$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft File: DA4C7EC09188922B406170208997DD586575FFB0.mft (raw, json) Hash identifier: 8w1zJQabpZYJMTRSdTDq3dTy9orQiuTACKg3MuiQ5mQ= Subject key identifier: CF:60:8E:71:57:0F:F9:30:9D:25:36:2D:F0:16:54:E3:F2:2C:A5:37 Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0 Certificate serial: 2AE0B4EC661ADA37D909D1C9CC73358BD4A90F43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 14:10:48 +0000 Manifest this update: Mon 02 Nov 2026 14:05:48 +0000 Manifest next update: Tue 03 Nov 2026 15:19:48 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=) 2: DA4C7EC09188922B406170208997DD586575FFB0.crl (hash: PO79CpvZR+ANNvoGt6iUjsix1fTccCKMpg/kJN47aVk=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: LjLUgvBMy0vDjBtT3AvvXHrDpEIsdVFxx/cTyXnRl4k=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: MLj0AUwkGxT9VgNAnaRkUPum+E8mfae8sdJn0VM7fng=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: +HwPI5t9LV2JhVv1OMpumDZv5OfbCi5N5psEQEHPJ+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 15:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e0:b4:ec:66:1a:da:37:d9:09:d1:c9:cc:73:35:8b:d4:a9:0f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0 Validity Not Before: Nov 2 14:05:48 2026 GMT Not After : Nov 3 15:19:48 2026 GMT Subject: CN=CF608E71570FF9309D25362DF01654E3F22CA537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:dd:e1:bf:1d:28:12:ea:74:b2:2a:d3:9e: b6:17:2a:1a:32:a2:41:11:06:05:5b:81:44:ce:33: e4:bb:18:e3:36:03:a7:7a:fa:6f:80:5b:ae:b9:fe: 16:96:d4:b4:60:e8:df:ca:36:5a:f3:9b:02:c7:70: a7:4d:8a:68:a1:68:4f:ab:25:a3:c4:32:f0:45:5e: 3a:ae:62:19:f1:59:e1:3f:30:8f:03:61:86:38:20: 97:62:fd:1b:8f:e6:5a:03:61:06:1e:13:cb:71:83: 66:51:b4:b3:d1:c6:ab:b5:db:43:e2:ea:e5:9d:28: 9e:89:d0:13:3d:35:7d:06:6e:82:2a:18:71:8a:65: 98:11:19:7d:db:b8:0e:5a:d7:74:10:7e:0e:62:81: a8:a9:b1:6f:9c:f9:66:e6:af:0e:e4:bf:eb:6a:a1: 31:42:44:3d:14:94:f6:43:33:ca:e4:27:49:ec:5d: da:ce:3d:b0:da:64:b2:ee:d7:43:fe:e8:aa:aa:8a: 38:81:b8:66:4e:59:a2:0c:a8:e7:a3:72:00:47:3a: 6d:98:bf:3a:e0:4b:55:71:b4:52:47:bf:a1:93:50: b0:e7:1d:3f:3b:45:31:f6:73:5a:a4:33:39:af:52: 9f:81:e4:46:69:f9:c2:41:b5:6e:ac:1c:00:7d:16: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:60:8E:71:57:0F:F9:30:9D:25:36:2D:F0:16:54:E3:F2:2C:A5:37 X509v3 Authority Key Identifier: keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7d:64:73:8c:96:30:07:36:c9:04:4f:79:bf:dc:23:eb:41: 64:7f:3c:9d:b7:95:f7:6d:61:82:ef:05:90:d9:aa:78:af:7e: ae:7b:1e:78:88:49:6c:09:0c:76:23:32:b5:9c:c8:59:6f:28: 26:d8:3f:ba:93:7b:ab:bf:0c:7e:34:61:37:3e:a1:68:6e:c8: 42:c7:81:29:c7:61:97:a5:49:b7:ac:45:55:d9:01:c7:f3:94: 3e:ff:ad:5c:d9:ce:89:b3:93:4a:74:46:27:56:3f:2f:7d:46: 68:78:c0:2d:83:b6:1a:20:9c:cc:4a:05:86:21:7a:50:92:e4: 2a:33:70:33:78:76:5b:f0:fb:8d:c3:6a:21:57:db:e2:4a:f2: c3:f4:e3:51:70:09:9a:6a:3e:b3:bf:92:35:8a:4e:6e:47:9c: 4e:d9:0b:c7:01:8a:0e:5d:85:4d:8d:3b:a4:48:9d:f9:fd:59: cc:9c:2a:22:dc:da:5b:ec:18:df:8a:87:8d:c1:46:1b:d3:3b: ff:8f:21:95:8b:1d:f1:0d:f3:42:fe:71:92:4f:7a:8e:a3:f4: e6:22:90:09:54:a0:fe:f1:c6:f2:b6:f5:cc:85:d9:0c:c0:00: 9b:c5:ef:ee:e3:c4:43:fb:15:72:9b:0f:2f:28:bb:bd:f0:81: d5:f0:ef:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuC07GYa2jfZCdHJzHM1i9SpD0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2 NTc1RkZCMDAeFw0yNjExMDIxNDA1NDhaFw0yNjExMDMxNTE5NDhaMDMxMTAvBgNV BAMTKENGNjA4RTcxNTcwRkY5MzA5RDI1MzYyREYwMTY1NEUzRjIyQ0E1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oN3hvx0oEup0sirTnrYXKhoy okERBgVbgUTOM+S7GOM2A6d6+m+AW665/haW1LRg6N/KNlrzmwLHcKdNimihaE+r JaPEMvBFXjquYhnxWeE/MI8DYYY4IJdi/RuP5loDYQYeE8txg2ZRtLPRxqu120Pi 6uWdKJ6J0BM9NX0GboIqGHGKZZgRGX3buA5a13QQfg5igaipsW+c+Wbmrw7kv+tq oTFCRD0UlPZDM8rkJ0nsXdrOPbDaZLLu10P+6KqqijiBuGZOWaIMqOejcgBHOm2Y vzrgS1VxtFJHv6GTULDnHT87RTH2c1qkMzmvUp+B5EZp+cJBtW6sHAB9FhBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz2COcVcP+TCdJTYt8BZU4/IspTcwHwYDVR0j BBgwFoAU2kx+wJGIkitAYXAgiZfdWGV1/7AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhjZTIwMDgtODRiNy00YmVmLTk0YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5 MTg4OTIyQjQwNjE3MDIwODk5N0RENTg2NTc1RkZCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQTRDN0VDMDkxODg5MjJCNDA2MTcwMjA4OTk3REQ1ODY1NzVG RkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvREE0QzdFQzA5MTg4OTIyQjQwNjE3MDIwODk5N0RE NTg2NTc1RkZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF9ZHOMljAHNskET3m/3CPrQWR/PJ23lfdt YYLvBZDZqnivfq57HniISWwJDHYjMrWcyFlvKCbYP7qTe6u/DH40YTc+oWhuyELH gSnHYZelSbesRVXZAcfzlD7/rVzZzomzk0p0RidWPy99Rmh4wC2DthognMxKBYYh elCS5CozcDN4dlvw+43DaiFX2+JK8sP041FwCZpqPrO/kjWKTm5HnE7ZC8cBig5d hU2NO6RInfn9WcycKiLc2lvsGN+Kh43BRhvTO/+PIZWLHfEN80L+cZJPeo6j9OYi kAlUoP7xxvK29cyF2QzAAJvF7+7jxEP7FXKbDy8ou73wgdXw74k= -----END CERTIFICATE-----Generated at Tue Nov 3 08:25:11 2026 by rpki-client