$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: /10MA3ORdCoeXbJRChDVH7TwHAPwblmO3ed5k+IlF88= Subject key identifier: 37:80:C7:47:41:89:CC:06:15:AA:16:59:96:6C:DE:93:C4:F3:94:0A Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 1BD71AFE164C3066FB714A82D0651627A50C90F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 17:07:06 +0000 Manifest this update: Mon 09 Nov 2026 17:02:06 +0000 Manifest next update: Tue 10 Nov 2026 20:56:06 +0000 Files and hashes: 1: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) 2: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: c4mS4yJDZpE5IaHjIhSomyEamuTD0S8abYznejyXPk4=) 3: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:1a:fe:16:4c:30:66:fb:71:4a:82:d0:65:16:27:a5:0c:90:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Nov 9 17:02:06 2026 GMT Not After : Nov 10 20:56:06 2026 GMT Subject: CN=3780C7474189CC0615AA1659966CDE93C4F3940A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:76:c4:c1:2d:39:9f:de:f4:ab:73:45:4e: 94:0a:a5:f0:7e:8f:bf:d8:27:da:ad:3a:50:58:7b: dd:81:18:6b:18:ef:6f:79:d6:29:5b:2f:64:40:f5: 5a:5e:62:ac:39:41:fc:b5:69:d6:5e:f6:54:46:27: 11:03:d8:3b:a2:cc:17:6b:4a:f3:b0:cc:64:25:5a: bf:82:1d:2e:24:cf:d5:06:0e:3c:06:60:a6:58:aa: cc:bc:0d:3c:be:43:74:c7:4f:0e:75:7d:75:90:61: 21:1c:e9:e1:4c:54:b2:6d:67:de:f4:56:9b:66:ee: ad:63:87:f2:b0:a8:9b:c2:6c:57:d5:e0:e4:49:64: 80:3d:aa:3f:a5:5a:e3:93:54:74:0a:b4:4f:18:9c: c5:a5:d4:ea:09:2f:3d:66:ac:85:96:36:4b:b0:f6: f6:df:38:ec:27:76:c8:33:67:4d:37:1d:7c:79:e3: 02:ef:8e:0d:dd:97:39:13:29:4e:3c:e4:1d:58:95: ce:b8:77:29:26:cf:7a:94:72:8b:94:23:52:f9:68: a2:3c:b0:c6:36:ed:d3:9b:b3:b0:3d:a5:d7:f3:63: ea:e9:11:a5:12:ed:71:c6:89:9d:c7:94:5a:7c:90: bd:34:f1:51:3b:2e:78:23:f9:fc:ed:f1:21:9e:60: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:C7:47:41:89:CC:06:15:AA:16:59:96:6C:DE:93:C4:F3:94:0A X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:26:0d:69:5c:82:cb:c9:f6:13:40:68:18:99:32:09:b0:db: 6c:b4:e9:54:5b:e9:cf:c0:0e:9b:33:92:b0:60:5a:74:85:0c: d5:cc:4c:c4:be:75:b9:71:57:96:7b:ba:fd:83:24:3a:a4:40: da:55:a8:95:11:03:09:87:84:ca:86:a4:29:c0:fb:29:fb:90: 5e:52:35:29:1b:86:40:c8:09:f1:b9:0a:d2:f6:ac:24:47:22: 37:45:37:34:cf:3d:27:9c:b7:43:9e:ad:20:be:da:83:18:df: 20:6f:ff:95:19:71:80:a7:6d:63:92:25:dd:c2:55:07:1a:e0: 81:45:a4:7d:cc:8d:94:99:24:af:71:0d:b2:58:46:90:c2:df: 6c:f2:d4:f9:0a:24:b8:76:cd:c1:98:5b:c5:51:83:9b:08:c3: ac:19:0f:77:62:2d:9b:d2:ad:0e:64:f0:e5:fc:fd:d8:88:c4: 3a:b2:90:83:b9:85:cb:cf:c0:72:cc:6d:1a:54:c7:44:2f:ab: c8:ae:bf:f9:5c:c6:b5:97:de:73:49:bc:66:0b:e9:c7:a4:a5: 2a:c6:7d:d5:93:56:cb:82:b3:69:fa:65:f8:ec:9c:04:00:e0: a8:8b:59:c2:2c:d6:db:20:4d:26:c5:0f:48:cf:43:f1:fd:08: d6:07:8e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9ca/hZMMGb7cUqC0GUWJ6UMkPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjExMDkxNzAyMDZaFw0yNjExMTAyMDU2MDZaMDMxMTAvBgNV BAMTKDM3ODBDNzQ3NDE4OUNDMDYxNUFBMTY1OTk2NkNERTkzQzRGMzk0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPXbEwS05n970q3NFTpQKpfB+ j7/YJ9qtOlBYe92BGGsY72951ilbL2RA9VpeYqw5Qfy1adZe9lRGJxED2DuizBdr SvOwzGQlWr+CHS4kz9UGDjwGYKZYqsy8DTy+Q3THTw51fXWQYSEc6eFMVLJtZ970 Vptm7q1jh/KwqJvCbFfV4ORJZIA9qj+lWuOTVHQKtE8YnMWl1OoJLz1mrIWWNkuw 9vbfOOwndsgzZ003HXx54wLvjg3dlzkTKU485B1Ylc64dykmz3qUcouUI1L5aKI8 sMY27dObs7A9pdfzY+rpEaUS7XHGiZ3HlFp8kL008VE7Lngj+fzt8SGeYDilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4DHR0GJzAYVqhZZlmzek8TzlAowHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgmDWlcgsvJ9hNAaBiZMgmw22y06VRb6c/A DpszkrBgWnSFDNXMTMS+dblxV5Z7uv2DJDqkQNpVqJURAwmHhMqGpCnA+yn7kF5S NSkbhkDICfG5CtL2rCRHIjdFNzTPPSect0OerSC+2oMY3yBv/5UZcYCnbWOSJd3C VQca4IFFpH3MjZSZJK9xDbJYRpDC32zy1PkKJLh2zcGYW8VRg5sIw6wZD3diLZvS rQ5k8OX8/diIxDqykIO5hcvPwHLMbRpUx0Qvq8iuv/lcxrWX3nNJvGYL6cekpSrG fdWTVsuCs2n6ZfjsnAQA4KiLWcIs1tsgTSbFD0jPQ/H9CNYHjkA= -----END CERTIFICATE-----Generated at Tue Nov 10 02:38:03 2026 by rpki-client