$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: Lk2XeVvXjOJTcpRt5T/Y0+t5BuPNrctFG1Pq32+9sX4= Subject key identifier: 61:26:1C:C1:81:3C:A5:00:95:A6:0F:C2:35:EC:3F:BF:E3:63:5A:C1 Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 019884A7919340A5CF9B9BD37E93460169958504 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 08:23:24 +0000 Manifest this update: Thu 08 Oct 2026 08:18:24 +0000 Manifest next update: Fri 09 Oct 2026 09:57:24 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) 2: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: i/kpJAncBP3uGpS5C3jdWELMuy0oc+pqGIaHZ8qjXSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 09:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:84:a7:91:93:40:a5:cf:9b:9b:d3:7e:93:46:01:69:95:85:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Oct 8 08:18:24 2026 GMT Not After : Oct 9 09:57:24 2026 GMT Subject: CN=61261CC1813CA50095A60FC235EC3FBFE3635AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:09:3f:c2:54:4e:ab:92:80:e1:8e:ab:7e:0f: 5d:2d:28:70:4c:b5:f6:74:15:e7:fb:b2:ec:0d:a1: a6:bb:f7:25:f9:c5:4f:5e:fb:07:7d:6b:e8:f6:ed: 9c:ba:fd:39:3e:52:61:93:a9:fe:03:ac:de:ed:68: 19:e9:43:60:06:7d:ab:45:dc:c4:9d:a6:bf:4d:cf: 65:f4:4a:4a:ad:bf:81:fe:b5:85:33:f5:42:fa:b8: 27:59:2f:97:cd:4b:d7:ce:39:2e:35:78:36:23:ce: eb:95:5b:62:7e:3a:ae:83:a3:9a:de:51:82:73:21: 5e:24:aa:b3:7d:52:9e:6d:0f:65:04:08:22:fe:21: e9:a7:4d:7a:f4:45:35:10:f0:07:9a:44:07:3e:76: 6e:2e:bf:a4:7a:6f:2d:c9:39:52:b3:57:d6:dd:71: bb:97:17:a6:6c:41:76:bb:64:9f:ec:e0:7d:29:4e: 1c:e5:3a:26:5f:c3:8b:0e:a7:fd:3c:6e:6c:68:23: 86:b7:1d:dc:70:ea:14:e4:eb:3d:f1:ca:a3:83:0c: 21:24:7d:64:3a:ee:15:db:c9:80:4a:11:4a:c1:82: 57:cb:cf:94:1a:7c:8b:cf:de:d3:5d:29:9c:43:48: 07:58:fb:8e:e1:f1:ce:f5:21:1b:9f:10:e0:da:56: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:1C:C1:81:3C:A5:00:95:A6:0F:C2:35:EC:3F:BF:E3:63:5A:C1 X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a4:ea:e7:b5:ed:49:64:45:86:b2:56:28:14:67:eb:ac:d4: dc:75:1c:76:c2:2b:da:b6:51:96:f8:23:a7:43:50:dc:d3:51: 70:21:18:db:a2:86:7b:39:86:ba:16:e6:4e:d5:fa:d8:b4:da: 4c:20:ae:30:57:b9:29:d8:eb:8d:ba:63:32:c8:3a:a8:ba:2e: bb:f8:9c:ea:8c:b0:0d:5a:5f:a3:3f:3a:d9:f4:05:aa:69:07: 3c:90:92:31:b2:25:ff:34:8a:b9:53:3c:58:fb:a6:18:40:57: ea:81:22:b1:1a:15:af:6f:83:78:49:55:6d:56:78:b1:64:f2: 6f:7d:73:36:06:79:fe:f9:4a:29:22:ad:f0:08:ab:db:96:86: eb:83:ce:c8:db:97:7d:ba:79:5c:63:06:4b:25:4b:91:fa:49: 78:09:84:ea:0c:87:58:bd:be:e2:7c:5d:01:bd:fa:66:54:e2: 44:ee:47:36:22:f2:07:14:7f:46:3f:25:16:e7:e0:83:70:c0: 8d:03:97:63:84:89:f6:57:f6:4c:a7:f4:ab:ff:cf:d5:82:64: 8b:f9:68:83:1f:87:ed:4b:08:d7:62:1e:77:be:39:2a:a3:18: 60:69:99:c2:4c:c9:be:70:83:29:7d:66:e9:7f:16:35:b7:a6: b7:78:71:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZiEp5GTQKXPm5vTfpNGAWmVhQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjEwMDgwODE4MjRaFw0yNjEwMDkwOTU3MjRaMDMxMTAvBgNV BAMTKDYxMjYxQ0MxODEzQ0E1MDA5NUE2MEZDMjM1RUMzRkJGRTM2MzVBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCT/CVE6rkoDhjqt+D10tKHBM tfZ0Fef7suwNoaa79yX5xU9e+wd9a+j27Zy6/Tk+UmGTqf4DrN7taBnpQ2AGfatF 3MSdpr9Nz2X0Skqtv4H+tYUz9UL6uCdZL5fNS9fOOS41eDYjzuuVW2J+Oq6Do5re UYJzIV4kqrN9Up5tD2UECCL+IemnTXr0RTUQ8AeaRAc+dm4uv6R6by3JOVKzV9bd cbuXF6ZsQXa7ZJ/s4H0pThzlOiZfw4sOp/08bmxoI4a3Hdxw6hTk6z3xyqODDCEk fWQ67hXbyYBKEUrBglfLz5QafIvP3tNdKZxDSAdY+47h8c71IRufEODaVqsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSYcwYE8pQCVpg/CNew/v+NjWsEwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmk6ue17UlkRYayVigUZ+us1Nx1HHbCK9q2 UZb4I6dDUNzTUXAhGNuihns5hroW5k7V+ti02kwgrjBXuSnY6426YzLIOqi6Lrv4 nOqMsA1aX6M/Otn0BappBzyQkjGyJf80irlTPFj7phhAV+qBIrEaFa9vg3hJVW1W eLFk8m99czYGef75SikirfAIq9uWhuuDzsjbl326eVxjBkslS5H6SXgJhOoMh1i9 vuJ8XQG9+mZU4kTuRzYi8gcUf0Y/JRbn4INwwI0Dl2OEifZX9kyn9Kv/z9WCZIv5 aIMfh+1LCNdiHne+OSqjGGBpmcJMyb5wgyl9Zul/FjW3prd4cXQ= -----END CERTIFICATE-----Generated at Thu Oct 8 19:29:20 2026 by rpki-client