$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json) Hash identifier: LSw2BeefYZLiB8PuRgoaIms5X6IhIm1UtCApnDziF9A= Subject key identifier: 20:10:15:54:B8:83:22:9B:83:D3:F8:38:7B:D5:06:B1:0F:03:CD:C7 Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Certificate issuer: /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Certificate serial: 0E69129B89B0684F5078521F5765EC226142A36C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft Manifest number: FE Signing time: Mon 09 Nov 2026 18:38:58 +0000 Manifest this update: Mon 09 Nov 2026 18:33:58 +0000 Manifest next update: Tue 10 Nov 2026 21:18:58 +0000 Files and hashes: 1: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: bSkd081uk+08GIByDl3ia8FdmCk8z46uz0EfxB3WrCI=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:12:9b:89:b0:68:4f:50:78:52:1f:57:65:ec:22:61:42:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Validity Not Before: Nov 9 18:33:58 2026 GMT Not After : Nov 10 21:18:58 2026 GMT Subject: CN=20101554B883229B83D3F8387BD506B10F03CDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:99:48:f7:a7:e0:4c:30:23:c4:61:ec:2c: 0d:36:10:25:da:3d:f8:4b:6c:b8:ee:b8:67:cd:6e: 2c:46:ac:57:27:8e:bb:3b:93:2a:63:71:97:96:b8: 4d:c5:b3:24:84:91:b7:3b:e5:64:57:ea:d7:65:84: fd:63:1a:f5:74:99:15:86:96:12:c6:18:a3:da:52: d2:97:9c:95:e8:db:11:53:a8:db:27:ca:59:e8:45: f0:17:ff:37:5b:14:2d:1d:01:75:7a:87:cb:21:b7: 1b:ac:92:65:c2:58:05:b9:dc:dd:94:b3:c9:76:fd: 4d:72:b3:5e:39:b7:32:7e:f7:a5:4b:a0:f8:ca:00: 9b:6d:da:99:0f:9e:5a:72:2e:ee:cb:2e:9d:cd:f5: 4b:99:99:64:cb:e7:7b:88:f0:58:45:5a:8c:9b:f1: d7:7a:b0:68:20:34:6f:3b:b8:3d:09:68:8c:26:0e: 68:b9:17:ee:79:a5:82:34:15:8c:fa:be:ca:fb:e8: 31:3f:d9:d8:28:72:ef:26:1a:8c:16:2e:9d:b1:1d: 8f:a4:fb:78:82:e9:99:5f:40:08:92:7e:4c:92:fa: a7:3d:83:38:60:33:21:71:8f:b3:32:90:38:c9:34: 6f:dd:f8:b9:75:71:89:8e:89:5b:27:3c:a5:2c:57: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:10:15:54:B8:83:22:9B:83:D3:F8:38:7B:D5:06:B1:0F:03:CD:C7 X509v3 Authority Key Identifier: keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:88:06:de:d9:b1:eb:7f:07:28:d6:79:83:99:09:e2:63:89: 5d:75:2f:ac:dd:3e:d8:58:e6:71:d9:0a:e9:7b:81:37:5a:65: f0:06:6d:07:ad:c1:67:48:b3:75:dd:9f:9a:08:49:c4:be:40: 28:4a:84:fb:4f:0c:03:3e:dd:0f:04:92:97:4e:da:fc:1b:2c: ce:dd:f6:54:53:cd:0f:7a:b7:10:ac:cb:76:2c:c4:60:5e:dd: e6:bd:d6:15:a7:9f:33:2f:f3:82:c4:2e:08:49:5e:c1:ff:d6: 99:38:4f:e7:fc:b9:bf:d5:1b:a9:c5:2b:d4:05:13:e6:5e:e9: 06:f1:4e:f8:c9:2a:a4:0d:d4:15:8f:04:14:f6:11:d8:af:4d: 77:3e:93:b7:07:a5:5b:71:24:7d:ad:39:0b:aa:b9:e9:36:6d: 86:ad:da:f1:77:d9:db:b9:f5:74:26:4e:4f:97:3e:8f:f2:2e: ea:3c:50:c9:32:59:24:05:89:4a:81:e3:1d:17:83:9a:79:9d: 93:3c:80:5c:50:8f:77:11:b8:73:7a:5a:6b:83:b9:36:ce:c6: 1a:fc:4d:7a:fd:9f:73:58:45:8d:c7:73:07:52:2a:33:41:a6: 7b:f3:d3:1d:e4:59:e4:c1:29:6f:06:da:d7:0d:60:2a:ab:e4: 0c:f9:8d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmkSm4mwaE9QeFIfV2XsImFCo2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYyODU4 RUE4RDQ5MTAeFw0yNjExMDkxODMzNThaFw0yNjExMTAyMTE4NThaMDMxMTAvBgNV BAMTKDIwMTAxNTU0Qjg4MzIyOUI4M0QzRjgzODdCRDUwNkIxMEYwM0NEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sZlI96fgTDAjxGHsLA02ECXa PfhLbLjuuGfNbixGrFcnjrs7kypjcZeWuE3FsySEkbc75WRX6tdlhP1jGvV0mRWG lhLGGKPaUtKXnJXo2xFTqNsnylnoRfAX/zdbFC0dAXV6h8shtxuskmXCWAW53N2U s8l2/U1ys145tzJ+96VLoPjKAJtt2pkPnlpyLu7LLp3N9UuZmWTL53uI8FhFWoyb 8dd6sGggNG87uD0JaIwmDmi5F+55pYI0FYz6vsr76DE/2dgocu8mGowWLp2xHY+k +3iC6ZlfQAiSfkyS+qc9gzhgMyFxj7MykDjJNG/d+Ll1cYmOiVsnPKUsV7JRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBAVVLiDIpuD0/g4e9UGsQ8DzccwHwYDVR0j BBgwFoAU8DbCjrefPur+aHD9+2LyhY6o1JEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZjYzFlZjYtNzY5Zi00YWFmLTlkMTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVC NzlGM0VFQUZFNjg3MEZERkI2MkYyODU4RUE4RDQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDM2QzI4RUI3OUYzRUVBRkU2ODcwRkRGQjYyRjI4NThFQThE NDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYy ODU4RUE4RDQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSIBt7Zset/ByjWeYOZCeJjiV11L6zdPthY 5nHZCul7gTdaZfAGbQetwWdIs3Xdn5oIScS+QChKhPtPDAM+3Q8EkpdO2vwbLM7d 9lRTzQ96txCsy3YsxGBe3ea91hWnnzMv84LELghJXsH/1pk4T+f8ub/VG6nFK9QF E+Ze6QbxTvjJKqQN1BWPBBT2EdivTXc+k7cHpVtxJH2tOQuquek2bYat2vF32du5 9XQmTk+XPo/yLuo8UMkyWSQFiUqB4x0Xg5p5nZM8gFxQj3cRuHN6WmuDuTbOxhr8 TXr9n3NYRY3HcwdSKjNBpnvz0x3kWeTBKW8G2tcNYCqr5Az5jZg= -----END CERTIFICATE-----Generated at Mon Nov 9 23:18:06 2026 by rpki-client