$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: mxvz+4lEW5fNf5P+pirgBKgGXOR2NzRhXA+muCwy5g0= Subject key identifier: EB:D8:EF:2C:66:F2:F5:26:0A:B8:E8:4D:AD:D6:0C:4D:86:B0:47:1E Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 28F1F8B6981422C7AC8FECB033D454A558566263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: 0104 Signing time: Sun 15 Nov 2026 03:28:26 +0000 Manifest this update: Sun 15 Nov 2026 03:23:26 +0000 Manifest next update: Mon 16 Nov 2026 06:08:26 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 2: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) 3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 4: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: yG372ZfYDfckAQRKIBjtKTTy662ku1nmpebb4nu1XEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f1:f8:b6:98:14:22:c7:ac:8f:ec:b0:33:d4:54:a5:58:56:62:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Nov 15 03:23:26 2026 GMT Not After : Nov 16 06:08:26 2026 GMT Subject: CN=EBD8EF2C66F2F5260AB8E84DADD60C4D86B0471E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:43:33:02:60:6b:ed:f1:41:73:8b:d6:3a: 00:3e:61:00:e6:ac:9e:9f:8d:48:25:f3:b4:71:f2: be:91:cd:e6:eb:0d:b6:a5:76:0a:de:c4:b7:9b:b0: 13:b9:13:09:af:05:79:e5:d1:7e:9d:db:1e:1f:c1: 64:a6:01:45:4b:29:e4:34:86:d8:fe:c9:c4:3e:c7: ac:96:07:c8:89:af:12:45:a7:59:ee:36:76:c2:11: 90:19:cf:a5:b7:6f:2e:10:3d:57:b5:98:09:9c:5d: ad:91:7e:22:43:f8:f7:e4:54:3d:a1:7f:96:ef:d7: 74:08:8f:fd:31:5e:f9:89:a8:03:50:ee:07:0f:4d: 24:35:de:d5:c5:c3:72:59:71:a9:32:a1:9f:37:7f: bf:38:df:0e:a0:b9:0c:9a:2b:ad:e7:9e:a7:47:5c: 36:9c:28:df:00:53:33:6e:2c:09:bb:33:46:c8:18: 5a:12:f4:a6:0d:5f:00:28:a2:a8:d0:3a:a7:14:26: f9:c8:7b:6b:7c:36:8e:61:ae:48:53:4a:e9:08:d6: 63:d8:7d:75:5a:6a:8f:cd:e7:0f:80:6a:c8:2c:da: ee:d0:f7:cb:f3:39:87:2d:d3:94:51:34:fb:1b:3e: 67:01:35:00:0b:10:4c:df:9e:dd:5d:bd:8b:ab:5c: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D8:EF:2C:66:F2:F5:26:0A:B8:E8:4D:AD:D6:0C:4D:86:B0:47:1E X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:78:86:03:7a:7c:8e:cb:b0:b7:d7:b5:68:94:d9:c2:93:7c: d6:57:70:55:06:dc:1a:86:03:56:8b:77:53:e9:10:c2:28:a6: e3:36:d1:3e:89:fe:6d:6f:73:20:de:37:79:16:02:3d:e2:54: 14:e9:85:a4:f8:5f:9d:52:e3:a7:2f:ed:b0:5f:eb:43:3e:fd: 71:85:b0:02:97:9c:c9:99:1d:2c:50:b8:08:07:17:9a:57:c0: 25:26:c1:1a:be:b1:95:08:96:38:fe:17:d6:73:64:a5:a4:66: 8a:39:b2:92:86:86:a6:4e:93:eb:4b:38:e6:02:5d:c5:97:c3: 20:d8:a4:6f:5a:37:fb:7b:42:a6:b8:70:f3:6b:86:cb:67:76: 59:7e:c4:fe:f9:43:5f:88:fa:2c:62:f0:6c:0c:81:5e:87:f1: d2:8b:52:6c:6a:7f:dd:35:1f:ac:9b:35:3b:cb:b7:3e:7f:df: 5f:c1:6d:48:ce:25:93:e4:99:5d:b2:fc:2b:4b:2d:ef:4a:38: 92:8a:79:6f:fa:a3:f4:36:7f:f3:1d:a1:63:ee:5d:88:a5:84: a3:59:35:51:6c:a8:b4:cb:e9:19:d8:e5:c7:99:e2:08:10:4c: 1f:b9:f4:ac:e7:db:6b:13:3d:90:3a:6d:c0:b1:8f:fc:c3:65: b2:ef:f3:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPH4tpgUIsesj+ywM9RUpVhWYmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjExMTUwMzIzMjZaFw0yNjExMTYwNjA4MjZaMDMxMTAvBgNV BAMTKEVCRDhFRjJDNjZGMkY1MjYwQUI4RTg0REFERDYwQzREODZCMDQ3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLEMzAmBr7fFBc4vWOgA+YQDm rJ6fjUgl87Rx8r6RzebrDbaldgrexLebsBO5EwmvBXnl0X6d2x4fwWSmAUVLKeQ0 htj+ycQ+x6yWB8iJrxJFp1nuNnbCEZAZz6W3by4QPVe1mAmcXa2RfiJD+PfkVD2h f5bv13QIj/0xXvmJqANQ7gcPTSQ13tXFw3JZcakyoZ83f7843w6guQyaK63nnqdH XDacKN8AUzNuLAm7M0bIGFoS9KYNXwAooqjQOqcUJvnIe2t8No5hrkhTSukI1mPY fXVaao/N5w+Aasgs2u7Q98vzOYct05RRNPsbPmcBNQALEEzfnt1dvYurXN2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69jvLGby9SYKuOhNrdYMTYawRx4wHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd4hgN6fI7LsLfXtWiU2cKTfNZXcFUG3BqG A1aLd1PpEMIopuM20T6J/m1vcyDeN3kWAj3iVBTphaT4X51S46cv7bBf60M+/XGF sAKXnMmZHSxQuAgHF5pXwCUmwRq+sZUIljj+F9ZzZKWkZoo5spKGhqZOk+tLOOYC XcWXwyDYpG9aN/t7Qqa4cPNrhstndll+xP75Q1+I+ixi8GwMgV6H8dKLUmxqf901 H6ybNTvLtz5/31/BbUjOJZPkmV2y/CtLLe9KOJKKeW/6o/Q2f/MdoWPuXYilhKNZ NVFsqLTL6RnY5ceZ4ggQTB+59Kzn22sTPZA6bcCxj/zDZbLv8+8= -----END CERTIFICATE-----Generated at Sun Nov 15 16:36:50 2026 by rpki-client