$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json) Hash identifier: yaXHKCuwnFx3JOFfxoUnb00Jl/eVcEL8KOM7qSRwCBs= Subject key identifier: 59:A8:32:FE:89:08:9B:6F:36:15:E2:D2:C6:C3:F1:FC:C7:26:04:0C Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Certificate serial: 3F75407CCDAA68C74709175711489BC7E1CA00C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft Manifest number: EB Signing time: Sat 24 Oct 2026 19:28:28 +0000 Manifest this update: Sat 24 Oct 2026 19:23:28 +0000 Manifest next update: Sun 25 Oct 2026 20:10:28 +0000 Files and hashes: 1: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=) 2: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=) 3: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=) 4: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: S6Qx77hEf8c5lFBl+DSQjQbnw0y8Ak6e5Ssvbe5xOyk=) 5: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=) 6: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:75:40:7c:cd:aa:68:c7:47:09:17:57:11:48:9b:c7:e1:ca:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Validity Not Before: Oct 24 19:23:28 2026 GMT Not After : Oct 25 20:10:28 2026 GMT Subject: CN=59A832FE89089B6F3615E2D2C6C3F1FCC726040C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:8b:db:d1:c3:8e:e4:16:41:07:36:60:c5: ab:50:d8:98:64:8f:99:0c:3e:6a:d1:2f:86:77:2e: 2d:50:37:fa:c5:5a:d2:74:e1:11:62:9d:77:20:48: 6e:02:34:17:df:73:88:bc:8f:8b:a7:c8:1f:20:71: 3f:0f:d4:69:4a:2b:fd:a6:68:e4:6b:ae:1e:4f:b2: c4:30:9c:94:52:1a:b5:61:1e:74:ea:71:a2:27:17: 91:7d:94:da:02:a6:8d:5e:dc:76:c4:52:cc:93:5b: 5b:2a:fe:e9:a8:16:23:f3:c6:f5:9e:46:e5:69:ce: 2d:52:f8:47:ce:52:ae:c6:6f:3d:74:9d:92:55:c3: be:b2:61:5b:a7:6f:fe:1f:f6:29:be:0e:ba:36:8b: 28:0b:30:39:71:a0:6e:ab:d9:18:9c:e9:d0:e7:b4: 2e:58:ce:54:67:50:48:37:19:d2:45:77:a3:7c:76: 03:40:ae:e1:d9:06:ab:d9:47:89:92:a8:c5:ea:83: e6:3a:2e:fc:e7:63:f0:10:31:9e:9b:f5:53:eb:2b: 34:e2:82:40:85:bd:f0:78:fe:56:33:85:00:7c:07: da:64:0c:e6:1a:b2:95:5f:78:15:d6:e7:9f:d1:a6: cd:dd:95:3d:ce:02:59:93:00:05:29:d2:50:3d:aa: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:32:FE:89:08:9B:6F:36:15:E2:D2:C6:C3:F1:FC:C7:26:04:0C X509v3 Authority Key Identifier: keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:30:b7:a4:b4:99:af:b3:b7:e2:56:2a:e1:cc:03:cb:ef:06: 59:09:db:99:8e:d7:e0:9f:93:4f:b6:57:9e:ff:32:03:ea:a2: 4d:a2:5b:93:75:43:05:14:4a:46:96:72:c4:66:f8:60:a6:cf: 77:01:40:2e:a5:20:2d:2a:cf:65:80:08:fb:4a:7f:74:71:96: 5f:07:64:c4:e6:46:a2:09:f1:e2:2f:43:8e:7d:e9:b0:34:3e: d5:8b:0a:3d:77:0c:f3:18:83:3b:72:63:0b:49:d4:74:e1:5e: 45:3e:a3:1a:e2:2f:61:59:c0:62:43:bc:57:3d:39:ac:13:0b: 60:86:a0:80:1d:85:f3:25:e9:ae:7d:4a:0b:80:69:cf:52:ea: 73:f8:9a:b6:80:3a:09:1f:1f:2d:eb:1c:e5:8a:18:6a:28:08: 49:6b:9f:b7:c5:fa:f8:ed:fb:10:ad:97:aa:1a:b7:42:77:36: c2:fd:ae:5a:a4:43:51:63:f9:47:d3:7e:06:b9:a0:5d:c3:79: ba:eb:c3:3e:e3:ee:58:3d:ee:f9:40:f4:ee:58:1f:65:1f:5d: 7e:a3:69:91:27:de:d7:30:0e:68:38:79:46:2e:63:ab:ce:98: 1c:45:e3:cb:2e:8d:53:60:84:f5:48:8b:23:16:a5:51:28:e4: 49:5a:98:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3VAfM2qaMdHCRdXEUibx+HKAMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNEQTJE QkE4MTI1QzAeFw0yNjEwMjQxOTIzMjhaFw0yNjEwMjUyMDEwMjhaMDMxMTAvBgNV BAMTKDU5QTgzMkZFODkwODlCNkYzNjE1RTJEMkM2QzNGMUZDQzcyNjA0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWYvb0cOO5BZBBzZgxatQ2Jhk j5kMPmrRL4Z3Li1QN/rFWtJ04RFinXcgSG4CNBffc4i8j4unyB8gcT8P1GlKK/2m aORrrh5PssQwnJRSGrVhHnTqcaInF5F9lNoCpo1e3HbEUsyTW1sq/umoFiPzxvWe RuVpzi1S+EfOUq7Gbz10nZJVw76yYVunb/4f9im+Dro2iygLMDlxoG6r2Ric6dDn tC5YzlRnUEg3GdJFd6N8dgNAruHZBqvZR4mSqMXqg+Y6LvznY/AQMZ6b9VPrKzTi gkCFvfB4/lYzhQB8B9pkDOYaspVfeBXW55/Rps3dlT3OAlmTAAUp0lA9qpi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWagy/okIm282FeLSxsPx/McmBAwwHwYDVR0j BBgwFoAU/uVwo/x48fGOhYrtqFM9otuoElwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJhZjgzNTItY2Q2NS00ZGI3LWIwY2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNG Qzc4RjFGMThFODU4QUVEQTg1MzNEQTJEQkE4MTI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUU1NzBBM0ZDNzhGMUYxOEU4NThBRURBODUzM0RBMkRCQTgx MjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNE QTJEQkE4MTI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8wt6S0ma+zt+JWKuHMA8vvBlkJ25mO1+Cf k0+2V57/MgPqok2iW5N1QwUUSkaWcsRm+GCmz3cBQC6lIC0qz2WACPtKf3Rxll8H ZMTmRqIJ8eIvQ4596bA0PtWLCj13DPMYgztyYwtJ1HThXkU+oxriL2FZwGJDvFc9 OawTC2CGoIAdhfMl6a59SguAac9S6nP4mraAOgkfHy3rHOWKGGooCElrn7fF+vjt +xCtl6oat0J3NsL9rlqkQ1Fj+UfTfga5oF3Debrrwz7j7lg97vlA9O5YH2UfXX6j aZEn3tcwDmg4eUYuY6vOmBxF48sujVNghPVIiyMWpVEo5ElamDw= -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:44 2026 by rpki-client