$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft File: 175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft (raw, json) Hash identifier: /vGX7kuImH0MyIWIYEt2+Ww3JShgeTLcKtLloj3dZbY= Subject key identifier: A5:B5:BA:C6:CD:D4:B5:10:36:D3:E6:CC:5B:64:9A:ED:4A:C2:A0:B7 Authority key identifier: 17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24 Certificate issuer: /CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024 Certificate serial: 4F46CBA7B9F307153461D8E8BB85D535306A34B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft Manifest number: FF Signing time: Mon 09 Nov 2026 06:23:33 +0000 Manifest this update: Mon 09 Nov 2026 06:18:33 +0000 Manifest next update: Tue 10 Nov 2026 07:22:33 +0000 Files and hashes: 1: 3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (hash: vgB910N17H/8EA61cYkEzcJDMSXZKxKOBtMQhiSpiR8=) 2: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: 3omtH0gia780DFyQ29c+VBozmVqrhGPgDCowWGzyQNY=) 3: 3230322e34332e36352e302f32342d3234203d3e203435333233.roa (hash: c6hdy6h3i1f1rLa2ErTUO1eTi9ZbUz781ZUqD68CELk=) 4: 3230322e34332e36342e302f32332d3233203d3e203435333233.roa (hash: OvBBs++V7emF9OehzRM0FMmOsHlAddNrQdbMcRn58fc=) 5: 175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl (hash: f+JA9aZ679meB6WMdvhaSXipexQhixO+rKJYYBIwBkg=) 6: 3230322e34332e36342e302f32342d3234203d3e203435333233.roa (hash: kd5X3aWuvmW67I45MCTvzwAMaeTd4OMwLlRd3nUpm7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:46:cb:a7:b9:f3:07:15:34:61:d8:e8:bb:85:d5:35:30:6a:34:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024 Validity Not Before: Nov 9 06:18:33 2026 GMT Not After : Nov 10 07:22:33 2026 GMT Subject: CN=A5B5BAC6CDD4B51036D3E6CC5B649AED4AC2A0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:30:a7:42:49:fa:f3:7e:fb:7e:ba:a0:99: 5a:7d:9b:df:b1:c1:ff:9e:8c:02:43:52:77:7d:b1: bf:f7:f3:17:aa:e0:b4:96:e1:30:5e:3d:78:b8:9e: 8e:61:1f:e0:72:37:70:18:ab:c0:e6:30:06:46:cb: 12:fc:e9:f8:13:27:7e:38:3b:96:75:37:f2:2f:0e: 52:3d:4b:d8:cc:82:ef:68:5f:5e:f5:3a:92:e4:22: c1:16:1e:1b:18:c5:79:27:75:19:77:44:9d:4c:bd: a8:db:b9:78:32:de:9e:38:ca:63:c0:a2:f6:1e:82: fb:51:ed:fd:62:75:df:10:8d:b7:7e:2c:2e:9a:75: 1f:df:07:a8:44:19:e0:4e:3b:36:57:82:cc:a7:fa: 1b:52:b1:1c:56:d0:d7:cd:94:f6:18:87:ab:df:b4: 43:02:9e:0f:91:59:15:82:10:6b:51:5e:f4:7c:95: 50:5d:b7:92:a5:63:07:50:2e:e7:d0:c0:b6:14:17: 82:ed:81:1d:8f:ee:60:3d:a9:fa:8c:d4:6f:b0:75: 5c:e2:b0:45:d9:06:e0:7b:1c:73:49:89:e5:72:47: f5:e9:e9:0f:a0:9e:fd:71:8b:c9:41:24:59:e3:ca: ef:e0:49:64:d2:40:ee:0e:b1:ce:90:ca:6c:bc:02: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:BA:C6:CD:D4:B5:10:36:D3:E6:CC:5B:64:9A:ED:4A:C2:A0:B7 X509v3 Authority Key Identifier: keyid:17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9d:b9:f0:dc:de:f2:f9:14:b7:c7:70:fb:c9:00:30:21:18: 87:ec:ba:93:40:62:e2:20:2e:7b:7a:89:8e:4e:95:4e:2e:45: b7:3e:be:6a:33:eb:f9:b6:25:f9:68:6e:c3:e4:ed:8e:3d:c7: 01:96:56:fd:dd:64:62:0b:d4:60:5e:f1:66:b4:34:ee:5d:4f: 15:24:10:70:f6:39:61:df:68:12:74:7b:a0:80:42:e0:1c:15: 75:79:c4:85:61:5a:97:c9:c6:8b:a5:1d:d5:39:b7:0e:de:64: 99:8c:5e:d9:ba:41:e9:c8:29:31:0d:f6:f8:93:96:86:33:5a: 4c:34:46:2b:a3:46:9c:76:31:0a:3f:f5:36:8e:9b:ff:5b:b0: 32:46:d7:4d:04:d3:c5:db:71:b9:7c:57:a4:5d:1e:c6:61:43: 55:8f:c3:f6:5e:38:84:b1:62:25:0a:07:b7:86:d2:74:1a:05: 76:bb:65:91:2f:ce:5a:2e:2f:64:85:f7:8f:fe:90:42:4d:0d: 48:cc:8a:94:ef:67:65:51:d8:da:e3:98:55:43:85:78:81:31: 49:ff:64:ac:0b:cb:b9:79:3c:c3:11:08:b2:d1:a6:e6:2c:60: 41:6f:fa:cd:af:fd:32:37:2f:20:d3:3a:ae:22:e0:14:95:68: dd:8c:0e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0bLp7nzBxU0Ydjou4XVNTBqNLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1RjRCOTRGRTYwOENBRjNBREUyRkI2QzVFNzU0NTNB QjJERDAyNDAeFw0yNjExMDkwNjE4MzNaFw0yNjExMTAwNzIyMzNaMDMxMTAvBgNV BAMTKEE1QjVCQUM2Q0RENEI1MTAzNkQzRTZDQzVCNjQ5QUVENEFDMkEwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQjCnQkn68377frqgmVp9m9+x wf+ejAJDUnd9sb/38xeq4LSW4TBePXi4no5hH+ByN3AYq8DmMAZGyxL86fgTJ344 O5Z1N/IvDlI9S9jMgu9oX171OpLkIsEWHhsYxXkndRl3RJ1MvajbuXgy3p44ymPA ovYegvtR7f1idd8Qjbd+LC6adR/fB6hEGeBOOzZXgsyn+htSsRxW0NfNlPYYh6vf tEMCng+RWRWCEGtRXvR8lVBdt5KlYwdQLufQwLYUF4LtgR2P7mA9qfqM1G+wdVzi sEXZBuB7HHNJieVyR/Xp6Q+gnv1xi8lBJFnjyu/gSWTSQO4Osc6Qymy8AtCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbW6xs3UtRA20+bMW2Sa7UrCoLcwHwYDVR0j BBgwFoAUF19LlP5gjK863i+2xedUU6st0CQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNmMDBmOGEtNWNiZC00NjBmLWJmYzYtYmQ4OTQyYjY1MzdjLzAvMTc1RjRCOTRG RTYwOENBRjNBREUyRkI2QzVFNzU0NTNBQjJERDAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzVGNEI5NEZFNjA4Q0FGM0FERTJGQjZDNUU3NTQ1M0FCMkRE MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvMTc1RjRCOTRGRTYwOENBRjNBREUyRkI2QzVFNzU0 NTNBQjJERDAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIedufDc3vL5FLfHcPvJADAhGIfsupNAYuIg Lnt6iY5OlU4uRbc+vmoz6/m2JflobsPk7Y49xwGWVv3dZGIL1GBe8Wa0NO5dTxUk EHD2OWHfaBJ0e6CAQuAcFXV5xIVhWpfJxoulHdU5tw7eZJmMXtm6QenIKTEN9viT loYzWkw0RiujRpx2MQo/9TaOm/9bsDJG100E08Xbcbl8V6RdHsZhQ1WPw/ZeOISx YiUKB7eG0nQaBXa7ZZEvzlouL2SF94/+kEJNDUjMipTvZ2VR2NrjmFVDhXiBMUn/ ZKwLy7l5PMMRCLLRpuYsYEFv+s2v/TI3LyDTOq4i4BSVaN2MDlU= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:16 2026 by rpki-client