$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: m24YpPUhSm8OVltcckUk4elgNTt/XjZq5oUxz/IFf94= Subject key identifier: CF:85:FC:0C:A9:74:87:FA:9F:EA:77:19:EF:ED:B3:DD:8B:2C:D7:DA Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 11BA6A94C6F46C89F0CFFD183D9942326296A2EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 10:00:41 +0000 Manifest this update: Wed 04 Nov 2026 09:55:41 +0000 Manifest next update: Thu 05 Nov 2026 11:28:41 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) 2: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: Lxp1qYyxyoeaOWK/j8qfu5EIlCGgZ1E3FIXi1rL181k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ba:6a:94:c6:f4:6c:89:f0:cf:fd:18:3d:99:42:32:62:96:a2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Nov 4 09:55:41 2026 GMT Not After : Nov 5 11:28:41 2026 GMT Subject: CN=CF85FC0CA97487FA9FEA7719EFEDB3DD8B2CD7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:66:5d:61:1d:14:df:05:69:9b:78:0e:a1: 31:95:11:90:8a:89:52:3f:8e:86:c2:fc:73:08:d3: 04:fa:28:b0:22:a4:b0:79:03:19:c6:5c:7b:28:36: 45:db:94:4e:5c:b8:9f:35:03:ee:4c:38:bb:8d:05: 3f:a1:34:44:aa:18:f6:55:c1:9f:19:a0:a5:06:51: 28:4e:41:9c:14:01:00:40:71:dd:67:3d:6e:60:87: 17:3a:ad:b6:32:26:2e:31:3a:99:a8:af:8f:df:09: fa:1d:ff:e7:59:78:0f:f7:29:3c:ad:df:ba:93:2a: a8:ed:f1:67:a7:65:35:51:95:e5:09:6e:13:1d:bd: 02:e3:01:1c:88:89:34:43:f7:5d:76:7d:4f:9d:08: 58:eb:a6:50:fa:29:89:a0:8e:ba:15:02:d1:6a:9a: 3b:94:f9:13:3c:89:1b:aa:8e:b2:b3:76:86:83:9d: 6e:6d:47:b6:5a:36:89:44:92:04:ba:89:20:7e:f7: 85:e8:59:92:17:4c:37:37:dd:4b:05:17:e0:bb:cf: 23:af:2e:61:06:89:85:c4:47:cb:2c:4f:39:23:5d: 6e:3e:31:4f:be:2b:0f:1c:b1:a0:b8:60:9f:5c:1c: 0a:3b:53:15:4d:aa:82:78:e7:03:5b:b0:69:70:7d: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:FC:0C:A9:74:87:FA:9F:EA:77:19:EF:ED:B3:DD:8B:2C:D7:DA X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:94:1e:e5:3f:d0:69:82:bd:74:42:0f:ce:4d:b1:2a:48:c8: 36:91:d9:01:ac:e7:11:43:e4:d3:8d:bb:7f:f3:43:1a:27:a4: fa:62:08:fa:db:15:04:6c:3f:60:1a:a6:c7:3a:d6:73:9e:17: ff:c5:8c:c4:49:e5:e5:0b:c2:84:fc:3f:1e:06:fd:f2:18:75: fe:fc:7d:ae:2d:60:c0:5c:c3:20:97:b0:c5:18:1d:93:54:e0: 3a:42:36:02:2b:8b:04:0c:6a:ed:78:05:06:08:5f:eb:81:1e: 70:1a:a0:13:dc:bf:dc:3c:8d:4f:5f:52:4a:a3:2a:ce:47:24: 90:07:08:95:5b:e0:36:d4:0c:4c:42:d5:27:2c:99:a4:ef:99: 57:66:80:24:64:f0:64:02:b8:7f:76:71:84:74:06:66:f3:ba: cc:cb:37:9e:ff:9a:0a:cc:17:2f:b1:9a:75:e6:79:92:c6:e2: 22:e9:7f:76:60:ab:dc:39:55:e6:9b:6b:f8:c8:f2:80:27:71: 6b:64:db:da:eb:5c:76:5d:13:97:df:80:b9:7d:1b:32:8f:c1: 8e:22:dc:2c:e6:e4:9a:8c:56:54:f2:44:2d:3d:0c:84:df:fb: ff:f0:5f:ab:9a:f7:e3:81:ab:36:bd:11:ec:e4:44:cd:94:ae: c2:ae:62:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbpqlMb0bInwz/0YPZlCMmKWouswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjExMDQwOTU1NDFaFw0yNjExMDUxMTI4NDFaMDMxMTAvBgNV BAMTKENGODVGQzBDQTk3NDg3RkE5RkVBNzcxOUVGRURCM0REOEIyQ0Q3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B2ZdYR0U3wVpm3gOoTGVEZCK iVI/jobC/HMI0wT6KLAipLB5AxnGXHsoNkXblE5cuJ81A+5MOLuNBT+hNESqGPZV wZ8ZoKUGUShOQZwUAQBAcd1nPW5ghxc6rbYyJi4xOpmor4/fCfod/+dZeA/3KTyt 37qTKqjt8WenZTVRleUJbhMdvQLjARyIiTRD9112fU+dCFjrplD6KYmgjroVAtFq mjuU+RM8iRuqjrKzdoaDnW5tR7ZaNolEkgS6iSB+94XoWZIXTDc33UsFF+C7zyOv LmEGiYXER8ssTzkjXW4+MU++Kw8csaC4YJ9cHAo7UxVNqoJ45wNbsGlwfYD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4X8DKl0h/qf6ncZ7+2z3Yss19owHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmUHuU/0GmCvXRCD85NsSpIyDaR2QGs5xFD 5NONu3/zQxonpPpiCPrbFQRsP2Aapsc61nOeF//FjMRJ5eULwoT8Px4G/fIYdf78 fa4tYMBcwyCXsMUYHZNU4DpCNgIriwQMau14BQYIX+uBHnAaoBPcv9w8jU9fUkqj Ks5HJJAHCJVb4DbUDExC1ScsmaTvmVdmgCRk8GQCuH92cYR0BmbzuszLN57/mgrM Fy+xmnXmeZLG4iLpf3Zgq9w5Veaba/jI8oAncWtk29rrXHZdE5ffgLl9GzKPwY4i 3Czm5JqMVlTyRC09DITf+//wX6ua9+OBqza9EezkRM2UrsKuYjE= -----END CERTIFICATE-----Generated at Wed Nov 4 14:34:08 2026 by rpki-client