$ rpki-client -vvvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: woVAViaLVv6vGMRYXYZSSkhqWd7Egeizj1i7tyuDjxE= Subject key identifier: 41:9D:AB:68:14:D7:DF:A8:E8:C3:D1:FC:05:0B:E7:4A:81:4F:30:D2 Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 10750815D86C93BFB52987DF8AB707976B3E5C1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 09:10:37 +0000 Manifest this update: Sun 15 Nov 2026 09:05:37 +0000 Manifest next update: Mon 16 Nov 2026 11:49:37 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 2: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: IGtbZrOgwVHAYklE45JpVelDWldLAzD2QOeUZ/77aqw=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 4: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:75:08:15:d8:6c:93:bf:b5:29:87:df:8a:b7:07:97:6b:3e:5c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Nov 15 09:05:37 2026 GMT Not After : Nov 16 11:49:37 2026 GMT Subject: CN=419DAB6814D7DFA8E8C3D1FC050BE74A814F30D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:00:51:ad:7a:df:f5:44:ee:c6:b1:a0:5e: 9e:9d:29:3a:b0:be:b8:99:93:c6:2b:44:c0:b4:8d: 3b:b2:0d:f3:ab:36:6f:83:16:84:0d:d9:ee:c1:c1: a4:0a:a0:76:11:bb:64:77:b6:cd:57:3f:81:ea:19: 26:21:39:87:45:12:00:7b:40:9a:1b:dd:bc:0c:4b: c1:e1:68:41:b8:6a:03:2c:de:a8:f8:6d:16:41:b2: ff:54:c5:7f:2c:ce:c4:ad:b7:c5:6d:71:e9:0d:f0: f1:91:ba:96:de:40:e1:31:51:7b:68:8f:bf:bb:14: 37:02:b5:c8:23:6b:95:e7:0f:0e:ba:58:e1:0f:9b: 3d:c0:b3:a5:68:74:81:15:32:1e:08:49:ac:b1:cf: 44:c8:ed:5c:71:1c:3e:b3:c2:b1:43:17:02:30:94: c3:94:3b:65:0e:8d:1c:be:ff:ac:c8:50:21:d1:a2: aa:54:c2:c9:68:88:b0:50:67:31:6e:49:8c:01:5d: 79:6e:8d:20:15:70:fb:89:e9:a6:51:f5:e6:93:a4: 0c:94:45:0e:90:7b:a1:d2:bc:d7:27:e7:47:d0:17: 55:a0:b9:08:0b:ba:85:39:86:3f:86:c9:4a:f6:dd: 5b:6b:0d:24:db:bf:de:e2:cc:8e:64:aa:4e:3b:ba: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:AB:68:14:D7:DF:A8:E8:C3:D1:FC:05:0B:E7:4A:81:4F:30:D2 X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:29:ad:b6:61:0b:01:bb:c3:91:aa:fc:83:4c:0c:8b:6e:58: d1:c1:8f:fa:b0:d9:3f:ea:26:50:f6:45:95:8b:79:2a:3e:da: 38:1d:f7:c5:3a:04:bd:37:2c:11:35:8d:3f:0b:b3:65:a3:ce: c3:69:60:35:e4:36:56:7b:9e:7c:86:45:38:62:ad:16:e3:22: 9c:2c:f5:3b:9c:17:6d:3e:90:97:79:c4:9e:cc:c9:d6:19:6c: a2:c6:f6:b4:57:29:fd:60:fd:ee:f4:9b:e8:fb:a8:f3:ec:a9: f3:02:27:03:07:29:74:c8:4a:bf:c0:94:0c:4c:d5:13:d9:96: 9e:23:44:0b:bc:37:e7:04:d6:db:be:18:69:5d:55:9b:ec:64: 62:c1:dc:15:4c:68:b6:2c:45:d7:d3:3c:db:86:90:30:c9:c4: 37:b1:fc:a1:1b:7d:6d:3c:b5:ec:5f:a4:6a:05:7a:83:c5:5b: 23:73:2f:c3:dd:9c:9f:4c:c4:ce:00:a9:b1:c1:1d:8e:01:52: 68:5c:fe:13:ef:83:0e:d5:2c:ae:ed:0a:0a:d8:dc:36:6e:a4: 3d:7e:1d:40:20:7c:01:d0:0e:0a:96:5c:ec:c8:05:55:50:b5: 6f:e8:ea:27:92:d1:37:3d:35:fd:b3:50:92:02:46:73:05:3c: 6a:1e:6b:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHUIFdhsk7+1KYffircHl2s+XBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjExMTUwOTA1MzdaFw0yNjExMTYxMTQ5MzdaMDMxMTAvBgNV BAMTKDQxOURBQjY4MTREN0RGQThFOEMzRDFGQzA1MEJFNzRBODE0RjMwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjABRrXrf9UTuxrGgXp6dKTqw vriZk8YrRMC0jTuyDfOrNm+DFoQN2e7BwaQKoHYRu2R3ts1XP4HqGSYhOYdFEgB7 QJob3bwMS8HhaEG4agMs3qj4bRZBsv9UxX8szsStt8VtcekN8PGRupbeQOExUXto j7+7FDcCtcgja5XnDw66WOEPmz3As6VodIEVMh4ISayxz0TI7VxxHD6zwrFDFwIw lMOUO2UOjRy+/6zIUCHRoqpUwsloiLBQZzFuSYwBXXlujSAVcPuJ6aZR9eaTpAyU RQ6Qe6HSvNcn50fQF1WguQgLuoU5hj+GyUr23VtrDSTbv97izI5kqk47upe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZ2raBTX36jow9H8BQvnSoFPMNIwHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIprbZhCwG7w5Gq/INMDItuWNHBj/qw2T/q JlD2RZWLeSo+2jgd98U6BL03LBE1jT8Ls2WjzsNpYDXkNlZ7nnyGRThirRbjIpws 9TucF20+kJd5xJ7MydYZbKLG9rRXKf1g/e70m+j7qPPsqfMCJwMHKXTISr/AlAxM 1RPZlp4jRAu8N+cE1tu+GGldVZvsZGLB3BVMaLYsRdfTPNuGkDDJxDex/KEbfW08 texfpGoFeoPFWyNzL8PdnJ9MxM4AqbHBHY4BUmhc/hPvgw7VLK7tCgrY3DZupD1+ HUAgfAHQDgqWXOzIBVVQtW/o6ieS0Tc9Nf2zUJICRnMFPGoea3M= -----END CERTIFICATE-----Generated at Sun Nov 15 21:03:09 2026 by rpki-client