$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft (raw, json) Hash identifier: OJeewT0aDP2Isc5PU6ALzT9G1a6MUwD37lUoA6uyP1w= Subject key identifier: 5C:FE:81:3E:AB:06:B6:86:CE:EA:93:58:72:86:C0:9A:26:65:13:CF Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Certificate serial: 079B928AEBCED8C76ADF56C0EF18A72E62380CE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 22:20:40 +0000 Manifest this update: Tue 03 Nov 2026 22:15:40 +0000 Manifest next update: Thu 05 Nov 2026 01:39:40 +0000 Files and hashes: 1: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: mZ4ni8RZ+trHAYAq+YWcBinFPw6rEt7xuDt1TTSRtHw=) 2: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=) 3: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: 1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=) 4: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl (hash: TV7QlsfnGSioQbl/WoQk/MsQ/myRV2ApsknLMBFxu90=) 5: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9b:92:8a:eb:ce:d8:c7:6a:df:56:c0:ef:18:a7:2e:62:38:0c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Validity Not Before: Nov 3 22:15:40 2026 GMT Not After : Nov 5 01:39:40 2026 GMT Subject: CN=5CFE813EAB06B686CEEA93587286C09A266513CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ff:b8:6e:e4:e5:ce:78:32:25:20:d9:20:db: cf:16:2b:17:3a:18:bb:ee:e6:bf:ad:6f:07:8e:a5: 37:d7:9c:be:f1:c5:ce:76:c0:30:8a:da:c1:49:ad: 33:41:55:cf:17:8a:68:6d:70:08:ab:f6:fb:47:4c: 97:0f:1e:7e:b2:b6:40:65:94:56:59:1b:c3:86:40: d1:70:83:3d:0a:37:30:3f:e7:06:95:0d:fb:bb:1f: 95:e7:46:f4:92:45:35:7e:f4:3b:09:a7:f1:08:7b: 23:3a:aa:eb:af:f9:8e:89:fa:85:85:2b:14:a2:9a: 78:8f:0a:7e:01:b3:33:2e:66:cb:1c:80:ec:4f:d8: cf:aa:99:6c:db:51:d6:d4:6b:09:19:16:b7:d2:cc: 7e:63:42:6d:87:25:fa:b7:7a:5b:04:c5:04:29:17: 44:98:0a:46:73:4d:be:2e:b5:58:c2:18:5c:34:4f: a1:66:0c:36:34:4e:e4:b6:c6:c8:e9:a5:9d:71:96: e5:61:26:3d:24:af:90:55:83:56:1d:fc:4a:8c:9d: b1:8e:a8:a2:ce:d7:16:9e:a2:d8:26:9f:99:ad:52: 30:44:3a:a2:d4:61:21:61:6f:52:98:d8:28:6e:51: 16:00:4e:e1:17:2b:16:ec:15:2b:78:e4:3f:6a:bf: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:81:3E:AB:06:B6:86:CE:EA:93:58:72:86:C0:9A:26:65:13:CF X509v3 Authority Key Identifier: keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8f:c2:6b:53:91:72:32:4d:db:2d:72:5e:a5:7d:22:8c:40: da:c2:db:3b:b0:1e:9d:65:bf:7b:72:b7:93:6a:dc:73:7a:d6: ac:81:c6:19:fe:4a:71:b1:2c:37:c5:97:67:16:d8:fd:82:4b: 5a:08:eb:7a:5b:7a:b8:64:49:98:43:ae:51:c8:01:d8:dd:fc: 46:f5:ec:0a:33:1b:34:33:fa:00:a8:2c:d0:bc:03:13:98:b4: 2e:92:8d:01:c8:7b:6d:2d:a6:a8:2e:f0:9d:1b:e7:41:48:11: cc:a5:79:cd:16:53:a4:84:1a:d7:94:5d:32:2a:0c:fb:80:5e: 2f:b2:1d:a0:6a:ce:23:7b:9a:3e:1e:df:06:4c:7a:c5:13:20: 9c:c5:64:33:3c:d5:2c:90:4e:18:55:7f:39:79:4b:a2:2d:1e: 00:9d:1b:10:80:82:37:c5:84:17:ea:21:45:22:27:ea:fc:b7: a4:5f:78:6a:cf:c7:5b:2c:40:f8:5c:21:1c:81:8c:36:e4:aa: 45:d1:b5:c7:7d:40:c2:9f:a8:76:c5:57:51:c2:9f:e6:ab:e5: 8f:d2:8a:97:49:be:4e:12:74:ab:27:91:29:ef:64:9a:ce:ef: 9f:1c:96:98:98:ef:25:ef:5a:4f:b6:ab:08:fb:c6:52:d9:3e: c4:65:c7:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5uSiuvO2Mdq31bA7xinLmI4DOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz QUZFN0EzQzAeFw0yNjExMDMyMjE1NDBaFw0yNjExMDUwMTM5NDBaMDMxMTAvBgNV BAMTKDVDRkU4MTNFQUIwNkI2ODZDRUVBOTM1ODcyODZDMDlBMjY2NTEzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/7hu5OXOeDIlINkg288WKxc6 GLvu5r+tbweOpTfXnL7xxc52wDCK2sFJrTNBVc8XimhtcAir9vtHTJcPHn6ytkBl lFZZG8OGQNFwgz0KNzA/5waVDfu7H5XnRvSSRTV+9DsJp/EIeyM6quuv+Y6J+oWF KxSimniPCn4BszMuZsscgOxP2M+qmWzbUdbUawkZFrfSzH5jQm2HJfq3elsExQQp F0SYCkZzTb4utVjCGFw0T6FmDDY0TuS2xsjppZ1xluVhJj0kr5BVg1Yd/EqMnbGO qKLO1xaeotgmn5mtUjBEOqLUYSFhb1KY2ChuURYATuEXKxbsFSt45D9qv4OJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXP6BPqsGtobO6pNYcobAmiZlE88wHwYDVR0j BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3 QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0 MEMzQUZFN0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKPwmtTkXIyTdstcl6lfSKMQNrC2zuwHp1l v3tyt5Nq3HN61qyBxhn+SnGxLDfFl2cW2P2CS1oI63pberhkSZhDrlHIAdjd/Eb1 7AozGzQz+gCoLNC8AxOYtC6SjQHIe20tpqgu8J0b50FIEcylec0WU6SEGteUXTIq DPuAXi+yHaBqziN7mj4e3wZMesUTIJzFZDM81SyQThhVfzl5S6ItHgCdGxCAgjfF hBfqIUUiJ+r8t6RfeGrPx1ssQPhcIRyBjDbkqkXRtcd9QMKfqHbFV1HCn+ar5Y/S ipdJvk4SdKsnkSnvZJrO758clpiY7yXvWk+2qwj7xlLZPsRlxwU= -----END CERTIFICATE-----Generated at Wed Nov 4 15:19:31 2026 by rpki-client