$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json) Hash identifier: /gB+9c74rYrYocthruwDAzr5bMfCd78gvqJAX2yjqv4= Subject key identifier: 4A:2E:8A:65:23:5A:54:62:7F:42:85:5E:FE:B8:1A:E6:C8:FD:3A:C6 Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Certificate serial: 3D0024662A4B263F217A96A9DCF5BC74FCD9B356 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 06:49:05 +0000 Manifest this update: Mon 09 Nov 2026 06:44:05 +0000 Manifest next update: Tue 10 Nov 2026 08:24:05 +0000 Files and hashes: 1: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=) 2: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=) 3: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=) 4: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=) 5: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=) 6: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: 3AsMujAM6GPgFCal/Ql135adJ1+uGh6d3aku98g9eqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:00:24:66:2a:4b:26:3f:21:7a:96:a9:dc:f5:bc:74:fc:d9:b3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Validity Not Before: Nov 9 06:44:05 2026 GMT Not After : Nov 10 08:24:05 2026 GMT Subject: CN=4A2E8A65235A54627F42855EFEB81AE6C8FD3AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:17:82:e7:3e:d6:16:d8:69:3f:1d:e1:c0: 2b:2f:e9:18:c0:f9:fe:eb:6f:e9:eb:37:0a:f7:9e: b2:9e:68:53:60:15:e8:b9:48:a8:65:59:26:32:6e: af:ce:88:e0:b5:8a:38:47:d2:5e:81:15:90:19:e4: c6:64:cb:20:ff:ff:43:ee:61:d5:81:4b:22:5a:dc: 7f:30:9e:06:78:a7:d1:41:02:8b:4b:2b:1b:58:cc: 30:3b:6d:45:b7:d0:c0:1e:41:c1:95:1e:50:0e:a0: 7b:a8:0e:ba:c2:aa:f1:4b:3f:9c:68:44:64:0b:f7: bf:ba:7f:f0:57:cb:a9:0e:3a:9c:b0:b4:ab:a5:64: 0a:0b:d0:8f:9d:58:ac:2d:6c:dc:36:0c:40:76:87: 03:bb:60:a5:e6:d8:ca:e2:63:83:e4:e0:12:3f:2b: 71:6c:5a:e5:73:9b:8a:1e:0c:2c:17:0f:d5:c0:17: cf:b8:5a:1b:2b:ea:47:0f:07:8d:62:22:7a:d4:51: c4:f2:ac:64:1f:93:ef:a3:f1:64:92:ff:3b:47:97: 5f:92:29:b2:e8:4a:a3:a6:06:e5:e0:fd:f5:48:16: a7:ff:d5:00:92:be:00:94:74:b8:4d:a4:85:5b:ad: e3:4c:a8:41:98:88:17:a6:70:5c:fd:e6:be:fc:5f: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:8A:65:23:5A:54:62:7F:42:85:5E:FE:B8:1A:E6:C8:FD:3A:C6 X509v3 Authority Key Identifier: keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c1:03:9d:b2:0c:20:e6:05:fa:03:73:8c:0c:13:03:8b:15: 0a:39:67:aa:10:1f:db:8f:a2:0e:8c:1f:3a:d5:a1:5e:f8:c4: 87:35:07:52:24:7a:9d:0d:87:14:05:12:64:71:d5:7e:26:12: f6:e7:ca:14:61:d3:0b:64:eb:8a:c0:5e:b4:5b:50:95:a2:10: 7c:9a:40:f0:14:33:6f:18:96:8f:64:84:fd:6b:d3:ec:83:aa: 55:00:9e:2c:2a:db:af:22:ed:9b:b2:69:d2:96:12:7c:f0:0b: 83:d3:67:8d:c7:67:7d:83:06:5e:4b:f1:db:75:80:d7:42:0c: 24:58:4c:fe:3a:33:2f:4b:c2:40:f5:23:fe:f9:33:18:32:05: 24:03:c5:5b:87:af:b0:57:f7:e9:2e:ec:36:4d:45:51:8f:41: 03:57:47:4a:45:b2:79:26:09:cc:c9:1a:69:5b:be:68:09:33: 59:36:25:57:70:46:08:2b:de:f8:c0:33:93:5b:df:f1:13:c3: b6:e2:06:ce:69:a2:5c:50:b6:68:cb:1f:fe:fe:a6:87:bc:61: 83:ad:b1:85:42:0c:df:48:01:50:ed:c0:e0:8b:af:68:64:ae: be:f5:9a:2c:af:76:02:f9:a6:f8:78:bf:a0:90:c9:56:98:42: 48:3a:ef:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQAkZipLJj8hepap3PW8dPzZs1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNEQTJE QkE4MTI1QzAeFw0yNjExMDkwNjQ0MDVaFw0yNjExMTAwODI0MDVaMDMxMTAvBgNV BAMTKDRBMkU4QTY1MjM1QTU0NjI3RjQyODU1RUZFQjgxQUU2QzhGRDNBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaBeC5z7WFthpPx3hwCsv6RjA +f7rb+nrNwr3nrKeaFNgFei5SKhlWSYybq/OiOC1ijhH0l6BFZAZ5MZkyyD//0Pu YdWBSyJa3H8wngZ4p9FBAotLKxtYzDA7bUW30MAeQcGVHlAOoHuoDrrCqvFLP5xo RGQL97+6f/BXy6kOOpywtKulZAoL0I+dWKwtbNw2DEB2hwO7YKXm2MriY4Pk4BI/ K3FsWuVzm4oeDCwXD9XAF8+4Whsr6kcPB41iInrUUcTyrGQfk++j8WSS/ztHl1+S KbLoSqOmBuXg/fVIFqf/1QCSvgCUdLhNpIVbreNMqEGYiBemcFz95r78XxvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSi6KZSNaVGJ/QoVe/rga5sj9OsYwHwYDVR0j BBgwFoAU/uVwo/x48fGOhYrtqFM9otuoElwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJhZjgzNTItY2Q2NS00ZGI3LWIwY2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNG Qzc4RjFGMThFODU4QUVEQTg1MzNEQTJEQkE4MTI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUU1NzBBM0ZDNzhGMUYxOEU4NThBRURBODUzM0RBMkRCQTgx MjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNE QTJEQkE4MTI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7BA52yDCDmBfoDc4wMEwOLFQo5Z6oQH9uP og6MHzrVoV74xIc1B1Ikep0NhxQFEmRx1X4mEvbnyhRh0wtk64rAXrRbUJWiEHya QPAUM28Ylo9khP1r0+yDqlUAniwq268i7ZuyadKWEnzwC4PTZ43HZ32DBl5L8dt1 gNdCDCRYTP46My9LwkD1I/75MxgyBSQDxVuHr7BX9+ku7DZNRVGPQQNXR0pFsnkm CczJGmlbvmgJM1k2JVdwRggr3vjAM5Nb3/ETw7biBs5polxQtmjLH/7+poe8YYOt sYVCDN9IAVDtwOCLr2hkrr71miyvdgL5pvh4v6CQyVaYQkg671I= -----END CERTIFICATE-----Generated at Tue Nov 10 01:10:20 2026 by rpki-client