$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: jWEJkL/bfOvgyt/Lf/VhGHEUne0ibKNyWPKujAWT8/0= Subject key identifier: 2C:0A:E0:BF:74:1E:2A:79:CE:98:CF:39:E2:92:B8:05:C0:44:E4:6C Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: F2035F923E8D667AA89C7BCEB16DF74277C101 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: FD Signing time: Mon 09 Nov 2026 01:22:20 +0000 Manifest this update: Mon 09 Nov 2026 01:17:20 +0000 Manifest next update: Tue 10 Nov 2026 02:42:20 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) 3: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: ZWy/2a9g3SZBqIfvahnW3QmGZKaLulUVMprYN16UkBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f2:03:5f:92:3e:8d:66:7a:a8:9c:7b:ce:b1:6d:f7:42:77:c1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Nov 9 01:17:20 2026 GMT Not After : Nov 10 02:42:20 2026 GMT Subject: CN=2C0AE0BF741E2A79CE98CF39E292B805C044E46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:a3:d8:57:fd:df:ef:9c:4f:20:8c:04:be: 4e:13:5f:a4:88:93:20:0b:d5:82:43:8c:80:6e:08: 27:b1:a8:70:e1:5b:c8:2b:a2:b7:98:15:70:7b:a3: d9:c9:34:ac:1e:90:f0:ed:56:69:08:c5:cc:05:54: 7b:a4:1c:5b:87:4c:f6:52:f4:2a:e6:c8:7a:33:a3: e4:b5:47:67:40:5b:de:26:a8:59:25:46:d8:95:4d: 83:30:33:a0:a3:35:ae:dc:42:a0:e3:3b:11:9d:22: 44:ba:24:1c:ff:f4:09:e6:8b:f9:8a:49:c6:25:1d: 47:ff:63:4e:7a:3b:46:da:5f:1d:f4:fa:43:26:fb: 57:12:dd:4b:32:73:89:70:ce:0d:33:bd:5c:29:41: ed:48:18:69:38:0b:9a:b5:21:03:30:ec:e7:eb:d3: 90:9a:2e:94:75:a9:2f:08:62:75:6d:0a:5c:34:ff: 5b:e9:ab:aa:f3:76:2a:af:a4:15:97:06:83:25:77: 4b:66:d8:1b:fa:e9:63:82:12:af:33:dd:a6:c0:e5: 11:f9:3c:24:f7:20:1e:11:f9:90:47:78:f9:45:fb: 59:cd:b9:f4:5e:e4:39:98:fc:95:df:77:44:4f:f0: eb:64:1d:9c:c2:f2:b1:76:99:63:b6:77:e5:dd:bc: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:E0:BF:74:1E:2A:79:CE:98:CF:39:E2:92:B8:05:C0:44:E4:6C X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:77:cd:8c:98:e4:cf:c7:4d:b8:00:d9:b5:5f:86:ca:02: fa:9b:9d:86:e1:7d:22:4d:e9:da:0b:c5:3d:2c:34:d0:de:24: c5:d3:75:db:0f:27:5b:26:54:ee:86:62:d0:66:c9:ca:4e:4c: 5c:03:53:78:7f:9a:7d:5f:62:ce:74:65:2d:1b:84:95:89:5c: cd:33:93:ec:db:87:2d:6a:28:1f:98:d8:c5:d7:e9:d2:47:f9: cb:a2:1d:5c:33:62:b4:90:75:17:9e:d5:64:4d:c0:5c:dc:81: 4d:25:43:ad:f9:8a:da:99:97:67:04:f9:0d:ed:c8:6c:6b:8c: ed:57:c9:3e:b3:b2:d7:54:08:cb:6c:2a:62:59:d9:11:9c:92: 36:69:09:f1:9c:eb:01:10:57:90:73:47:41:33:4c:c6:f1:ca: b7:4c:97:a1:f5:b1:74:62:6a:95:7c:21:ef:a7:14:74:f2:13: be:58:af:9e:47:06:e0:a6:10:da:2f:4c:c4:8f:f5:13:f4:e3: 86:da:ec:84:9f:dc:68:67:22:ff:e9:d4:94:a8:9e:52:f4:d9: 2f:aa:30:a9:02:58:65:48:c4:a7:0d:fc:f3:d8:f6:22:bb:5b: e4:1a:d6:97:29:c2:32:1d:7a:e2:80:0d:99:83:93:51:0e:b4: 6d:a3:5c:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPIDX5I+jWZ6qJx7zrFt90J3wQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjExMDkwMTE3MjBaFw0yNjExMTAwMjQyMjBaMDMxMTAvBgNV BAMTKDJDMEFFMEJGNzQxRTJBNzlDRTk4Q0YzOUUyOTJCODA1QzA0NEU0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpKPYV/3f75xPIIwEvk4TX6SI kyAL1YJDjIBuCCexqHDhW8groreYFXB7o9nJNKwekPDtVmkIxcwFVHukHFuHTPZS 9CrmyHozo+S1R2dAW94mqFklRtiVTYMwM6CjNa7cQqDjOxGdIkS6JBz/9Anmi/mK ScYlHUf/Y056O0baXx30+kMm+1cS3Usyc4lwzg0zvVwpQe1IGGk4C5q1IQMw7Ofr 05CaLpR1qS8IYnVtClw0/1vpq6rzdiqvpBWXBoMld0tm2Bv66WOCEq8z3abA5RH5 PCT3IB4R+ZBHePlF+1nNufRe5DmY/JXfd0RP8OtkHZzC8rF2mWO2d+XdvFT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULArgv3QeKnnOmM854pK4BcBE5GwwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED6d82MmOTPx024ANm1X4bKAvqbnYbhfSJN 6doLxT0sNNDeJMXTddsPJ1smVO6GYtBmycpOTFwDU3h/mn1fYs50ZS0bhJWJXM0z k+zbhy1qKB+Y2MXX6dJH+cuiHVwzYrSQdRee1WRNwFzcgU0lQ635itqZl2cE+Q3t yGxrjO1XyT6zstdUCMtsKmJZ2RGckjZpCfGc6wEQV5BzR0EzTMbxyrdMl6H1sXRi apV8Ie+nFHTyE75Yr55HBuCmENovTMSP9RP044ba7ISf3GhnIv/p1JSonlL02S+q MKkCWGVIxKcN/PPY9iK7W+Qa1pcpwjIdeuKADZmDk1EOtG2jXFo= -----END CERTIFICATE-----Generated at Mon Nov 9 21:15:34 2026 by rpki-client