$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json) Hash identifier: d33kJWq7H1EtROEI8MFDaCXrvhLPE1FDv8hDvn//4cU= Subject key identifier: CB:FF:A1:F8:84:CB:E1:C2:DB:FF:C8:BB:1A:D8:90:A1:9C:12:B2:0A Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 Certificate issuer: /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Certificate serial: 2B7E70964B8D9B5A18B81D2D5733B40D289A602C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft Manifest number: 0103 Signing time: Tue 10 Nov 2026 13:43:28 +0000 Manifest this update: Tue 10 Nov 2026 13:38:28 +0000 Manifest next update: Wed 11 Nov 2026 17:39:28 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=) 2: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: GqUhezAtRhsvh7ROwha/69kPArpEfqxlM6JRlZdLw8Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7e:70:96:4b:8d:9b:5a:18:b8:1d:2d:57:33:b4:0d:28:9a:60:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Validity Not Before: Nov 10 13:38:28 2026 GMT Not After : Nov 11 17:39:28 2026 GMT Subject: CN=CBFFA1F884CBE1C2DBFFC8BB1AD890A19C12B20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:07:a7:fd:11:6d:48:5c:90:0c:d0:d1:13: cb:1e:74:35:03:cc:de:72:cd:46:a4:0c:80:ce:00: 52:91:71:85:4e:0b:03:3f:8d:3c:34:05:75:aa:64: ca:c9:94:3b:de:19:98:f8:4e:06:a0:0b:9d:82:09: 17:b8:95:ef:68:a1:3c:18:f5:f4:7b:7f:a1:4a:b3: f8:28:02:49:1a:fe:5a:c8:80:62:3c:9c:dd:1d:5b: 82:f9:cd:b8:39:f8:d2:60:4f:5a:63:63:9a:56:5c: 3f:bf:de:35:57:2b:1c:59:37:43:35:2f:bf:6c:f1: 90:54:d7:e6:89:e5:fa:f1:3c:27:8e:1e:fb:f7:a3: 38:5a:95:3a:68:49:68:78:18:ca:4e:9b:dd:8d:94: 94:09:1c:54:ad:3d:b6:2a:e9:5a:69:37:87:90:df: a8:11:c5:e1:16:70:22:c0:2b:21:dd:a0:42:c1:04: 7e:07:cc:41:3c:df:ad:34:9c:0c:59:78:6f:5c:3c: bf:6f:d7:e0:78:5e:b4:72:af:f8:20:01:d5:26:a8: a6:08:b7:46:0c:0f:11:03:19:c5:1d:a2:49:d2:d5: ea:5e:b3:5d:05:7f:47:9c:00:5d:0e:b0:b6:4c:dc: 6e:4c:60:6d:b9:2c:0a:00:44:53:17:8f:65:c9:3c: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:A1:F8:84:CB:E1:C2:DB:FF:C8:BB:1A:D8:90:A1:9C:12:B2:0A X509v3 Authority Key Identifier: keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:d5:a4:17:14:bb:b7:6e:b0:8d:5c:29:04:5c:9a:74:2f:a5: 71:c5:c2:9c:db:49:f3:b4:41:9f:b6:a2:ea:9a:31:a2:52:57: c0:53:64:28:a0:6f:82:c1:b8:06:09:d2:a8:cf:68:e8:5f:8c: e4:a9:e1:04:e5:f2:9b:b1:54:75:ad:5f:93:b3:68:e0:24:93: c3:c7:44:ec:06:f3:09:9a:5d:b1:1b:f1:72:e4:a5:db:e1:2a: 82:86:31:de:0c:dd:31:b2:d0:a8:3c:34:2a:10:26:5a:8c:e8: 1e:ea:59:cb:b5:6c:f0:73:ee:8c:79:fb:0d:5e:62:08:dd:3f: 02:4b:73:85:7b:3f:ba:70:fb:e5:ad:f8:ab:ee:88:90:3a:c8: 5b:26:05:51:7c:eb:98:10:d9:6c:a4:26:d7:76:f3:88:94:e3: 1c:16:45:c6:bf:c1:d8:b4:05:08:45:15:b5:fb:80:da:43:af: 16:5c:2d:83:7e:14:24:e0:70:38:7d:98:d5:5f:fe:29:66:c3: 94:99:21:a5:e7:95:39:aa:f9:3b:de:70:a4:9f:45:78:de:bf: b9:fc:ba:8f:96:f2:b3:41:b2:8f:8c:94:7a:6c:a9:af:7a:b3: 09:10:e3:76:54:15:6b:db:f0:63:c9:18:44:71:0b:a7:30:d7: f7:88:46:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK35wlkuNm1oYuB0tVzO0DSiaYCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0 RkIyOTdGMjAeFw0yNjExMTAxMzM4MjhaFw0yNjExMTExNzM5MjhaMDMxMTAvBgNV BAMTKENCRkZBMUY4ODRDQkUxQzJEQkZGQzhCQjFBRDg5MEExOUMxMkIyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZQen/RFtSFyQDNDRE8sedDUD zN5yzUakDIDOAFKRcYVOCwM/jTw0BXWqZMrJlDveGZj4TgagC52CCRe4le9ooTwY 9fR7f6FKs/goAkka/lrIgGI8nN0dW4L5zbg5+NJgT1pjY5pWXD+/3jVXKxxZN0M1 L79s8ZBU1+aJ5frxPCeOHvv3ozhalTpoSWh4GMpOm92NlJQJHFStPbYq6VppN4eQ 36gRxeEWcCLAKyHdoELBBH4HzEE83600nAxZeG9cPL9v1+B4XrRyr/ggAdUmqKYI t0YMDxEDGcUdoknS1epes10Ff0ecAF0OsLZM3G5MYG25LAoARFMXj2XJPCRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/+h+ITL4cLb/8i7GtiQoZwSsgowHwYDVR0j BBgwFoAU/YLrDN8m/J9Su0gtJVomN0+yl/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3Yjc2NzctNjIwNC00MDVmLThiYTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENE RjI2RkM5RjUyQkI0ODJEMjU1QTI2Mzc0RkIyOTdGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyRUIwQ0RGMjZGQzlGNTJCQjQ4MkQyNTVBMjYzNzRGQjI5 N0YyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvRkQ4MkVCMENERjI2RkM5RjUyQkI0ODJEMjU1QTI2 Mzc0RkIyOTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANfVpBcUu7dusI1cKQRcmnQvpXHFwpzbSfO0 QZ+2ouqaMaJSV8BTZCigb4LBuAYJ0qjPaOhfjOSp4QTl8puxVHWtX5OzaOAkk8PH ROwG8wmaXbEb8XLkpdvhKoKGMd4M3TGy0Kg8NCoQJlqM6B7qWcu1bPBz7ox5+w1e YgjdPwJLc4V7P7pw++Wt+KvuiJA6yFsmBVF865gQ2WykJtd284iU4xwWRca/wdi0 BQhFFbX7gNpDrxZcLYN+FCTgcDh9mNVf/ilmw5SZIaXnlTmq+TvecKSfRXjev7n8 uo+W8rNBso+MlHpsqa96swkQ43ZUFWvb8GPJGERxC6cw1/eIRuo= -----END CERTIFICATE-----Generated at Tue Nov 10 17:02:38 2026 by rpki-client