$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: 6mOJKmg+cnaBCZKCobej9L2X9MoZ8uk0pP4nxR134+s= Subject key identifier: 51:2A:B8:90:2A:3F:39:43:23:1A:EF:9F:8A:0D:AA:8C:23:AE:AE:2D Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 2FA885E55CA2F14D51D7D7A765BDBBDCA6A6617F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: FE Signing time: Mon 09 Nov 2026 19:45:22 +0000 Manifest this update: Mon 09 Nov 2026 19:40:22 +0000 Manifest next update: Tue 10 Nov 2026 22:49:22 +0000 Files and hashes: 1: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: WgWvct1MpHPPnILy3RarL09D2WNqsAR60/oL3vhar6I=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a8:85:e5:5c:a2:f1:4d:51:d7:d7:a7:65:bd:bb:dc:a6:a6:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: Nov 9 19:40:22 2026 GMT Not After : Nov 10 22:49:22 2026 GMT Subject: CN=512AB8902A3F3943231AEF9F8A0DAA8C23AEAE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:9a:26:c1:40:2a:43:3b:84:03:ad:9d:4f: 80:5d:0a:ae:ec:f3:45:50:ff:28:5b:72:2f:3d:a0: 97:9b:c5:a8:22:c4:6d:60:74:29:2a:7e:f3:66:e2: 94:a3:dc:60:8c:6e:6d:18:4c:79:8b:ad:75:d8:c6: 8b:5e:35:4a:f2:3b:0c:31:5b:5c:0c:ec:83:0f:f5: 72:05:3d:bf:a6:ee:0d:d0:27:9f:92:7d:3a:ae:bc: c1:20:f8:de:a3:8f:72:45:ab:19:8e:1c:c6:39:61: 81:15:93:fb:6f:60:78:b0:a3:0e:08:40:ed:9e:f0: 06:84:87:f7:ef:41:d7:77:e7:0f:b2:62:c8:39:a8: d5:8d:60:ad:43:ed:9e:bf:28:2c:9b:07:8a:19:99: 40:36:52:d8:64:ea:b3:ed:6e:55:33:0d:8b:70:c6: 34:cb:00:44:86:27:7b:2d:9b:00:7d:18:32:b8:18: 5b:fd:65:58:5d:03:77:59:0a:56:96:14:e4:9e:4e: fc:53:c9:2a:7b:25:e6:4d:d1:91:9f:74:00:c0:64: 6f:8e:ca:e3:1a:93:70:34:a0:f6:d6:1c:e8:a6:ba: f7:78:7b:6c:0e:e5:a0:67:d9:cf:fe:4b:51:5d:b3: ef:cd:f0:fe:f4:b3:09:ec:90:6f:80:e0:db:08:5d: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2A:B8:90:2A:3F:39:43:23:1A:EF:9F:8A:0D:AA:8C:23:AE:AE:2D X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:02:d1:44:48:f5:85:1c:ac:38:b4:b5:76:ba:a1:08:41: 9e:e8:5c:83:3d:8a:d0:99:49:36:5b:95:7b:ed:1b:85:89:51: 57:8f:16:d5:76:ee:ab:c2:7d:08:94:c7:52:a5:f2:d5:d7:ed: 68:38:35:cb:d2:f5:3e:5a:60:33:71:d8:77:a6:25:fb:da:3a: 8c:22:16:37:7d:d0:8d:76:f7:61:79:b7:94:95:58:4d:4b:55: b7:2b:b6:3d:54:71:0b:22:88:3c:d9:0b:ca:ee:05:91:49:91: 2d:67:4c:c3:a1:1b:9b:c0:87:35:f9:ea:56:74:ae:e3:4f:0a: 78:50:56:6e:d7:87:37:65:eb:88:40:e3:d0:fc:bb:43:08:fb: 76:a9:e0:39:62:21:f3:8c:41:f5:fd:23:a5:98:47:27:1f:67: 6d:99:e1:5b:76:9d:71:d5:87:8f:cb:fb:0d:75:b3:46:d5:ec: e3:22:5f:52:c6:5c:e3:e5:67:3e:d4:73:f2:01:70:2b:d6:e6: 27:7f:8a:56:c9:02:47:33:72:7c:37:54:74:af:f4:52:7d:e3: 77:08:5d:33:51:10:02:9b:af:b5:5e:41:2f:ce:cf:85:2d:8b: d3:c2:7c:8f:48:0a:95:b2:ad:7f:67:18:da:15:c2:f7:90:bc: b2:71:65:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6iF5Vyi8U1R19enZb273KamYX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjExMDkxOTQwMjJaFw0yNjExMTAyMjQ5MjJaMDMxMTAvBgNV BAMTKDUxMkFCODkwMkEzRjM5NDMyMzFBRUY5RjhBMERBQThDMjNBRUFFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mpomwUAqQzuEA62dT4BdCq7s 80VQ/yhbci89oJebxagixG1gdCkqfvNm4pSj3GCMbm0YTHmLrXXYxoteNUryOwwx W1wM7IMP9XIFPb+m7g3QJ5+SfTquvMEg+N6jj3JFqxmOHMY5YYEVk/tvYHiwow4I QO2e8AaEh/fvQdd35w+yYsg5qNWNYK1D7Z6/KCybB4oZmUA2Uthk6rPtblUzDYtw xjTLAESGJ3stmwB9GDK4GFv9ZVhdA3dZClaWFOSeTvxTySp7JeZN0ZGfdADAZG+O yuMak3A0oPbWHOimuvd4e2wO5aBn2c/+S1Fds+/N8P70swnskG+A4NsIXQfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUSq4kCo/OUMjGu+fig2qjCOuri0wHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+0AtFESPWFHKw4tLV2uqEIQZ7oXIM9itCZ STZblXvtG4WJUVePFtV27qvCfQiUx1Kl8tXX7Wg4NcvS9T5aYDNx2HemJfvaOowi Fjd90I1292F5t5SVWE1LVbcrtj1UcQsiiDzZC8ruBZFJkS1nTMOhG5vAhzX56lZ0 ruNPCnhQVm7Xhzdl64hA49D8u0MI+3ap4DliIfOMQfX9I6WYRycfZ22Z4Vt2nXHV h4/L+w11s0bV7OMiX1LGXOPlZz7Uc/IBcCvW5id/ilbJAkczcnw3VHSv9FJ943cI XTNREAKbr7VeQS/Oz4Uti9PCfI9ICpWyrX9nGNoVwveQvLJxZbA= -----END CERTIFICATE-----Generated at Tue Nov 10 10:18:03 2026 by rpki-client