$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: 4WQEdsv1HgJ3VOUmG1CHnEc6IdbUtw32DVOCl4DgalQ= Subject key identifier: 0B:12:6B:67:32:B5:86:41:22:65:07:AA:80:94:28:E9:8D:5D:C0:9A Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 43AC46C10EC81018F209B5979F91D361F06A223C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: D7 Signing time: Fri 09 Oct 2026 22:40:50 +0000 Manifest this update: Fri 09 Oct 2026 22:35:50 +0000 Manifest next update: Sun 11 Oct 2026 00:11:50 +0000 Files and hashes: 1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: OW9oOYz6H+ZWTO9zzlssmZGcn/LbFa2u0DPJQJgh8Po=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 00:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:46:c1:0e:c8:10:18:f2:09:b5:97:9f:91:d3:61:f0:6a:22:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Oct 9 22:35:50 2026 GMT Not After : Oct 11 00:11:50 2026 GMT Subject: CN=0B126B6732B58641226507AA809428E98D5DC09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:9e:6b:8a:d6:39:6c:e5:2f:c7:28:15:4c: a1:cc:65:29:43:69:ec:19:c9:f4:b6:2e:30:37:54: 0c:8b:40:d7:d7:1f:ba:8a:8e:f3:44:b2:5f:a4:c5: 07:3d:77:64:fe:39:52:c6:6b:20:e7:00:7e:c6:eb: 47:32:ec:c4:55:fc:28:f3:37:f2:cb:75:7b:2d:07: 18:46:f0:58:e4:0e:a1:82:e7:d6:cf:ff:2f:ea:ae: 01:c4:44:82:9d:c3:09:91:8d:9a:0e:07:c4:f9:2e: 0c:52:cb:b0:ad:b1:41:b5:53:eb:72:f6:25:4f:37: 71:c1:4b:8e:b9:05:19:a2:7c:aa:9f:fa:ba:da:e8: a5:fc:be:40:a1:4f:b9:cc:ff:4b:3a:e2:a9:90:d8: 75:73:47:da:b0:7f:fe:55:bc:57:7d:ed:61:b8:49: 2b:7b:50:c1:04:be:e6:69:5a:7e:23:54:70:59:6c: 01:c6:a7:ba:ca:c3:d1:3f:85:be:d6:74:1a:85:21: 6d:22:e2:2c:a3:d0:b1:87:9c:39:17:1c:22:00:8d: 10:ab:0c:b3:87:c9:4e:f6:dc:41:f9:0a:1c:bb:7d: 1a:f1:23:44:dd:72:e2:36:03:d5:41:b6:7f:e4:e2: 80:d5:c7:7a:0d:fc:3e:4b:56:34:15:46:f1:93:b6: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:6B:67:32:B5:86:41:22:65:07:AA:80:94:28:E9:8D:5D:C0:9A X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:31:b8:e2:eb:9b:f8:49:58:26:27:18:2d:11:e1:d7:51:f8: 88:41:6a:10:98:8a:c5:a0:75:e8:69:de:34:70:3a:56:fc:41: 78:83:6f:20:a6:e8:dd:b9:08:0e:7e:00:36:7e:aa:b5:af:e6: 9d:b8:d6:c5:e1:07:50:79:16:be:88:84:f0:b9:89:ad:47:13: e7:05:36:af:f6:26:b1:cd:07:b8:05:ed:21:57:16:64:55:e3: a6:b4:08:d9:13:2f:02:15:c9:93:ed:a0:9f:35:66:e2:c8:1f: 69:1f:29:00:75:2f:33:a0:b8:6a:10:38:e0:58:90:69:c7:29: 2e:14:e7:03:8d:dd:bc:4b:29:5d:e7:94:82:84:0c:02:0a:0c: 80:33:1f:81:70:7a:a5:b4:77:e8:d8:7b:66:c9:ab:2b:29:4b: fc:fc:5c:8f:ae:a3:06:db:89:49:76:31:e1:bf:57:da:90:35: 22:5c:60:e8:2e:f7:f7:db:b5:43:27:cb:35:5f:8e:71:dc:e9: 04:9b:54:f2:4b:2a:6e:1f:f0:9a:6f:5e:c2:c6:9c:da:31:3f: 1a:9e:3d:20:5a:7b:49:d0:d1:b3:f5:09:cd:e8:8a:10:cb:34: 58:3f:70:07:01:cd:5c:3b:f8:57:d3:a1:1d:c7:8a:b6:92:d2: 97:d2:07:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6xGwQ7IEBjyCbWXn5HTYfBqIjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjEwMDkyMjM1NTBaFw0yNjEwMTEwMDExNTBaMDMxMTAvBgNV BAMTKDBCMTI2QjY3MzJCNTg2NDEyMjY1MDdBQTgwOTQyOEU5OEQ1REMwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodZ5ritY5bOUvxygVTKHMZSlD aewZyfS2LjA3VAyLQNfXH7qKjvNEsl+kxQc9d2T+OVLGayDnAH7G60cy7MRV/Cjz N/LLdXstBxhG8FjkDqGC59bP/y/qrgHERIKdwwmRjZoOB8T5LgxSy7CtsUG1U+ty 9iVPN3HBS465BRmifKqf+rra6KX8vkChT7nM/0s64qmQ2HVzR9qwf/5VvFd97WG4 SSt7UMEEvuZpWn4jVHBZbAHGp7rKw9E/hb7WdBqFIW0i4iyj0LGHnDkXHCIAjRCr DLOHyU723EH5Chy7fRrxI0TdcuI2A9VBtn/k4oDVx3oN/D5LVjQVRvGTtm+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxJrZzK1hkEiZQeqgJQo6Y1dwJowHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwxuOLrm/hJWCYnGC0R4ddR+IhBahCYisWg dehp3jRwOlb8QXiDbyCm6N25CA5+ADZ+qrWv5p241sXhB1B5Fr6IhPC5ia1HE+cF Nq/2JrHNB7gF7SFXFmRV46a0CNkTLwIVyZPtoJ81ZuLIH2kfKQB1LzOguGoQOOBY kGnHKS4U5wON3bxLKV3nlIKEDAIKDIAzH4FweqW0d+jYe2bJqyspS/z8XI+uowbb iUl2MeG/V9qQNSJcYOgu9/fbtUMnyzVfjnHc6QSbVPJLKm4f8JpvXsLGnNoxPxqe PSBae0nQ0bP1Cc3oihDLNFg/cAcBzVw7+FfToR3HiraS0pfSB7g= -----END CERTIFICATE-----Generated at Sat Oct 10 07:48:50 2026 by rpki-client