$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft File: 993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json) Hash identifier: DycWobM3+vsozWTPe5nBkOw0uk9SWMsh0DGgIWjm72o= Subject key identifier: EB:A5:EA:D6:9C:E8:19:5C:59:74:CA:BD:AA:F6:AC:D9:BD:F3:CF:0C Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 Certificate issuer: /CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Certificate serial: 15E3223674758EAC38E3A8C7701E6D4ADCADC8C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 11:12:01 +0000 Manifest this update: Thu 08 Oct 2026 11:07:01 +0000 Manifest next update: Fri 09 Oct 2026 14:01:01 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=) 2: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: Gp2ACVzTLbKj+n6HzFrXMmpsRHQNHpNWEZhQBPNdTAI=) 3: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e3:22:36:74:75:8e:ac:38:e3:a8:c7:70:1e:6d:4a:dc:ad:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Validity Not Before: Oct 8 11:07:01 2026 GMT Not After : Oct 9 14:01:01 2026 GMT Subject: CN=EBA5EAD69CE8195C5974CABDAAF6ACD9BDF3CF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:a4:d5:20:43:47:b5:f6:d5:ca:b1:5f:8c: 2c:bc:77:88:bf:f5:97:af:78:40:f8:48:ab:7b:91: e2:64:72:23:cb:a8:bd:ce:23:ef:ef:b5:d0:97:49: 82:33:16:6f:2f:81:41:c4:bf:50:95:18:0d:08:42: 3b:98:be:37:d1:c8:c0:30:37:dc:d3:8f:8a:ff:55: b9:6c:62:73:9b:19:2b:bc:3a:ff:42:ba:60:a9:29: c5:7c:05:85:03:db:e4:47:0d:b6:3d:e9:f1:50:28: e0:ab:40:fa:4d:e6:43:c8:43:e5:0f:b1:b5:62:e4: fc:89:4b:92:52:67:02:80:17:07:1b:16:b2:22:ab: 79:a0:db:2d:98:cb:7b:38:c0:af:f7:5a:a9:5a:e7: a3:47:1b:ad:85:06:4d:81:4c:23:26:0c:94:d8:38: 6e:45:d8:22:ba:6d:c9:10:44:ce:0a:99:af:1a:2e: aa:7d:bb:3a:49:90:b1:66:3b:e8:99:40:22:c5:ce: f0:e7:88:2c:85:bf:87:7d:f5:d9:17:cc:21:c4:8a: 2a:1e:e3:2f:15:78:7c:dd:a1:85:85:51:fd:4f:9a: ff:30:41:ca:c3:13:87:18:29:5c:fe:86:1c:e4:25: 8e:da:28:5c:5e:ad:cc:3a:62:a0:b3:f7:94:ce:fc: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A5:EA:D6:9C:E8:19:5C:59:74:CA:BD:AA:F6:AC:D9:BD:F3:CF:0C X509v3 Authority Key Identifier: keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:60:a6:52:9e:45:4e:50:78:81:0d:c5:3c:88:da:dd:fe:31: 14:d3:7c:34:17:86:24:0a:33:11:56:84:6f:79:bb:39:2c:9d: 89:3f:82:ba:ac:9c:bb:65:67:fc:00:29:63:e2:11:cb:13:43: ac:29:0d:ae:ac:86:5e:f9:f1:18:6f:b3:71:e9:bd:29:eb:d4: 13:3d:0d:0e:67:cc:5d:92:77:cd:f2:25:73:31:6d:b3:82:97: 2b:4c:3c:95:90:fd:41:8f:e5:b5:3f:f3:ca:8d:66:7e:2f:a2: 9f:23:70:3e:db:59:b0:b7:a7:c2:25:f9:08:23:3f:ab:ec:bb: bb:8c:38:e7:dd:ce:c9:1c:8c:9d:6e:10:94:c6:5c:f6:29:3b: 12:ef:1c:0a:27:74:8f:bf:83:97:f5:69:d6:6d:e6:88:66:69: be:a2:a4:1d:85:aa:90:04:eb:6b:33:40:56:27:74:1b:6b:5f: 40:16:f4:f4:5c:91:0b:7b:e4:eb:a6:39:f5:12:eb:09:a1:a2: 00:d0:31:d9:59:56:f1:44:3b:dd:7b:50:c5:95:69:c0:4f:4b: 78:24:37:0a:68:af:00:12:3d:19:48:b4:af:c6:e4:fd:c8:23: 36:aa:7b:95:57:8a:df:80:23:01:93:87:c3:7d:24:ac:3b:8c: 42:b2:da:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeMiNnR1jqw446jHcB5tStytyMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENB QzBEMjg4NTAeFw0yNjEwMDgxMTA3MDFaFw0yNjEwMDkxNDAxMDFaMDMxMTAvBgNV BAMTKEVCQTVFQUQ2OUNFODE5NUM1OTc0Q0FCREFBRjZBQ0Q5QkRGM0NGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejKTVIENHtfbVyrFfjCy8d4i/ 9ZeveED4SKt7keJkciPLqL3OI+/vtdCXSYIzFm8vgUHEv1CVGA0IQjuYvjfRyMAw N9zTj4r/VblsYnObGSu8Ov9CumCpKcV8BYUD2+RHDbY96fFQKOCrQPpN5kPIQ+UP sbVi5PyJS5JSZwKAFwcbFrIiq3mg2y2Yy3s4wK/3Wqla56NHG62FBk2BTCMmDJTY OG5F2CK6bckQRM4Kma8aLqp9uzpJkLFmO+iZQCLFzvDniCyFv4d99dkXzCHEiioe 4y8VeHzdoYWFUf1Pmv8wQcrDE4cYKVz+hhzkJY7aKFxercw6YqCz95TO/LYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66Xq1pzoGVxZdMq9qvas2b3zzwwwHwYDVR0j BBgwFoAUmT6ToGZKnZAtl481lpKa3KwNKIUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBlODg3NzQtODQ0Zi00NjE2LThiZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2 NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENBQzBEMjg4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTNFOTNBMDY2NEE5RDkwMkQ5NzhGMzU5NjkyOUFEQ0FDMEQy ODg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlB RENBQzBEMjg4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRgplKeRU5QeIENxTyI2t3+MRTTfDQXhiQK MxFWhG95uzksnYk/grqsnLtlZ/wAKWPiEcsTQ6wpDa6shl758Rhvs3HpvSnr1BM9 DQ5nzF2Sd83yJXMxbbOClytMPJWQ/UGP5bU/88qNZn4vop8jcD7bWbC3p8Il+Qgj P6vsu7uMOOfdzskcjJ1uEJTGXPYpOxLvHAondI+/g5f1adZt5ohmab6ipB2FqpAE 62szQFYndBtrX0AW9PRckQt75OumOfUS6wmhogDQMdlZVvFEO917UMWVacBPS3gk NwporwASPRlItK/G5P3IIzaqe5VXit+AIwGTh8N9JKw7jEKy2io= -----END CERTIFICATE-----Generated at Fri Oct 9 00:59:40 2026 by rpki-client