$ rpki-client -vvvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: +B8Cjdu7KLVrWUqEBhUkZKSUbVmFXW6CPw2Vql/etYk= Subject key identifier: C8:48:5A:54:4D:62:38:68:96:7E:4B:D9:C8:E8:17:45:25:53:01:89 Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 678F044B808E97ED7828D60EB9C7046068E7E326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 22:46:12 +0000 Manifest this update: Sun 01 Nov 2026 22:41:12 +0000 Manifest next update: Mon 02 Nov 2026 22:52:12 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) 2: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: BonwzOzYTXxFJAgcd7SK5A0pWivL6tPeYg6Lcdnjgtk=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8f:04:4b:80:8e:97:ed:78:28:d6:0e:b9:c7:04:60:68:e7:e3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Nov 1 22:41:12 2026 GMT Not After : Nov 2 22:52:12 2026 GMT Subject: CN=C8485A544D623868967E4BD9C8E8174525530189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:a5:c6:59:6b:89:e7:a8:a3:96:cf:91:99: ae:a8:5b:bd:5a:07:d1:75:b7:90:45:f1:e9:27:ef: 96:a3:c7:18:7a:6d:55:a2:a3:b3:c7:96:3e:4e:68: f1:95:df:2d:d2:d3:e4:4f:36:a2:07:c7:ed:9c:a6: 61:f4:8a:10:0e:ca:ac:db:33:12:d1:d9:77:3c:58: 8c:d8:17:44:46:7a:b6:c9:fd:e2:9a:d4:0b:f1:54: ea:48:21:cd:85:82:fa:67:a6:27:6d:61:0c:ab:76: 78:b2:68:59:0a:31:22:6d:94:a2:f4:ab:97:bc:4f: 53:cb:37:62:a9:29:c0:9a:8b:38:af:ea:5d:eb:68: 5b:1b:15:d0:f6:19:14:d7:92:9f:0c:f6:d0:bc:9c: e9:f3:ce:e0:fa:77:2b:4a:b8:b9:98:b4:2f:0d:32: eb:8c:ae:c9:68:ef:c3:08:63:a1:5f:05:8b:63:25: 4b:df:a9:b2:e6:64:ab:1f:77:8d:89:43:ea:5b:bd: 91:68:6d:0d:e3:fa:90:ef:cf:5e:af:e0:d3:14:58: 2f:d8:6b:47:08:ae:c8:6e:50:ac:19:07:98:4b:52: e7:c8:4e:2a:95:d1:8e:19:e3:4e:30:11:db:d2:0a: 45:6a:fa:df:8e:1e:ca:ce:09:68:f8:dd:67:67:fa: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:5A:54:4D:62:38:68:96:7E:4B:D9:C8:E8:17:45:25:53:01:89 X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:c7:46:01:17:32:66:7b:72:ba:60:d7:24:96:ef:1c:4a: 59:5b:57:48:31:28:ef:bd:b9:ef:fc:e2:39:03:6f:e6:db:9e: 87:bf:a9:8b:a1:ad:21:38:1e:c6:9d:d4:af:04:70:7a:b3:80: 33:67:bc:26:e3:d4:b1:5b:5c:5e:75:61:f5:67:85:53:0e:b0: 93:d5:63:d3:93:3d:13:d7:bf:bb:b1:b1:36:03:5c:98:2b:4b: ef:89:e8:37:f4:98:73:99:15:34:0c:34:9f:d4:27:f4:8d:01: 9d:8a:47:bc:97:47:c7:41:5c:4b:ae:09:2a:8b:59:90:d0:3b: 89:91:09:7b:36:2a:41:35:32:ce:7e:ba:c2:80:78:75:57:8d: 7a:dd:fc:04:89:57:6e:1b:1b:7b:35:c4:a9:1c:4a:1f:bc:97: 41:8b:c4:7c:10:64:fa:0e:cb:7a:10:5b:11:87:c4:35:a5:a0: 50:bc:6e:ff:96:65:78:9e:ff:fe:55:7b:61:1a:ce:6a:f6:9f: 85:d5:5f:0a:8b:41:6e:ce:68:0e:b2:dd:df:53:26:a1:15:f7: 5a:68:99:cc:af:6c:26:3e:20:9f:c6:fc:0e:4d:e0:c0:42:94: 6a:88:e4:e3:52:90:e9:2f:e2:6d:3d:2f:7c:da:ec:5f:3a:94: 22:44:a3:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ48ES4COl+14KNYOuccEYGjn4yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjExMDEyMjQxMTJaFw0yNjExMDIyMjUyMTJaMDMxMTAvBgNV BAMTKEM4NDg1QTU0NEQ2MjM4Njg5NjdFNEJEOUM4RTgxNzQ1MjU1MzAxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KKXGWWuJ56ijls+Rma6oW71a B9F1t5BF8ekn75ajxxh6bVWio7PHlj5OaPGV3y3S0+RPNqIHx+2cpmH0ihAOyqzb MxLR2Xc8WIzYF0RGerbJ/eKa1AvxVOpIIc2FgvpnpidtYQyrdniyaFkKMSJtlKL0 q5e8T1PLN2KpKcCaiziv6l3raFsbFdD2GRTXkp8M9tC8nOnzzuD6dytKuLmYtC8N MuuMrslo78MIY6FfBYtjJUvfqbLmZKsfd42JQ+pbvZFobQ3j+pDvz16v4NMUWC/Y a0cIrshuUKwZB5hLUufITiqV0Y4Z404wEdvSCkVq+t+OHsrOCWj43Wdn+jH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEhaVE1iOGiWfkvZyOgXRSVTAYkwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIZx0YBFzJme3K6YNcklu8cSllbV0gxKO+9 ue/84jkDb+bbnoe/qYuhrSE4Hsad1K8EcHqzgDNnvCbj1LFbXF51YfVnhVMOsJPV Y9OTPRPXv7uxsTYDXJgrS++J6Df0mHOZFTQMNJ/UJ/SNAZ2KR7yXR8dBXEuuCSqL WZDQO4mRCXs2KkE1Ms5+usKAeHVXjXrd/ASJV24bG3s1xKkcSh+8l0GLxHwQZPoO y3oQWxGHxDWloFC8bv+WZXie//5Ve2Eazmr2n4XVXwqLQW7OaA6y3d9TJqEV91po mcyvbCY+IJ/G/A5N4MBClGqI5ONSkOkv4m09L3za7F86lCJEo4A= -----END CERTIFICATE-----Generated at Mon Nov 2 18:22:44 2026 by rpki-client