$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft File: 0FA563F934776139827AEC94F0EABC66549ABEA7.mft (raw, json) Hash identifier: vci4GlGdjFeKOKNxxDTAjLO15hl4bJJLI4x0lmxl6eo= Subject key identifier: 7F:0A:85:E2:2B:F0:D7:80:51:F1:EC:7A:BC:80:01:D3:19:B1:C7:CA Authority key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 Certificate issuer: /CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Certificate serial: 671A97513D6350D9C527FD23A4EDB4DD59A2E486 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft Manifest number: EF Signing time: Mon 26 Oct 2026 17:42:36 +0000 Manifest this update: Mon 26 Oct 2026 17:37:36 +0000 Manifest next update: Tue 27 Oct 2026 18:14:36 +0000 Files and hashes: 1: 0FA563F934776139827AEC94F0EABC66549ABEA7.crl (hash: J1tj+0YEkMDmrAnBSNaUx4iKoq5X9k+mB7ZvAXMQ218=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1a:97:51:3d:63:50:d9:c5:27:fd:23:a4:ed:b4:dd:59:a2:e4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Validity Not Before: Oct 26 17:37:36 2026 GMT Not After : Oct 27 18:14:36 2026 GMT Subject: CN=7F0A85E22BF0D78051F1EC7ABC8001D319B1C7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:ca:ec:f4:83:59:80:ec:c0:0b:49:41:12: d9:fe:8f:81:cf:73:1a:f3:f7:c7:28:bb:aa:cb:87: 7a:c4:d3:36:cc:bf:08:2c:e3:6e:d0:b9:64:8e:31: d9:dc:22:35:88:4e:f5:2d:40:7e:ee:69:9c:cf:b1: 10:50:f2:90:38:e6:be:9e:c1:02:77:41:43:6d:40: 97:ed:03:73:01:62:ef:e7:46:7e:57:d4:02:2b:97: 22:45:d5:48:a1:dc:80:4e:51:15:45:9d:94:e4:b4: df:85:14:34:6e:02:b7:d8:02:3d:59:3e:e9:b8:fc: 85:0b:4b:90:aa:fc:a0:3c:b8:16:b7:6f:9d:89:48: 74:75:47:e8:04:88:f9:7b:44:fd:78:65:38:fb:98: 92:4f:2b:c1:84:02:03:c5:64:b2:35:4e:56:b0:ad: 25:1f:98:f5:24:f7:28:5a:79:c0:7e:d0:15:63:14: bf:e0:d6:a6:11:af:54:ee:f4:bf:d6:15:eb:f4:a1: 7d:bd:55:f7:c4:de:00:71:cb:d8:d1:9f:e6:f3:73: cf:cc:75:91:3b:17:74:a8:be:0b:bd:b9:20:ac:98: 93:0a:e3:5f:e7:55:ab:91:1f:a1:9e:1c:cd:13:d3: 06:ce:23:7a:4d:6d:6e:8a:94:76:ca:10:83:eb:94: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:85:E2:2B:F0:D7:80:51:F1:EC:7A:BC:80:01:D3:19:B1:C7:CA X509v3 Authority Key Identifier: keyid:0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:99:4e:2f:70:62:82:49:2c:9c:6a:5f:ef:ff:96:6c:21:9a: 15:cf:f4:ce:49:34:96:56:23:1f:68:54:8d:ff:a5:7e:28:7d: df:19:33:cc:ab:4f:f3:3b:0d:cb:78:0c:1c:ea:3e:a8:b4:f6: 24:e1:71:df:8f:85:70:e1:00:25:75:a0:78:d3:1b:92:84:9b: 59:32:0a:12:ef:b6:3c:36:2a:97:fc:cb:f3:e2:92:d7:67:7b: 57:a0:a0:03:38:13:f2:81:16:8f:ea:a8:e9:29:64:bb:f2:70: 5d:82:27:a1:95:0c:e4:90:87:11:f8:37:6d:50:b6:66:37:1d: 3f:92:2a:d1:4e:94:5e:a5:21:b6:d6:75:78:e1:ab:5f:56:74: ca:db:fe:55:60:41:c0:90:e1:97:6d:75:bb:58:7c:03:d9:1c: ba:5c:3b:3d:cc:8a:03:95:61:f2:1d:6c:16:69:a6:32:6e:60: 16:82:34:98:38:82:1d:0c:6f:e5:d2:f0:21:dc:04:ba:51:d1: db:9d:19:6a:2e:f7:e6:3e:b6:82:bd:1a:69:2a:f7:2e:90:cc: 29:0b:69:26:27:e6:03:8b:16:64:14:41:19:ce:ce:af:9f:71: 64:b5:6e:84:e9:5a:75:6a:5a:73:e4:92:3f:d5:6b:90:16:53: f2:58:d6:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxqXUT1jUNnFJ/0jpO203Vmi5IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1 NDlBQkVBNzAeFw0yNjEwMjYxNzM3MzZaFw0yNjEwMjcxODE0MzZaMDMxMTAvBgNV BAMTKDdGMEE4NUUyMkJGMEQ3ODA1MUYxRUM3QUJDODAwMUQzMTlCMUM3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9y8rs9INZgOzAC0lBEtn+j4HP cxrz98cou6rLh3rE0zbMvwgs427QuWSOMdncIjWITvUtQH7uaZzPsRBQ8pA45r6e wQJ3QUNtQJftA3MBYu/nRn5X1AIrlyJF1Uih3IBOURVFnZTktN+FFDRuArfYAj1Z Pum4/IULS5Cq/KA8uBa3b52JSHR1R+gEiPl7RP14ZTj7mJJPK8GEAgPFZLI1Tlaw rSUfmPUk9yhaecB+0BVjFL/g1qYRr1Tu9L/WFev0oX29VffE3gBxy9jRn+bzc8/M dZE7F3Sovgu9uSCsmJMK41/nVauRH6GeHM0T0wbOI3pNbW6KlHbKEIPrlESFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwqF4ivw14BR8ex6vIAB0xmxx8owHwYDVR0j BBgwFoAUD6Vj+TR3YTmCeuyU8Oq8ZlSavqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJiNDNlYzgtZjU4Mi00MDI1LThmMzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkz NDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1NDlBQkVBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkE1NjNGOTM0Nzc2MTM5ODI3QUVDOTRGMEVBQkM2NjU0OUFC RUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJD NjY1NDlBQkVBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSZTi9wYoJJLJxqX+//lmwhmhXP9M5JNJZW Ix9oVI3/pX4ofd8ZM8yrT/M7Dct4DBzqPqi09iThcd+PhXDhACV1oHjTG5KEm1ky ChLvtjw2Kpf8y/Piktdne1egoAM4E/KBFo/qqOkpZLvycF2CJ6GVDOSQhxH4N21Q tmY3HT+SKtFOlF6lIbbWdXjhq19WdMrb/lVgQcCQ4ZdtdbtYfAPZHLpcOz3MigOV YfIdbBZppjJuYBaCNJg4gh0Mb+XS8CHcBLpR0dudGWou9+Y+toK9Gmkq9y6QzCkL aSYn5gOLFmQUQRnOzq+fcWS1boTpWnVqWnPkkj/Va5AWU/JY1rc= -----END CERTIFICATE-----Generated at Mon Oct 26 21:02:14 2026 by rpki-client