$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: /KTVk5VdBXV65di11YyhajBdPDTm1JxWnFARY6+OeIo= Subject key identifier: DC:18:97:FE:74:27:C9:F0:7A:8A:70:B2:9E:F9:07:DA:F4:BE:E5:D8 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 4214B6ABD46965E29B3E3A6E2A2A161216C649D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: DB Signing time: Tue 13 Oct 2026 22:08:10 +0000 Manifest this update: Tue 13 Oct 2026 22:03:10 +0000 Manifest next update: Wed 14 Oct 2026 23:55:10 +0000 Files and hashes: 1: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: uVkL7SVgh2WsnRUFwN0TwV8pDrrA0+yvywrEByCD1O4=) 2: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 3: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 4: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 23:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:14:b6:ab:d4:69:65:e2:9b:3e:3a:6e:2a:2a:16:12:16:c6:49:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Oct 13 22:03:10 2026 GMT Not After : Oct 14 23:55:10 2026 GMT Subject: CN=DC1897FE7427C9F07A8A70B29EF907DAF4BEE5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:3d:df:f5:fa:a8:63:5f:8c:3f:42:79:c9: 5d:da:5d:45:64:ab:67:b0:25:dc:ad:93:0c:60:40: 93:8d:b0:2d:fe:74:21:62:ac:d9:e3:7c:68:25:56: c9:cf:d4:90:31:24:ba:c9:d3:ea:9d:ba:ce:dc:9a: 2d:c8:d4:e5:db:38:3f:d1:c1:20:c8:52:ea:6e:6a: d8:e7:e3:e4:29:2c:ab:80:3c:0c:14:f8:61:53:69: 86:81:26:30:14:71:ff:55:6a:7b:86:9b:d4:e0:8b: bb:22:82:5b:b5:c5:c8:96:c1:18:89:4f:10:5a:16: 95:09:d1:f4:ea:64:f5:67:d4:c1:42:2a:4b:9d:4c: b1:3e:c6:48:e0:5a:7a:5f:4e:02:5d:17:8c:13:34: 6b:db:07:85:a4:bc:6c:f1:c7:52:0a:33:d3:84:5c: 75:b8:e6:ab:79:cd:db:54:9b:ed:60:80:9e:d5:47: 9c:09:d6:89:87:b8:64:20:a9:7b:14:4d:65:91:74: 8c:2d:de:83:02:fd:d2:97:9e:8f:7e:27:0e:4a:dd: be:15:bb:64:e0:13:92:ae:46:4a:18:94:f4:c1:d7: a7:7f:f0:13:6b:fa:55:4d:c8:f9:9b:2a:90:9c:a0: 1a:2b:e5:ef:a0:08:25:01:ab:66:2d:30:e7:18:71: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:97:FE:74:27:C9:F0:7A:8A:70:B2:9E:F9:07:DA:F4:BE:E5:D8 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f8:9e:f4:81:9e:48:73:b5:03:34:80:31:d6:29:f7:6f:3a: c1:08:79:98:29:b0:48:7e:65:ce:4b:9e:91:a5:ac:8a:4a:f8: 3e:68:24:75:36:a0:77:10:60:f2:f4:97:f7:bf:32:e4:44:a8: 32:15:e9:a4:74:aa:72:45:d3:17:b7:19:01:aa:ec:f3:98:a3: 13:d0:ac:00:1f:02:20:30:af:ba:b9:fc:12:77:f7:a7:27:31: a7:5f:04:a8:3e:1b:a1:1d:74:8e:db:82:73:cf:45:2b:1f:87: 52:83:ca:18:47:6d:11:96:23:1d:88:6c:25:e7:4e:ee:da:d8: d9:da:e9:46:ec:2d:cb:24:51:a0:c0:84:46:44:af:0c:a5:8b: eb:82:65:c1:14:6e:8c:43:34:77:d9:fe:dc:c7:9d:f9:f6:91: d5:54:96:e2:79:ed:c8:49:e9:2f:1e:3b:ce:b9:11:c2:71:61: 52:0e:c9:38:88:02:39:ca:5c:aa:84:28:22:3a:a8:f1:1b:6b: 65:57:59:5a:c6:3b:b6:82:95:3c:d8:6f:14:73:77:f0:6a:1f: 34:e0:53:1a:20:66:9b:9c:d8:ad:c1:97:df:84:c2:e6:af:e0: b2:29:f1:f9:4b:50:b3:f4:95:aa:23:b4:18:55:b3:14:bc:ac: f0:b2:8d:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhS2q9RpZeKbPjpuKioWEhbGSdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjEwMTMyMjAzMTBaFw0yNjEwMTQyMzU1MTBaMDMxMTAvBgNV BAMTKERDMTg5N0ZFNzQyN0M5RjA3QThBNzBCMjlFRjkwN0RBRjRCRUU1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVT3f9fqoY1+MP0J5yV3aXUVk q2ewJdytkwxgQJONsC3+dCFirNnjfGglVsnP1JAxJLrJ0+qdus7cmi3I1OXbOD/R wSDIUupuatjn4+QpLKuAPAwU+GFTaYaBJjAUcf9VanuGm9Tgi7siglu1xciWwRiJ TxBaFpUJ0fTqZPVn1MFCKkudTLE+xkjgWnpfTgJdF4wTNGvbB4WkvGzxx1IKM9OE XHW45qt5zdtUm+1ggJ7VR5wJ1omHuGQgqXsUTWWRdIwt3oMC/dKXno9+Jw5K3b4V u2TgE5KuRkoYlPTB16d/8BNr+lVNyPmbKpCcoBor5e+gCCUBq2YtMOcYcTZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3BiX/nQnyfB6inCynvkH2vS+5dgwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL4nvSBnkhztQM0gDHWKfdvOsEIeZgpsEh+ Zc5LnpGlrIpK+D5oJHU2oHcQYPL0l/e/MuREqDIV6aR0qnJF0xe3GQGq7POYoxPQ rAAfAiAwr7q5/BJ396cnMadfBKg+G6EddI7bgnPPRSsfh1KDyhhHbRGWIx2IbCXn Tu7a2Nna6UbsLcskUaDAhEZErwyli+uCZcEUboxDNHfZ/tzHnfn2kdVUluJ57chJ 6S8eO865EcJxYVIOyTiIAjnKXKqEKCI6qPEba2VXWVrGO7aClTzYbxRzd/BqHzTg UxogZpuc2K3Bl9+Ewuav4LIp8flLULP0laojtBhVsxS8rPCyjZ8= -----END CERTIFICATE-----Generated at Wed Oct 14 11:50:53 2026 by rpki-client