$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: KOCFHaHkzLqNktbenyjxMnPLUl/qnTqTc8Dbqs/RlMY= Subject key identifier: EB:4B:BA:68:C4:FE:6F:C9:9E:61:26:05:3D:FE:77:B7:A0:6A:36:49 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 7FE6D583CC8BA80B5DEC553A573B2A81CC75D4C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 02:10:04 +0000 Manifest this update: Sat 10 Oct 2026 02:05:04 +0000 Manifest next update: Sun 11 Oct 2026 02:12:04 +0000 Files and hashes: 1: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 3: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: qlqJrnwCTUTle3dojpWsU+13EZd/s3Rudq3jfFJIvQw=) 4: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) 5: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 02:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e6:d5:83:cc:8b:a8:0b:5d:ec:55:3a:57:3b:2a:81:cc:75:d4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Oct 10 02:05:04 2026 GMT Not After : Oct 11 02:12:04 2026 GMT Subject: CN=EB4BBA68C4FE6FC99E6126053DFE77B7A06A3649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:b9:bb:30:94:94:cd:48:b5:48:76:e5:eb: 32:82:28:3e:84:9f:17:b2:0f:09:2d:60:82:b2:72: 45:79:a3:4c:85:ec:48:70:bd:3a:fe:e7:24:8c:02: 52:ab:b1:45:a5:b7:82:92:a5:08:2f:f6:04:ed:a1: 22:fe:4f:01:ce:23:a0:bb:52:8c:22:0f:03:10:a3: 31:af:51:b0:40:4f:15:93:5d:bc:ac:50:8f:84:c4: 0b:28:72:b2:46:b1:ed:8b:ba:68:6c:bf:b5:c6:2b: 0d:c8:ae:81:28:d6:44:37:2c:5f:3b:40:70:da:5b: a1:c4:4f:7d:b4:07:a7:4e:d0:b9:20:8f:0c:d2:5a: f8:e4:5c:0e:e6:82:25:f8:78:90:ed:30:95:05:91: 86:55:d9:48:00:7b:75:e8:75:44:d0:9f:fd:2d:5a: 55:f0:b7:d7:8e:0e:f0:da:63:53:10:c4:5a:27:33: c5:85:7d:b9:09:63:db:72:ca:97:04:c3:2c:fe:ee: b9:82:a5:12:78:86:f4:bc:0d:e8:16:52:3e:4e:96: 75:30:9a:69:60:c4:1f:db:29:b7:da:74:e7:22:6b: d7:3b:73:80:0f:70:df:36:1e:fd:1b:f5:86:81:ad: cd:05:ca:55:92:c3:5e:e7:57:6d:d4:55:3d:16:7d: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4B:BA:68:C4:FE:6F:C9:9E:61:26:05:3D:FE:77:B7:A0:6A:36:49 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:22:d3:fc:34:34:59:07:be:6b:e7:08:27:2f:35:41:92:78: bf:dd:f1:04:7c:5b:6f:f2:f5:29:37:6e:32:1e:e9:99:54:54: 6c:c6:8d:2c:d1:36:54:1f:f8:d6:1a:4d:fe:77:20:e8:06:75: b9:17:5a:42:b0:c6:4b:61:24:b7:80:90:68:71:1d:b9:72:18: f9:9e:df:7e:7c:3d:2b:fc:67:65:68:65:21:05:e3:b4:d2:87: d7:39:66:cc:1f:9f:1c:34:9a:78:6d:2b:ce:ea:14:b4:b6:10: d3:1f:bd:b7:ca:67:0a:84:f1:06:e9:ab:06:7d:39:c6:0e:64: 0e:d5:26:f6:25:60:92:13:13:46:c2:37:64:52:d3:13:0f:52: 2a:68:97:32:e7:7c:69:ae:ce:ad:ba:63:ea:24:af:94:08:a3: cb:39:0f:36:c2:a4:e5:b1:4a:d9:39:1f:61:ca:7e:d9:3d:4c: 44:4d:ee:89:b3:35:db:db:32:0e:7f:6a:6e:03:49:0c:66:27: e2:31:c4:67:4c:e5:cd:45:83:5c:f8:68:b0:e5:5c:12:cb:6f: d3:83:39:ea:88:f2:44:55:1f:b7:83:8b:00:ab:4b:24:96:47: 34:d4:32:37:62:f4:93:87:28:ba:c6:8e:b2:ab:60:df:99:d0: e8:a5:b6:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+bVg8yLqAtd7FU6Vzsqgcx11MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjEwMTAwMjA1MDRaFw0yNjEwMTEwMjEyMDRaMDMxMTAvBgNV BAMTKEVCNEJCQTY4QzRGRTZGQzk5RTYxMjYwNTNERkU3N0I3QTA2QTM2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHbm7MJSUzUi1SHbl6zKCKD6E nxeyDwktYIKyckV5o0yF7EhwvTr+5ySMAlKrsUWlt4KSpQgv9gTtoSL+TwHOI6C7 UowiDwMQozGvUbBATxWTXbysUI+ExAsocrJGse2Lumhsv7XGKw3IroEo1kQ3LF87 QHDaW6HET320B6dO0LkgjwzSWvjkXA7mgiX4eJDtMJUFkYZV2UgAe3XodUTQn/0t WlXwt9eODvDaY1MQxFonM8WFfbkJY9tyypcEwyz+7rmCpRJ4hvS8DegWUj5OlnUw mmlgxB/bKbfadOcia9c7c4APcN82Hv0b9YaBrc0FylWSw17nV23UVT0WfUJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU60u6aMT+b8meYSYFPf53t6BqNkkwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAi0/w0NFkHvmvnCCcvNUGSeL/d8QR8W2/y 9Sk3bjIe6ZlUVGzGjSzRNlQf+NYaTf53IOgGdbkXWkKwxkthJLeAkGhxHblyGPme 3358PSv8Z2VoZSEF47TSh9c5Zswfnxw0mnhtK87qFLS2ENMfvbfKZwqE8QbpqwZ9 OcYOZA7VJvYlYJITE0bCN2RS0xMPUipolzLnfGmuzq26Y+okr5QIo8s5DzbCpOWx Stk5H2HKftk9TERN7omzNdvbMg5/am4DSQxmJ+IxxGdM5c1Fg1z4aLDlXBLLb9OD OeqI8kRVH7eDiwCrSySWRzTUMjdi9JOHKLrGjrKrYN+Z0OiltrY= -----END CERTIFICATE-----Generated at Sat Oct 10 16:22:56 2026 by rpki-client