$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: 0tbyo0LjNVMwhnL7LNyCQBeRW+1+oH2T/6Z30x/S73U= Subject key identifier: E2:8B:07:FC:E2:FA:B3:9A:24:A4:67:30:E6:39:79:00:44:DF:61:29 Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 60227300EA2E5404F885EE6138F3EFE9E65EA79A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: FF Signing time: Mon 09 Nov 2026 07:45:14 +0000 Manifest this update: Mon 09 Nov 2026 07:40:14 +0000 Manifest next update: Tue 10 Nov 2026 10:07:14 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) 2: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: iBRmfmXEsNzePMRpBfY9R5UpoQwYEeKJD/kJr317KM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:22:73:00:ea:2e:54:04:f8:85:ee:61:38:f3:ef:e9:e6:5e:a7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Nov 9 07:40:14 2026 GMT Not After : Nov 10 10:07:14 2026 GMT Subject: CN=E28B07FCE2FAB39A24A46730E639790044DF6129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:0a:9d:75:bc:84:ad:7d:c1:27:1e:03:9a: 94:e2:d0:b5:28:4a:69:f8:82:9a:f4:2a:74:b4:ae: f8:c7:17:ba:67:10:9a:94:23:b8:83:7f:be:2c:b4: a0:3f:84:a2:c3:7f:ed:1f:b5:11:33:10:9d:15:02: 86:7a:24:b6:f3:b7:b6:d1:46:b3:32:cc:15:fa:34: 76:b2:0e:15:7b:d9:93:6e:22:45:61:ab:b4:7b:37: 94:b9:29:85:b1:a5:d2:5c:a5:d7:f5:cd:33:b2:b5: 08:f6:17:7e:85:2b:38:52:68:e4:ad:f2:97:0b:95: 2b:2c:2c:32:9f:d0:e4:ca:c3:bd:80:90:e8:58:fc: 17:df:40:f7:56:fc:de:d3:df:10:95:0e:64:e5:ae: d9:e9:41:86:14:1d:8e:4d:4c:e2:5b:5f:17:59:a6: 57:b7:4d:2d:a8:a2:f0:57:cc:f9:c4:32:60:af:69: f3:6c:64:5a:8e:d1:95:25:cf:20:bf:76:d1:6a:bc: a1:86:e3:24:ea:9a:c4:9a:52:f7:83:ce:93:55:a8: 90:ee:e7:6a:24:e7:89:b6:81:0c:21:3e:8e:c3:44: 32:2b:c6:04:e6:e7:bf:04:04:30:a1:d8:a9:da:18: 50:03:24:1f:41:9b:7d:ad:e0:ed:61:9e:8b:7b:16: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:07:FC:E2:FA:B3:9A:24:A4:67:30:E6:39:79:00:44:DF:61:29 X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e5:0f:9c:a4:9f:57:27:a1:e9:25:19:aa:2b:c8:3b:9e:c0: b4:ae:fc:85:b4:83:0e:17:66:3a:29:97:6b:32:4d:b9:8f:37: 1e:fe:fe:9c:c0:29:b2:e1:ce:2a:e1:b7:67:cb:5b:c0:11:b3: 37:31:a3:c7:8c:35:3a:1a:c2:81:31:a4:9a:28:99:ac:57:a1: 93:dd:bb:52:34:bf:84:50:38:1c:ea:9d:ef:75:63:07:5e:67: 81:56:9f:4d:3c:c5:8a:fb:09:12:a0:14:02:57:00:07:c9:74: bd:15:d0:af:b9:7a:de:1a:0e:c9:0c:d4:80:c4:4a:5f:56:1e: f9:7a:ee:bf:2b:cc:7f:c7:6b:af:d4:5c:4a:34:6f:2c:ac:78: b5:9c:c1:38:8a:1b:ec:bb:da:14:70:b3:8d:24:29:00:dd:05: b9:b0:23:85:77:c6:a9:fc:0c:7f:e4:a4:b1:1e:4d:a9:5c:e0: 1b:04:c7:e9:8d:02:b5:3a:8f:a0:4a:01:09:0a:04:b3:76:1b: 09:31:1b:b1:2a:a0:2c:76:12:8f:f7:0f:d7:3c:6e:2e:6c:b9: 29:82:4d:a9:7b:26:19:c5:d2:fb:c1:52:64:94:cd:ea:8c:c4: c8:13:b4:f3:8d:ce:5d:56:9e:6f:37:d6:35:87:75:37:73:c6: 94:ed:8a:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCJzAOouVAT4he5hOPPv6eZep5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjExMDkwNzQwMTRaFw0yNjExMTAxMDA3MTRaMDMxMTAvBgNV BAMTKEUyOEIwN0ZDRTJGQUIzOUEyNEE0NjczMEU2Mzk3OTAwNDRERjYxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWQqddbyErX3BJx4DmpTi0LUo Smn4gpr0KnS0rvjHF7pnEJqUI7iDf74stKA/hKLDf+0ftREzEJ0VAoZ6JLbzt7bR RrMyzBX6NHayDhV72ZNuIkVhq7R7N5S5KYWxpdJcpdf1zTOytQj2F36FKzhSaOSt 8pcLlSssLDKf0OTKw72AkOhY/BffQPdW/N7T3xCVDmTlrtnpQYYUHY5NTOJbXxdZ ple3TS2oovBXzPnEMmCvafNsZFqO0ZUlzyC/dtFqvKGG4yTqmsSaUveDzpNVqJDu 52ok54m2gQwhPo7DRDIrxgTm578EBDCh2KnaGFADJB9Bm32t4O1hnot7Fn7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4osH/OL6s5okpGcw5jl5AETfYSkwHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHlD5ykn1cnoeklGaoryDuewLSu/IW0gw4X Zjopl2syTbmPNx7+/pzAKbLhzirht2fLW8ARszcxo8eMNToawoExpJoomaxXoZPd u1I0v4RQOBzqne91YwdeZ4FWn008xYr7CRKgFAJXAAfJdL0V0K+5et4aDskM1IDE Sl9WHvl67r8rzH/Ha6/UXEo0byyseLWcwTiKG+y72hRws40kKQDdBbmwI4V3xqn8 DH/kpLEeTalc4BsEx+mNArU6j6BKAQkKBLN2GwkxG7EqoCx2Eo/3D9c8bi5suSmC Tal7JhnF0vvBUmSUzeqMxMgTtPONzl1Wnm831jWHdTdzxpTtivo= -----END CERTIFICATE-----Generated at Tue Nov 10 03:32:29 2026 by rpki-client