$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.mft (raw, json) Hash identifier: hW7jIoTtP5j83+KmXElmsvNUsNHA576UlOXoNO/R1bo= Subject key identifier: E2:37:FA:B0:B7:41:0E:D5:49:E3:0C:04:1C:2F:9D:2A:4E:C0:A4:A8 Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Certificate serial: 703BD8F6DDDF3FC2CBA4B13E96D3EED0AF3EEE95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 17:42:44 +0000 Manifest this update: Mon 09 Nov 2026 17:37:44 +0000 Manifest next update: Tue 10 Nov 2026 18:59:44 +0000 Files and hashes: 1: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: aB7QEaSEcJTWbjfIxBku5UcRO6NDRrQsqaho45FCjZI=) 2: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=) 3: 2FE1FA7D4DD3388355BABAD73020013D485C168C.crl (hash: E7CYYwoHcGSkrfdLyNKu/TN5ro0+rx1QJta+2LcE0Ho=) 4: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: QUvsonqLXdsih84z12pFdTCBAMOMy8pmVg5n4B/zEOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 18:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3b:d8:f6:dd:df:3f:c2:cb:a4:b1:3e:96:d3:ee:d0:af:3e:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Validity Not Before: Nov 9 17:37:44 2026 GMT Not After : Nov 10 18:59:44 2026 GMT Subject: CN=E237FAB0B7410ED549E30C041C2F9D2A4EC0A4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:97:78:58:8c:7e:4e:0f:50:0d:e7:06:6e: a7:68:8a:e5:d7:2c:d1:dd:1b:bd:1d:9d:ae:00:a6: de:45:0c:1f:cb:f5:83:87:fa:c4:9c:23:75:a8:d5: a1:d1:fd:c5:3a:58:b0:2a:bd:93:c2:f1:88:2a:8a: b7:d7:78:85:89:42:bb:6e:08:db:0c:35:8b:ad:6e: f7:e2:c5:32:44:6d:ac:77:44:3c:e8:a2:79:bb:43: 8a:94:d1:30:50:b3:49:96:86:c4:24:3d:c6:1a:9f: 3e:c0:19:44:22:cb:d7:25:66:15:35:ce:6d:05:26: 9e:59:15:b8:fd:89:c8:c7:39:26:ab:fd:05:7a:a2: fa:ad:57:d8:33:25:db:b4:09:aa:55:2b:f3:a9:43: bc:e7:92:bd:4f:20:df:24:69:66:09:fc:ff:f3:cf: e9:10:68:b6:21:f4:05:bb:de:ba:e8:08:53:5a:c1: 27:a7:37:3c:25:da:5a:9c:f8:b2:d6:f1:0d:76:67: e2:cc:d7:0c:75:04:7d:13:6c:2c:05:ac:d1:5b:ff: f2:00:a0:40:b2:40:29:b0:c9:ec:9c:69:fa:94:cc: 1e:e1:f9:a8:1a:b0:bd:ab:a9:37:39:d6:21:7b:c5: 22:65:98:5a:ed:c9:f6:84:0e:a0:db:9c:62:e1:08: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:FA:B0:B7:41:0E:D5:49:E3:0C:04:1C:2F:9D:2A:4E:C0:A4:A8 X509v3 Authority Key Identifier: keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:d5:af:73:84:4a:51:ff:12:2b:94:c7:bb:55:14:a3:8d: f2:ee:86:60:f7:c3:27:f6:d1:71:f0:0b:e2:c4:a2:1c:ec:a1: 99:c4:58:83:21:a0:fe:e5:d1:36:dd:11:a9:eb:60:59:c8:a5: 9b:34:c4:1f:7b:a4:ef:fa:db:31:65:f1:e3:ee:4e:f7:66:14: db:5b:a1:55:cc:97:0c:ae:d6:e9:15:41:7c:c0:96:28:2a:73: 72:61:28:c5:dc:96:4a:dc:d3:d2:e7:ed:48:2d:df:79:98:64: b6:5b:ae:0a:69:7d:44:92:f7:7e:29:f7:82:24:e6:01:e1:b8: 32:39:87:c1:d4:9c:81:5a:8c:01:bf:97:3c:00:3c:6c:dc:ee: 8a:ac:68:fb:98:6d:74:e7:5d:a0:f0:a8:f2:c8:9b:91:ee:3d: eb:56:46:05:ba:0c:dd:0f:07:52:04:14:11:8a:31:a5:47:31: f9:fe:82:a4:7d:92:f2:9b:dc:16:f2:9f:60:6c:bf:d3:9c:65: 39:f2:3b:99:80:41:07:2f:14:87:13:74:3f:f4:61:80:f8:24: 9f:45:70:5c:39:34:ac:6e:ca:94:87:e2:fa:18:64:94:57:63: 0c:ba:40:dd:7b:4e:bc:da:b3:18:91:24:70:c1:ed:e5:67:81: 90:f7:e2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDvY9t3fP8LLpLE+ltPu0K8+7pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0 ODVDMTY4QzAeFw0yNjExMDkxNzM3NDRaFw0yNjExMTAxODU5NDRaMDMxMTAvBgNV BAMTKEUyMzdGQUIwQjc0MTBFRDU0OUUzMEMwNDFDMkY5RDJBNEVDMEE0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWJd4WIx+Tg9QDecGbqdoiuXX LNHdG70dna4Apt5FDB/L9YOH+sScI3Wo1aHR/cU6WLAqvZPC8YgqirfXeIWJQrtu CNsMNYutbvfixTJEbax3RDzoonm7Q4qU0TBQs0mWhsQkPcYanz7AGUQiy9clZhU1 zm0FJp5ZFbj9icjHOSar/QV6ovqtV9gzJdu0CapVK/OpQ7znkr1PIN8kaWYJ/P/z z+kQaLYh9AW73rroCFNawSenNzwl2lqc+LLW8Q12Z+LM1wx1BH0TbCwFrNFb//IA oECyQCmwyeycafqUzB7h+agasL2rqTc51iF7xSJlmFrtyfaEDqDbnGLhCMAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jf6sLdBDtVJ4wwEHC+dKk7ApKgwHwYDVR0j BBgwFoAUL+H6fU3TOINVurrXMCABPUhcFowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkNGY4NjktNGRiNi00YjBhLWFhYjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0 REQzMzg4MzU1QkFCQUQ3MzAyMDAxM0Q0ODVDMTY4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkUxRkE3RDRERDMzODgzNTVCQUJBRDczMDIwMDEzRDQ4NUMx NjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvMkZFMUZBN0Q0REQzMzg4MzU1QkFCQUQ3MzAyMDAx M0Q0ODVDMTY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErH1a9zhEpR/xIrlMe7VRSjjfLuhmD3wyf2 0XHwC+LEohzsoZnEWIMhoP7l0TbdEanrYFnIpZs0xB97pO/62zFl8ePuTvdmFNtb oVXMlwyu1ukVQXzAligqc3JhKMXclkrc09Ln7Ugt33mYZLZbrgppfUSS934p94Ik 5gHhuDI5h8HUnIFajAG/lzwAPGzc7oqsaPuYbXTnXaDwqPLIm5HuPetWRgW6DN0P B1IEFBGKMaVHMfn+gqR9kvKb3Bbyn2Bsv9OcZTnyO5mAQQcvFIcTdD/0YYD4JJ9F cFw5NKxuypSH4voYZJRXYwy6QN17TrzasxiRJHDB7eVngZD34u8= -----END CERTIFICATE-----Generated at Tue Nov 10 03:36:42 2026 by rpki-client