$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: pyVXsoDKlWBsQwAltteZhWmApypzLccCGjOnim8eceg= Subject key identifier: C5:09:13:99:2B:68:BA:6A:1F:68:58:AE:E2:16:EF:9F:2C:70:D8:87 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 02E3DAF35712E414318E29C344E5D514203C019C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 15:16:59 +0000 Manifest this update: Tue 03 Nov 2026 15:11:59 +0000 Manifest next update: Wed 04 Nov 2026 15:36:59 +0000 Files and hashes: 1: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: ZxbOIbmPawl4md8+0fQq26Kj5LBvfszm/magxzNLt3E=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 15:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e3:da:f3:57:12:e4:14:31:8e:29:c3:44:e5:d5:14:20:3c:01:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Nov 3 15:11:59 2026 GMT Not After : Nov 4 15:36:59 2026 GMT Subject: CN=C50913992B68BA6A1F6858AEE216EF9F2C70D887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:31:e2:df:b8:6b:6b:38:f9:b0:9c:4b:18: 6f:b3:98:7c:4e:0b:0a:4a:c7:43:d9:e7:02:b0:e9: b2:84:da:ed:fc:89:50:7f:4f:d1:51:93:2a:05:6f: e4:04:51:ed:93:d3:13:77:55:ce:a5:b2:91:47:d9: ff:16:08:01:c9:36:d1:f1:3f:f0:67:b2:a4:25:55: e7:66:fd:b9:cf:4f:18:f1:90:ac:59:2a:a8:22:1d: 3d:8a:ce:df:6a:ab:b6:2a:56:c1:20:64:fc:19:66: 2c:b7:f5:1d:29:ee:8e:3e:dd:6d:74:88:1f:5d:57: a2:6b:80:35:0c:be:39:a9:91:48:41:16:c6:27:05: 90:2b:47:0c:a9:18:27:1d:77:f4:4e:10:c4:9b:51: ef:a2:48:eb:98:f3:97:9a:3c:a2:fa:e2:a9:90:11: 83:82:02:65:08:86:9e:e2:f8:c3:b0:04:19:cd:27: f0:57:20:a7:77:1b:a4:a9:40:28:2c:7b:37:69:86: 83:1a:9e:04:3b:80:80:d6:4f:22:7e:dc:cc:65:60: 07:02:fb:56:92:31:46:2c:9f:0c:29:e9:bd:01:f0: 8e:f0:b4:d5:47:26:9d:e6:eb:9d:5b:21:e5:02:c5: 6a:87:69:48:44:a8:c6:47:88:17:60:38:53:95:b3: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:13:99:2B:68:BA:6A:1F:68:58:AE:E2:16:EF:9F:2C:70:D8:87 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c0:01:cd:1d:32:19:c2:db:e3:61:2a:ec:18:21:59:16:51: fb:8a:7b:a5:27:30:09:56:d4:ad:b0:55:02:a8:93:34:db:92: d4:3c:65:99:1c:db:94:f1:81:61:6e:12:2f:49:43:bf:d8:33: 16:4d:32:d8:aa:99:c6:66:9c:38:31:c4:37:60:42:2d:89:3a: b6:95:e8:6c:14:e7:3a:aa:53:f4:d2:05:7e:da:37:26:04:42: da:90:a9:1d:49:da:1c:1d:e9:52:8a:2b:e8:83:a5:0b:3a:b1: f3:fd:53:f4:47:79:d7:75:e9:a9:01:68:d1:1b:26:b7:b9:d1: 6b:6b:1d:15:ca:58:e3:01:2f:75:5d:65:46:56:dc:69:e4:0f: 42:61:7a:b6:19:cf:6e:9e:cb:a3:84:c2:a5:b5:04:9e:b9:55: fb:bc:6e:b8:19:4d:06:d0:b8:f2:36:bd:c1:a6:d2:14:7f:fc: 0a:c2:d4:0f:66:52:8a:24:f7:26:fd:c9:20:6c:b5:a2:ee:3d: 99:56:26:31:00:55:6c:6e:97:11:0b:d1:2b:85:78:37:31:1f: e4:f8:38:09:99:2c:3a:a4:d1:1d:f3:72:db:00:d8:b3:b7:60: 28:4d:80:00:62:0a:f6:a3:83:6d:6c:5a:90:69:fb:7c:bc:71: 87:13:60:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuPa81cS5BQxjinDROXVFCA8AZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjExMDMxNTExNTlaFw0yNjExMDQxNTM2NTlaMDMxMTAvBgNV BAMTKEM1MDkxMzk5MkI2OEJBNkExRjY4NThBRUUyMTZFRjlGMkM3MEQ4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkuDHi37hrazj5sJxLGG+zmHxO CwpKx0PZ5wKw6bKE2u38iVB/T9FRkyoFb+QEUe2T0xN3Vc6lspFH2f8WCAHJNtHx P/BnsqQlVedm/bnPTxjxkKxZKqgiHT2Kzt9qq7YqVsEgZPwZZiy39R0p7o4+3W10 iB9dV6JrgDUMvjmpkUhBFsYnBZArRwypGCcdd/ROEMSbUe+iSOuY85eaPKL64qmQ EYOCAmUIhp7i+MOwBBnNJ/BXIKd3G6SpQCgsezdphoMangQ7gIDWTyJ+3MxlYAcC +1aSMUYsnwwp6b0B8I7wtNVHJp3m651bIeUCxWqHaUhEqMZHiBdgOFOVsxqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQkTmStoumofaFiu4hbvnyxw2IcwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbAAc0dMhnC2+NhKuwYIVkWUfuKe6UnMAlW 1K2wVQKokzTbktQ8ZZkc25TxgWFuEi9JQ7/YMxZNMtiqmcZmnDgxxDdgQi2JOraV 6GwU5zqqU/TSBX7aNyYEQtqQqR1J2hwd6VKKK+iDpQs6sfP9U/RHedd16akBaNEb Jre50WtrHRXKWOMBL3VdZUZW3GnkD0JherYZz26ey6OEwqW1BJ65Vfu8brgZTQbQ uPI2vcGm0hR//ArC1A9mUook9yb9ySBstaLuPZlWJjEAVWxulxEL0SuFeDcxH+T4 OAmZLDqk0R3zctsA2LO3YChNgABiCvajg21sWpBp+3y8cYcTYCM= -----END CERTIFICATE-----Generated at Wed Nov 4 05:31:30 2026 by rpki-client