$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.mft File: F897D48C1B5B7E14CA19BFEC76803AB29E55F922.mft (raw, json) Hash identifier: Flh7QP9R1bqB2flAAJZ4cNyohA8Tp58SAIJYdry2soQ= Subject key identifier: A6:FA:AE:7A:D0:51:9C:10:DF:7F:48:20:BF:1E:7E:E2:4A:27:75:D3 Authority key identifier: F8:97:D4:8C:1B:5B:7E:14:CA:19:BF:EC:76:80:3A:B2:9E:55:F9:22 Certificate issuer: /CN=F897D48C1B5B7E14CA19BFEC76803AB29E55F922 Certificate serial: 2A38B62FD4A3FA81C7D0FFDC1223CE8C220E78EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.mft Manifest number: 25 Signing time: Sat 14 Nov 2026 23:18:20 +0000 Manifest this update: Sat 14 Nov 2026 23:13:20 +0000 Manifest next update: Mon 16 Nov 2026 00:38:20 +0000 Files and hashes: 1: F897D48C1B5B7E14CA19BFEC76803AB29E55F922.crl (hash: 0hTVCSw7KoCgMjooqwftrHPe2DmRIvs3bfEyDy3pgQE=) 2: 3136322e342e3138332e302f32342d3234203d3e20313534373032.roa (hash: 2f2n8GtRCoP1WluZiqZJaIU5xxqz+Bw2LFLXI2hxv2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.crl rsync://rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:38:b6:2f:d4:a3:fa:81:c7:d0:ff:dc:12:23:ce:8c:22:0e:78:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F897D48C1B5B7E14CA19BFEC76803AB29E55F922 Validity Not Before: Nov 14 23:13:20 2026 GMT Not After : Nov 16 00:38:20 2026 GMT Subject: CN=A6FAAE7AD0519C10DF7F4820BF1E7EE24A2775D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:3c:c0:f3:d8:a2:11:0b:b1:a8:d6:a3:26: ec:09:1f:f1:e2:80:2d:7d:46:c8:f2:55:5d:6d:2a: d0:71:07:15:a2:05:5c:3b:fd:67:31:b8:8a:30:b2: d7:cc:3c:a0:26:d0:4b:27:df:14:c6:43:8e:3b:bd: ed:3b:e4:94:20:56:04:a6:5b:d5:ef:4d:f8:dd:f0: bf:63:a4:73:ac:e3:34:0c:75:fb:43:9d:fd:34:8e: e7:c7:48:b9:ca:9c:0a:aa:98:03:0a:62:15:9f:70: e2:ff:2f:20:92:f7:ce:f8:14:cf:a7:e6:5a:8b:ad: e4:c1:5e:19:d0:e5:ae:52:5d:99:96:c1:01:17:6a: 86:e2:44:79:6d:15:75:21:79:50:86:db:4b:50:a8: b2:ea:0b:c1:92:64:b9:aa:3c:94:3a:1e:1d:30:d5: bd:fa:28:f0:ca:b9:64:d1:3f:03:fd:8a:57:6d:9f: 27:e7:c3:6c:11:24:07:88:b6:21:37:38:a0:20:2b: 8d:c4:4c:28:1b:18:3b:c0:d1:c2:7e:83:64:c8:06: 48:3b:db:8d:da:7d:00:56:1e:dc:2b:fc:da:be:70: 13:db:a0:2b:9e:cb:d2:c9:05:1a:3f:db:18:78:93: 6b:c0:f0:ab:8d:44:ad:f6:a8:41:a9:f6:27:e9:51: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FA:AE:7A:D0:51:9C:10:DF:7F:48:20:BF:1E:7E:E2:4A:27:75:D3 X509v3 Authority Key Identifier: keyid:F8:97:D4:8C:1B:5B:7E:14:CA:19:BF:EC:76:80:3A:B2:9E:55:F9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b9a3752-a08f-4c52-ab74-d6189698d13c/1/F897D48C1B5B7E14CA19BFEC76803AB29E55F922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:63:83:09:df:4c:5a:69:dd:fa:aa:32:b0:0b:fd:fd:0e:65: bc:1e:77:db:15:f4:a8:69:57:51:fe:f1:f2:4e:bc:fc:b8:c9: 10:5c:dd:f8:50:d6:f9:c6:eb:99:98:03:63:1f:60:66:cc:e0: fa:84:f5:0c:18:3e:dd:79:67:36:e0:aa:32:9b:95:d0:a9:14: e4:23:8b:5d:bd:ba:f2:15:09:8a:95:eb:27:35:ad:94:d7:11: ad:98:05:e5:70:b1:05:97:bc:f1:26:08:41:20:4a:42:37:d8: 7a:f6:7a:76:71:aa:42:3f:36:a7:b1:45:0e:69:6d:21:65:ea: 8a:97:bd:ab:ae:70:58:6e:5c:98:fa:f4:93:21:7d:38:8a:cd: a7:3a:d0:e3:e6:eb:77:ca:fb:26:4e:9e:e8:28:a4:5c:6a:fa: ed:63:c6:da:2c:e3:d8:62:b6:71:67:fd:e7:c8:98:66:bd:62: c6:ef:d0:82:23:6b:28:3b:b6:61:8f:ee:00:77:ae:a0:cf:f0: 2f:34:4a:45:d6:58:a8:a0:b1:33:10:2f:dc:f1:68:87:de:98: 5a:54:01:11:0c:3b:6c:8b:8d:c7:06:7f:fd:de:4b:f5:d1:5b: 69:d7:da:98:de:b4:58:dc:30:a8:ae:e4:c0:ab:d5:42:9c:98: 50:f8:c3:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKji2L9Sj+oHH0P/cEiPOjCIOeOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5N0Q0OEMxQjVCN0UxNENBMTlCRkVDNzY4MDNBQjI5 RTU1RjkyMjAeFw0yNjExMTQyMzEzMjBaFw0yNjExMTYwMDM4MjBaMDMxMTAvBgNV BAMTKEE2RkFBRTdBRDA1MTlDMTBERjdGNDgyMEJGMUU3RUUyNEEyNzc1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqjzA89iiEQuxqNajJuwJH/Hi gC19RsjyVV1tKtBxBxWiBVw7/WcxuIowstfMPKAm0Esn3xTGQ447ve075JQgVgSm W9XvTfjd8L9jpHOs4zQMdftDnf00jufHSLnKnAqqmAMKYhWfcOL/LyCS9874FM+n 5lqLreTBXhnQ5a5SXZmWwQEXaobiRHltFXUheVCG20tQqLLqC8GSZLmqPJQ6Hh0w 1b36KPDKuWTRPwP9ildtnyfnw2wRJAeItiE3OKAgK43ETCgbGDvA0cJ+g2TIBkg7 243afQBWHtwr/Nq+cBPboCuey9LJBRo/2xh4k2vA8KuNRK32qEGp9ifpUQQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvquetBRnBDff0ggvx5+4konddMwHwYDVR0j BBgwFoAU+JfUjBtbfhTKGb/sdoA6sp5V+SIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI5YTM3NTItYTA4Zi00YzUyLWFiNzQtZDYxODk2OThkMTNjLzEvRjg5N0Q0OEMx QjVCN0UxNENBMTlCRkVDNzY4MDNBQjI5RTU1RjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GODk3RDQ4QzFCNUI3RTE0Q0ExOUJGRUM3NjgwM0FCMjlFNTVG OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI5YTM3NTItYTA4Zi00YzUyLWFi NzQtZDYxODk2OThkMTNjLzEvRjg5N0Q0OEMxQjVCN0UxNENBMTlCRkVDNzY4MDNB QjI5RTU1RjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBjgwnfTFpp3fqqMrAL/f0OZbwed9sV9Khp V1H+8fJOvPy4yRBc3fhQ1vnG65mYA2MfYGbM4PqE9QwYPt15ZzbgqjKbldCpFOQj i129uvIVCYqV6yc1rZTXEa2YBeVwsQWXvPEmCEEgSkI32Hr2enZxqkI/NqexRQ5p bSFl6oqXvauucFhuXJj69JMhfTiKzac60OPm63fK+yZOnugopFxq+u1jxtos49hi tnFn/efImGa9Ysbv0IIjayg7tmGP7gB3rqDP8C80SkXWWKigsTMQL9zxaIfemFpU AREMO2yLjccGf/3eS/XRW2nX2pjetFjcMKiu5MCr1UKcmFD4w3Y= -----END CERTIFICATE-----Generated at Sun Nov 15 16:32:45 2026 by rpki-client