$ rpki-client -vvvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: H/YtvLBj3CHfDXeYN/2wTN01sPPJ4yzqH9VxIXb93Zc= Subject key identifier: 4D:38:97:1F:05:6D:DF:5D:D6:4F:D9:9C:29:F1:0C:2D:0F:3A:2E:06 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 08BB99D2F4F7E94D6078EF9CBA13AAE3A9468451 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 06:32:20 +0000 Manifest this update: Sun 15 Nov 2026 06:27:20 +0000 Manifest next update: Mon 16 Nov 2026 10:23:20 +0000 Files and hashes: 1: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: dv+Wa4J00jnZPDadGO42o3lV4QJPDd9bLIlfElLlKgo=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bb:99:d2:f4:f7:e9:4d:60:78:ef:9c:ba:13:aa:e3:a9:46:84:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Nov 15 06:27:20 2026 GMT Not After : Nov 16 10:23:20 2026 GMT Subject: CN=4D38971F056DDF5DD64FD99C29F10C2D0F3A2E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:7d:73:f7:44:70:eb:89:be:d2:e4:30:56: 08:f7:ca:a8:fc:3b:24:d1:75:c0:14:e2:ea:b5:59: e2:d8:2e:69:24:07:88:80:85:a5:19:fa:df:6f:df: ba:a4:64:28:8e:f9:d4:7a:45:21:e8:1e:02:5a:6c: 87:57:cc:2e:a7:e2:4e:27:4e:ce:20:5b:b6:9d:cc: 72:bf:b4:de:da:a1:09:84:cb:db:3f:e4:42:f6:99: 52:8c:2e:42:ab:cb:75:46:ce:fb:8a:27:8b:4b:a6: df:83:5e:81:12:b1:e0:09:6c:a2:43:2b:87:9d:e1: fb:10:33:e5:d3:8a:b1:4e:2d:b7:4d:db:9b:bd:4d: f4:85:22:1a:09:e9:83:25:9c:34:8c:fa:d6:4c:d4: 81:bb:7c:f1:5b:da:9f:c8:5b:cd:d0:c4:94:bb:bd: ac:39:d2:8e:16:e3:41:7b:4e:51:82:3e:a4:45:a6: c2:3b:98:bf:b5:75:8c:ae:2b:98:70:2d:1f:7f:01: 9d:6f:eb:88:48:d1:2a:d1:fa:af:c5:f5:32:f3:de: cb:62:b1:5e:27:77:a5:e5:cd:84:b3:a9:5a:39:4a: 7d:b3:bc:cc:6c:de:c2:fe:48:bf:38:34:18:06:37: d3:00:13:b4:67:36:82:70:e3:cc:e8:11:78:1d:c0: b7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:97:1F:05:6D:DF:5D:D6:4F:D9:9C:29:F1:0C:2D:0F:3A:2E:06 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9e:c9:c4:df:af:64:29:61:2f:db:fa:2a:18:7c:89:3c:4d: 25:7c:30:31:90:a0:03:7a:bd:ad:e8:74:21:56:49:52:b2:a7: e4:01:4b:e4:45:71:45:18:b3:8c:e8:f0:7f:13:64:c7:cf:b4: 10:80:b1:dc:fa:5b:59:22:2b:85:28:f2:8c:f4:74:b4:1e:e3: 09:b0:9b:d1:c6:6f:12:ce:0f:6e:d8:fa:b2:b2:01:8a:fd:69: 37:e9:0a:24:ba:ea:6f:ac:2f:02:f3:59:50:20:4e:64:db:20: 02:49:b4:6f:3d:12:52:1d:6e:c1:29:2e:8c:1d:e0:55:0b:b8: 0e:11:8e:99:c3:8d:27:8d:83:91:9c:79:36:c1:f7:0e:87:aa: e7:cf:8a:ec:45:f4:41:32:8f:12:1c:8f:b4:37:49:30:62:01: 4f:59:a9:4b:5a:73:80:39:f3:e9:f0:b6:9f:01:51:d8:01:39: 0a:24:81:00:58:06:4a:b1:f1:97:d7:72:6b:f5:d6:64:35:9a: c2:42:74:90:c6:dd:fa:4e:35:fe:2f:62:a8:24:c8:8d:7f:bc: e5:01:d8:4a:53:fc:2c:76:7c:e7:dc:ae:60:2c:da:23:da:07: 0d:e0:33:d8:6e:b9:25:cc:e5:6b:47:05:3b:28:8c:f9:04:eb: b3:8e:36:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLuZ0vT36U1geO+cuhOq46lGhFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjExMTUwNjI3MjBaFw0yNjExMTYxMDIzMjBaMDMxMTAvBgNV BAMTKDREMzg5NzFGMDU2RERGNURENjRGRDk5QzI5RjEwQzJEMEYzQTJFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ31z90Rw64m+0uQwVgj3yqj8 OyTRdcAU4uq1WeLYLmkkB4iAhaUZ+t9v37qkZCiO+dR6RSHoHgJabIdXzC6n4k4n Ts4gW7adzHK/tN7aoQmEy9s/5EL2mVKMLkKry3VGzvuKJ4tLpt+DXoESseAJbKJD K4ed4fsQM+XTirFOLbdN25u9TfSFIhoJ6YMlnDSM+tZM1IG7fPFb2p/IW83QxJS7 vaw50o4W40F7TlGCPqRFpsI7mL+1dYyuK5hwLR9/AZ1v64hI0SrR+q/F9TLz3sti sV4nd6XlzYSzqVo5Sn2zvMxs3sL+SL84NBgGN9MAE7RnNoJw48zoEXgdwLdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTiXHwVt313WT9mcKfEMLQ86LgYwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKieycTfr2QpYS/b+ioYfIk8TSV8MDGQoAN6 va3odCFWSVKyp+QBS+RFcUUYs4zo8H8TZMfPtBCAsdz6W1kiK4Uo8oz0dLQe4wmw m9HGbxLOD27Y+rKyAYr9aTfpCiS66m+sLwLzWVAgTmTbIAJJtG89ElIdbsEpLowd 4FULuA4RjpnDjSeNg5GceTbB9w6HqufPiuxF9EEyjxIcj7Q3STBiAU9ZqUtac4A5 8+nwtp8BUdgBOQokgQBYBkqx8ZfXcmv11mQ1msJCdJDG3fpONf4vYqgkyI1/vOUB 2EpT/Cx2fOfcrmAs2iPaBw3gM9huuSXM5WtHBTsojPkE67OONlI= -----END CERTIFICATE-----Generated at Sun Nov 15 18:51:18 2026 by rpki-client