$ rpki-client -vvvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft File: F831F8D1B7EB333E836D19E2C6659AA968449902.mft (raw, json) Hash identifier: Q+wbCazqxkDwkUjya/NXmh6ap0MjNNYjZXy3EJ3bC7A= Subject key identifier: 2E:EE:A8:D4:5B:45:BD:83:BB:D1:D4:68:23:B3:05:55:AB:55:89:07 Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 Certificate issuer: /CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Certificate serial: 2963467FAA2F41A9E11D46C78E15C0FF7CB47B7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft Manifest number: ED Signing time: Tue 27 Oct 2026 09:26:55 +0000 Manifest this update: Tue 27 Oct 2026 09:21:55 +0000 Manifest next update: Wed 28 Oct 2026 09:45:55 +0000 Files and hashes: 1: F831F8D1B7EB333E836D19E2C6659AA968449902.crl (hash: KoNAhKps4p11iGQ8NO4/ML5RX+djZzz49IAC7eP5M6o=) 2: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: GC34bSdqb+lceUDxAMg1+4DTRXPlTsVXAo/W4xvhmFg=) 3: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: FptSR8q7lfMCgCSKLjWnM/OjVJhBqEdi2E49VH6LcSA=) 4: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: NUr5zEr4YzxkTQ8Y53f2vd4+rpGC5VIJU6v6ZJ3ymFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 09:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:63:46:7f:aa:2f:41:a9:e1:1d:46:c7:8e:15:c0:ff:7c:b4:7b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Validity Not Before: Oct 27 09:21:55 2026 GMT Not After : Oct 28 09:45:55 2026 GMT Subject: CN=2EEEA8D45B45BD83BBD1D46823B30555AB558907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:1d:2d:a1:bb:af:db:e6:b5:56:95:31:5c: 13:89:1f:02:7d:96:12:69:8b:58:fe:63:12:09:b4: 9a:4b:b5:58:ea:f9:6c:3e:1d:e8:cd:7f:0f:ef:e0: 10:75:0b:7d:3c:f3:85:fd:95:f5:4c:52:73:0c:40: fd:78:e3:56:17:e5:0f:a6:e0:2e:90:d0:0d:33:4c: e8:32:49:ae:f1:98:9c:c5:0f:60:ed:e6:27:b3:13: 61:16:73:5b:31:55:73:72:78:85:63:a3:65:11:57: c3:eb:4b:fd:ab:ea:70:30:ae:1d:20:07:cd:da:97: f8:a2:d7:25:92:ea:cf:eb:31:56:31:3a:b4:d4:90: 18:45:3c:98:28:c4:55:fb:67:ce:5e:d7:9a:2f:e2: 49:4d:8e:a7:47:3e:0d:92:32:2f:83:05:3a:8a:50: 8b:8c:98:de:55:c0:a7:23:59:cd:06:00:02:c9:8d: 69:cb:e4:bc:78:68:dd:d2:90:83:07:18:6d:fd:ee: 08:6a:f5:90:c3:7c:25:fa:9c:7c:6e:b3:2c:43:fc: cd:35:31:be:42:ba:ff:a5:6d:84:99:7b:24:78:88: 3b:15:7d:8b:57:2e:dd:fb:bd:2b:1d:c8:3c:e2:30: 5e:07:4a:69:50:b9:23:79:e0:86:b3:be:86:f5:90: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:A8:D4:5B:45:BD:83:BB:D1:D4:68:23:B3:05:55:AB:55:89:07 X509v3 Authority Key Identifier: keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:9d:ab:72:9b:2e:4e:bc:36:70:ea:21:06:78:7e:33:88: 8b:15:76:98:23:df:cb:ce:43:3a:f9:60:b3:2f:9c:76:74:98: dc:16:1f:fe:47:31:79:d1:5a:f2:ea:b5:16:1b:5a:d2:da:ce: b0:88:7c:25:66:1c:a8:1d:3b:49:03:b8:97:06:ea:da:86:9e: 9d:68:b4:6d:2c:e9:52:94:b4:ce:ad:5f:ff:4a:92:fd:20:16: 73:e4:f6:9e:fb:92:fe:f1:38:4a:3e:fc:fd:ec:f5:b2:3c:aa: f2:04:d8:13:99:d1:dd:77:c8:7f:2a:40:94:0b:d3:51:2d:d0: 4a:8c:a7:09:07:03:52:8b:dc:dd:65:ab:00:42:bb:52:1a:94: ed:dd:94:2a:68:07:25:58:a5:19:99:d8:6d:28:01:71:0f:3c: ad:37:82:44:0d:d6:d2:32:da:54:c7:b1:7e:68:31:53:37:74: d3:af:6c:c4:af:3d:88:98:37:1d:a8:94:57:ee:4c:01:1c:c0: b0:c0:29:0f:71:a1:04:73:94:23:a4:41:6c:6c:57:e4:4d:8d: d0:3c:cd:be:4a:a2:12:b1:e6:a4:a9:87:ea:bc:a9:2b:01:1b: e9:f7:21:79:a7:50:14:74:03:3a:b8:25:7e:13:a8:ab:8d:c4: c6:1d:93:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWNGf6ovQanhHUbHjhXA/3y0e34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2 ODQ0OTkwMjAeFw0yNjEwMjcwOTIxNTVaFw0yNjEwMjgwOTQ1NTVaMDMxMTAvBgNV BAMTKDJFRUVBOEQ0NUI0NUJEODNCQkQxRDQ2ODIzQjMwNTU1QUI1NTg5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6x0tobuv2+a1VpUxXBOJHwJ9 lhJpi1j+YxIJtJpLtVjq+Ww+HejNfw/v4BB1C30884X9lfVMUnMMQP1441YX5Q+m 4C6Q0A0zTOgySa7xmJzFD2Dt5iezE2EWc1sxVXNyeIVjo2URV8PrS/2r6nAwrh0g B83al/ii1yWS6s/rMVYxOrTUkBhFPJgoxFX7Z85e15ov4klNjqdHPg2SMi+DBTqK UIuMmN5VwKcjWc0GAALJjWnL5Lx4aN3SkIMHGG397ghq9ZDDfCX6nHxusyxD/M01 Mb5Cuv+lbYSZeyR4iDsVfYtXLt37vSsdyDziMF4HSmlQuSN54Iazvob1kB8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULu6o1FtFvYO70dRoI7MFVatViQcwHwYDVR0j BBgwFoAU+DH40bfrMz6DbRnixmWaqWhEmQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQ0Y2I4ZDgtMTUwNS00NjgyLTlkZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFC N0VCMzMzRTgzNkQxOUUyQzY2NTlBQTk2ODQ0OTkwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODMxRjhEMUI3RUIzMzNFODM2RDE5RTJDNjY1OUFBOTY4NDQ5 OTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvRjgzMUY4RDFCN0VCMzMzRTgzNkQxOUUyQzY2NTlB QTk2ODQ0OTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+7natymy5OvDZw6iEGeH4ziIsVdpgj38vO Qzr5YLMvnHZ0mNwWH/5HMXnRWvLqtRYbWtLazrCIfCVmHKgdO0kDuJcG6tqGnp1o tG0s6VKUtM6tX/9Kkv0gFnPk9p77kv7xOEo+/P3s9bI8qvIE2BOZ0d13yH8qQJQL 01Et0EqMpwkHA1KL3N1lqwBCu1IalO3dlCpoByVYpRmZ2G0oAXEPPK03gkQN1tIy 2lTHsX5oMVM3dNOvbMSvPYiYNx2olFfuTAEcwLDAKQ9xoQRzlCOkQWxsV+RNjdA8 zb5KohKx5qSph+q8qSsBG+n3IXmnUBR0Azq4JX4TqKuNxMYdk3U= -----END CERTIFICATE-----Generated at Tue Oct 27 12:50:04 2026 by rpki-client