e4:0b:84:49:5e:c1:29:41:53:b8:e1:90:e1:e7:52: 05:7c:db:73:99:d7:09:37:4d:11:e3:d3:72:45:ab: f8:41:92:b2:60:ff:3e:23:2e:59:23:02:33:ff:00: 20:52:79:d1:ab:a9:1a:b2:bf:80:6f:4a:c4:f4:97: 15:e0:a4:3b:99:bf:a4:08:04:1a:84:d4:8e:df:b3: aa:3e:fa:c5:41:2c:c9:48:9d:0a:75:18:2a:d6:50: be:cc:97:d3:bc:f2:1b:8a:a1:26:51:68:6e:e3:b8: 7c:39:e8:c9:f0:84:dc:7a:21:bb:ab:b8:b8:52:42: 27:df:13:57:a7:5a:b3:a8:df:66:35:87:cf:43:42: d7:e7:c9:b9:e1:c5:58:30:c7:54:31:5f:85:05:d2: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:D6:50:E7:F7:7C:74:EE:82:8C:35:C0:23:B5:74:99:5D:07:8E X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:18:e5:83:e8:24:7d:10:75:bd:cf:07:aa:8f:9d:8a:b4:8f: 26:eb:be:0b:12:9c:9a:02:b2:4f:52:7a:3e:98:aa:fe:b5:cc: c0:ff:67:4a:e5:c0:0e:43:b7:0a:61:e4:21:31:51:b4:df:1d: af:e4:34:af:dd:67:b5:a2:9b:27:9f:a4:aa:d9:67:9c:85:3b: 69:ae:82:a1:c4:e2:07:53:43:f7:48:26:05:68:cb:93:cb:f0: 64:26:31:44:5f:3d:a6:9f:85:3b:26:c2:1a:ed:18:e0:85:fb: f2:2d:3f:44:38:25:9d:21:14:46:7d:1d:35:00:28:3f:5e:98: dc:19:e5:0f:1c:ca:75:b8:d8:46:8f:d5:ad:5f:3e:aa:c3:7b: 70:f6:79:2a:b2:05:f7:cd:d2:c9:5e:0b:cb:86:f9:a9:cb:ff: cc:c5:5d:8f:c4:4a:d1:1d:94:78:10:40:d2:72:6e:0b:99:1f: 78:0d:0f:a2:88:9b:9c:f3:29:10:44:67:ae:4f:1e:a7:34:89: 9d:1b:aa:f4:34:73:d3:1c:06:43:b2:92:39:1c:d8:59:71:90: a1:0d:55:42:b6:ff:21:2e:48:92:58:28:f4:b1:6c:1b:df:2f: d8:04:1b:86:3b:59:dd:78:ea:f0:00:4c:cb:0e:5b:25:5b:32: 46:87:d8:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClv8q6y7kT83P5zID3g/JvuHbPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjExMDEwODMzMTdaFw0yNjExMDIxMjE4MTdaMDMxMTAvBgNV BAMTKEUwNjlENjUwRTdGNzdDNzRFRTgyOEMzNUMwMjNCNTc0OTk1RDA3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9idBiNAy0HqNy7hw59VEpUD3 unMPES7wFv8+dtUD7HlYE4PV7IWkCiZdc4lbqTTgJKFriA9xrU1Sc5Cud5Vyh+ES F+hcJXgqsqtvgucYzx8z0qRtbfuCAAQqF8gEr8honn341lNYCOQLhElewSlBU7jh kOHnUgV823OZ1wk3TRHj03JFq/hBkrJg/z4jLlkjAjP/ACBSedGrqRqyv4BvSsT0 lxXgpDuZv6QIBBqE1I7fs6o++sVBLMlInQp1GCrWUL7Ml9O88huKoSZRaG7juHw5 6MnwhNx6IburuLhSQiffE1enWrOo32Y1h89DQtfnybnhxVgwx1QxX4UF0pcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4GnWUOf3fHTugow1wCO1dJldB44wHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYY5YPoJH0Qdb3PB6qPnYq0jybrvgsSnJoC sk9Sej6Yqv61zMD/Z0rlwA5Dtwph5CExUbTfHa/kNK/dZ7WimyefpKrZZ5yFO2mu gqHE4gdTQ/dIJgVoy5PL8GQmMURfPaafhTsmwhrtGOCF+/ItP0Q4JZ0hFEZ9HTUA KD9emNwZ5Q8cynW42EaP1a1fPqrDe3D2eSqyBffN0sleC8uG+anL/8zFXY/EStEd lHgQQNJybguZH3gND6KIm5zzKRBEZ65PHqc0iZ0bqvQ0c9McBkOykjkc2FlxkKEN VUK2/yEuSJJYKPSxbBvfL9gEG4Y7Wd146vAATMsOWyVbMkaH2M4= -----END CERTIFICATE-----Generated at Sun Nov 1 22:21:17 2026 by rpki-client