$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: xu7vqL+nsV++mAseRflMjfbjeUvK+ij5RE+EdK4Ugao= Subject key identifier: D6:E4:66:6B:A1:82:41:12:89:93:64:0E:ED:2D:6E:B5:DF:D2:9F:85 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 0E7CC274716617CA326D3D03ABB2B31C09C9E684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: DD Signing time: Thu 15 Oct 2026 02:02:31 +0000 Manifest this update: Thu 15 Oct 2026 01:57:31 +0000 Manifest next update: Fri 16 Oct 2026 04:38:31 +0000 Files and hashes: 1: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: I6SSFXf9vBr+HhS5rNHRc0tAu+/C258PryIUWK5LH4g=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7c:c2:74:71:66:17:ca:32:6d:3d:03:ab:b2:b3:1c:09:c9:e6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Oct 15 01:57:31 2026 GMT Not After : Oct 16 04:38:31 2026 GMT Subject: CN=D6E4666BA18241128993640EED2D6EB5DFD29F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:15:bc:bc:13:fd:d9:e3:b9:a4:92:5c:47: e4:4b:12:70:d2:7c:13:62:87:b4:ac:5d:25:3f:f5: e8:75:47:56:85:17:a7:8e:37:1d:ca:3d:14:0a:89: 20:91:b4:49:a5:78:2d:d9:f1:0a:73:8d:5a:6e:e5: 18:7b:1b:61:c4:80:20:b8:ee:94:e1:93:c6:38:8f: d4:5a:08:3c:2d:84:2f:72:22:52:ac:53:63:01:aa: 5e:a7:17:12:51:a9:fb:43:75:ef:35:98:c0:ec:5a: 8f:51:0c:75:36:9c:ab:8a:e9:e0:18:00:ba:04:cf: 33:d7:74:62:48:a2:38:08:5f:5c:d2:9e:16:c6:9b: 37:e3:ee:44:02:fd:a3:09:9d:e5:8b:6d:ff:e0:2d: 81:36:d6:7f:2f:5e:76:8d:10:44:04:62:0e:36:e7: 93:59:87:3b:e2:29:88:de:15:80:e0:ea:63:be:3f: 3a:cf:c0:87:58:d8:32:5d:aa:31:04:1e:bd:b3:70: 84:0d:ec:6b:b9:63:a1:fa:49:9b:62:4d:86:08:36: 28:c0:4e:ab:70:3a:90:4c:28:49:d3:bc:4a:3e:ad: c7:b6:fc:48:a1:a5:d1:47:92:68:c6:75:f2:07:bf: a1:38:3f:37:4c:ad:94:4b:6e:a6:7c:f2:dc:5c:88: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E4:66:6B:A1:82:41:12:89:93:64:0E:ED:2D:6E:B5:DF:D2:9F:85 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:0b:50:a9:d6:0a:fa:bb:f9:22:99:b3:d4:56:df:d2:d3:45: b1:7f:f8:ad:e5:28:9e:b0:7d:5e:b4:e5:30:45:26:b0:ae:b7: 95:01:1a:c3:e8:dd:fe:0a:e4:4d:9d:9d:6c:f8:dd:85:17:7e: 92:89:5e:53:55:be:32:7c:06:19:98:af:c0:47:81:40:08:5a: 2f:36:d5:b1:f4:ca:ae:2d:a2:54:af:87:8b:b1:c4:ca:a0:d7: 07:54:24:87:59:c5:d6:a2:46:65:56:59:69:8e:bb:c6:2d:f3: 4c:20:f1:f3:b4:55:e5:31:fc:f1:71:85:d2:c4:9c:f1:77:58: 98:8b:63:7d:9c:74:ec:5b:b4:4e:3d:89:fa:12:9a:0a:86:98: c3:35:a3:b4:96:d6:2d:b7:7e:61:c7:1d:04:8e:ef:04:7d:30: 17:7d:2b:ea:9d:8b:89:da:17:e1:94:89:c4:26:36:36:d4:ac: 83:d2:22:00:10:cf:cb:10:ff:b3:15:de:d5:a9:d8:17:62:08: f5:26:80:e9:e7:53:2b:a5:28:7f:3f:da:a6:48:81:18:02:58: 5c:2b:54:37:c2:e1:3c:32:5c:af:f7:0b:ed:6c:5e:04:10:21: d1:ef:c6:ee:72:c7:52:34:1f:3f:bd:a8:9d:81:37:52:ee:e1: 68:bc:a7:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnzCdHFmF8oybT0Dq7KzHAnJ5oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjEwMTUwMTU3MzFaFw0yNjEwMTYwNDM4MzFaMDMxMTAvBgNV BAMTKEQ2RTQ2NjZCQTE4MjQxMTI4OTkzNjQwRUVEMkQ2RUI1REZEMjlGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwxW8vBP92eO5pJJcR+RLEnDS fBNih7SsXSU/9eh1R1aFF6eONx3KPRQKiSCRtEmleC3Z8QpzjVpu5Rh7G2HEgCC4 7pThk8Y4j9RaCDwthC9yIlKsU2MBql6nFxJRqftDde81mMDsWo9RDHU2nKuK6eAY ALoEzzPXdGJIojgIX1zSnhbGmzfj7kQC/aMJneWLbf/gLYE21n8vXnaNEEQEYg42 55NZhzviKYjeFYDg6mO+PzrPwIdY2DJdqjEEHr2zcIQN7Gu5Y6H6SZtiTYYINijA TqtwOpBMKEnTvEo+rce2/EihpdFHkmjGdfIHv6E4PzdMrZRLbqZ88txciPOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uRma6GCQRKJk2QO7S1utd/Sn4UwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcLUKnWCvq7+SKZs9RW39LTRbF/+K3lKJ6w fV605TBFJrCut5UBGsPo3f4K5E2dnWz43YUXfpKJXlNVvjJ8BhmYr8BHgUAIWi82 1bH0yq4tolSvh4uxxMqg1wdUJIdZxdaiRmVWWWmOu8Yt80wg8fO0VeUx/PFxhdLE nPF3WJiLY32cdOxbtE49ifoSmgqGmMM1o7SW1i23fmHHHQSO7wR9MBd9K+qdi4na F+GUicQmNjbUrIPSIgAQz8sQ/7MV3tWp2BdiCPUmgOnnUyulKH8/2qZIgRgCWFwr VDfC4TwyXK/3C+1sXgQQIdHvxu5yx1I0Hz+9qJ2BN1Lu4Wi8pxQ= -----END CERTIFICATE-----Generated at Thu Oct 15 17:50:58 2026 by rpki-client