$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: SU0sLIKTgT5oKtz9zSEWzLfdBoMd67TNLSvjvi6I7ho= Subject key identifier: AC:CC:3C:1E:16:F7:AD:25:70:9F:F4:37:17:B9:2C:A8:20:FE:80:CC Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 0EAC39593D38811844F3A9D89FE258DACA5277B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 14:44:22 +0000 Manifest this update: Mon 09 Nov 2026 14:39:22 +0000 Manifest next update: Tue 10 Nov 2026 15:06:22 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) 3: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: hMnkar2Zv8pTtIUPp4GHChqqtYe2XpfMSCDAdLn5d6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 15:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ac:39:59:3d:38:81:18:44:f3:a9:d8:9f:e2:58:da:ca:52:77:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Nov 9 14:39:22 2026 GMT Not After : Nov 10 15:06:22 2026 GMT Subject: CN=ACCC3C1E16F7AD25709FF43717B92CA820FE80CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:9d:61:8b:f5:84:00:15:0d:a8:08:33:eb: 05:9c:c9:0c:81:30:5b:26:c1:91:95:e9:88:b1:da: 5e:31:52:62:6f:42:ea:e7:e6:a0:17:22:5a:7a:70: fd:74:53:dc:87:11:4e:c4:66:92:eb:05:08:1b:56: 46:58:b6:c8:8e:57:ec:65:cc:fb:2f:84:cc:dd:c4: 4b:f2:c2:21:ce:5b:3a:a6:d6:84:5c:54:95:da:1a: 7f:56:d1:63:c1:ac:9d:d0:33:11:b4:0b:ab:44:ea: dc:92:0e:83:4e:12:2e:2c:30:26:dc:f4:f7:e3:51: 92:72:98:81:ef:78:bb:a4:2e:ab:05:2c:2f:49:64: 12:72:70:a4:dd:e5:54:ba:e3:6a:1d:c0:02:09:c3: 60:94:92:8b:c5:b0:d1:21:16:b1:51:09:b9:64:8c: 7b:1d:99:0e:2e:6a:27:ff:56:c6:f1:9b:0f:db:3c: 65:c5:22:e0:03:dc:dc:fa:d1:38:df:7d:85:74:1f: d3:24:fc:d3:a1:b2:b3:17:0b:3b:4d:82:cf:92:ef: 19:97:ff:45:1b:cc:f5:f3:0f:b6:f2:b9:1a:a3:f0: 86:40:89:0a:48:af:ad:ce:c6:f7:fb:88:02:79:5f: 90:67:d1:f7:65:f7:b0:e4:f7:a3:8e:c6:2e:ac:78: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:3C:1E:16:F7:AD:25:70:9F:F4:37:17:B9:2C:A8:20:FE:80:CC X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6b:ef:1d:9c:ba:c7:8b:12:f0:f3:ec:99:2f:7a:ad:b5:85: df:e9:bc:82:5f:99:6e:2c:a6:4c:f8:4a:b3:a8:ab:3b:2b:57: 1a:a1:f3:db:c3:54:6e:38:d5:88:ce:c5:78:01:92:7d:d6:36: dc:dc:a6:36:8a:8b:34:c6:11:3b:35:5b:a4:76:2d:6e:12:71: b3:04:5b:54:33:fd:5b:75:18:16:44:d6:1a:cc:24:47:97:8a: 9c:bf:2a:27:3d:18:7d:91:ac:3c:b8:1c:48:fc:e3:fd:5e:3e: 97:6b:4a:94:cb:3c:ae:e2:a2:ca:d1:52:f4:af:df:02:f9:40: be:4f:27:c0:b4:0c:2b:77:d9:95:61:6a:7c:4e:9c:cb:c0:54: 92:d4:81:8f:e0:c9:88:e2:fa:d3:d1:bd:95:d9:0d:39:55:eb: bc:f1:b3:8d:db:55:66:77:7f:2c:8f:5c:76:bd:c3:f2:7c:45: 74:c5:37:19:19:3a:3d:90:ed:f9:99:5b:29:11:aa:e6:38:08: ad:8f:90:8b:00:32:96:ca:1d:f3:37:43:ba:4d:0d:e7:63:99: 82:ef:ef:d0:19:1e:d8:f8:58:e6:1b:b7:0a:e1:04:00:51:ed: 51:c6:45:f1:03:5e:e0:76:fd:06:1d:7f:36:8d:6f:ab:1f:b2: 39:89:10:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqw5WT04gRhE86nYn+JY2spSd7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjExMDkxNDM5MjJaFw0yNjExMTAxNTA2MjJaMDMxMTAvBgNV BAMTKEFDQ0MzQzFFMTZGN0FEMjU3MDlGRjQzNzE3QjkyQ0E4MjBGRTgwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVp1hi/WEABUNqAgz6wWcyQyB MFsmwZGV6Yix2l4xUmJvQurn5qAXIlp6cP10U9yHEU7EZpLrBQgbVkZYtsiOV+xl zPsvhMzdxEvywiHOWzqm1oRcVJXaGn9W0WPBrJ3QMxG0C6tE6tySDoNOEi4sMCbc 9PfjUZJymIHveLukLqsFLC9JZBJycKTd5VS642odwAIJw2CUkovFsNEhFrFRCblk jHsdmQ4uaif/Vsbxmw/bPGXFIuAD3Nz60TjffYV0H9Mk/NOhsrMXCztNgs+S7xmX /0UbzPXzD7byuRqj8IZAiQpIr63Oxvf7iAJ5X5Bn0fdl97Dk96OOxi6sePelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMw8Hhb3rSVwn/Q3F7ksqCD+gMwwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtr7x2cuseLEvDz7Jkveq21hd/pvIJfmW4s pkz4SrOoqzsrVxqh89vDVG441YjOxXgBkn3WNtzcpjaKizTGETs1W6R2LW4ScbME W1Qz/Vt1GBZE1hrMJEeXipy/Kic9GH2RrDy4HEj84/1ePpdrSpTLPK7iosrRUvSv 3wL5QL5PJ8C0DCt32ZVhanxOnMvAVJLUgY/gyYji+tPRvZXZDTlV67zxs43bVWZ3 fyyPXHa9w/J8RXTFNxkZOj2Q7fmZWykRquY4CK2PkIsAMpbKHfM3Q7pNDedjmYLv 79AZHtj4WOYbtwrhBABR7VHGRfEDXuB2/QYdfzaNb6sfsjmJEHU= -----END CERTIFICATE-----Generated at Tue Nov 10 07:55:55 2026 by rpki-client