$ rpki-client -vvvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: K/fV4OaIZugGNi5gjVPDG6Hep7S3Cs+hgqdEVZrAmx0= Subject key identifier: BA:36:F1:B6:3D:30:74:B0:DB:0F:8E:48:1A:5E:EF:26:AE:58:0A:E4 Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 7485F027EF5973BCB97CBCF17F08934514073EE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: FA Signing time: Wed 04 Nov 2026 02:41:27 +0000 Manifest this update: Wed 04 Nov 2026 02:36:27 +0000 Manifest next update: Thu 05 Nov 2026 04:16:27 +0000 Files and hashes: 1: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: CVe4uJwCLil1bSLy1gYTjQvWVaP7VORUxu3Xy46XIqQ=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:85:f0:27:ef:59:73:bc:b9:7c:bc:f1:7f:08:93:45:14:07:3e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Nov 4 02:36:27 2026 GMT Not After : Nov 5 04:16:27 2026 GMT Subject: CN=BA36F1B63D3074B0DB0F8E481A5EEF26AE580AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:d5:69:2b:d1:3d:aa:0f:43:aa:e5:2c:b7: f8:23:b2:a8:2a:07:54:8f:f8:61:68:cf:c1:51:41: e8:3b:0f:5d:e0:10:a4:d4:ff:70:37:86:0c:77:15: 49:21:c1:63:f2:dc:82:18:a6:58:e4:c3:de:64:1b: eb:43:b9:06:7c:49:f3:07:93:84:32:9a:76:bc:d2: 9c:f3:59:0e:a9:57:e7:a3:91:e8:b6:f1:3c:db:f6: 87:ee:6d:90:f0:36:0f:36:55:b8:4d:4a:04:2d:af: b9:f2:21:b3:a3:58:48:8a:07:ac:de:8f:81:8e:93: b0:cb:9f:1f:a9:b3:6c:69:40:fa:e8:c8:48:bf:75: 28:23:5f:4c:48:87:c1:14:ea:14:d4:85:fa:62:c0: f7:6e:33:5e:57:0f:30:ca:fb:56:74:4b:e5:54:4e: 71:50:ac:3c:36:11:0e:9d:51:c1:fc:7a:35:21:d3: 32:17:02:f0:45:97:a6:29:3d:7a:6b:2a:c4:50:25: 81:ea:f9:7d:33:08:80:74:a2:47:a2:72:b0:01:49: b3:e8:c4:08:ce:5d:b1:3f:54:f4:89:87:5f:bb:d3: 21:06:d7:73:20:25:91:58:dd:0f:e8:1f:de:cd:39: f2:1d:82:36:0e:f9:54:09:a5:7b:84:17:ba:b8:e8: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:F1:B6:3D:30:74:B0:DB:0F:8E:48:1A:5E:EF:26:AE:58:0A:E4 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ac:14:28:33:a0:a4:fd:b2:8d:02:71:4b:76:34:36:2b:d0: 10:b3:1e:e7:6d:ec:2a:79:9e:58:79:1a:62:f8:02:83:7f:7d: 26:7b:0a:85:ef:c4:37:cb:c1:18:f8:e2:8d:c5:7a:0f:f2:66: 82:df:5a:16:ea:fb:6b:e4:cb:09:e3:52:40:ea:0f:6c:18:06: fa:a2:ef:62:eb:77:ac:68:e3:bf:0b:b4:55:be:a5:01:9b:12: 9e:76:b7:af:1b:9f:23:61:5b:67:f2:5d:c1:3f:e1:45:33:63: 43:e1:d6:3b:8d:0b:83:c9:9f:74:59:1e:86:ba:f8:41:2b:a8: 53:bf:41:4f:09:1a:c2:10:57:c8:8a:6c:ee:b2:47:8e:0c:bb: a3:34:2f:81:fa:1a:62:38:ae:b1:6b:ed:c3:7b:ce:70:8c:6e: 53:bd:4d:cd:23:dc:58:42:c6:d2:ba:1e:2f:75:c6:e7:ba:40: a1:a8:70:7a:0f:ba:4d:e1:90:0d:1b:84:32:a5:8b:9b:72:6a: bd:07:ab:12:53:e3:cc:78:a0:3a:6b:40:90:5d:e9:72:1e:ee: 99:a2:69:0d:26:4a:69:59:9f:1f:7c:1d:7f:a8:18:a5:30:60: 02:ce:bd:57:f8:48:3b:d8:40:94:03:91:8f:b4:23:59:b8:30: df:ca:77:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIXwJ+9Zc7y5fLzxfwiTRRQHPucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjExMDQwMjM2MjdaFw0yNjExMDUwNDE2MjdaMDMxMTAvBgNV BAMTKEJBMzZGMUI2M0QzMDc0QjBEQjBGOEU0ODFBNUVFRjI2QUU1ODBBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DdVpK9E9qg9DquUst/gjsqgq B1SP+GFoz8FRQeg7D13gEKTU/3A3hgx3FUkhwWPy3IIYpljkw95kG+tDuQZ8SfMH k4Qymna80pzzWQ6pV+ejkei28Tzb9ofubZDwNg82VbhNSgQtr7nyIbOjWEiKB6ze j4GOk7DLnx+ps2xpQProyEi/dSgjX0xIh8EU6hTUhfpiwPduM15XDzDK+1Z0S+VU TnFQrDw2EQ6dUcH8ejUh0zIXAvBFl6YpPXprKsRQJYHq+X0zCIB0okeicrABSbPo xAjOXbE/VPSJh1+70yEG13MgJZFY3Q/oH97NOfIdgjYO+VQJpXuEF7q46DY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujbxtj0wdLDbD45IGl7vJq5YCuQwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOsFCgzoKT9so0CcUt2NDYr0BCzHudt7Cp5 nlh5GmL4AoN/fSZ7CoXvxDfLwRj44o3Feg/yZoLfWhbq+2vkywnjUkDqD2wYBvqi 72Lrd6xo478LtFW+pQGbEp52t68bnyNhW2fyXcE/4UUzY0Ph1juNC4PJn3RZHoa6 +EErqFO/QU8JGsIQV8iKbO6yR44Mu6M0L4H6GmI4rrFr7cN7znCMblO9Tc0j3FhC xtK6Hi91xue6QKGocHoPuk3hkA0bhDKli5tyar0HqxJT48x4oDprQJBd6XIe7pmi aQ0mSmlZnx98HX+oGKUwYALOvVf4SDvYQJQDkY+0I1m4MN/Kd5o= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:35 2026 by rpki-client