$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json) Hash identifier: GKpVsqXtd1OJHtlZ/GL8gPbYVLcNDb1eAxejORt8C0c= Subject key identifier: 77:19:9F:B6:C7:F2:F3:61:A5:D7:72:D2:79:A3:41:9C:25:41:A1:1B Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Certificate serial: 269C1BB541D57AEB64B90F27C58EBA66CCF8914A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 09:20:48 +0000 Manifest this update: Sun 15 Nov 2026 09:15:48 +0000 Manifest next update: Mon 16 Nov 2026 10:26:48 +0000 Files and hashes: 1: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: FRuK1jhyOad+r6ElLbvm69QTDNqIi1rj+6HrBCIAcjU=) 2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:1b:b5:41:d5:7a:eb:64:b9:0f:27:c5:8e:ba:66:cc:f8:91:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Validity Not Before: Nov 15 09:15:48 2026 GMT Not After : Nov 16 10:26:48 2026 GMT Subject: CN=77199FB6C7F2F361A5D772D279A3419C2541A11B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:8a:c1:9a:04:fa:60:ac:9b:3e:37:3e:e3: db:85:2f:25:49:6b:ee:77:b0:b2:0b:bd:90:6f:d7: 9e:75:64:dd:a1:ff:ed:86:0f:85:ae:b0:d3:e1:e2: 3e:7f:77:7d:bf:db:40:88:1d:24:cd:7f:38:dd:4e: dc:02:57:55:68:de:fe:e3:d1:42:a3:72:56:73:e0: 32:87:c6:9d:72:84:d9:02:17:6d:d3:6c:cb:67:cc: 7e:f2:71:bc:cb:47:35:b6:bb:e8:3e:2f:2c:b3:ff: 67:bd:92:df:9d:b9:e8:2c:93:7d:12:bd:a8:5d:6d: 9d:b5:0a:e3:be:6e:f2:5a:c7:78:df:7e:bc:2f:f8: 59:29:a4:13:6c:23:a3:0c:d6:2d:18:aa:66:83:27: 0e:9a:90:98:c8:46:de:25:9c:50:a1:04:b7:1c:1f: 45:9a:51:17:2e:df:06:0e:83:81:07:bc:4c:b2:66: db:3d:7a:0a:8a:17:8b:ad:35:82:d8:f2:83:2a:64: 28:5e:db:bb:3a:a9:83:38:ab:b1:14:c4:97:54:73: 45:34:a2:5b:07:ba:a2:bd:ab:13:75:dc:12:ef:8e: bc:56:72:07:b7:14:c3:d7:1a:e8:5a:06:a0:df:d6: 18:84:dc:3a:cb:0b:00:28:83:26:bc:5a:04:91:96: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:19:9F:B6:C7:F2:F3:61:A5:D7:72:D2:79:A3:41:9C:25:41:A1:1B X509v3 Authority Key Identifier: keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:83:9e:e5:db:ad:99:e3:5d:d4:9c:8e:f5:19:81:7f:37:2e: 03:3c:43:ae:e5:2e:59:b1:7c:8e:d1:49:15:1d:db:dc:39:e9: f5:f7:0a:cc:af:17:9e:30:08:2f:8e:0a:e2:a6:78:6e:d5:a3: b4:a8:14:93:be:92:d8:c8:bd:53:2e:8b:bc:40:42:a4:78:d5: 9c:60:68:49:9f:ad:36:3e:4d:19:73:7b:d9:8d:45:62:d1:5c: e2:3e:18:8b:71:53:4d:11:c8:16:7b:5d:21:bc:c3:a0:60:29: 2c:a3:9f:15:5f:34:a1:e4:2a:84:86:e4:e5:4b:2d:0b:25:0c: c0:21:4a:3b:7b:75:d1:66:da:53:a1:04:99:c5:bb:60:8c:60: a1:df:88:64:2a:74:04:47:a9:d6:3f:47:ca:41:33:0a:7d:36: 49:11:fa:da:96:d1:c4:c6:a6:c2:9d:32:af:c1:75:af:fa:3c: 99:6a:77:f2:66:e4:62:24:bd:e0:31:26:d5:f6:5b:d6:33:4c: 85:a9:ec:62:a0:56:93:84:28:ef:93:9a:5a:92:cb:c1:68:38: 0d:70:e6:7f:bc:0c:52:eb:72:77:ce:ad:20:25:e4:f7:d6:ae: a3:bc:f6:e4:b1:37:f8:58:78:75:84:2d:5d:70:99:33:e0:f7: 32:81:c1:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpwbtUHVeutkuQ8nxY66Zsz4kUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5RjE4 MzNCNTZDQTAeFw0yNjExMTUwOTE1NDhaFw0yNjExMTYxMDI2NDhaMDMxMTAvBgNV BAMTKDc3MTk5RkI2QzdGMkYzNjFBNUQ3NzJEMjc5QTM0MTlDMjU0MUExMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIYrBmgT6YKybPjc+49uFLyVJ a+53sLILvZBv1551ZN2h/+2GD4WusNPh4j5/d32/20CIHSTNfzjdTtwCV1Vo3v7j 0UKjclZz4DKHxp1yhNkCF23TbMtnzH7ycbzLRzW2u+g+Lyyz/2e9kt+duegsk30S vahdbZ21CuO+bvJax3jffrwv+FkppBNsI6MM1i0YqmaDJw6akJjIRt4lnFChBLcc H0WaURcu3wYOg4EHvEyyZts9egqKF4utNYLY8oMqZChe27s6qYM4q7EUxJdUc0U0 olsHuqK9qxN13BLvjrxWcge3FMPXGuhaBqDf1hiE3DrLCwAogya8WgSRlqUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdxmftsfy82Gl13LSeaNBnCVBoRswHwYDVR0j BBgwFoAU8PxX/yTa41fgeSsEGK358YM7VsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkY2YwYTQtYWQxYi00YjcyLTg0MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYy NERBRTM1N0UwNzkyQjA0MThBREY5RjE4MzNCNTZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEZDNTdGRjI0REFFMzU3RTA3OTJCMDQxOEFERjlGMTgzM0I1 NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5 RjE4MzNCNTZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKDnuXbrZnjXdScjvUZgX83LgM8Q67lLlmx fI7RSRUd29w56fX3CsyvF54wCC+OCuKmeG7Vo7SoFJO+ktjIvVMui7xAQqR41Zxg aEmfrTY+TRlze9mNRWLRXOI+GItxU00RyBZ7XSG8w6BgKSyjnxVfNKHkKoSG5OVL LQslDMAhSjt7ddFm2lOhBJnFu2CMYKHfiGQqdARHqdY/R8pBMwp9NkkR+tqW0cTG psKdMq/Bda/6PJlqd/Jm5GIkveAxJtX2W9YzTIWp7GKgVpOEKO+TmlqSy8FoOA1w 5n+8DFLrcnfOrSAl5PfWrqO89uSxN/hYeHWELV1wmTPg9zKBwdM= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:33 2026 by rpki-client