$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: EcAoudbA6NnJpNg4F3vMmNvhlSuBygFM/R3JzKiOZT8= Subject key identifier: 4C:FD:37:03:C2:B0:49:E1:35:07:0A:4D:F8:A3:45:AF:E6:B2:43:F7 Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 7B84779926DA50B3C9AD755643924695BA189169 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 00:54:09 +0000 Manifest this update: Wed 04 Nov 2026 00:49:09 +0000 Manifest next update: Thu 05 Nov 2026 03:54:09 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) 2: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: MPn2JEqx4dH9xfN/hQ2MLdwh4L1K7ZyPGZxaAd8Brfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:84:77:99:26:da:50:b3:c9:ad:75:56:43:92:46:95:ba:18:91:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Nov 4 00:49:09 2026 GMT Not After : Nov 5 03:54:09 2026 GMT Subject: CN=4CFD3703C2B049E135070A4DF8A345AFE6B243F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:22:ed:0d:bd:a3:4d:8e:43:df:0b:6f:33: 91:12:76:df:68:f0:ef:6f:04:0f:bb:71:76:0b:fd: d5:c4:2b:69:b7:6d:b0:e9:24:48:bc:7b:11:a1:98: 97:38:7c:61:51:38:4b:c1:88:d7:58:d8:44:c5:39: c9:0f:9a:0f:e1:d8:d7:89:37:03:da:af:e5:1c:2c: 6d:11:da:1a:67:cb:fc:43:d7:89:c5:e8:d3:d0:91: ac:b9:e3:01:cc:0c:93:30:82:04:b9:82:2f:f7:82: e5:22:0f:eb:f0:1b:6e:99:1b:f6:f2:e7:cc:b3:33: c9:ce:32:74:da:3d:b6:e4:cb:f9:b2:c8:4b:e0:8f: 3a:c5:28:61:32:3a:a4:e5:26:77:5c:12:02:7c:5e: f3:59:c5:52:9b:13:b2:af:22:f2:4f:da:ea:d3:b0: dd:ec:b9:d0:8a:ba:59:1b:f8:a2:ac:fd:5c:34:4e: 8e:7c:48:0e:bf:ab:98:8b:8d:c6:21:24:7a:df:51: 9a:75:b4:0a:fd:da:23:b4:d1:d9:d2:ed:35:0d:63: 28:a3:29:88:0c:80:6d:b4:45:62:fa:3d:7b:d6:37: d1:5e:72:35:ca:67:2d:53:24:60:b1:80:9b:96:9e: 50:b0:c6:71:6a:76:fb:9e:0b:e6:b6:76:0f:0a:1c: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:37:03:C2:B0:49:E1:35:07:0A:4D:F8:A3:45:AF:E6:B2:43:F7 X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:9d:da:07:d5:77:f0:d1:16:0e:78:41:d2:a5:07:d5:83: 42:7b:e4:55:30:f6:65:97:34:de:0a:2c:81:13:94:cd:c6:4b: 59:e1:17:03:29:b1:81:5f:78:51:c4:1f:e6:80:56:6a:ce:d1: f0:fd:92:22:f4:d0:24:63:db:de:dd:15:38:fb:25:8e:fa:97: 2f:ee:8f:0b:d8:3f:02:5d:b7:07:b5:7c:ef:99:df:ce:ff:29: a4:ad:46:f7:b2:e4:5c:ea:f8:0f:7b:75:df:5d:15:24:aa:08: f3:04:0b:eb:12:5c:b3:da:d1:81:15:43:ad:f5:65:b2:14:c3: 69:79:f9:5b:5e:b5:f4:5e:54:2b:4a:51:68:f7:9b:06:ca:e1: 85:46:77:72:e6:33:be:d1:92:fb:7b:4e:d1:a3:a2:b7:f7:4e: c8:1c:2f:2e:fa:53:44:8e:46:03:a3:e3:00:5f:5d:ed:cc:b7: 8f:e2:75:51:91:f1:18:33:30:d7:81:5b:76:a4:58:e2:45:d7: f7:a6:a4:d3:2f:1f:ce:c8:bb:05:57:8d:81:b6:10:c6:33:09: 59:df:42:93:f8:c5:6b:96:ea:98:bc:c9:05:65:db:a3:89:cc: fc:b9:b8:ce:93:a4:d7:a9:5d:be:9b:9f:08:fb:5d:a4:b4:30: ce:14:d6:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4R3mSbaULPJrXVWQ5JGlboYkWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjExMDQwMDQ5MDlaFw0yNjExMDUwMzU0MDlaMDMxMTAvBgNV BAMTKDRDRkQzNzAzQzJCMDQ5RTEzNTA3MEE0REY4QTM0NUFGRTZCMjQzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpyLtDb2jTY5D3wtvM5ESdt9o 8O9vBA+7cXYL/dXEK2m3bbDpJEi8exGhmJc4fGFROEvBiNdY2ETFOckPmg/h2NeJ NwPar+UcLG0R2hpny/xD14nF6NPQkay54wHMDJMwggS5gi/3guUiD+vwG26ZG/by 58yzM8nOMnTaPbbky/myyEvgjzrFKGEyOqTlJndcEgJ8XvNZxVKbE7KvIvJP2urT sN3sudCKulkb+KKs/Vw0To58SA6/q5iLjcYhJHrfUZp1tAr92iO00dnS7TUNYyij KYgMgG20RWL6PXvWN9FecjXKZy1TJGCxgJuWnlCwxnFqdvueC+a2dg8KHNVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTP03A8KwSeE1BwpN+KNFr+ayQ/cwHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3+ndoH1Xfw0RYOeEHSpQfVg0J75FUw9mWX NN4KLIETlM3GS1nhFwMpsYFfeFHEH+aAVmrO0fD9kiL00CRj297dFTj7JY76ly/u jwvYPwJdtwe1fO+Z387/KaStRvey5Fzq+A97dd9dFSSqCPMEC+sSXLPa0YEVQ631 ZbIUw2l5+VtetfReVCtKUWj3mwbK4YVGd3LmM77Rkvt7TtGjorf3TsgcLy76U0SO RgOj4wBfXe3Mt4/idVGR8RgzMNeBW3akWOJF1/empNMvH87IuwVXjYG2EMYzCVnf QpP4xWuW6pi8yQVl26OJzPy5uM6TpNepXb6bnwj7XaS0MM4U1kI= -----END CERTIFICATE-----Generated at Wed Nov 4 20:18:47 2026 by rpki-client