$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json) Hash identifier: DooeqPMacmNR7vQBbadD9s2ZX5dh5lBLZkZfrwMaacU= Subject key identifier: E5:44:77:90:44:10:EC:87:A2:1F:B1:54:D5:18:55:6C:B2:50:5C:77 Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Certificate serial: 2339DABABBB40BACD86FD2E193EF9807673EF02C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 00:13:10 +0000 Manifest this update: Wed 04 Nov 2026 00:08:10 +0000 Manifest next update: Thu 05 Nov 2026 02:28:10 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=) 2: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: 5xYDNHVXOl30vujfUHg/IXt1uzXwEC6JQECYReDbcA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:39:da:ba:bb:b4:0b:ac:d8:6f:d2:e1:93:ef:98:07:67:3e:f0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Validity Not Before: Nov 4 00:08:10 2026 GMT Not After : Nov 5 02:28:10 2026 GMT Subject: CN=E54477904410EC87A21FB154D518556CB2505C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:f1:85:f0:6b:eb:eb:71:22:a6:f7:65:58: f9:a4:a7:3e:8d:38:41:3b:5f:42:cf:50:20:20:64: 4e:40:fa:64:22:16:f7:65:cf:77:76:46:5b:a7:42: 13:61:92:8a:e2:f6:50:04:13:af:11:d9:39:4d:e2: 06:a4:2d:91:43:60:ea:1f:6f:2b:a8:e3:9a:e6:62: 6a:23:b7:2a:af:27:a0:e4:11:f1:98:49:e8:ae:8c: 6b:19:2e:ed:25:cc:0b:97:24:7b:ff:0b:fc:e3:18: 70:63:a8:d8:3f:fd:53:3d:74:49:8f:6d:01:24:da: cf:22:19:aa:49:5a:05:d3:da:b9:ff:38:2f:37:91: c8:11:b3:d4:1c:2e:84:5e:98:09:7f:c2:b3:72:eb: 49:74:b7:1e:41:e2:f0:0f:81:0f:a4:a1:39:2a:dd: 87:47:04:3b:3e:2f:7a:0f:fa:cd:a4:d8:eb:da:1f: 75:2e:1f:3e:6d:23:b2:f9:12:f6:4b:61:a4:8f:00: 0f:c0:4e:97:fd:80:7b:eb:05:bf:2c:ec:fb:78:44: b1:8a:f8:3c:56:e3:4b:14:d0:02:8e:c6:13:78:02: 29:11:21:ab:7a:e9:14:73:7c:13:b4:14:b3:c5:78: 9b:85:d6:fc:ba:bc:13:63:7a:54:79:c5:6d:40:de: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:77:90:44:10:EC:87:A2:1F:B1:54:D5:18:55:6C:B2:50:5C:77 X509v3 Authority Key Identifier: keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:da:4a:30:46:cb:af:a7:b0:d1:64:b7:9a:f4:37:b9:a8:40: 53:12:7d:13:48:6f:b2:ec:c4:6e:73:a7:a7:53:f2:3f:d3:0e: 55:4e:c3:04:fc:ad:40:c9:9b:f1:1d:23:99:3f:f7:a5:03:f8: 07:be:fe:7e:60:eb:6b:b7:fa:22:57:3f:b6:b8:4f:d7:29:b2: 88:c0:7f:de:46:5a:5b:00:de:54:d3:d9:8d:c7:88:a2:3f:f3: 53:6f:e3:6f:80:ee:fe:d3:09:39:6e:c7:1b:f5:29:78:d1:2a: 60:56:b0:59:4e:91:a2:c0:de:9d:c0:65:0c:7f:c4:e9:bf:0d: 84:b6:d9:5d:91:df:48:95:89:02:60:f3:4e:9c:d4:2b:7b:79: 58:cb:53:7f:38:1b:ff:d3:1a:cb:1e:32:29:e9:c3:dd:73:32: 0b:10:54:a9:b8:26:d5:c1:5a:3f:0a:05:f1:8f:d5:e9:2c:11: 9d:e8:7f:aa:88:95:fd:6f:fb:e5:b4:12:79:b1:4e:d1:88:f1: c4:2b:2c:32:9c:2f:64:67:44:b1:92:5c:98:66:0d:ab:e7:36: 22:4a:27:60:a6:72:44:3e:8b:c5:fd:5f:68:5a:7e:57:6c:8c: 97:d1:72:6b:c2:66:d2:7c:5b:c5:f0:07:86:2c:fd:91:31:27: ef:78:33:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIznauru0C6zYb9Lhk++YB2c+8CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlD NERBODI4MDAeFw0yNjExMDQwMDA4MTBaFw0yNjExMDUwMjI4MTBaMDMxMTAvBgNV BAMTKEU1NDQ3NzkwNDQxMEVDODdBMjFGQjE1NEQ1MTg1NTZDQjI1MDVDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEPGF8Gvr63EipvdlWPmkpz6N OEE7X0LPUCAgZE5A+mQiFvdlz3d2RlunQhNhkori9lAEE68R2TlN4gakLZFDYOof byuo45rmYmojtyqvJ6DkEfGYSeiujGsZLu0lzAuXJHv/C/zjGHBjqNg//VM9dEmP bQEk2s8iGapJWgXT2rn/OC83kcgRs9QcLoRemAl/wrNy60l0tx5B4vAPgQ+koTkq 3YdHBDs+L3oP+s2k2OvaH3UuHz5tI7L5EvZLYaSPAA/ATpf9gHvrBb8s7Pt4RLGK +DxW40sU0AKOxhN4AikRIat66RRzfBO0FLPFeJuF1vy6vBNjelR5xW1A3idRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UR3kEQQ7IeiH7FU1RhVbLJQXHcwHwYDVR0j BBgwFoAU12HESr6aqYn3BItNPlYUicTagoAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFC RTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlDNERBODI4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzYxQzQ0QUJFOUFBOTg5RjcwNDhCNEQzRTU2MTQ4OUM0REE4 MjgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0 ODlDNERBODI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvaSjBGy6+nsNFkt5r0N7moQFMSfRNIb7Ls xG5zp6dT8j/TDlVOwwT8rUDJm/EdI5k/96UD+Ae+/n5g62u3+iJXP7a4T9cpsojA f95GWlsA3lTT2Y3HiKI/81Nv42+A7v7TCTluxxv1KXjRKmBWsFlOkaLA3p3AZQx/ xOm/DYS22V2R30iViQJg806c1Ct7eVjLU384G//TGsseMinpw91zMgsQVKm4JtXB Wj8KBfGP1eksEZ3of6qIlf1v++W0EnmxTtGI8cQrLDKcL2RnRLGSXJhmDavnNiJK J2CmckQ+i8X9X2hafldsjJfRcmvCZtJ8W8XwB4Ys/ZExJ+94MyI= -----END CERTIFICATE-----Generated at Wed Nov 4 18:07:54 2026 by rpki-client