$ rpki-client -vvvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: ZvI4iutwk4t1kZwnt+5oqhuVNYc7obdbMy7cXepX9o0= Subject key identifier: 01:0F:0D:DA:5B:1B:88:F4:74:CC:62:24:F3:F1:76:14:B6:08:FF:92 Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 76AB343DF56345F426F0867840B231342F260879 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: DE Signing time: Thu 15 Oct 2026 10:48:08 +0000 Manifest this update: Thu 15 Oct 2026 10:43:08 +0000 Manifest next update: Fri 16 Oct 2026 11:20:08 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 2: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: Qqg3pXA11MLuMxrLL3KLg0yAPb4fTRkHMQyRNeGbi1Y=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ab:34:3d:f5:63:45:f4:26:f0:86:78:40:b2:31:34:2f:26:08:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Oct 15 10:43:08 2026 GMT Not After : Oct 16 11:20:08 2026 GMT Subject: CN=010F0DDA5B1B88F474CC6224F3F17614B608FF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:76:51:40:8d:48:32:77:8e:d0:0e:40:b5: e4:7f:24:75:94:c1:dd:30:9f:db:84:37:9a:02:88: 5d:1d:10:d9:b2:d6:08:82:a3:6d:cf:ca:37:a7:9d: c8:b9:bd:e3:db:e5:0c:3a:3f:a9:c6:c1:f6:ba:96: ee:93:96:f4:22:02:0e:0b:77:3d:78:fb:e5:76:2a: a0:b6:dc:2b:18:52:92:1c:27:a3:bf:72:4a:77:bb: 35:cc:99:0e:bb:6c:90:74:90:08:63:b2:af:33:df: 29:1a:81:1d:4a:1a:af:16:be:e8:f5:5b:28:e7:87: 0b:71:13:2f:02:b1:f1:dc:5c:08:4b:fc:4e:74:14: 74:3d:c0:35:b2:de:98:34:99:58:95:e4:47:7b:46: 94:5d:61:d7:07:de:d5:a3:30:ce:4b:b2:ad:e2:8d: cd:02:22:46:27:56:ef:cc:2d:33:f3:df:1f:80:c6: da:f4:52:6f:56:2b:62:98:38:a8:69:5d:6a:a6:fe: 97:da:dd:5b:3c:94:b9:0a:1f:8a:6b:da:33:38:37: a6:9c:73:1d:f9:d8:c2:2a:55:fe:a6:58:3e:d4:c6: 2d:9e:57:ae:6e:23:a1:98:5d:69:ac:0d:b5:5a:99: 53:fe:a7:f0:dd:b1:b8:37:8c:bc:4b:88:59:d3:f9: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0F:0D:DA:5B:1B:88:F4:74:CC:62:24:F3:F1:76:14:B6:08:FF:92 X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ea:b2:ce:78:cb:2e:f1:03:7b:62:9f:ea:1a:4f:47:2f:19: 58:66:2d:ee:a3:34:f4:07:f8:7b:32:e3:44:d8:ee:46:70:ed: 5a:9f:48:cf:6f:32:6d:4e:9b:65:a2:2f:e8:7a:10:20:f1:46: 0d:f6:24:d4:e8:ca:4a:4c:b6:bc:04:eb:b9:13:ab:8b:d1:e5: 02:94:57:ab:2d:ef:b4:99:3c:6c:95:92:cb:f6:23:17:dc:28: 11:71:59:2e:6c:ec:47:99:a0:13:87:53:2a:9f:92:0a:2b:e2: 2b:d6:4b:e0:cf:17:73:d7:72:5f:c5:50:65:1f:28:bb:d0:3c: 37:11:d0:4e:21:28:b6:4d:fa:71:ba:df:15:79:35:87:8b:47: d0:5e:d1:b2:f6:3a:6f:f6:22:ae:1f:ee:6f:80:3a:27:34:4a: 03:aa:ba:05:4b:36:d0:86:6c:70:dd:14:18:c6:78:8b:5d:51: 03:21:a9:8b:84:b5:9a:fd:3c:4d:14:df:ac:9d:d3:8a:02:11: a3:ef:e1:b6:b0:0c:a3:b5:d9:97:fa:f7:e6:50:3f:28:aa:05: 24:a4:92:de:c2:eb:11:35:31:a7:56:f8:21:2e:c2:88:51:c3: 7a:1d:fc:24:6b:75:7a:2d:55:45:f7:f2:43:b9:05:ba:d0:25: 73:93:f3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqs0PfVjRfQm8IZ4QLIxNC8mCHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjEwMTUxMDQzMDhaFw0yNjEwMTYxMTIwMDhaMDMxMTAvBgNV BAMTKDAxMEYwRERBNUIxQjg4RjQ3NENDNjIyNEYzRjE3NjE0QjYwOEZGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOHZRQI1IMneO0A5AteR/JHWU wd0wn9uEN5oCiF0dENmy1giCo23Pyjennci5vePb5Qw6P6nGwfa6lu6TlvQiAg4L dz14++V2KqC23CsYUpIcJ6O/ckp3uzXMmQ67bJB0kAhjsq8z3ykagR1KGq8Wvuj1 WyjnhwtxEy8CsfHcXAhL/E50FHQ9wDWy3pg0mViV5Ed7RpRdYdcH3tWjMM5Lsq3i jc0CIkYnVu/MLTPz3x+Axtr0Um9WK2KYOKhpXWqm/pfa3Vs8lLkKH4pr2jM4N6ac cx352MIqVf6mWD7Uxi2eV65uI6GYXWmsDbVamVP+p/Ddsbg3jLxLiFnT+cmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQ8N2lsbiPR0zGIk8/F2FLYI/5IwHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArqss54yy7xA3tin+oaT0cvGVhmLe6jNPQH +Hsy40TY7kZw7VqfSM9vMm1Om2WiL+h6ECDxRg32JNToykpMtrwE67kTq4vR5QKU V6st77SZPGyVksv2IxfcKBFxWS5s7EeZoBOHUyqfkgor4ivWS+DPF3PXcl/FUGUf KLvQPDcR0E4hKLZN+nG63xV5NYeLR9Be0bL2Om/2Iq4f7m+AOic0SgOqugVLNtCG bHDdFBjGeItdUQMhqYuEtZr9PE0U36yd04oCEaPv4bawDKO12Zf69+ZQPyiqBSSk kt7C6xE1MadW+CEuwohRw3od/CRrdXotVUX38kO5BbrQJXOT85Q= -----END CERTIFICATE-----Generated at Fri Oct 16 04:03:43 2026 by rpki-client