$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: aQFFBv5UMS7u0zE6oA/hzJG+n9ekKTE4BU9KhVpyohg= Subject key identifier: F0:0B:08:28:52:7B:D7:72:76:2A:E6:9F:0B:F3:4A:24:8A:0B:83:A0 Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 090EDD5F1B3C03A83C70B287EAACB3EE4AEC256C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: EC Signing time: Sun 25 Oct 2026 07:15:26 +0000 Manifest this update: Sun 25 Oct 2026 07:10:26 +0000 Manifest next update: Mon 26 Oct 2026 11:09:26 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 3: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: WUcGRT2Da942nCJ7sFCu7N5UduT4qkYB8PwHGjIBKaY=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0e:dd:5f:1b:3c:03:a8:3c:70:b2:87:ea:ac:b3:ee:4a:ec:25:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Oct 25 07:10:26 2026 GMT Not After : Oct 26 11:09:26 2026 GMT Subject: CN=F00B0828527BD772762AE69F0BF34A248A0B83A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:54:c4:fe:2e:c0:aa:9e:45:ce:c8:60:89: 4e:e1:eb:91:b7:4b:e1:21:e5:67:14:28:50:bf:07: 5b:08:78:f6:c5:02:c5:fd:29:a0:ff:cc:c0:10:b2: ed:3a:cf:b2:5c:ef:d2:0d:f3:3d:37:60:6f:2f:90: ff:c1:35:11:36:d2:b1:8d:0e:d7:dd:0d:84:fe:fd: 65:4c:7a:92:6b:2a:78:84:18:6a:46:4b:86:9e:b4: a0:be:c9:ab:c2:5c:09:3f:9f:27:bd:7e:d6:5b:40: ba:96:34:a1:73:f1:20:e1:c2:02:a7:80:72:12:ec: b2:35:51:8e:c2:7c:d3:12:0e:55:99:6a:4c:99:70: 54:b1:8a:7b:94:da:ab:0d:0b:00:6e:84:1d:62:ee: 2a:54:6c:ff:f0:22:7d:d2:91:36:9c:01:f2:45:77: 7d:86:f4:46:99:77:e0:0f:a2:91:49:47:b4:a6:0a: 35:0d:23:b6:97:af:7c:b6:60:69:20:58:a3:24:42: 16:dd:e7:29:fc:97:cd:b5:fd:f5:1d:57:3f:59:ce: c4:ab:18:ae:16:21:fb:65:a1:72:27:c9:c9:33:f1: 15:d3:99:0b:2e:b5:a8:eb:22:9a:4a:bc:8c:a8:66: 05:a9:38:de:20:51:bd:0b:fd:85:4e:2f:d6:5f:f9: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0B:08:28:52:7B:D7:72:76:2A:E6:9F:0B:F3:4A:24:8A:0B:83:A0 X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9d:c2:50:32:fd:19:5a:8c:a4:4a:a8:75:49:38:48:26:96: a9:e9:bb:b9:a6:2a:70:29:89:f8:94:d7:7a:41:0c:18:eb:2f: 47:49:dc:2d:dd:1c:a7:7f:e0:8e:b5:8e:d3:e6:ea:4c:e1:55: 30:8b:0f:2e:00:ca:4f:f1:78:e8:ee:c8:b8:73:c9:d9:97:04: 1c:d9:37:f4:a5:46:5a:13:05:cc:cf:f0:bf:cd:53:65:3c:c6: f7:2e:bd:20:1c:e7:ee:ad:25:bc:07:e6:82:ca:fb:5a:a6:2d: bb:3a:9c:ec:78:eb:86:09:61:ae:b4:29:39:d2:85:de:f9:62: d1:0f:b1:3b:8f:b3:c7:81:0b:a9:fe:21:46:a3:72:01:50:c5: 66:f3:6f:88:b8:bc:8d:02:78:f8:d3:85:68:36:61:84:24:59: ff:de:6c:74:5e:99:90:d3:98:5d:41:61:e8:2c:4e:15:be:9e: 47:1a:ee:11:03:e5:ab:19:2a:a8:76:b6:d8:ea:7f:51:01:99: ab:81:0d:ff:67:72:80:8d:50:24:0a:a2:e8:72:67:29:d4:71: 0c:cf:d2:13:fa:9f:b0:5d:03:40:e5:ed:bd:2b:c5:4a:75:8b: da:6a:cb:5c:87:f5:74:65:cb:f3:17:0e:cc:d7:2c:4b:24:28: f6:d5:db:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQ7dXxs8A6g8cLKH6qyz7krsJWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjEwMjUwNzEwMjZaFw0yNjEwMjYxMTA5MjZaMDMxMTAvBgNV BAMTKEYwMEIwODI4NTI3QkQ3NzI3NjJBRTY5RjBCRjM0QTI0OEEwQjgzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPVTE/i7Aqp5FzshgiU7h65G3 S+Eh5WcUKFC/B1sIePbFAsX9KaD/zMAQsu06z7Jc79IN8z03YG8vkP/BNRE20rGN DtfdDYT+/WVMepJrKniEGGpGS4aetKC+yavCXAk/nye9ftZbQLqWNKFz8SDhwgKn gHIS7LI1UY7CfNMSDlWZakyZcFSxinuU2qsNCwBuhB1i7ipUbP/wIn3SkTacAfJF d32G9EaZd+APopFJR7SmCjUNI7aXr3y2YGkgWKMkQhbd5yn8l821/fUdVz9ZzsSr GK4WIftloXInyckz8RXTmQsutajrIppKvIyoZgWpON4gUb0L/YVOL9Zf+bBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8AsIKFJ713J2KuafC/NKJIoLg6AwHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6dwlAy/RlajKRKqHVJOEgmlqnpu7mmKnAp ifiU13pBDBjrL0dJ3C3dHKd/4I61jtPm6kzhVTCLDy4Ayk/xeOjuyLhzydmXBBzZ N/SlRloTBczP8L/NU2U8xvcuvSAc5+6tJbwH5oLK+1qmLbs6nOx464YJYa60KTnS hd75YtEPsTuPs8eBC6n+IUajcgFQxWbzb4i4vI0CePjThWg2YYQkWf/ebHRemZDT mF1BYegsThW+nkca7hED5asZKqh2ttjqf1EBmauBDf9ncoCNUCQKouhyZynUcQzP 0hP6n7BdA0Dl7b0rxUp1i9pqy1yH9XRly/MXDszXLEskKPbV2ws= -----END CERTIFICATE-----Generated at Sun Oct 25 11:08:41 2026 by rpki-client