$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft File: D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json) Hash identifier: q2ZL4M5C3Zet6UYSigU4HdyOHOZfZGiPgVB9kjjaXiA= Subject key identifier: D2:D7:7B:22:BB:06:D3:CF:C4:1D:64:5E:EB:02:89:B9:4E:F9:8E:95 Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 Certificate issuer: /CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Certificate serial: 02B6800702F0730806FB0E3C5EF5CC567CEFDE12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 10:00:44 +0000 Manifest this update: Tue 03 Nov 2026 09:55:44 +0000 Manifest next update: Wed 04 Nov 2026 11:17:44 +0000 Files and hashes: 1: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: zxHY5nfYU+sPS6zQ13pUMfI1y/jZE9O0nqL0EFSqqmo=) 2: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 11:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b6:80:07:02:f0:73:08:06:fb:0e:3c:5e:f5:cc:56:7c:ef:de:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Validity Not Before: Nov 3 09:55:44 2026 GMT Not After : Nov 4 11:17:44 2026 GMT Subject: CN=D2D77B22BB06D3CFC41D645EEB0289B94EF98E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:b5:55:06:3f:8a:30:43:ab:86:17:2b:5e: da:7e:68:b3:05:16:30:1e:4b:d9:7b:72:c2:93:0d: 74:19:d6:4b:0a:71:0f:9b:f8:dd:9c:a5:dc:23:ce: 5b:c6:0e:d0:2c:c8:56:2e:98:95:c7:4d:0b:a3:91: 6e:8a:d3:a7:9c:1f:16:50:fa:58:67:ee:45:18:32: f9:6f:4f:87:ff:03:c3:e8:61:6f:40:6e:47:d8:2c: 19:ea:f5:ec:7f:6a:56:82:8d:6e:92:4f:c5:b1:3e: 04:cb:ed:f8:92:7a:63:bb:94:14:ce:37:f3:47:a7: 1c:fc:5c:f2:a6:1a:64:02:c7:aa:ae:7f:c2:dd:38: bf:ed:3a:8f:92:e3:6b:89:a7:cc:be:61:c3:ed:28: de:6e:f3:de:39:3c:86:5a:3a:0b:d3:01:a7:7a:d8: 1f:62:52:b7:97:07:f3:06:03:0a:21:eb:c7:ed:02: be:77:4b:6a:10:01:14:4c:dc:82:7f:2f:79:f4:5d: 73:89:5b:f0:f0:52:9d:c2:bf:5b:55:49:5d:65:ea: 06:18:4a:b7:5a:da:61:a2:63:57:49:03:ee:46:3d: 05:a8:74:b1:52:71:b7:65:99:de:ae:af:c1:c4:50: 30:64:ab:2a:0a:f3:86:11:90:a7:60:91:d0:77:d8: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:7B:22:BB:06:D3:CF:C4:1D:64:5E:EB:02:89:B9:4E:F9:8E:95 X509v3 Authority Key Identifier: keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0e:48:02:23:44:cb:2e:12:cf:4c:41:74:45:45:fe:a5:57: 2c:26:2f:b1:52:55:ff:2c:8d:ff:e7:37:8c:21:89:80:de:37: e7:e6:7c:77:d7:93:cc:c1:70:b4:94:a7:fc:c5:f9:f8:7b:26: 87:4e:3b:a2:ae:87:5a:1f:46:a0:a8:89:76:6f:02:4e:43:57: 2b:30:48:29:34:ee:cc:c0:78:56:64:c5:87:1b:26:41:6c:57: 53:2c:a8:39:2d:48:98:45:a3:25:8c:4f:96:bf:98:c4:74:e5: 64:20:2b:79:ce:8a:56:bb:08:2e:b5:b0:34:0b:ce:0f:58:db: ce:88:95:21:03:2f:7b:f1:3a:b9:1b:17:47:ee:15:6d:c4:e3: 9f:b3:32:2f:ce:83:4b:54:76:7b:37:67:e5:14:c5:a2:00:05: 05:6b:06:9a:cf:0c:56:f2:8b:4b:03:b3:7c:7e:0b:1d:22:42: b9:f0:a4:27:88:59:00:74:62:a9:d7:db:28:07:f1:45:b0:ed: 5a:0a:f0:3c:fd:a3:4f:21:ba:44:37:3d:ea:6e:79:a5:bb:e0: 4d:d7:5e:c6:08:8c:cd:c8:ee:6a:55:b3:8e:85:3e:0b:56:fd: e6:6c:d5:bd:54:22:52:04:5a:24:09:71:11:20:23:f2:9f:36: 6f:3c:e5:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAraABwLwcwgG+w48XvXMVnzv3hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhC RDdBOUFFMDAeFw0yNjExMDMwOTU1NDRaFw0yNjExMDQxMTE3NDRaMDMxMTAvBgNV BAMTKEQyRDc3QjIyQkIwNkQzQ0ZDNDFENjQ1RUVCMDI4OUI5NEVGOThFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpLVVBj+KMEOrhhcrXtp+aLMF FjAeS9l7csKTDXQZ1ksKcQ+b+N2cpdwjzlvGDtAsyFYumJXHTQujkW6K06ecHxZQ +lhn7kUYMvlvT4f/A8PoYW9AbkfYLBnq9ex/alaCjW6ST8WxPgTL7fiSemO7lBTO N/NHpxz8XPKmGmQCx6quf8LdOL/tOo+S42uJp8y+YcPtKN5u8945PIZaOgvTAad6 2B9iUreXB/MGAwoh68ftAr53S2oQARRM3IJ/L3n0XXOJW/DwUp3Cv1tVSV1l6gYY Srda2mGiY1dJA+5GPQWodLFScbdlmd6ur8HEUDBkqyoK84YRkKdgkdB32CaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0td7IrsG08/EHWRe6wKJuU75jpUwHwYDVR0j BBgwFoAU1EGYjCBJ13+dmGUmI6iBCL16muAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMy MDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhCRDdBOUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENDQxOTg4QzIwNDlENzdGOUQ5ODY1MjYyM0E4ODEwOEJEN0E5 QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgx MDhCRDdBOUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0OSAIjRMsuEs9MQXRFRf6lVywmL7FSVf8s jf/nN4whiYDeN+fmfHfXk8zBcLSUp/zF+fh7JodOO6Kuh1ofRqCoiXZvAk5DVysw SCk07szAeFZkxYcbJkFsV1MsqDktSJhFoyWMT5a/mMR05WQgK3nOila7CC61sDQL zg9Y286IlSEDL3vxOrkbF0fuFW3E45+zMi/Og0tUdns3Z+UUxaIABQVrBprPDFby i0sDs3x+Cx0iQrnwpCeIWQB0YqnX2ygH8UWw7VoK8Dz9o08hukQ3PepueaW74E3X XsYIjM3I7mpVs46FPgtW/eZs1b1UIlIEWiQJcREgI/KfNm885QQ= -----END CERTIFICATE-----Generated at Tue Nov 3 18:33:29 2026 by rpki-client