$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: AfDx+bptkqXq7A208OlIKqF3+DJbffsgPrLiQycYJxQ= Subject key identifier: 45:65:AA:A3:05:66:3A:82:BA:75:E1:42:A9:98:19:EE:1F:F3:CE:45 Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 60F7D9C3606F5F6BE493C2D688245771CEA2299E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 14:34:03 +0000 Manifest this update: Mon 09 Nov 2026 14:29:03 +0000 Manifest next update: Tue 10 Nov 2026 17:27:03 +0000 Files and hashes: 1: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: ck/qcpNFe/8xSVPAVPTfYlDaM+Xcja5S1FEBLePvQLk=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f7:d9:c3:60:6f:5f:6b:e4:93:c2:d6:88:24:57:71:ce:a2:29:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: Nov 9 14:29:03 2026 GMT Not After : Nov 10 17:27:03 2026 GMT Subject: CN=4565AAA305663A82BA75E142A99819EE1FF3CE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:97:b0:67:93:5d:2c:4d:31:f9:64:8b:8f: 55:2f:a2:53:09:1c:e6:57:1e:d5:04:93:21:ee:07: f4:2f:d5:ae:50:9e:3a:03:e8:93:45:01:f4:00:0e: 12:e3:4b:37:10:36:29:87:32:80:13:4a:34:cd:cd: 59:78:61:b0:db:0c:56:2e:b9:17:a5:85:b1:e6:85: 45:40:45:8d:0b:b9:f6:88:94:b4:ec:e5:4a:eb:a1: 18:84:12:ce:a3:2c:1c:55:b8:fc:6b:cd:47:bd:40: 90:df:09:32:b1:3f:f6:07:4a:55:55:90:a8:1a:6d: 82:6c:18:44:bf:cd:d2:72:de:82:09:00:ea:56:67: 86:5a:e7:ce:e7:a3:64:ae:d4:6f:35:06:bd:c3:78: 9b:ee:66:87:ad:3c:49:00:cb:40:33:7f:1b:2d:12: b8:47:cf:70:ae:4c:07:6c:f5:7e:33:76:48:ab:91: 0d:f2:32:90:9b:ed:27:c9:4a:04:d1:ef:2b:8f:c1: 21:2a:e1:5d:c8:c0:f9:7b:e3:b0:2c:85:56:5f:a6: 4c:a5:e7:0d:54:fb:77:39:0f:32:26:fe:ae:39:a2: f4:b0:a4:50:a7:65:21:89:0c:dc:62:ff:d4:24:01: 63:c2:30:34:75:3e:5d:e1:dc:d7:6b:7b:6b:f8:ad: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:AA:A3:05:66:3A:82:BA:75:E1:42:A9:98:19:EE:1F:F3:CE:45 X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:35:67:6b:d6:ba:eb:00:3e:a3:fd:53:4f:4d:e8:b5:91:81: 67:db:7b:2e:dd:5d:b7:f6:b4:78:69:7f:51:36:5b:f0:5c:09: 8b:46:36:16:14:56:04:fb:32:e3:80:94:2f:27:d4:db:e9:31: df:76:a5:9f:07:98:9d:4e:77:2a:1a:c1:58:3c:b3:23:32:d8: 40:8f:16:91:7f:78:06:84:90:d3:2c:8e:19:c0:1a:d6:bb:32: 4a:06:6a:4b:3e:86:c6:1c:db:7e:e5:e5:e6:ed:ee:04:37:9b: 28:df:22:db:90:b0:5a:d8:a2:f7:a6:56:dd:7f:0d:f6:b7:2f: 66:6b:ed:b9:4e:a7:51:17:f9:0a:64:75:ed:a7:01:cd:5c:50: 2c:d0:f3:0b:e4:88:4e:f1:91:42:b4:14:20:bf:de:13:a9:ba: 4f:b8:51:18:06:5e:01:d6:47:19:ac:69:c1:28:4b:f1:38:e9: 11:3d:89:d0:36:f5:22:c6:39:40:42:35:3d:e6:f6:31:17:29: c0:ab:f6:a2:06:78:cd:28:2a:b7:bb:c1:12:93:e9:40:50:b5: 98:78:ef:09:5e:93:24:bd:d6:3f:92:b8:88:6a:1e:60:21:2d: bc:84:2a:4b:6c:35:e9:e3:27:b4:b3:5d:24:5a:49:9f:89:59: 86:39:a3:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPfZw2BvX2vkk8LWiCRXcc6iKZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjExMDkxNDI5MDNaFw0yNjExMTAxNzI3MDNaMDMxMTAvBgNV BAMTKDQ1NjVBQUEzMDU2NjNBODJCQTc1RTE0MkE5OTgxOUVFMUZGM0NFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaX5ewZ5NdLE0x+WSLj1UvolMJ HOZXHtUEkyHuB/Qv1a5QnjoD6JNFAfQADhLjSzcQNimHMoATSjTNzVl4YbDbDFYu uRelhbHmhUVARY0LufaIlLTs5UrroRiEEs6jLBxVuPxrzUe9QJDfCTKxP/YHSlVV kKgabYJsGES/zdJy3oIJAOpWZ4Za587no2Su1G81Br3DeJvuZoetPEkAy0Azfxst ErhHz3CuTAds9X4zdkirkQ3yMpCb7SfJSgTR7yuPwSEq4V3IwPl747AshVZfpkyl 5w1U+3c5DzIm/q45ovSwpFCnZSGJDNxi/9QkAWPCMDR1Pl3h3Ndre2v4renJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURWWqowVmOoK6deFCqZgZ7h/zzkUwHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM1Z2vWuusAPqP9U09N6LWRgWfbey7dXbf2 tHhpf1E2W/BcCYtGNhYUVgT7MuOAlC8n1NvpMd92pZ8HmJ1OdyoawVg8syMy2ECP FpF/eAaEkNMsjhnAGta7MkoGaks+hsYc237l5ebt7gQ3myjfItuQsFrYovemVt1/ Dfa3L2Zr7blOp1EX+Qpkde2nAc1cUCzQ8wvkiE7xkUK0FCC/3hOpuk+4URgGXgHW RxmsacEoS/E46RE9idA29SLGOUBCNT3m9jEXKcCr9qIGeM0oKre7wRKT6UBQtZh4 7wlekyS91j+SuIhqHmAhLbyEKktsNenjJ7SzXSRaSZ+JWYY5o3w= -----END CERTIFICATE-----Generated at Mon Nov 9 22:35:10 2026 by rpki-client