$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: o+ZJrLSK4tl3M7Fr3sUtasHC8zktraQsWwzmJ8Z7FbY= Subject key identifier: A8:BB:62:D7:05:4E:33:15:E6:EA:1C:EA:C9:27:1F:D7:C8:82:24:A3 Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 2B889BC72F6C93C1B5D7640D681B11C54B6FD18A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: FE Signing time: Tue 10 Nov 2026 03:14:40 +0000 Manifest this update: Tue 10 Nov 2026 03:09:40 +0000 Manifest next update: Wed 11 Nov 2026 05:39:40 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) 2: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: CKWkLuz4j9e5CjlJlbpAK+iK2R1iRkagr1UXgxyvKBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 05:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:88:9b:c7:2f:6c:93:c1:b5:d7:64:0d:68:1b:11:c5:4b:6f:d1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Nov 10 03:09:40 2026 GMT Not After : Nov 11 05:39:40 2026 GMT Subject: CN=A8BB62D7054E3315E6EA1CEAC9271FD7C88224A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:db:f9:c2:cc:73:56:17:6e:ff:71:97:b3: 32:81:fe:28:d0:73:37:74:1e:3d:40:f0:e3:81:6b: 26:ce:45:de:bf:8c:19:0e:cc:49:a0:5e:cf:ea:09: 84:e6:d0:bd:b4:1c:fc:25:14:ab:64:fb:0f:94:c9: fb:3d:a3:2b:28:09:5d:f1:a1:b3:53:82:57:49:19: d2:0f:47:62:94:e9:66:99:f7:f6:b3:69:8f:fd:50: f9:ff:5c:88:9e:ff:75:a5:a2:a9:0c:64:50:c6:61: ac:1a:1b:b8:56:7f:63:36:f6:9c:81:5c:7e:2d:ed: b6:09:d9:fe:d7:fc:67:fe:89:78:2a:53:d6:9d:6e: 4a:94:28:46:6d:ac:a9:58:c0:8e:02:15:91:c1:22: c3:7c:ab:a2:ab:48:19:41:b1:04:24:15:c9:d1:66: 08:1d:6f:84:0a:e0:d4:b9:73:9e:cf:b6:ea:94:d2: b6:cd:6d:e0:82:19:ac:b2:20:76:09:49:db:14:e9: fe:fc:99:b1:e2:ec:d0:6d:38:1f:f2:2d:53:2f:03: f9:9a:69:20:31:53:1f:68:d5:fc:6a:35:86:b0:9a: 76:ab:68:e2:7b:f0:2a:f4:85:1b:54:4d:d0:cc:0d: cd:f4:f1:8b:96:6e:5c:02:66:15:79:50:24:5c:d4: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BB:62:D7:05:4E:33:15:E6:EA:1C:EA:C9:27:1F:D7:C8:82:24:A3 X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:c7:40:ba:5a:87:95:e4:ea:47:3e:9f:76:47:45:a0:22: 39:e6:90:9b:ce:4b:8e:93:50:f2:a2:9a:6b:3b:09:89:07:6f: 13:b3:8c:0c:ab:04:30:79:41:84:95:7f:a1:b0:21:af:cb:89: 88:bc:08:f3:d7:f6:40:42:7a:15:35:ec:8b:37:b5:19:14:e1: 9e:0f:e1:de:9a:3c:f7:44:9a:40:75:aa:a2:8b:dd:5a:45:74: 7e:cd:33:77:96:4c:f6:e8:eb:d0:48:6f:e5:86:13:b9:3d:be: c6:17:66:d5:88:4e:da:f1:74:89:b1:a9:e4:c6:ef:9c:ee:9b: fd:ab:7c:fd:8b:6c:cf:30:85:a9:38:7d:45:8f:14:b9:44:2e: b9:d5:8e:2a:ea:b4:24:ff:02:3c:72:ff:52:b9:13:e2:63:5e: 8b:33:07:a1:f4:bd:6e:23:2e:a7:bc:21:bb:d2:b1:da:34:4d: 94:4f:9c:2b:c2:e5:c8:8c:4b:72:b3:dd:72:f8:20:30:1c:c6: d2:0e:f8:6a:c1:cf:54:c9:d0:cb:92:af:53:6b:d7:f3:49:49: 1a:6a:f4:04:e9:54:28:a2:7e:13:8a:e0:f4:f1:d2:87:23:44: 9f:16:16:ce:6c:b9:f8:57:34:45:6b:7b:6c:a3:30:cc:41:0a: cf:11:8a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4ibxy9sk8G112QNaBsRxUtv0YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjExMTAwMzA5NDBaFw0yNjExMTEwNTM5NDBaMDMxMTAvBgNV BAMTKEE4QkI2MkQ3MDU0RTMzMTVFNkVBMUNFQUM5MjcxRkQ3Qzg4MjI0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRNv5wsxzVhdu/3GXszKB/ijQ czd0Hj1A8OOBaybORd6/jBkOzEmgXs/qCYTm0L20HPwlFKtk+w+Uyfs9oysoCV3x obNTgldJGdIPR2KU6WaZ9/azaY/9UPn/XIie/3WloqkMZFDGYawaG7hWf2M29pyB XH4t7bYJ2f7X/Gf+iXgqU9adbkqUKEZtrKlYwI4CFZHBIsN8q6KrSBlBsQQkFcnR Zggdb4QK4NS5c57PtuqU0rbNbeCCGayyIHYJSdsU6f78mbHi7NBtOB/yLVMvA/ma aSAxUx9o1fxqNYawmnaraOJ78Cr0hRtUTdDMDc308YuWblwCZhV5UCRc1ODtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLti1wVOMxXm6hzqyScf18iCJKMwHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJjx0C6WoeV5OpHPp92R0WgIjnmkJvOS46T UPKimms7CYkHbxOzjAyrBDB5QYSVf6GwIa/LiYi8CPPX9kBCehU17Is3tRkU4Z4P 4d6aPPdEmkB1qqKL3VpFdH7NM3eWTPbo69BIb+WGE7k9vsYXZtWITtrxdImxqeTG 75zum/2rfP2LbM8whak4fUWPFLlELrnVjirqtCT/Ajxy/1K5E+JjXoszB6H0vW4j Lqe8IbvSsdo0TZRPnCvC5ciMS3Kz3XL4IDAcxtIO+GrBz1TJ0MuSr1Nr1/NJSRpq 9ATpVCiifhOK4PTx0ocjRJ8WFs5sufhXNEVre2yjMMxBCs8RijE= -----END CERTIFICATE-----Generated at Tue Nov 10 16:46:08 2026 by rpki-client