$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: AAC8dJYde/x/n1HlI61hEBffN0ilT+wNWnBmPSp69M8= Subject key identifier: 05:05:C3:01:A9:A0:88:37:91:CA:AB:86:38:83:27:7F:AA:A1:6B:DC Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 3CB16C2B063D1D424139B50770E17CD52410ED29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: F9 Signing time: Mon 02 Nov 2026 19:57:44 +0000 Manifest this update: Mon 02 Nov 2026 19:52:44 +0000 Manifest next update: Tue 03 Nov 2026 22:28:44 +0000 Files and hashes: 1: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: UwDmdA5aw/XkhFUBL8lkF4G8eU3w1DJJ0IRJrM7CVKQ=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b1:6c:2b:06:3d:1d:42:41:39:b5:07:70:e1:7c:d5:24:10:ed:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Nov 2 19:52:44 2026 GMT Not After : Nov 3 22:28:44 2026 GMT Subject: CN=0505C301A9A0883791CAAB863883277FAAA16BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:83:3e:e3:e6:cd:e2:27:d8:b2:b6:e9:66: c9:bb:fc:7d:22:03:77:cd:2b:da:a0:fe:6e:3e:6d: 1f:5e:98:d2:97:a0:08:9e:fc:62:2e:fd:7c:71:ad: 13:2a:9a:6f:87:26:c1:60:6a:76:d7:03:60:e6:2a: da:08:87:46:78:0b:9c:41:28:47:5b:d6:2c:f2:00: a5:59:0e:da:11:f3:77:4e:e4:be:ad:66:26:fc:41: c5:c1:69:86:19:72:75:c0:80:57:e6:5e:3e:71:fe: 9f:f1:24:c5:a5:0a:a4:42:ac:87:42:fd:49:b3:a1: 5c:9b:19:37:49:65:72:30:9f:a5:06:60:86:60:75: ee:99:61:5d:72:00:c8:53:a0:84:e4:46:91:2c:ae: 73:ed:a5:1b:20:26:e8:24:b9:6a:01:20:ec:97:5d: cf:5d:44:29:5e:3b:56:4a:cc:8f:0d:b6:e5:72:9f: 9c:f2:93:b9:ba:39:eb:82:fa:d1:1f:a8:cf:0b:2d: 8f:bb:a4:dd:7f:53:5a:33:48:11:78:37:fa:e1:d2: d4:29:a1:fd:74:93:b5:8f:7a:e6:57:63:99:a3:32: 6a:f8:9d:14:11:94:1a:b1:51:67:49:e1:f7:b8:19: 08:16:18:28:6a:c3:b8:41:9f:e1:be:f2:d5:32:66: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:05:C3:01:A9:A0:88:37:91:CA:AB:86:38:83:27:7F:AA:A1:6B:DC X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:91:88:6a:39:e8:4d:f6:08:80:d8:37:ea:e0:83:24:ac:91: e4:41:30:fe:bb:08:d0:58:d8:44:9c:8e:5a:7a:0b:35:e0:f1: 68:ce:02:c2:c4:df:e8:f1:ed:74:b2:58:f6:ee:a7:bb:85:2c: 3c:5f:f2:95:da:08:7e:89:fd:b4:a5:0b:7a:49:45:8a:1b:eb: 7d:ab:71:c0:67:21:01:f3:d7:c0:70:d7:45:8d:c0:cd:99:84: c4:25:74:53:93:9b:ea:d3:40:9a:6a:52:a3:b3:b5:e2:9b:bb: 76:86:c3:77:c8:24:a2:62:01:aa:0c:d1:18:36:06:a1:fb:cc: 04:f2:4e:17:b4:f0:0f:87:f6:4b:b2:78:44:7b:0d:7a:b3:29: d1:d6:b4:4a:86:35:e6:16:5e:a4:46:4e:ee:fc:3a:0c:6e:cb: cd:f7:c4:77:91:2d:30:f6:09:9f:1a:90:06:7a:38:45:48:bc: 5e:95:3b:0f:0d:bb:c8:5f:51:d6:b0:de:53:7c:fd:f1:69:02: 46:ce:6c:c8:64:91:90:fa:6b:5f:ed:98:2d:af:09:7f:a6:e5: 98:25:18:d0:f9:a7:83:45:79:0b:94:07:0d:5d:cf:1c:d1:2d: b9:f7:74:1f:e3:56:b5:ca:8e:ab:f9:f2:fb:9d:cf:9c:43:3c: 66:88:ef:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLFsKwY9HUJBObUHcOF81SQQ7SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjExMDIxOTUyNDRaFw0yNjExMDMyMjI4NDRaMDMxMTAvBgNV BAMTKDA1MDVDMzAxQTlBMDg4Mzc5MUNBQUI4NjM4ODMyNzdGQUFBMTZCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqDIM+4+bN4ifYsrbpZsm7/H0i A3fNK9qg/m4+bR9emNKXoAie/GIu/XxxrRMqmm+HJsFganbXA2DmKtoIh0Z4C5xB KEdb1izyAKVZDtoR83dO5L6tZib8QcXBaYYZcnXAgFfmXj5x/p/xJMWlCqRCrIdC /UmzoVybGTdJZXIwn6UGYIZgde6ZYV1yAMhToITkRpEsrnPtpRsgJugkuWoBIOyX Xc9dRCleO1ZKzI8NtuVyn5zyk7m6OeuC+tEfqM8LLY+7pN1/U1ozSBF4N/rh0tQp of10k7WPeuZXY5mjMmr4nRQRlBqxUWdJ4fe4GQgWGChqw7hBn+G+8tUyZqINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQXDAamgiDeRyquGOIMnf6qha9wwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiRiGo56E32CIDYN+rggySskeRBMP67CNBY 2EScjlp6CzXg8WjOAsLE3+jx7XSyWPbup7uFLDxf8pXaCH6J/bSlC3pJRYob632r ccBnIQHz18Bw10WNwM2ZhMQldFOTm+rTQJpqUqOzteKbu3aGw3fIJKJiAaoM0Rg2 BqH7zATyThe08A+H9kuyeER7DXqzKdHWtEqGNeYWXqRGTu78Ogxuy833xHeRLTD2 CZ8akAZ6OEVIvF6VOw8Nu8hfUdaw3lN8/fFpAkbObMhkkZD6a1/tmC2vCX+m5Zgl GND5p4NFeQuUBw1dzxzRLbn3dB/jVrXKjqv58vudz5xDPGaI7+U= -----END CERTIFICATE-----Generated at Tue Nov 3 06:36:49 2026 by rpki-client