$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: 32IUWCNyHIROJbGXOILVwHhb6V6P0gheAg6gjtnEtWU= Subject key identifier: 40:B2:20:61:23:F1:43:C0:9C:5F:E7:1A:81:23:97:6B:CF:23:70:09 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 197C7EAF1E8BAB1EF8CE7BCF90AD102993CD13A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 14:05:39 +0000 Manifest this update: Mon 02 Nov 2026 14:00:39 +0000 Manifest next update: Tue 03 Nov 2026 14:31:39 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) 2: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: 4DJiAPU9rXEQIVJv1kmIRzSvDYzuuKIsMvA99BHIesI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 14:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7c:7e:af:1e:8b:ab:1e:f8:ce:7b:cf:90:ad:10:29:93:cd:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Nov 2 14:00:39 2026 GMT Not After : Nov 3 14:31:39 2026 GMT Subject: CN=40B2206123F143C09C5FE71A8123976BCF237009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:8f:0f:c0:13:77:38:0f:a4:c6:a9:eb:3b: 55:1a:f6:5c:37:1e:f9:9d:08:e9:00:83:21:10:98: 83:71:e6:ee:60:dc:48:1e:a4:16:74:61:71:ba:47: 36:99:c7:44:d7:c1:c6:02:ef:7d:c7:56:21:99:0e: ff:c3:c1:c3:4a:5d:78:a5:74:ba:22:2b:fa:4b:8e: 3c:46:72:1e:de:8b:b4:f0:31:2d:b1:e4:21:d7:52: 2a:52:12:29:51:6b:2b:16:d3:52:70:e1:2e:aa:12: 4f:5b:53:9e:8a:fb:b7:4b:74:87:8f:33:f3:e0:e6: 97:f6:cf:c4:94:87:43:ed:00:d4:11:77:8d:92:c9: 2f:c8:b0:47:1f:1a:22:9f:fe:c8:36:8e:a7:ba:26: 32:a9:50:ec:82:38:2f:0f:d8:9b:1b:35:23:01:9f: 6d:72:ca:44:b2:50:c5:81:95:a5:82:c1:9f:96:4d: e6:88:44:f7:a3:e9:69:46:3b:b0:3b:00:0e:33:be: 67:18:b6:b5:e5:b2:ba:b0:3f:9e:ad:21:62:61:2d: 80:5f:4e:c3:73:7a:66:7f:63:19:b0:fc:50:7b:e2: 9b:8a:89:b9:36:75:a2:ef:84:00:8c:bb:bc:10:a7: d4:7d:cd:b1:4b:ec:9f:69:f4:fe:2e:20:c6:ca:a0: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:20:61:23:F1:43:C0:9C:5F:E7:1A:81:23:97:6B:CF:23:70:09 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:c0:87:79:7f:5a:c7:e2:97:2a:3f:84:e2:23:ad:61:19:6b: 78:a3:dc:ad:ca:e4:55:03:5c:2d:77:4a:ec:66:c3:91:64:1b: 37:2f:b7:1a:2e:bf:c2:c0:fb:0c:bb:ef:7a:c7:eb:dc:da:73: 2c:ce:02:44:9a:a2:2c:c7:89:10:c4:a8:da:6a:c8:56:e1:f9: cb:4b:8c:bd:be:8d:f4:03:09:67:cc:a1:61:cb:84:82:dc:c4: 08:ca:55:b8:6e:ba:1b:e1:21:43:5d:2b:69:74:8e:28:ee:68: 2c:e1:cb:4b:ab:dc:28:59:78:00:c9:d3:8b:4e:55:2f:a7:7c: 12:e4:e5:1d:64:d4:ac:89:37:ca:65:4b:9c:f4:4d:d7:46:6a: 1d:7a:53:aa:4b:d4:79:74:c1:37:77:0d:64:30:2e:c5:0d:9a: dd:89:fe:c1:71:be:af:57:87:b7:4a:6d:c6:e5:a1:f9:a5:c7: 02:12:37:cc:8d:c1:b1:dd:fe:71:28:a8:da:b3:51:06:e7:0e: 8d:9e:81:54:9f:f9:df:f4:03:cd:b7:59:eb:2f:bd:9a:35:15: ad:e7:51:8d:c2:60:66:77:bb:c1:85:59:65:22:5d:d4:73:6e: e1:b8:a1:ee:cf:6e:52:eb:d9:cc:9a:9b:a2:65:1e:6f:2a:62: 82:0a:d4:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXx+rx6Lqx74znvPkK0QKZPNE6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjExMDIxNDAwMzlaFw0yNjExMDMxNDMxMzlaMDMxMTAvBgNV BAMTKDQwQjIyMDYxMjNGMTQzQzA5QzVGRTcxQTgxMjM5NzZCQ0YyMzcwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Uo8PwBN3OA+kxqnrO1Ua9lw3 HvmdCOkAgyEQmINx5u5g3EgepBZ0YXG6RzaZx0TXwcYC733HViGZDv/DwcNKXXil dLoiK/pLjjxGch7ei7TwMS2x5CHXUipSEilRaysW01Jw4S6qEk9bU56K+7dLdIeP M/Pg5pf2z8SUh0PtANQRd42SyS/IsEcfGiKf/sg2jqe6JjKpUOyCOC8P2JsbNSMB n21yykSyUMWBlaWCwZ+WTeaIRPej6WlGO7A7AA4zvmcYtrXlsrqwP56tIWJhLYBf TsNzemZ/Yxmw/FB74puKibk2daLvhACMu7wQp9R9zbFL7J9p9P4uIMbKoKr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLIgYSPxQ8CcX+cagSOXa88jcAkwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXAh3l/Wsfilyo/hOIjrWEZa3ij3K3K5FUD XC13Suxmw5FkGzcvtxouv8LA+wy773rH69zacyzOAkSaoizHiRDEqNpqyFbh+ctL jL2+jfQDCWfMoWHLhILcxAjKVbhuuhvhIUNdK2l0jijuaCzhy0ur3ChZeADJ04tO VS+nfBLk5R1k1KyJN8plS5z0TddGah16U6pL1Hl0wTd3DWQwLsUNmt2J/sFxvq9X h7dKbcblofmlxwISN8yNwbHd/nEoqNqzUQbnDo2egVSf+d/0A823WesvvZo1Fa3n UY3CYGZ3u8GFWWUiXdRzbuG4oe7PblLr2cyam6JlHm8qYoIK1Eo= -----END CERTIFICATE-----Generated at Tue Nov 3 08:22:41 2026 by rpki-client