$ rpki-client -vvvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: gBcdVycA9PVNjZBsD/S7jzZiQW1NaiZncnfcxfwI7wg= Subject key identifier: 51:EA:3B:7A:6C:BC:1F:1E:3F:A9:A2:DF:43:1D:2D:31:15:AF:76:F9 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 447F701E5ED39E8619177B855D46CAAD4B6243F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 09:49:55 +0000 Manifest this update: Mon 02 Nov 2026 09:44:55 +0000 Manifest next update: Tue 03 Nov 2026 11:20:55 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 4: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: jYZ/cSDPQjRMzdwz3hcmpuRjaOCwl4jGsxZrxRMfRkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7f:70:1e:5e:d3:9e:86:19:17:7b:85:5d:46:ca:ad:4b:62:43:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Nov 2 09:44:55 2026 GMT Not After : Nov 3 11:20:55 2026 GMT Subject: CN=51EA3B7A6CBC1F1E3FA9A2DF431D2D3115AF76F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:3f:00:a5:7c:dc:18:63:6b:c1:f0:97:9c: b3:4c:e9:ba:18:88:90:a8:22:d4:5a:95:e5:f3:fa: 29:b9:65:2f:72:b3:78:1b:21:d8:9f:b6:1c:97:14: 15:b8:22:1f:d9:07:f4:67:de:16:81:4c:21:7d:de: 3c:8a:44:d9:1f:9e:1d:1f:da:d6:d7:a7:57:62:65: a8:cc:14:3c:7d:18:1a:90:b2:75:be:76:9b:6c:ea: 6b:94:3e:80:61:58:5d:16:b9:c5:1c:eb:b8:9e:e6: 7b:cd:b0:4e:55:f5:ca:0a:3b:59:1e:e5:fa:c8:15: 8f:a0:ed:5d:5d:50:53:95:94:45:87:01:df:57:ce: 3c:3d:e4:1d:4f:03:4b:1a:bf:15:69:e4:30:97:22: 86:d0:63:d6:96:1e:56:45:13:e9:c8:5d:f3:97:19: 56:9c:4e:41:37:33:8a:32:7a:7c:fc:5c:e8:80:9c: 06:7d:0e:fd:19:5a:94:f8:0e:3e:bc:e0:fd:8d:75: 49:69:ba:fb:c9:61:f2:4f:c6:5e:b3:af:78:73:8e: 19:ee:c1:c6:cc:36:bd:7d:ee:21:5c:f4:83:d6:ac: 89:bb:a9:c8:74:2e:d4:90:ff:c9:52:e1:e5:38:e5: b9:b1:9c:50:76:e5:4b:4b:7a:f2:d7:c8:24:ff:1b: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EA:3B:7A:6C:BC:1F:1E:3F:A9:A2:DF:43:1D:2D:31:15:AF:76:F9 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a6:fb:47:0e:c3:a4:83:e1:b8:22:52:89:3c:14:a9:f1:92: f5:8d:76:4b:5a:f2:cc:c7:f3:54:9d:e1:6f:1a:a0:e6:fa:ec: b4:cb:76:4f:64:87:69:cf:70:02:57:f8:b0:73:b5:86:94:1d: 1c:94:84:d1:fd:b8:4e:4a:c0:7c:f1:c4:82:46:ca:7d:a0:ca: f0:30:9e:3b:cd:28:42:88:ca:b2:62:e8:43:10:6d:a3:2f:08: aa:46:43:3e:a6:59:f0:7b:17:2e:cf:29:09:ea:09:61:d8:79: db:0d:d7:8c:74:e6:ad:a2:66:7f:b7:e0:b8:2e:1e:d6:a1:a1: 09:23:6f:91:70:65:22:41:08:84:d9:da:d2:f2:a0:44:52:d5: 09:0b:12:82:21:4f:86:a1:8d:9c:2d:28:52:ff:a9:89:88:f8: df:17:9d:f7:a9:7d:38:60:a8:3d:88:ac:1e:30:64:1b:4a:8e: 2c:82:2f:03:c8:ff:fb:66:66:19:5e:a5:20:f8:c7:2a:0a:b8: 9a:06:7f:3b:14:5b:cf:95:c3:08:e3:93:68:47:9c:32:b9:92: 7c:a1:c4:1e:6a:81:7a:8e:55:05:3c:a5:7d:24:aa:af:c2:1b: 91:6b:08:1b:57:ea:41:a4:d6:b3:a4:8f:0d:7c:d1:66:8a:3c: 66:6f:e3:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURH9wHl7TnoYZF3uFXUbKrUtiQ/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjExMDIwOTQ0NTVaFw0yNjExMDMxMTIwNTVaMDMxMTAvBgNV BAMTKDUxRUEzQjdBNkNCQzFGMUUzRkE5QTJERjQzMUQyRDMxMTVBRjc2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevT8ApXzcGGNrwfCXnLNM6boY iJCoItRaleXz+im5ZS9ys3gbIdifthyXFBW4Ih/ZB/Rn3haBTCF93jyKRNkfnh0f 2tbXp1diZajMFDx9GBqQsnW+dpts6muUPoBhWF0WucUc67ie5nvNsE5V9coKO1ke 5frIFY+g7V1dUFOVlEWHAd9Xzjw95B1PA0savxVp5DCXIobQY9aWHlZFE+nIXfOX GVacTkE3M4oyenz8XOiAnAZ9Dv0ZWpT4Dj684P2NdUlpuvvJYfJPxl6zr3hzjhnu wcbMNr197iFc9IPWrIm7qch0LtSQ/8lS4eU45bmxnFB25UtLevLXyCT/G7qtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeo7emy8Hx4/qaLfQx0tMRWvdvkwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+m+0cOw6SD4bgiUok8FKnxkvWNdkta8szH 81Sd4W8aoOb67LTLdk9kh2nPcAJX+LBztYaUHRyUhNH9uE5KwHzxxIJGyn2gyvAw njvNKEKIyrJi6EMQbaMvCKpGQz6mWfB7Fy7PKQnqCWHYedsN14x05q2iZn+34Lgu HtahoQkjb5FwZSJBCITZ2tLyoERS1QkLEoIhT4ahjZwtKFL/qYmI+N8XnfepfThg qD2IrB4wZBtKjiyCLwPI//tmZhlepSD4xyoKuJoGfzsUW8+Vwwjjk2hHnDK5knyh xB5qgXqOVQU8pX0kqq/CG5FrCBtX6kGk1rOkjw180WaKPGZv458= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:11 2026 by rpki-client