$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: SU3mnx2Bz9UJTRPEQMGCrwJwTOE/W78tdisd48p0guY= Subject key identifier: 99:22:97:FB:42:D4:4D:B4:CB:A3:1A:A8:EA:1C:33:22:89:A9:52:C9 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 604AB5F331CFEF0E599025C973217B3191770F00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 19:33:24 +0000 Manifest this update: Wed 04 Nov 2026 19:28:24 +0000 Manifest next update: Thu 05 Nov 2026 20:17:24 +0000 Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) 2: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: 8TUqE2On8WmSt4+fyAme406sIXbP+el78nzULGPvn9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 20:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4a:b5:f3:31:cf:ef:0e:59:90:25:c9:73:21:7b:31:91:77:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Nov 4 19:28:24 2026 GMT Not After : Nov 5 20:17:24 2026 GMT Subject: CN=992297FB42D44DB4CBA31AA8EA1C332289A952C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:ff:f7:56:06:93:9b:1b:df:34:c0:5f:17: 06:99:30:9b:1f:e8:f6:dc:5e:b6:c0:a6:ac:7d:c4: 08:75:c6:8f:ac:b8:a2:28:11:e2:fe:c1:a5:46:55: ee:73:61:41:d0:7f:41:4b:da:fc:ed:ea:42:58:53: 67:ea:9d:a2:bb:ab:5c:16:2e:31:71:63:ab:d6:6b: 7a:d9:79:2b:12:ad:e7:f6:e7:d7:28:81:2e:1d:fd: 0c:ad:4b:b9:30:b4:26:46:10:84:6c:67:4c:c3:e0: 23:47:ad:71:63:4e:24:5f:c7:1d:c8:4f:eb:78:47: 3a:1f:49:67:21:88:cd:0d:cd:3b:e1:a2:a4:9a:cf: 1b:2c:52:91:b9:0f:a9:a1:a6:aa:29:27:e3:af:21: 38:59:9c:5f:0b:12:fb:12:5f:b3:98:67:44:2a:57: ef:a6:74:62:9f:bb:78:b2:93:b1:85:3a:35:49:cb: ba:e4:20:d8:56:ce:a5:56:a2:27:54:9f:5c:bf:e7: a1:f6:36:d0:4c:d7:c7:29:30:c0:19:53:f1:21:d6: 71:f8:15:d7:59:af:b5:7d:c7:69:30:65:49:40:05: 36:a5:7c:55:a5:92:f0:18:97:fa:82:a7:b8:25:c3: c9:ba:bb:73:25:58:bb:fa:40:25:36:fc:87:c5:04: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:97:FB:42:D4:4D:B4:CB:A3:1A:A8:EA:1C:33:22:89:A9:52:C9 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:22:8f:13:13:75:91:f2:74:56:53:c4:6e:04:ea:b0:f5:ba: 75:5b:ca:89:72:65:22:68:83:ef:3b:cb:37:b2:83:2a:94:3e: b5:9f:1a:c6:1e:06:c3:fa:82:f6:98:c4:bf:63:22:91:ed:c4: 08:9c:ba:fc:68:c3:e2:cc:b3:10:12:2a:f1:f1:d1:38:df:1b: e9:0e:0d:f8:31:b4:bd:d8:e0:23:d1:b1:d9:0d:82:96:d2:9a: 6f:23:3a:51:46:d1:cc:e1:a0:67:94:58:fe:f8:6c:3a:c8:01: aa:54:89:c7:14:61:50:e7:17:57:bb:1c:36:4d:03:ae:85:6f: 4d:3a:f9:d2:0e:5c:d9:5d:28:10:a7:b0:71:15:cf:0c:70:c6: cb:a2:76:b1:7c:97:ea:bf:16:1d:f0:a4:88:84:de:84:c0:40: 9d:64:16:b5:5f:5a:f1:61:7a:c1:14:bd:b2:bc:d3:e1:e9:89: c3:ec:da:6e:d5:66:d6:ed:bd:b0:87:cb:3f:48:c9:a8:8c:7d: 7e:37:6f:7f:39:4e:3c:2d:a1:23:f0:ed:91:af:48:8f:fa:17: 11:84:51:b0:db:88:a1:3a:20:5d:24:43:26:33:f8:1c:cb:6b: a2:da:d9:0f:64:09:e5:bc:66:6a:5b:a0:f6:2e:af:10:74:5a: 1f:e3:7f:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEq18zHP7w5ZkCXJcyF7MZF3DwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjExMDQxOTI4MjRaFw0yNjExMDUyMDE3MjRaMDMxMTAvBgNV BAMTKDk5MjI5N0ZCNDJENDREQjRDQkEzMUFBOEVBMUMzMzIyODlBOTUyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFP/3VgaTmxvfNMBfFwaZMJsf 6PbcXrbApqx9xAh1xo+suKIoEeL+waVGVe5zYUHQf0FL2vzt6kJYU2fqnaK7q1wW LjFxY6vWa3rZeSsSref259cogS4d/QytS7kwtCZGEIRsZ0zD4CNHrXFjTiRfxx3I T+t4RzofSWchiM0NzTvhoqSazxssUpG5D6mhpqopJ+OvIThZnF8LEvsSX7OYZ0Qq V++mdGKfu3iyk7GFOjVJy7rkINhWzqVWoidUn1y/56H2NtBM18cpMMAZU/Eh1nH4 FddZr7V9x2kwZUlABTalfFWlkvAYl/qCp7glw8m6u3MlWLv6QCU2/IfFBDX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSKX+0LUTbTLoxqo6hwzIompUskwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcijxMTdZHydFZTxG4E6rD1unVbyolyZSJo g+87yzeygyqUPrWfGsYeBsP6gvaYxL9jIpHtxAicuvxow+LMsxASKvHx0TjfG+kO DfgxtL3Y4CPRsdkNgpbSmm8jOlFG0czhoGeUWP74bDrIAapUiccUYVDnF1e7HDZN A66Fb006+dIOXNldKBCnsHEVzwxwxsuidrF8l+q/Fh3wpIiE3oTAQJ1kFrVfWvFh esEUvbK80+HpicPs2m7VZtbtvbCHyz9IyaiMfX43b385TjwtoSPw7ZGvSI/6FxGE UbDbiKE6IF0kQyYz+BzLa6La2Q9kCeW8ZmpboPYurxB0Wh/jf5s= -----END CERTIFICATE-----Generated at Thu Nov 5 05:18:29 2026 by rpki-client