$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: cYOmSotCBPulowlp6/r7EDMe1MbvTYHKMZ1ITCmfGw0= Subject key identifier: 9E:DF:D8:95:DF:35:9A:A9:67:D4:29:FD:B3:EE:B2:09:86:0B:BE:1F Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 718AC2B830ABD323230F27F993037090C1F533F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 22:25:37 +0000 Manifest this update: Mon 02 Nov 2026 22:20:37 +0000 Manifest next update: Tue 03 Nov 2026 23:54:37 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: QA3qM9mzmKt7g8HQ/7E5oxycIO/mkx3rOcw8kiGE4vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 23:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8a:c2:b8:30:ab:d3:23:23:0f:27:f9:93:03:70:90:c1:f5:33:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Nov 2 22:20:37 2026 GMT Not After : Nov 3 23:54:37 2026 GMT Subject: CN=9EDFD895DF359AA967D429FDB3EEB209860BBE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:16:17:6a:09:86:86:92:d3:82:75:16:af: e5:9e:a3:7d:06:a5:b1:c5:48:e8:a7:73:88:87:84: 4a:f1:df:46:4a:96:ea:64:e5:df:64:5b:16:e4:23: ff:8d:63:06:48:ed:0e:5c:b9:3e:4a:b9:f1:8b:64: 9f:af:8e:f2:93:4b:93:b8:5b:e7:19:a7:44:3c:6a: ce:74:e3:61:de:43:d4:ea:a5:05:a0:44:39:78:a3: c4:2b:b7:c1:e2:3d:36:d2:26:af:0c:56:08:b8:55: 24:f3:5a:6c:24:5a:10:61:17:85:26:2b:f5:b6:1d: 9a:32:14:4f:1c:a5:a1:0f:e2:51:14:b3:1a:e7:76: 21:28:2e:3a:b4:49:67:12:ee:2a:09:d0:95:7b:b1: 66:67:01:e9:4d:18:82:5d:6d:d4:98:57:75:6d:fe: 0a:78:70:61:59:30:f4:b4:17:41:95:fd:a2:61:f7: 1f:b3:c4:26:01:ea:32:76:39:77:a3:4f:1d:fc:ae: 4c:43:13:5d:f4:d6:51:ed:f3:e3:12:22:8c:af:68: 44:5d:ba:f9:b8:de:4b:52:94:37:7f:59:47:3a:83: 91:9b:0e:8f:58:40:9e:89:58:e8:11:ec:e3:04:64: 80:20:69:d0:7d:cd:c0:d2:45:88:f2:a3:88:7f:31: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:D8:95:DF:35:9A:A9:67:D4:29:FD:B3:EE:B2:09:86:0B:BE:1F X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:53:fb:2f:10:e5:e9:ea:3e:01:80:6a:9c:92:0c:3f:a4:a5: 02:aa:c8:91:c8:cf:36:6d:42:f4:8d:19:b6:8c:47:41:96:02: dc:6e:6b:43:7f:33:82:4b:f0:90:f3:6e:da:83:3a:2e:c8:e2: 42:ff:65:c9:9b:28:e0:1f:8a:28:ac:80:9c:06:89:1e:12:65: 16:3c:55:ed:6f:36:6e:bd:4f:a9:e8:28:79:55:fb:60:01:21: 56:7a:31:6c:1d:20:44:ea:d4:07:c3:08:ef:a5:19:52:d9:a8: c6:be:ae:f3:45:07:cd:12:ff:b2:5c:68:e1:7a:c2:60:bb:70: 5e:30:81:18:b3:00:b0:2d:6c:23:fd:dc:64:ec:f6:30:42:4a: 91:f5:07:f9:44:80:63:d7:5f:ea:32:a0:be:b1:1c:7e:f4:b9: 0c:34:70:ec:51:66:04:02:82:4c:9b:3a:6c:cf:73:c7:58:0a: 80:9f:fa:b2:d1:9d:6a:9d:73:3a:bc:bd:18:45:d5:94:f3:e0: 99:3c:e0:5e:93:67:fe:b8:b8:79:b4:4c:16:9e:de:57:ec:a1: 9a:b5:e8:3f:17:49:1d:8c:d6:44:90:b7:53:ec:e7:1e:b8:e5: 17:1a:da:ab:49:73:80:3d:17:6b:13:83:8c:05:1f:86:a9:8b: 08:be:7f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYrCuDCr0yMjDyf5kwNwkMH1M/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjExMDIyMjIwMzdaFw0yNjExMDMyMzU0MzdaMDMxMTAvBgNV BAMTKDlFREZEODk1REYzNTlBQTk2N0Q0MjlGREIzRUVCMjA5ODYwQkJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAhYXagmGhpLTgnUWr+Weo30G pbHFSOinc4iHhErx30ZKlupk5d9kWxbkI/+NYwZI7Q5cuT5KufGLZJ+vjvKTS5O4 W+cZp0Q8as5042HeQ9TqpQWgRDl4o8Qrt8HiPTbSJq8MVgi4VSTzWmwkWhBhF4Um K/W2HZoyFE8cpaEP4lEUsxrndiEoLjq0SWcS7ioJ0JV7sWZnAelNGIJdbdSYV3Vt /gp4cGFZMPS0F0GV/aJh9x+zxCYB6jJ2OXejTx38rkxDE1301lHt8+MSIoyvaERd uvm43ktSlDd/WUc6g5GbDo9YQJ6JWOgR7OMEZIAgadB9zcDSRYjyo4h/MebXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnt/Yld81mqln1Cn9s+6yCYYLvh8wHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtT+y8Q5enqPgGAapySDD+kpQKqyJHIzzZt QvSNGbaMR0GWAtxua0N/M4JL8JDzbtqDOi7I4kL/ZcmbKOAfiiisgJwGiR4SZRY8 Ve1vNm69T6noKHlV+2ABIVZ6MWwdIETq1AfDCO+lGVLZqMa+rvNFB80S/7JcaOF6 wmC7cF4wgRizALAtbCP93GTs9jBCSpH1B/lEgGPXX+oyoL6xHH70uQw0cOxRZgQC gkybOmzPc8dYCoCf+rLRnWqdczq8vRhF1ZTz4Jk84F6TZ/64uHm0TBae3lfsoZq1 6D8XSR2M1kSQt1Ps5x645Rca2qtJc4A9F2sTg4wFH4apiwi+fzE= -----END CERTIFICATE-----Generated at Tue Nov 3 12:05:26 2026 by rpki-client