$ rpki-client -vvvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json) Hash identifier: oikWl0vrdZRcTCLFcqbrhTYYpr/MmnjgD9tqFFPd9RU= Subject key identifier: 86:A9:AC:9E:1C:B1:39:6E:EC:6C:CF:C5:E9:50:D1:FF:02:3F:CF:4B Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Certificate serial: 188ECA826B47106F8497323D73FD46FF9E9F38E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft Manifest number: EA Signing time: Sun 25 Oct 2026 02:06:41 +0000 Manifest this update: Sun 25 Oct 2026 02:01:41 +0000 Manifest next update: Mon 26 Oct 2026 04:00:41 +0000 Files and hashes: 1: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=) 2: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: 7sL651+r/7jPUfJdjWo7mw/YGQwzittb+JQu75USQmw=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8e:ca:82:6b:47:10:6f:84:97:32:3d:73:fd:46:ff:9e:9f:38:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Validity Not Before: Oct 25 02:01:41 2026 GMT Not After : Oct 26 04:00:41 2026 GMT Subject: CN=86A9AC9E1CB1396EEC6CCFC5E950D1FF023FCF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:5a:c7:96:50:05:e6:c0:0c:60:c5:c2:ec: 1f:b9:ab:a9:16:64:7d:ff:de:ae:9a:37:0a:9c:25: 32:18:f5:b7:30:7d:22:7b:74:4f:b3:fa:06:8d:3c: f3:f2:5b:ef:75:ad:a0:60:36:13:f1:e3:27:2b:e7: f7:2c:89:db:3f:d1:1d:88:22:4e:a3:31:40:02:15: 83:90:cd:62:76:06:b5:47:06:3e:b9:45:ac:be:76: 3c:e0:be:8c:1c:4b:f7:fe:29:7f:11:0d:55:f0:40: d0:49:be:f6:5a:17:14:a3:52:35:0a:fc:7f:3c:09: dc:5d:68:ea:43:47:73:0d:84:16:a2:4d:2f:16:ac: 9d:fa:d9:5b:7f:05:4c:17:24:fa:99:e9:12:db:d4: 3b:b4:19:c4:e8:51:3c:ae:4c:04:3d:37:c8:34:25: 55:dd:2e:c0:df:13:34:c4:d4:3f:08:d2:30:54:1d: dc:31:da:4c:b6:15:fb:45:f0:fb:d8:19:95:6d:ff: d6:a1:16:81:40:05:e3:0a:44:22:90:ef:c2:ed:bc: 61:43:22:49:38:77:b6:3f:be:a7:d1:d9:57:9f:87: 0c:4f:73:ea:2c:4a:99:19:f3:83:e8:11:b9:d1:35: 25:1d:4f:d0:8e:a2:6a:4b:14:17:f5:7a:8a:d1:8c: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A9:AC:9E:1C:B1:39:6E:EC:6C:CF:C5:E9:50:D1:FF:02:3F:CF:4B X509v3 Authority Key Identifier: keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ba:c3:eb:56:3e:bd:b5:29:5d:04:0a:9a:d2:50:d6:20:5a: 56:65:49:6d:44:93:21:75:0e:ae:6d:60:ae:2e:1a:6f:dc:d3: 98:6c:b5:06:c8:f7:c4:48:5e:58:09:ad:c4:c7:2b:bc:50:a6: f2:2d:16:eb:e0:02:e0:dd:fc:3a:87:09:89:f5:f0:58:d0:bc: 14:ab:c1:ce:f3:b7:bd:c3:31:b4:c8:e0:01:ba:9d:b2:ee:c9: 58:84:b5:29:cf:1f:bc:95:23:73:dc:cd:a5:83:70:bd:98:7f: 9b:45:1a:b8:0b:82:d1:7d:dd:43:17:ad:00:94:7f:03:ab:94: 8e:7b:22:d2:9b:4f:3b:19:db:e9:e3:ea:83:1b:fd:56:0b:89: 0a:41:0d:d0:15:25:3f:37:a0:88:20:a7:54:ad:37:e8:6d:e5: c3:46:05:08:45:a6:7b:ad:c3:7c:26:2e:27:fe:af:d8:cd:d5: e5:3c:4f:16:c1:ab:ae:57:21:68:3e:29:d7:d9:1c:02:19:56: e9:65:30:3a:2e:5a:41:e3:4f:d9:f1:8b:81:d1:8e:c8:9d:80: fb:1c:b1:80:63:e1:90:b1:cb:2d:fd:92:5e:1d:84:05:21:f3: 60:33:93:50:06:8f:9b:26:83:f9:29:1f:35:35:06:40:99:60: 52:6c:01:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGI7KgmtHEG+ElzI9c/1G/56fOOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3 QTNDMUQ2NjAeFw0yNjEwMjUwMjAxNDFaFw0yNjEwMjYwNDAwNDFaMDMxMTAvBgNV BAMTKDg2QTlBQzlFMUNCMTM5NkVFQzZDQ0ZDNUU5NTBEMUZGMDIzRkNGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK71rHllAF5sAMYMXC7B+5q6kW ZH3/3q6aNwqcJTIY9bcwfSJ7dE+z+gaNPPPyW+91raBgNhPx4ycr5/csids/0R2I Ik6jMUACFYOQzWJ2BrVHBj65Ray+djzgvowcS/f+KX8RDVXwQNBJvvZaFxSjUjUK /H88CdxdaOpDR3MNhBaiTS8WrJ362Vt/BUwXJPqZ6RLb1Du0GcToUTyuTAQ9N8g0 JVXdLsDfEzTE1D8I0jBUHdwx2ky2FftF8PvYGZVt/9ahFoFABeMKRCKQ78LtvGFD Ikk4d7Y/vqfR2VefhwxPc+osSpkZ84PoEbnRNSUdT9COompLFBf1eorRjH/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqmsnhyxOW7sbM/F6VDR/wI/z0swHwYDVR0j BBgwFoAU8uGdtMniSR083kBj/vZuP3o8HWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFhNmE2N2QtY2JhMy00MjdiLTkwNTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRD OUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3QTNDMUQ2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkUxOURCNEM5RTI0OTFEM0NERTQwNjNGRUY2NkUzRjdBM0Mx RDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZF M0Y3QTNDMUQ2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG6w+tWPr21KV0ECprSUNYgWlZlSW1EkyF1 Dq5tYK4uGm/c05hstQbI98RIXlgJrcTHK7xQpvItFuvgAuDd/DqHCYn18FjQvBSr wc7zt73DMbTI4AG6nbLuyViEtSnPH7yVI3PczaWDcL2Yf5tFGrgLgtF93UMXrQCU fwOrlI57ItKbTzsZ2+nj6oMb/VYLiQpBDdAVJT83oIggp1StN+ht5cNGBQhFpnut w3wmLif+r9jN1eU8TxbBq65XIWg+KdfZHAIZVullMDouWkHjT9nxi4HRjsidgPsc sYBj4ZCxyy39kl4dhAUh82Azk1AGj5smg/kpHzU1BkCZYFJsAR0= -----END CERTIFICATE-----Generated at Sun Oct 25 08:59:03 2026 by rpki-client