$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: gXx7q7+V9gXrB7nEq/2Jcm6cW0Sn1TthtxwzvYEODZ4= Subject key identifier: 9B:F2:7B:03:69:9A:DD:D7:8B:2E:AD:83:BA:C3:23:D7:8C:18:0B:96 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 677CC72DD60EC6D2649C005BD230E3A4E677CF95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: FF Signing time: Tue 10 Nov 2026 06:13:45 +0000 Manifest this update: Tue 10 Nov 2026 06:08:45 +0000 Manifest next update: Wed 11 Nov 2026 08:59:45 +0000 Files and hashes: 1: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 2: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) 3: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: IgAYbu9vPYYUCE/iU1ST20qIttVejtH08lPSdFCOlWU=) 4: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7c:c7:2d:d6:0e:c6:d2:64:9c:00:5b:d2:30:e3:a4:e6:77:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Nov 10 06:08:45 2026 GMT Not After : Nov 11 08:59:45 2026 GMT Subject: CN=9BF27B03699ADDD78B2EAD83BAC323D78C180B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:1c:f1:bc:5d:86:fa:90:a2:f6:e1:44:55: 06:d0:29:ef:3e:0c:4e:94:db:39:36:2c:26:a1:f3: 08:30:80:d2:6e:e4:74:52:5b:a0:cf:30:76:3e:61: 91:c6:7f:d2:1b:95:bf:65:89:7f:1d:a2:fa:ef:e2: 8e:34:cd:52:d1:63:da:a0:b9:d1:2f:34:49:a7:65: b1:4a:09:a2:0f:66:24:37:ce:33:88:78:be:4a:86: e1:94:58:b0:33:13:04:ad:89:b3:c9:07:0c:47:27: 85:ae:52:7d:f9:5a:f9:78:ff:14:e6:bc:ee:3d:a5: 5d:aa:6f:47:ca:ac:69:0c:a8:5b:2b:72:e9:59:47: e1:11:cf:ac:1e:ed:d1:db:63:65:8e:db:92:87:72: e8:f0:76:5b:db:e8:38:04:9d:41:35:97:71:1b:f9: 18:63:1e:8f:60:2a:de:b1:db:fa:f8:83:35:9f:b7: 4c:4e:ef:5a:ca:ac:da:88:ca:60:ad:c2:c6:2d:85: a8:54:55:7f:61:a2:5c:46:d6:6a:f2:28:b6:8a:f1: 65:5e:9a:17:20:27:9c:e5:79:ab:0e:ab:fa:55:86: dd:65:41:33:6e:82:b3:2b:c6:f0:4a:b3:08:34:07: ef:80:bb:db:cc:48:3f:57:ea:46:3a:96:f8:21:b6: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:7B:03:69:9A:DD:D7:8B:2E:AD:83:BA:C3:23:D7:8C:18:0B:96 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:84:ad:f3:3c:ed:e2:3b:25:19:2c:3f:ad:3e:b0:91:56:de: 18:49:ea:15:5a:ae:6e:b3:1d:e4:b8:30:fe:99:a2:b3:79:71: dd:0f:da:f7:7f:97:d4:b5:22:0e:e6:73:77:c0:ac:82:77:95: e2:d9:5f:18:5f:5d:c3:87:f5:7c:d0:91:4b:55:ec:2e:6a:52: 98:75:d2:44:d5:4c:92:c4:20:49:03:02:85:4c:00:b0:c5:ba: f9:1b:3a:26:e5:2f:1e:6c:9f:d0:f7:cf:14:0d:28:dd:16:62: de:db:ec:a1:24:67:6e:c4:d2:9b:6c:6b:2d:51:dc:98:88:b8: 6f:f7:19:30:14:ee:14:30:e4:e2:da:c4:5b:94:84:e7:bb:02: d5:9c:81:a8:27:5b:af:ad:94:c4:b0:cf:a1:33:a2:a6:b6:c5: 6a:00:7f:e9:9e:dd:a0:84:f7:c9:f8:bb:6f:be:c1:c2:6a:52: 6f:0d:10:49:f1:57:30:7c:d6:82:fd:7d:2f:44:48:48:53:02: 43:c7:97:49:e5:50:c6:ce:d0:c4:b3:d1:d2:30:e4:aa:eb:b9: aa:86:d7:8b:92:c0:52:84:b8:37:e3:66:87:c1:8b:1c:0d:11: e2:36:3a:3c:79:46:c6:11:2e:5b:60:b0:e3:09:1f:43:1d:4d: c8:9c:88:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3zHLdYOxtJknABb0jDjpOZ3z5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjExMTAwNjA4NDVaFw0yNjExMTEwODU5NDVaMDMxMTAvBgNV BAMTKDlCRjI3QjAzNjk5QURERDc4QjJFQUQ4M0JBQzMyM0Q3OEMxODBCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrRzxvF2G+pCi9uFEVQbQKe8+ DE6U2zk2LCah8wgwgNJu5HRSW6DPMHY+YZHGf9Iblb9liX8dovrv4o40zVLRY9qg udEvNEmnZbFKCaIPZiQ3zjOIeL5KhuGUWLAzEwStibPJBwxHJ4WuUn35Wvl4/xTm vO49pV2qb0fKrGkMqFsrculZR+ERz6we7dHbY2WO25KHcujwdlvb6DgEnUE1l3Eb +RhjHo9gKt6x2/r4gzWft0xO71rKrNqIymCtwsYthahUVX9holxG1mryKLaK8WVe mhcgJ5zleasOq/pVht1lQTNugrMrxvBKswg0B++Au9vMSD9X6kY6lvghtq3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/J7A2ma3deLLq2DusMj14wYC5YwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKErfM87eI7JRksP60+sJFW3hhJ6hVarm6z HeS4MP6ZorN5cd0P2vd/l9S1Ig7mc3fArIJ3leLZXxhfXcOH9XzQkUtV7C5qUph1 0kTVTJLEIEkDAoVMALDFuvkbOiblLx5sn9D3zxQNKN0WYt7b7KEkZ27E0ptsay1R 3JiIuG/3GTAU7hQw5OLaxFuUhOe7AtWcgagnW6+tlMSwz6Ezoqa2xWoAf+me3aCE 98n4u2++wcJqUm8NEEnxVzB81oL9fS9ESEhTAkPHl0nlUMbO0MSz0dIw5KrruaqG 14uSwFKEuDfjZofBixwNEeI2Ojx5RsYRLltgsOMJH0MdTciciIk= -----END CERTIFICATE-----Generated at Tue Nov 10 20:24:44 2026 by rpki-client