$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: YAMwmHagIJaATBj2r/UOkUgWXhhNA3NsKZK30gL+da4= Subject key identifier: DD:3C:CB:03:EA:BB:DF:D3:F9:1C:39:FE:F3:F8:7C:BE:47:F4:F1:43 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 562C0E1896CE7F2BBA184ED34014BE3D75F6A3DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 09:19:52 +0000 Manifest this update: Wed 04 Nov 2026 09:14:52 +0000 Manifest next update: Thu 05 Nov 2026 09:31:52 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) 2: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: sbOfbfhn0DGNyADMgbYXEGitbH1s7MeCW3VM2QawJAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2c:0e:18:96:ce:7f:2b:ba:18:4e:d3:40:14:be:3d:75:f6:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Nov 4 09:14:52 2026 GMT Not After : Nov 5 09:31:52 2026 GMT Subject: CN=DD3CCB03EABBDFD3F91C39FEF3F87CBE47F4F143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:bf:99:b1:e6:19:a8:6f:bf:5a:6e:32:fd: f8:b3:6b:f9:e5:ce:f1:c0:df:31:07:64:c8:34:ea: 23:8d:0d:60:90:5d:0f:e1:c0:ab:35:4f:e3:72:31: 90:28:8d:e8:0e:03:db:40:a1:af:0c:d9:0f:df:c5: 54:8c:f9:8d:82:87:8a:5d:d3:36:7f:22:62:1c:8e: c5:7b:ab:7a:67:2f:ec:c3:77:69:ec:5f:4c:2a:e7: a4:49:61:9c:64:a7:e8:c2:10:cf:21:70:99:fc:d4: 6b:38:6b:66:b9:0c:35:30:d0:08:f8:b2:53:7d:a9: e3:53:f4:58:79:7b:2f:39:43:5b:3a:7d:0c:9d:f2: 8f:96:1b:6d:78:15:a7:d7:3c:1d:e7:ea:a9:7c:71: 96:20:d3:57:cc:6f:42:d5:0e:40:93:38:68:cf:3c: 2f:c1:c2:67:17:85:75:d0:0f:66:fe:cd:20:36:24: e1:fa:73:4a:62:e1:40:4c:70:1d:92:e8:ea:90:3f: fc:58:38:4c:bb:65:72:dd:72:c6:9f:d4:92:cd:07: de:5c:b2:1a:ea:f0:0e:ae:0a:93:50:ab:b0:74:12: d7:bf:24:5f:19:b7:a0:09:a5:ac:1b:a6:69:8b:7d: 0e:78:9c:05:6e:b0:fd:ff:a6:f7:b2:03:df:8b:dd: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3C:CB:03:EA:BB:DF:D3:F9:1C:39:FE:F3:F8:7C:BE:47:F4:F1:43 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:91:c3:38:ee:dc:72:1a:78:f3:e9:ac:d8:59:11:41:80:ff: ab:c7:75:ee:d2:d6:88:6a:7a:89:46:25:b9:d2:f9:de:73:11: f0:c4:11:59:b5:04:ec:e4:20:3f:e5:52:e7:27:70:30:91:63: 77:76:11:1e:3e:44:be:9e:df:9b:13:a6:02:d0:ea:30:8b:d3: d8:f5:a8:98:9c:1a:d0:d7:b0:96:19:fb:f4:16:05:62:bd:c7: 02:59:1c:fc:7b:2b:65:c9:50:d7:1b:63:d5:28:98:3a:03:28: 11:2c:06:24:79:7f:39:6a:5a:68:e6:e6:70:1d:07:27:79:59: 90:f7:77:6f:3c:af:44:0e:c6:ea:b7:8f:02:49:ef:fb:57:45: 57:2d:a4:fe:2c:f9:47:be:ed:28:ed:c4:81:e9:e5:94:a5:a1: d7:3f:52:02:8c:ad:e3:d7:c4:37:a9:3a:cc:e6:aa:d3:c0:59: f1:c5:83:67:61:c1:ce:29:a6:02:90:0d:b9:f4:ec:73:8c:7c: 0a:dc:dd:cc:da:0d:d9:10:fe:72:c5:7f:ff:19:82:75:4b:32: d4:09:5c:c9:db:83:5c:9c:1f:4d:f6:e5:41:8d:8e:00:6f:4a: 00:64:81:80:ed:9b:1c:1a:43:b5:82:b1:9f:f4:36:95:82:99: 6f:a2:35:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViwOGJbOfyu6GE7TQBS+PXX2o94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjExMDQwOTE0NTJaFw0yNjExMDUwOTMxNTJaMDMxMTAvBgNV BAMTKEREM0NDQjAzRUFCQkRGRDNGOTFDMzlGRUYzRjg3Q0JFNDdGNEYxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sL+ZseYZqG+/Wm4y/fiza/nl zvHA3zEHZMg06iONDWCQXQ/hwKs1T+NyMZAojegOA9tAoa8M2Q/fxVSM+Y2Ch4pd 0zZ/ImIcjsV7q3pnL+zDd2nsX0wq56RJYZxkp+jCEM8hcJn81Gs4a2a5DDUw0Aj4 slN9qeNT9Fh5ey85Q1s6fQyd8o+WG214FafXPB3n6ql8cZYg01fMb0LVDkCTOGjP PC/BwmcXhXXQD2b+zSA2JOH6c0pi4UBMcB2S6OqQP/xYOEy7ZXLdcsaf1JLNB95c shrq8A6uCpNQq7B0Ete/JF8Zt6AJpawbpmmLfQ54nAVusP3/pveyA9+L3UW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TzLA+q739P5HDn+8/h8vkf08UMwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuRwzju3HIaePPprNhZEUGA/6vHde7S1ohq eolGJbnS+d5zEfDEEVm1BOzkID/lUucncDCRY3d2ER4+RL6e35sTpgLQ6jCL09j1 qJicGtDXsJYZ+/QWBWK9xwJZHPx7K2XJUNcbY9UomDoDKBEsBiR5fzlqWmjm5nAd Byd5WZD3d288r0QOxuq3jwJJ7/tXRVctpP4s+Ue+7SjtxIHp5ZSlodc/UgKMrePX xDepOszmqtPAWfHFg2dhwc4ppgKQDbn07HOMfArc3czaDdkQ/nLFf/8ZgnVLMtQJ XMnbg1ycH0325UGNjgBvSgBkgYDtmxwaQ7WCsZ/0NpWCmW+iNRM= -----END CERTIFICATE-----Generated at Wed Nov 4 22:22:14 2026 by rpki-client