$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: JJ7zODZFLnOXbyfrFeTSeBv9CLft9pEbeW58Ke26E/0= Subject key identifier: 1C:0E:92:2E:CD:4B:2E:E0:32:D3:E5:66:2A:F9:78:E6:FE:95:CA:AF Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 2FE1CB8A7A28D13242C8A8447A167EEA14A664F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 16:59:10 +0000 Manifest this update: Mon 02 Nov 2026 16:54:10 +0000 Manifest next update: Tue 03 Nov 2026 17:13:10 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) 2: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: enZgSg2z2lZsWl8GiG6idZzAR467WlCMR7Z3MTM1Wuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e1:cb:8a:7a:28:d1:32:42:c8:a8:44:7a:16:7e:ea:14:a6:64:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Nov 2 16:54:10 2026 GMT Not After : Nov 3 17:13:10 2026 GMT Subject: CN=1C0E922ECD4B2EE032D3E5662AF978E6FE95CAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:dd:60:67:11:48:d3:a3:fc:70:a0:29:93: 76:37:7f:cf:5b:93:f9:c8:5c:3e:4b:37:5b:c5:f1: 77:0c:19:e3:87:18:ed:ab:4c:16:8f:d8:05:52:25: 14:f3:3b:ec:63:a9:bd:3c:47:4f:d2:a4:11:2c:81: 7a:9b:d9:7c:c7:39:b7:b9:87:08:b2:54:b5:d7:e1: b8:7c:49:97:e4:22:df:42:d2:f1:40:4b:07:d0:96: 5d:c2:29:f6:6b:39:2f:f8:e9:3a:c6:19:41:38:b3: 07:55:78:00:15:b6:c9:6a:de:65:3d:4e:9c:2a:14: 85:b8:db:5f:5b:bb:0b:f4:b6:26:22:bc:7c:30:ab: 76:e9:c4:65:ca:54:48:8d:be:46:11:22:fa:b3:9e: 7d:93:ea:c1:f6:71:14:37:1f:94:cf:9c:9f:fe:23: b4:8e:a2:61:b3:7b:38:61:b0:35:07:fe:2a:83:a1: 5e:7f:6a:7b:4f:51:86:e1:5f:db:36:a2:e6:f7:10: 18:23:d9:78:43:10:ba:e1:af:52:b8:bd:58:39:c5: dd:19:7e:2e:0b:9d:44:68:e7:26:b2:5b:5a:6b:1a: 6f:53:35:ae:6d:cd:93:0d:68:b7:c7:35:db:f6:7e: 87:b7:53:30:a8:bd:dc:9d:c9:3c:33:6e:16:0e:20: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0E:92:2E:CD:4B:2E:E0:32:D3:E5:66:2A:F9:78:E6:FE:95:CA:AF X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f1:fa:c7:48:55:26:f7:89:45:18:f0:a8:5d:f8:9f:e3:a6: 96:5d:01:9d:33:f8:55:7a:03:fc:3a:30:35:36:42:2f:a1:8c: 4e:1f:c3:71:0c:58:77:2e:5d:15:40:ff:a1:a1:b8:9e:a0:e6: c5:ff:a2:27:fe:fd:d1:d2:bd:13:c9:47:98:97:53:bd:cf:b1: 7c:17:64:af:8a:3e:5b:79:22:3d:03:99:fe:70:7e:0f:94:ef: 84:38:35:f9:48:fe:e7:b3:43:6a:f9:77:1f:c0:49:74:3b:4f: 56:2e:f3:8e:81:9c:89:ad:44:f9:7a:e6:26:17:5f:2c:c7:48: e5:fb:2b:fc:c4:95:f7:71:43:e2:de:88:99:92:c9:19:2a:ef: 12:8c:1c:38:2c:95:87:37:8c:b6:60:b3:3d:3f:f5:18:50:0c: d6:b3:f3:43:b3:0e:71:d1:93:d1:d5:f7:c9:1f:75:e4:53:f3: 9f:56:74:92:40:64:d3:e5:47:7b:5d:27:f3:6e:4c:c6:73:55: a6:f8:8d:fb:52:7c:44:ed:7a:11:4a:ef:58:e9:30:8b:67:94: 83:cb:c1:e8:02:e6:49:fa:7c:f4:b5:16:c6:b6:19:4b:03:e5: 6a:33:ae:a7:52:79:68:53:fd:0e:52:1c:8b:ad:8b:40:c2:3c: 66:80:9b:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+HLinoo0TJCyKhEehZ+6hSmZPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjExMDIxNjU0MTBaFw0yNjExMDMxNzEzMTBaMDMxMTAvBgNV BAMTKDFDMEU5MjJFQ0Q0QjJFRTAzMkQzRTU2NjJBRjk3OEU2RkU5NUNBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKc91gZxFI06P8cKApk3Y3f89b k/nIXD5LN1vF8XcMGeOHGO2rTBaP2AVSJRTzO+xjqb08R0/SpBEsgXqb2XzHObe5 hwiyVLXX4bh8SZfkIt9C0vFASwfQll3CKfZrOS/46TrGGUE4swdVeAAVtslq3mU9 TpwqFIW4219buwv0tiYivHwwq3bpxGXKVEiNvkYRIvqznn2T6sH2cRQ3H5TPnJ/+ I7SOomGzezhhsDUH/iqDoV5/antPUYbhX9s2oub3EBgj2XhDELrhr1K4vVg5xd0Z fi4LnURo5yayW1prGm9TNa5tzZMNaLfHNdv2foe3UzCovdydyTwzbhYOIGXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHA6SLs1LLuAy0+VmKvl45v6Vyq8wHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLx+sdIVSb3iUUY8Khd+J/jppZdAZ0z+FV6 A/w6MDU2Qi+hjE4fw3EMWHcuXRVA/6GhuJ6g5sX/oif+/dHSvRPJR5iXU73PsXwX ZK+KPlt5Ij0Dmf5wfg+U74Q4NflI/uezQ2r5dx/ASXQ7T1Yu846BnImtRPl65iYX XyzHSOX7K/zElfdxQ+LeiJmSyRkq7xKMHDgslYc3jLZgsz0/9RhQDNaz80OzDnHR k9HV98kfdeRT859WdJJAZNPlR3tdJ/NuTMZzVab4jftSfETtehFK71jpMItnlIPL wegC5kn6fPS1Fsa2GUsD5WozrqdSeWhT/Q5SHIuti0DCPGaAm6o= -----END CERTIFICATE-----Generated at Mon Nov 2 21:12:29 2026 by rpki-client