$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft File: CDA698011D10F436E3BBC31664239B3150C53C19.mft (raw, json) Hash identifier: EZuELOLIxCjosSgebtAdGyoe+898kyS/UcQhkgom+vI= Subject key identifier: F3:A9:08:3D:44:3D:16:C2:1B:36:FE:5A:D8:41:DB:98:A1:29:BD:DA Authority key identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 Certificate issuer: /CN=CDA698011D10F436E3BBC31664239B3150C53C19 Certificate serial: 1A66E6A916C5FF20E862A975E47937E0321E5F95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft Manifest number: 13 Signing time: Tue 03 Nov 2026 00:33:12 +0000 Manifest this update: Tue 03 Nov 2026 00:28:12 +0000 Manifest next update: Wed 04 Nov 2026 02:25:12 +0000 Files and hashes: 1: CDA698011D10F436E3BBC31664239B3150C53C19.crl (hash: EmRnSPb4lAC3k9gbLb2isSbyVtLcev/aCouZYQJeg7M=) 2: 3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa (hash: ZVz1K3VmS9pSvR4B6qvtVOc38rvIm8D4hBzA2h5rzlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:e6:a9:16:c5:ff:20:e8:62:a9:75:e4:79:37:e0:32:1e:5f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA698011D10F436E3BBC31664239B3150C53C19 Validity Not Before: Nov 3 00:28:12 2026 GMT Not After : Nov 4 02:25:12 2026 GMT Subject: CN=F3A9083D443D16C21B36FE5AD841DB98A129BDDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:d9:f0:cd:a8:07:4f:8e:2c:15:6e:08:01: ed:53:6c:f0:ea:52:b0:68:c8:3b:f5:02:26:8c:bc: e8:d5:a3:2d:5b:05:a1:79:e5:59:16:ce:bd:60:bd: f7:2e:66:bb:3d:08:5e:e1:4c:ce:1a:db:7d:e3:1a: 08:04:20:d2:a8:58:3a:46:e6:8d:c6:f9:80:91:1e: a0:43:1f:57:fb:de:58:90:ac:5e:ca:c8:53:36:a0: 84:34:83:40:6f:79:00:5b:b4:3e:aa:d2:88:69:bb: 17:b6:33:09:f0:9b:ae:e7:14:b4:15:6b:c4:9c:9e: 1f:c3:eb:64:b6:48:c7:1e:72:bd:b3:9b:e5:3b:db: e1:c2:b6:99:7a:ea:33:cf:43:d7:db:53:ab:70:9c: 34:a1:c4:e6:1b:ba:d6:68:86:b5:5c:c5:27:4f:cf: a5:a8:b6:b3:41:85:1f:c2:36:63:26:53:a8:bc:68: 52:9b:e6:8e:c8:ba:51:71:ed:81:7a:47:76:06:72: af:48:ee:a5:01:50:97:b6:ea:44:94:42:b5:e9:6b: 33:34:b7:00:c5:d7:ac:46:48:dd:0c:f3:d6:09:5e: a6:51:06:f8:b9:c6:e3:b2:9e:ba:65:a6:3c:9f:bc: f0:6c:0c:be:e7:64:42:f6:a2:1c:83:ea:90:0e:b7: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:08:3D:44:3D:16:C2:1B:36:FE:5A:D8:41:DB:98:A1:29:BD:DA X509v3 Authority Key Identifier: keyid:CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:0c:fb:e3:d1:54:97:cd:ad:42:f5:4f:f6:1c:b7:0a:a5: 20:56:25:eb:23:3f:c5:70:60:94:5b:7f:96:28:06:26:77:28: bd:2f:4c:d3:be:87:59:22:4f:b4:ab:be:55:c2:ac:0f:a1:1a: 6e:20:73:31:70:f8:65:9d:4c:00:d5:5f:c5:83:0f:a9:0b:64: b9:eb:4b:b9:1f:90:2a:7c:f5:6d:8b:13:55:e9:11:3c:3a:49: 6f:50:a0:3c:7a:4e:04:a3:2e:e1:aa:8d:92:22:aa:81:a3:53: 75:89:20:7e:b8:6a:b1:b3:5d:82:57:fd:5b:58:d9:f8:06:be: d4:92:5e:f8:cb:bd:a2:34:e9:fe:37:2c:4e:f9:2d:2e:dd:b8: 51:4b:49:f3:a5:96:4d:d8:c5:a5:47:ad:7f:d6:27:3e:ba:63: a7:50:c8:93:aa:09:53:f6:92:24:6f:33:71:51:95:1e:4a:b2: 33:83:22:e6:31:15:5c:b7:3b:a6:4a:56:c3:c4:44:1c:09:96: 84:33:aa:1b:ee:a8:fa:2f:68:b0:3a:a4:3e:74:50:91:9d:e0: 17:03:e4:51:2e:3b:6f:4e:67:0d:f7:e0:56:bc:19:61:f3:66: 7f:25:28:cc:af:dc:c5:73:c0:f3:dd:64:40:8d:6a:53:99:8c: be:f9:4d:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmbmqRbF/yDoYql15Hk34DIeX5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1 MEM1M0MxOTAeFw0yNjExMDMwMDI4MTJaFw0yNjExMDQwMjI1MTJaMDMxMTAvBgNV BAMTKEYzQTkwODNENDQzRDE2QzIxQjM2RkU1QUQ4NDFEQjk4QTEyOUJEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTltnwzagHT44sFW4IAe1TbPDq UrBoyDv1AiaMvOjVoy1bBaF55VkWzr1gvfcuZrs9CF7hTM4a233jGggEINKoWDpG 5o3G+YCRHqBDH1f73liQrF7KyFM2oIQ0g0BveQBbtD6q0ohpuxe2Mwnwm67nFLQV a8Scnh/D62S2SMcecr2zm+U72+HCtpl66jPPQ9fbU6twnDShxOYbutZohrVcxSdP z6WotrNBhR/CNmMmU6i8aFKb5o7IulFx7YF6R3YGcq9I7qUBUJe26kSUQrXpazM0 twDF16xGSN0M89YJXqZRBvi5xuOynrplpjyfvPBsDL7nZEL2ohyD6pAOt2pzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86kIPUQ9FsIbNv5a2EHbmKEpvdowHwYDVR0j BBgwFoAUzaaYAR0Q9Dbju8MWZCObMVDFPBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIwMWI4OTUtNTNjNi00YTIxLWEyYzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDEx RDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1MEM1M0MxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DREE2OTgwMTFEMTBGNDM2RTNCQkMzMTY2NDIzOUIzMTUwQzUz QzE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIwMWI4OTUtNTNjNi00YTIxLWEy YzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlC MzE1MEM1M0MxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuPDPvj0VSXza1C9U/2HLcKpSBWJesjP8Vw YJRbf5YoBiZ3KL0vTNO+h1kiT7SrvlXCrA+hGm4gczFw+GWdTADVX8WDD6kLZLnr S7kfkCp89W2LE1XpETw6SW9QoDx6TgSjLuGqjZIiqoGjU3WJIH64arGzXYJX/VtY 2fgGvtSSXvjLvaI06f43LE75LS7duFFLSfOllk3YxaVHrX/WJz66Y6dQyJOqCVP2 kiRvM3FRlR5KsjODIuYxFVy3O6ZKVsPERBwJloQzqhvuqPovaLA6pD50UJGd4BcD 5FEuO29OZw334Fa8GWHzZn8lKMyv3MVzwPPdZECNalOZjL75TZI= -----END CERTIFICATE-----Generated at Tue Nov 3 12:03:03 2026 by rpki-client