$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: XUEdMaCMePZwTSUXr/Z6/ZEg5v6Itm0tNS1qHMAcGZw= Subject key identifier: 1E:A8:5D:A1:A2:00:D4:8A:B9:D9:44:CA:81:8E:90:C7:3B:0C:C6:59 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 264D23808C4A8DCCEBB0299941B86EBAF930FA27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 22:59:25 +0000 Manifest this update: Mon 09 Nov 2026 22:54:25 +0000 Manifest next update: Tue 10 Nov 2026 23:54:25 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 4: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: 8yW2pExtzIM742bGRdQSsIPFM6i/lodrxooPRJbODPs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4d:23:80:8c:4a:8d:cc:eb:b0:29:99:41:b8:6e:ba:f9:30:fa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Nov 9 22:54:25 2026 GMT Not After : Nov 10 23:54:25 2026 GMT Subject: CN=1EA85DA1A200D48AB9D944CA818E90C73B0CC659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:e0:ef:1d:9f:9b:b5:cc:54:f7:40:74:d4: ec:77:a8:fb:13:90:1c:97:c0:88:10:65:c9:4f:fa: 5e:dd:be:cf:f3:55:29:20:37:27:ab:3d:1e:3f:6a: f6:a7:1d:8e:ce:60:53:fa:36:e8:1c:07:e8:b2:e5: f4:26:8d:c9:68:2f:92:51:62:d3:19:3f:3b:0d:16: 94:32:0f:67:1d:0c:a8:c4:49:01:13:30:35:b1:20: 0d:05:55:68:70:89:02:ee:44:c7:75:e9:9c:f9:86: e6:d2:aa:e7:0b:d2:6a:2f:8b:11:53:d4:d4:d4:04: 74:ed:3b:42:33:56:96:07:74:52:ad:75:1e:22:dd: 94:f3:e5:a1:60:9e:a0:20:2e:59:1c:96:5b:de:31: 33:fc:ba:bc:23:41:05:dd:b9:b3:13:0f:b9:5f:a5: 8d:56:e4:b6:38:e7:e2:0f:b6:4e:12:78:ac:d3:86: 26:8f:10:36:d2:7e:7a:37:0a:26:49:e8:22:65:d5: 6e:5a:9a:8a:74:cc:c8:2e:73:14:55:8f:9a:7f:02: f5:d5:c9:e3:c2:04:2b:db:a2:e0:91:30:be:24:ae: 04:c3:42:69:2f:21:67:82:5c:74:21:5b:52:a4:95: 2c:77:60:dc:4a:de:05:5e:d0:bf:18:45:82:57:89: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:5D:A1:A2:00:D4:8A:B9:D9:44:CA:81:8E:90:C7:3B:0C:C6:59 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:4d:b9:81:c6:51:04:be:59:7a:44:b1:25:48:45:d5:d2:a7: 0c:07:a9:34:78:32:c4:06:0b:a6:58:e4:3c:9a:6d:a1:d8:c6: f6:e0:68:fc:4d:8d:34:6a:c8:47:05:80:29:18:3d:d9:b2:07: 37:95:83:53:cc:0f:ae:c8:61:02:b4:0c:c8:dd:6d:19:ee:0b: aa:4a:a3:05:49:e4:de:77:f6:d1:de:f0:36:70:5a:7b:1c:af: bc:3b:bd:78:48:bb:9d:55:de:b7:82:f5:3d:cd:2c:b8:c8:e4: a5:0d:8a:93:6e:4e:3c:85:8d:d8:dd:f7:f1:5a:e7:10:f0:15: 80:7f:8b:88:52:c3:2a:f9:ee:39:58:60:93:ab:e6:48:fb:c0: 58:0f:68:a9:92:57:d1:55:65:e3:4c:72:6d:f7:c9:b5:9b:0f: a5:91:60:97:b1:3a:6d:0d:22:47:ed:61:6a:c9:59:8a:5e:61: 3e:ed:c1:cd:1f:0d:72:7a:07:2e:9c:b0:1e:8d:8c:aa:53:87: d8:c4:20:bc:21:e8:c6:49:65:f1:ad:53:91:ce:fb:3d:d8:af: a6:a3:0e:11:f5:29:26:67:a6:4c:e9:f3:15:7f:b1:b8:7b:86: f8:fe:84:88:27:fd:11:06:4c:b7:05:20:62:39:bb:26:f5:66: 33:49:b1:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJk0jgIxKjczrsCmZQbhuuvkw+icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjExMDkyMjU0MjVaFw0yNjExMTAyMzU0MjVaMDMxMTAvBgNV BAMTKDFFQTg1REExQTIwMEQ0OEFCOUQ5NDRDQTgxOEU5MEM3M0IwQ0M2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSeDvHZ+btcxU90B01Ox3qPsT kByXwIgQZclP+l7dvs/zVSkgNyerPR4/avanHY7OYFP6NugcB+iy5fQmjcloL5JR YtMZPzsNFpQyD2cdDKjESQETMDWxIA0FVWhwiQLuRMd16Zz5hubSqucL0movixFT 1NTUBHTtO0IzVpYHdFKtdR4i3ZTz5aFgnqAgLlkcllveMTP8urwjQQXdubMTD7lf pY1W5LY45+IPtk4SeKzThiaPEDbSfno3CiZJ6CJl1W5amop0zMgucxRVj5p/AvXV yePCBCvbouCRML4krgTDQmkvIWeCXHQhW1KklSx3YNxK3gVe0L8YRYJXifsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqhdoaIA1Iq52UTKgY6QxzsMxlkwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFNuYHGUQS+WXpEsSVIRdXSpwwHqTR4MsQG C6ZY5DyabaHYxvbgaPxNjTRqyEcFgCkYPdmyBzeVg1PMD67IYQK0DMjdbRnuC6pK owVJ5N539tHe8DZwWnscr7w7vXhIu51V3reC9T3NLLjI5KUNipNuTjyFjdjd9/Fa 5xDwFYB/i4hSwyr57jlYYJOr5kj7wFgPaKmSV9FVZeNMcm33ybWbD6WRYJexOm0N IkftYWrJWYpeYT7twc0fDXJ6By6csB6NjKpTh9jEILwh6MZJZfGtU5HO+z3Yr6aj DhH1KSZnpkzp8xV/sbh7hvj+hIgn/REGTLcFIGI5uyb1ZjNJsc0= -----END CERTIFICATE-----Generated at Tue Nov 10 03:41:19 2026 by rpki-client