$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: urtk2Ar4ZcgXh2q3r+hYZfZyOMikuGuhKalbPT+MeRI= Subject key identifier: 78:CD:A6:C4:DF:10:3B:C7:29:BB:64:C1:B1:CF:77:1D:86:77:3C:3B Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 3BA13AC79E7B6304B1670349B692B40047B25F1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 07:45:19 +0000 Manifest this update: Mon 09 Nov 2026 07:40:19 +0000 Manifest next update: Tue 10 Nov 2026 09:14:19 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) 2: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: GKnj31pQrp6O/oGH3NIoiQbFcpxwJViA+PtuOvIUYfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a1:3a:c7:9e:7b:63:04:b1:67:03:49:b6:92:b4:00:47:b2:5f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Nov 9 07:40:19 2026 GMT Not After : Nov 10 09:14:19 2026 GMT Subject: CN=78CDA6C4DF103BC729BB64C1B1CF771D86773C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:cd:37:7c:58:c7:18:fc:79:8f:6f:12:ca: fa:62:46:c8:41:f1:2b:7c:6a:63:30:c8:f5:25:a3: 61:3d:ac:45:7d:44:78:0a:34:46:c5:23:39:94:5a: 88:ed:50:3e:41:d0:b4:21:ba:76:33:27:63:19:c5: 6c:bd:e5:f8:84:d9:12:43:4e:e0:dc:4d:56:6f:25: 79:b4:fb:e9:c2:3d:a9:06:2d:c5:49:69:9a:a8:10: d2:ac:aa:f2:2e:fd:31:ed:87:bd:81:c4:87:01:88: e8:f1:b2:1f:c4:67:3f:aa:08:c6:c4:2e:00:5b:a0: c3:0d:77:17:43:d0:67:7f:95:f2:69:63:4a:aa:90: b8:4c:8e:52:a7:69:7a:e9:b0:dd:44:7c:a7:59:d4: dd:d4:90:a8:a4:04:70:8b:9d:f0:e1:3b:c6:3b:9d: 62:fb:32:7a:e6:21:65:48:ed:c1:4c:01:3b:a3:05: c3:28:fa:af:63:ab:dd:50:f5:26:ae:eb:98:e9:72: 68:66:22:2b:b5:3e:d9:b5:1f:6f:7d:61:7b:c6:18: 7c:73:ab:a3:93:d0:a7:07:34:35:01:83:de:c7:ba: 8a:75:f4:57:49:78:8c:6e:f6:11:c4:73:71:a2:34: 3d:22:b9:30:9c:c5:68:d6:51:07:84:37:17:df:3b: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:A6:C4:DF:10:3B:C7:29:BB:64:C1:B1:CF:77:1D:86:77:3C:3B X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:7d:07:89:cb:aa:2f:db:53:ee:13:16:3e:ab:d3:0d:05: ca:4c:37:c1:ab:5b:68:3b:5f:a8:3a:2f:8d:2d:9d:26:46:ae: 32:d9:ff:ef:cb:f1:af:d6:72:62:5f:53:53:94:d3:bc:ec:5d: 8e:fc:4f:5b:14:78:a3:f7:1e:71:58:aa:5e:6a:67:e8:ce:12: b2:f7:46:6b:4b:e4:25:6a:e5:5a:be:89:cb:ad:f6:6e:41:1f: 17:d2:6a:96:c0:ce:84:56:17:ad:34:a0:38:15:11:c6:ba:7b: 70:cc:d9:9d:b8:ec:56:49:99:fc:4f:5b:4f:88:f1:a8:1e:b5: b9:73:7d:01:28:8f:32:67:43:d9:f3:d8:a1:79:7d:e2:6a:90: fa:57:c9:cd:dd:b1:e7:62:e5:79:9b:f1:d1:a4:df:b8:dc:91: 86:6d:f7:78:53:9e:67:1f:32:75:53:32:93:59:56:9e:c1:4e: 98:9a:1c:d1:94:5a:b3:4e:0b:4f:bf:cf:d2:d1:e7:81:a4:81: 6b:1a:ed:6b:43:4e:f5:c5:9d:ec:ab:04:5d:c8:9f:fc:e5:bd: 3c:19:d5:1d:a3:0a:79:c3:2a:0f:3c:cd:dc:bd:5c:6c:5a:82: 1f:58:89:74:32:c7:5f:a9:74:47:26:7e:4a:6b:c7:97:43:fd: 3f:2e:7e:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6E6x557YwSxZwNJtpK0AEeyXx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjExMDkwNzQwMTlaFw0yNjExMTAwOTE0MTlaMDMxMTAvBgNV BAMTKDc4Q0RBNkM0REYxMDNCQzcyOUJCNjRDMUIxQ0Y3NzFEODY3NzNDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIc03fFjHGPx5j28SyvpiRshB 8St8amMwyPUlo2E9rEV9RHgKNEbFIzmUWojtUD5B0LQhunYzJ2MZxWy95fiE2RJD TuDcTVZvJXm0++nCPakGLcVJaZqoENKsqvIu/THth72BxIcBiOjxsh/EZz+qCMbE LgBboMMNdxdD0Gd/lfJpY0qqkLhMjlKnaXrpsN1EfKdZ1N3UkKikBHCLnfDhO8Y7 nWL7MnrmIWVI7cFMATujBcMo+q9jq91Q9Sau65jpcmhmIiu1Ptm1H299YXvGGHxz q6OT0KcHNDUBg97Huop19FdJeIxu9hHEc3GiND0iuTCcxWjWUQeENxffO26BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeM2mxN8QO8cpu2TBsc93HYZ3PDswHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVIfQeJy6ov21PuExY+q9MNBcpMN8GrW2g7 X6g6L40tnSZGrjLZ/+/L8a/WcmJfU1OU07zsXY78T1sUeKP3HnFYql5qZ+jOErL3 RmtL5CVq5Vq+icut9m5BHxfSapbAzoRWF600oDgVEca6e3DM2Z247FZJmfxPW0+I 8agetblzfQEojzJnQ9nz2KF5feJqkPpXyc3dsedi5Xmb8dGk37jckYZt93hTnmcf MnVTMpNZVp7BTpiaHNGUWrNOC0+/z9LR54GkgWsa7WtDTvXFneyrBF3In/zlvTwZ 1R2jCnnDKg88zdy9XGxagh9YiXQyx1+pdEcmfkprx5dD/T8ufuY= -----END CERTIFICATE-----Generated at Tue Nov 10 02:33:41 2026 by rpki-client