$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: Nk+vuyHTZXcMQENhiueFwmibJumnmV7Rcj8rCppmQDQ= Subject key identifier: 5C:0A:3F:C0:5A:17:84:81:4E:66:3B:85:D7:20:5D:86:AD:19:FA:F0 Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 609C7B1A71FD994C32332DA967837721A2080A53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: FF Signing time: Tue 10 Nov 2026 00:56:52 +0000 Manifest this update: Tue 10 Nov 2026 00:51:52 +0000 Manifest next update: Wed 11 Nov 2026 04:46:52 +0000 Files and hashes: 1: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: N5CRUJbIXiJlJde3mkcvayzhEluMv0/Ra1RAV0qUezE=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9c:7b:1a:71:fd:99:4c:32:33:2d:a9:67:83:77:21:a2:08:0a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Nov 10 00:51:52 2026 GMT Not After : Nov 11 04:46:52 2026 GMT Subject: CN=5C0A3FC05A1784814E663B85D7205D86AD19FAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:ab:95:56:9a:55:c6:b8:61:9d:b5:08:5e: 8b:62:f5:8b:8c:db:23:fd:ad:22:1d:fa:f3:66:9e: a2:53:e7:49:d1:3c:86:d4:9e:76:4d:ab:59:19:59: cc:7f:f0:4b:fd:ce:0c:c7:4d:1e:40:af:04:62:54: 1a:5e:d1:09:59:32:2b:f4:d9:fc:9c:ef:bb:59:0a: 70:6e:ed:22:bc:65:50:e9:45:c7:29:b9:d8:31:b3: bd:f0:77:5c:c3:99:90:30:47:18:8e:8f:2e:1a:55: 8a:d1:1b:e8:68:80:d9:93:73:ca:32:e0:65:8d:a9: 78:20:07:99:97:00:e4:5e:73:6e:ef:80:4f:75:a8: c9:fa:cd:1c:82:9c:05:58:c2:4c:2d:7d:5c:02:08: 23:b5:e0:57:f6:d1:3c:c9:68:82:40:eb:3d:3a:ef: 4a:b0:c5:c2:1a:e8:2f:84:19:b9:82:11:0c:43:33: 43:bb:d8:3f:5e:d1:26:76:d4:9a:c3:db:54:8b:db: 7b:41:f6:16:87:25:1e:70:ca:d7:16:22:10:d5:94: 72:76:b3:bb:3e:4a:46:7a:fc:2e:26:1a:05:f1:66: af:fb:fe:d6:92:95:83:a5:15:5e:5b:17:df:04:c7: a2:1c:ef:8a:8b:a3:e6:da:1a:18:84:01:60:2b:61: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0A:3F:C0:5A:17:84:81:4E:66:3B:85:D7:20:5D:86:AD:19:FA:F0 X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:69:8c:a0:72:c8:13:22:99:aa:50:a1:fd:54:b0:3f:1a:d7: 23:cf:df:1f:93:8a:b8:6c:44:66:fd:b4:5d:cc:78:ae:69:db: 54:35:1f:f9:e7:9f:1f:91:db:1d:07:00:db:87:b2:66:50:1c: 8c:83:85:35:3f:3b:4d:a1:1a:76:fc:03:a0:a8:96:04:bb:fb: cc:9d:f2:8d:39:d6:5d:dc:83:3e:85:4e:52:cc:4c:d4:d7:c8: 2b:34:12:08:d0:fa:f4:06:a4:00:b0:1a:69:7c:34:de:c8:50: 7d:6f:c9:ad:d0:b9:02:43:07:01:47:27:e5:7b:af:af:17:10: 43:27:00:1f:52:75:de:ed:7a:14:56:c6:30:28:8f:e0:54:e9: ff:60:21:ba:a8:1c:58:90:5a:22:6b:c8:55:66:19:e4:0b:81: e6:3d:3d:45:8f:11:73:9f:df:41:0b:e5:da:9f:5b:77:69:47: 24:98:9b:6a:ec:a9:e9:a6:20:c7:20:a2:59:60:66:27:41:6d: 23:8c:6c:97:c7:54:87:fd:a5:ca:e5:a8:77:2b:12:c8:bb:e2: 6c:a8:fe:49:43:84:7b:a5:d3:ae:54:91:5f:50:13:11:51:74: 94:86:6c:74:e4:7e:79:3a:8c:1a:53:26:05:d6:ab:fe:e4:18: a1:74:82:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJx7GnH9mUwyMy2pZ4N3IaIIClMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjExMTAwMDUxNTJaFw0yNjExMTEwNDQ2NTJaMDMxMTAvBgNV BAMTKDVDMEEzRkMwNUExNzg0ODE0RTY2M0I4NUQ3MjA1RDg2QUQxOUZBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMauVVppVxrhhnbUIXoti9YuM 2yP9rSId+vNmnqJT50nRPIbUnnZNq1kZWcx/8Ev9zgzHTR5ArwRiVBpe0QlZMiv0 2fyc77tZCnBu7SK8ZVDpRccpudgxs73wd1zDmZAwRxiOjy4aVYrRG+hogNmTc8oy 4GWNqXggB5mXAORec27vgE91qMn6zRyCnAVYwkwtfVwCCCO14Ff20TzJaIJA6z06 70qwxcIa6C+EGbmCEQxDM0O72D9e0SZ21JrD21SL23tB9haHJR5wytcWIhDVlHJ2 s7s+SkZ6/C4mGgXxZq/7/taSlYOlFV5bF98Ex6Ic74qLo+baGhiEAWArYZiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXAo/wFoXhIFOZjuF1yBdhq0Z+vAwHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFpjKByyBMimapQof1UsD8a1yPP3x+Tirhs RGb9tF3MeK5p21Q1H/nnnx+R2x0HANuHsmZQHIyDhTU/O02hGnb8A6ColgS7+8yd 8o051l3cgz6FTlLMTNTXyCs0EgjQ+vQGpACwGml8NN7IUH1vya3QuQJDBwFHJ+V7 r68XEEMnAB9Sdd7tehRWxjAoj+BU6f9gIbqoHFiQWiJryFVmGeQLgeY9PUWPEXOf 30EL5dqfW3dpRySYm2rsqemmIMcgollgZidBbSOMbJfHVIf9pcrlqHcrEsi74myo /klDhHul065UkV9QExFRdJSGbHTkfnk6jBpTJgXWq/7kGKF0gsE= -----END CERTIFICATE-----Generated at Tue Nov 10 04:06:32 2026 by rpki-client