$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json) Hash identifier: K7Lbspf9grZoOPMHjlzHWc80Z+owwl+/bXMv9SPWJKw= Subject key identifier: AD:6A:50:E9:52:9F:AB:3A:2B:16:26:49:54:1E:5F:C5:DC:50:EE:76 Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C Certificate serial: 619F39D04737EC12F7D85493C8064403E87AC7B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 16:54:46 +0000 Manifest this update: Wed 04 Nov 2026 16:49:46 +0000 Manifest next update: Thu 05 Nov 2026 20:27:46 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=) 2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: WzenJbmIg0dT3dSomjCwbXsN2Bp8y6UsIfnzCEqqfNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9f:39:d0:47:37:ec:12:f7:d8:54:93:c8:06:44:03:e8:7a:c7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Validity Not Before: Nov 4 16:49:46 2026 GMT Not After : Nov 5 20:27:46 2026 GMT Subject: CN=AD6A50E9529FAB3A2B162649541E5FC5DC50EE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:09:07:ab:1a:a7:dc:1b:03:e7:65:82:cc: bf:fd:94:8e:65:16:0e:2b:1c:74:7a:67:1a:1a:db: 2f:d3:a1:51:fd:f5:c3:b8:36:8a:45:40:05:c8:44: 50:6c:42:84:bd:91:3e:ed:33:92:ca:b9:c6:7f:c5: fa:e6:da:e1:51:88:43:ea:18:98:3a:a2:71:b2:ec: 8e:70:74:22:54:82:fd:a3:18:b4:f3:30:ed:3e:0a: e8:4d:bd:bf:05:44:60:63:ef:6e:01:6c:7a:94:80: c9:65:67:72:a1:d6:28:1e:ab:9f:50:91:95:6f:d2: 0c:21:43:e8:8a:08:ce:18:14:68:72:58:c9:a0:d2: 55:a3:66:cb:42:4c:e8:36:3a:0f:a2:e7:c6:bc:0b: bf:a6:38:c8:c1:be:2c:94:f7:9a:c1:2c:8d:06:53: dc:95:12:1b:30:04:d6:d9:e2:7f:41:31:3a:03:b3: bc:c0:09:a7:ba:ae:9d:d4:b7:2d:84:ba:cb:7d:18: 3f:57:e0:28:25:3f:ba:b0:42:d9:d6:2a:40:2b:6a: e7:42:fc:71:c5:09:ff:1a:12:79:ee:f0:03:35:fc: 57:cd:b7:2d:e1:99:17:1c:0c:76:01:18:7e:b0:68: c6:03:d7:56:2d:8c:7b:db:e5:a3:ce:73:76:8a:3f: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:50:E9:52:9F:AB:3A:2B:16:26:49:54:1E:5F:C5:DC:50:EE:76 X509v3 Authority Key Identifier: keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:69:8c:cf:dc:94:d2:11:21:c3:d3:94:ec:3a:32:ce:d0:1c: 12:56:47:98:33:c4:41:50:b2:e2:30:87:ba:ca:7b:8e:83:63: 89:23:b5:be:00:b1:92:28:ff:94:c8:3a:e6:fd:01:4a:14:4f: b9:72:01:37:ab:d9:c4:01:12:91:45:22:da:74:09:0a:4f:4f: b6:7e:06:f2:9c:99:a1:df:ae:fe:a6:52:30:98:b6:2d:4f:21: 99:5b:a8:e2:0c:63:0b:0d:02:87:8a:99:44:1f:e8:94:e8:3d: be:e5:d0:59:dd:9e:3b:b8:24:40:83:cc:79:1c:a6:5c:00:e9: 1d:a7:a1:a4:d7:78:67:20:88:cb:5b:60:cf:96:b8:88:20:d4: e4:d8:a3:57:8e:d0:55:8b:8f:d1:04:44:b4:87:0f:c1:ff:ad: 5e:65:b1:66:4c:ad:3c:7d:dd:4b:27:f0:69:c7:16:3d:c3:9e: 0f:38:4b:fd:67:62:45:e3:01:28:fd:aa:f9:56:e3:c4:37:6d: 4a:16:0b:be:9a:b1:c2:17:d2:8c:fb:c3:61:7e:3b:e8:b9:a5: 1c:6e:05:ac:2b:a5:f1:a5:44:6c:52:9c:90:57:f9:1a:ae:30: ba:cb:24:ef:20:fe:f3:05:d7:e1:e6:e9:9a:74:06:e8:0b:b5: 91:bd:60:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZ850Ec37BL32FSTyAZEA+h6x7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5 NEU0MjgxQzAeFw0yNjExMDQxNjQ5NDZaFw0yNjExMDUyMDI3NDZaMDMxMTAvBgNV BAMTKEFENkE1MEU5NTI5RkFCM0EyQjE2MjY0OTU0MUU1RkM1REM1MEVFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWygkHqxqn3BsD52WCzL/9lI5l Fg4rHHR6Zxoa2y/ToVH99cO4NopFQAXIRFBsQoS9kT7tM5LKucZ/xfrm2uFRiEPq GJg6onGy7I5wdCJUgv2jGLTzMO0+CuhNvb8FRGBj724BbHqUgMllZ3Kh1igeq59Q kZVv0gwhQ+iKCM4YFGhyWMmg0lWjZstCTOg2Og+i58a8C7+mOMjBviyU95rBLI0G U9yVEhswBNbZ4n9BMToDs7zACae6rp3Uty2Eust9GD9X4CglP7qwQtnWKkAraudC /HHFCf8aEnnu8AM1/FfNty3hmRccDHYBGH6waMYD11YtjHvb5aPOc3aKP4tPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWpQ6VKfqzorFiZJVB5fxdxQ7nYwHwYDVR0j BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0 RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFpjM/clNIRIcPTlOw6Ms7QHBJWR5gzxEFQ suIwh7rKe46DY4kjtb4AsZIo/5TIOub9AUoUT7lyATer2cQBEpFFItp0CQpPT7Z+ BvKcmaHfrv6mUjCYti1PIZlbqOIMYwsNAoeKmUQf6JToPb7l0Fndnju4JECDzHkc plwA6R2noaTXeGcgiMtbYM+WuIgg1OTYo1eO0FWLj9EERLSHD8H/rV5lsWZMrTx9 3Usn8GnHFj3Dng84S/1nYkXjASj9qvlW48Q3bUoWC76ascIX0oz7w2F+O+i5pRxu BawrpfGlRGxSnJBX+RquMLrLJO8g/vMF1+Hm6Zp0BugLtZG9YOM= -----END CERTIFICATE-----Generated at Thu Nov 5 01:03:18 2026 by rpki-client