$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json) Hash identifier: KedKIFl2PRS94vduKX9W9Y3xaSflldSy40p/d23fbpw= Subject key identifier: 41:94:51:32:69:72:D6:17:CB:82:A0:97:2B:F0:19:A3:55:9C:60:9B Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Certificate serial: 2BBD020BA9F71B8D2E773DCE9D134A99925FA76D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft Manifest number: D4 Signing time: Fri 09 Oct 2026 06:36:04 +0000 Manifest this update: Fri 09 Oct 2026 06:31:04 +0000 Manifest next update: Sat 10 Oct 2026 10:35:04 +0000 Files and hashes: 1: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=) 2: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: 4y8LUIdwQM+Lb0I4YZYZ8nkXTVf9gJ+v6Int22iCufg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bd:02:0b:a9:f7:1b:8d:2e:77:3d:ce:9d:13:4a:99:92:5f:a7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Validity Not Before: Oct 9 06:31:04 2026 GMT Not After : Oct 10 10:35:04 2026 GMT Subject: CN=419451326972D617CB82A0972BF019A3559C609B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:63:37:a3:96:ca:98:17:a6:9b:f5:f5:b8: 80:3d:1e:5a:6a:2a:ff:8b:24:95:90:c9:43:9c:d6: bb:25:e8:db:3b:e8:8d:39:d4:45:e9:46:71:ff:4b: 9f:90:c5:a1:22:f8:2f:7b:1b:8d:dd:33:b2:d3:dd: 8c:df:33:cf:e7:13:64:dc:da:bd:8b:da:40:cf:45: bd:1b:61:ee:63:03:68:2b:82:5b:d4:b6:53:cc:e0: c8:3d:24:aa:c5:56:58:15:da:7d:58:d0:f3:79:94: bc:d1:f7:1e:37:86:4c:95:31:48:37:0f:4d:b1:3f: 67:de:e0:99:38:7e:c6:ac:f1:47:b8:2a:75:6a:4b: b9:10:53:22:8b:30:c9:ee:d4:09:ed:02:35:ed:23: 4e:7d:8d:92:74:66:36:15:ad:05:67:b1:44:ee:dc: 61:bf:cb:ed:b4:30:36:38:0f:d8:44:cf:e3:ec:b9: 1a:be:a1:1b:54:46:a5:06:f4:d2:89:e2:7f:dc:dc: 9e:eb:84:78:bd:50:55:4c:04:f2:ac:33:73:f7:1a: b4:03:ce:e5:02:43:74:64:35:08:01:26:b0:a5:4b: dd:c7:5c:2b:bb:ec:ae:24:06:86:75:06:06:01:c4: 83:ee:ad:c7:2c:cd:b0:59:79:66:06:4c:0e:9a:d2: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:51:32:69:72:D6:17:CB:82:A0:97:2B:F0:19:A3:55:9C:60:9B X509v3 Authority Key Identifier: keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:4e:3d:6f:24:fa:e5:a3:9e:93:96:a6:25:ee:ff:af:4b: d2:69:da:74:a3:54:d1:de:31:97:03:77:1f:27:f7:c5:81:11: 9c:fd:fc:8e:28:63:b5:52:26:cf:4b:69:ea:ec:6b:d0:10:99: 66:6d:23:6f:f8:1f:97:40:e0:a9:fc:87:65:3f:ed:3b:92:85: f9:d8:57:c2:c1:f2:bd:93:fe:9d:99:bb:c7:5c:90:f2:47:6a: a4:ca:bf:d1:0a:e2:37:3b:27:05:98:d6:53:7c:9e:01:66:df: 8c:88:f0:7e:11:fa:ac:61:21:54:f9:25:66:c0:29:de:fd:78: a3:99:63:d5:50:25:91:f8:7b:fd:85:76:57:8a:98:8c:17:27: 9b:c2:5c:34:64:27:80:c5:d3:cf:6b:dd:51:06:1f:0a:0e:1e: 4c:1e:5b:e6:31:7d:27:30:61:bb:df:76:53:bd:c7:53:08:93: 77:3a:aa:d1:aa:48:57:34:81:98:b0:fe:09:7b:cb:98:f0:aa: 3e:f9:2c:09:6e:a4:6f:b4:3b:e3:b9:24:7f:24:57:bf:53:a4: 68:7b:bc:ac:ef:c8:59:23:a1:f2:56:53:4e:ca:2e:90:86:98: 15:2d:16:ab:ff:85:19:43:77:ba:fa:c0:1f:6a:45:d5:b4:e9: 7a:0c:83:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK70CC6n3G40udz3OnRNKmZJfp20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1 NkU0NEIyNzAeFw0yNjEwMDkwNjMxMDRaFw0yNjEwMTAxMDM1MDRaMDMxMTAvBgNV BAMTKDQxOTQ1MTMyNjk3MkQ2MTdDQjgyQTA5NzJCRjAxOUEzNTU5QzYwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/WM3o5bKmBemm/X1uIA9Hlpq Kv+LJJWQyUOc1rsl6Ns76I051EXpRnH/S5+QxaEi+C97G43dM7LT3YzfM8/nE2Tc 2r2L2kDPRb0bYe5jA2grglvUtlPM4Mg9JKrFVlgV2n1Y0PN5lLzR9x43hkyVMUg3 D02xP2fe4Jk4fsas8Ue4KnVqS7kQUyKLMMnu1AntAjXtI059jZJ0ZjYVrQVnsUTu 3GG/y+20MDY4D9hEz+PsuRq+oRtURqUG9NKJ4n/c3J7rhHi9UFVMBPKsM3P3GrQD zuUCQ3RkNQgBJrClS93HXCu77K4kBoZ1BgYBxIPurccszbBZeWYGTA6a0sI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZRRMmly1hfLgqCXK/AZo1WcYJswHwYDVR0j BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0 QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi4Tj1vJPrlo56TlqYl7v+vS9Jp2nSjVNHe MZcDdx8n98WBEZz9/I4oY7VSJs9Laersa9AQmWZtI2/4H5dA4Kn8h2U/7TuShfnY V8LB8r2T/p2Zu8dckPJHaqTKv9EK4jc7JwWY1lN8ngFm34yI8H4R+qxhIVT5JWbA Kd79eKOZY9VQJZH4e/2FdleKmIwXJ5vCXDRkJ4DF089r3VEGHwoOHkweW+YxfScw YbvfdlO9x1MIk3c6qtGqSFc0gZiw/gl7y5jwqj75LAlupG+0O+O5JH8kV79TpGh7 vKzvyFkjofJWU07KLpCGmBUtFqv/hRlDd7r6wB9qRdW06XoMg+4= -----END CERTIFICATE-----Generated at Fri Oct 9 22:50:47 2026 by rpki-client