$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: rNk2wec4CKDyfdWcEUJmmzC3uJIiVrUaQBYByyMXjAs= Subject key identifier: C2:48:10:2F:B6:46:29:07:BD:DA:BE:4C:88:BF:1E:FB:34:DE:F1:0C Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 07C3E8FC4E58C8C914E0C484BE6045464B95584A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:27:14 +0000 Manifest this update: Sun 15 Nov 2026 06:22:14 +0000 Manifest next update: Mon 16 Nov 2026 10:05:14 +0000 Files and hashes: 1: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 2: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 3: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: ZFsv3oNKZNndKt61B4TcHFiAqkcjaSuV9NYVpvZ/0BA=) 4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c3:e8:fc:4e:58:c8:c9:14:e0:c4:84:be:60:45:46:4b:95:58:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Nov 15 06:22:14 2026 GMT Not After : Nov 16 10:05:14 2026 GMT Subject: CN=C248102FB6462907BDDABE4C88BF1EFB34DEF10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:e3:44:fb:b0:d4:0c:0d:16:e2:92:39:61: e7:f8:84:63:a8:04:c5:e2:7b:1d:b6:33:96:b7:b4: c7:a9:02:f4:cb:bc:ac:bd:77:57:f1:c8:50:5e:eb: 58:17:05:2f:9d:7d:ee:bf:83:dd:1f:11:9e:be:0f: 61:a2:eb:4f:93:3a:87:e3:7e:22:0a:10:b1:ff:50: 54:d8:42:d8:6e:d2:f8:36:e9:ce:10:e6:13:d4:82: f3:f3:7a:97:15:96:76:15:e0:72:e4:09:3c:cb:e2: 86:7b:23:28:fb:36:56:ac:67:90:69:f4:2a:9a:8d: 56:00:24:01:5f:e5:47:e3:a2:a4:e0:23:85:fa:ab: a3:95:ef:a3:39:4e:0f:20:23:ae:32:f6:64:72:b7: 99:22:c2:b0:c7:2a:5b:db:3f:ae:ea:cc:ef:0d:b6: ce:2f:82:4a:30:18:d4:a7:71:a5:5e:62:83:c6:ec: 9b:e3:dd:38:3d:56:d3:96:de:b8:00:ca:90:ad:63: 97:ff:b3:c1:ad:cb:5e:8e:45:40:e9:51:e5:76:32: 0f:e5:9a:7d:9e:a7:e8:d6:a5:e0:09:eb:04:b2:43: 79:d4:d4:8e:84:d8:b3:7e:45:21:8e:68:30:49:e4: 32:00:31:79:af:8e:1d:a6:35:52:01:7d:3d:c5:51: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:10:2F:B6:46:29:07:BD:DA:BE:4C:88:BF:1E:FB:34:DE:F1:0C X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:70:5d:d4:3b:03:12:b9:47:d9:78:3c:9d:86:08:6c:79:2c: 28:82:79:2f:a0:16:66:eb:64:c6:2a:1a:97:cf:b2:54:4f:18: ef:73:8d:fd:d9:c4:fb:c5:d2:57:7a:3b:fa:7e:d8:32:e8:b7: 72:82:7f:cc:2d:ee:f4:a9:ae:6d:a7:8e:4b:a3:b9:89:39:2b: 44:fc:89:fa:14:c1:ca:cb:9c:eb:3b:2e:2c:8b:d2:56:62:62: 72:39:cd:7b:93:66:8e:ce:18:a3:73:df:47:f2:94:83:43:08: 78:87:a5:1a:bf:c3:7a:a5:a4:4c:bc:d4:34:90:6e:bf:9d:ff: 98:4b:11:bf:96:38:ee:af:fd:f7:0e:44:15:0f:f1:90:73:ce: 36:a7:41:d4:62:b6:6b:c2:f9:61:85:c6:df:7b:bd:1e:ee:67: 2d:ed:a5:3c:40:6a:18:82:27:63:a3:21:e3:c7:0b:fa:0b:05: f4:d5:c9:f0:85:24:45:8c:b8:16:26:74:8a:10:e2:40:24:4a: d2:17:60:9e:38:68:09:85:a7:09:06:03:63:53:03:e2:23:24: 5c:c0:e1:dd:28:9c:10:94:98:30:b3:f3:27:77:c7:30:4e:e3: 67:48:05:55:6d:b9:c9:aa:bd:79:4c:ba:06:ed:77:26:5f:67: 51:64:f3:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8Po/E5YyMkU4MSEvmBFRkuVWEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjExMTUwNjIyMTRaFw0yNjExMTYxMDA1MTRaMDMxMTAvBgNV BAMTKEMyNDgxMDJGQjY0NjI5MDdCRERBQkU0Qzg4QkYxRUZCMzRERUYxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjeNE+7DUDA0W4pI5Yef4hGOo BMXiex22M5a3tMepAvTLvKy9d1fxyFBe61gXBS+dfe6/g90fEZ6+D2Gi60+TOofj fiIKELH/UFTYQthu0vg26c4Q5hPUgvPzepcVlnYV4HLkCTzL4oZ7Iyj7NlasZ5Bp 9CqajVYAJAFf5UfjoqTgI4X6q6OV76M5Tg8gI64y9mRyt5kiwrDHKlvbP67qzO8N ts4vgkowGNSncaVeYoPG7Jvj3Tg9VtOW3rgAypCtY5f/s8Gty16ORUDpUeV2Mg/l mn2ep+jWpeAJ6wSyQ3nU1I6E2LN+RSGOaDBJ5DIAMXmvjh2mNVIBfT3FUW/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkgQL7ZGKQe92r5MiL8e+zTe8QwwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZwXdQ7AxK5R9l4PJ2GCGx5LCiCeS+gFmbr ZMYqGpfPslRPGO9zjf3ZxPvF0ld6O/p+2DLot3KCf8wt7vSprm2njkujuYk5K0T8 ifoUwcrLnOs7LiyL0lZiYnI5zXuTZo7OGKNz30fylINDCHiHpRq/w3qlpEy81DSQ br+d/5hLEb+WOO6v/fcORBUP8ZBzzjanQdRitmvC+WGFxt97vR7uZy3tpTxAahiC J2OjIePHC/oLBfTVyfCFJEWMuBYmdIoQ4kAkStIXYJ44aAmFpwkGA2NTA+IjJFzA 4d0onBCUmDCz8yd3xzBO42dIBVVtucmqvXlMugbtdyZfZ1Fk83M= -----END CERTIFICATE-----Generated at Sun Nov 15 18:22:06 2026 by rpki-client