$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: +OL9mqVkGeY4+/kUICAYG4sNViwHL7pE/dVGi9c+lYw= Subject key identifier: 67:79:CB:C6:61:F2:BE:07:8B:AD:31:18:C8:40:2A:FA:31:C6:AD:E1 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 13014C2209E9809F123358ED9C102DE4A0F83620 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: EB Signing time: Sun 25 Oct 2026 06:29:21 +0000 Manifest this update: Sun 25 Oct 2026 06:24:21 +0000 Manifest next update: Mon 26 Oct 2026 08:43:21 +0000 Files and hashes: 1: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: XLgyjlMp/vETsyExUfSyKfsV/99+ckvl9Wq0SuM4JqU=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:01:4c:22:09:e9:80:9f:12:33:58:ed:9c:10:2d:e4:a0:f8:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Oct 25 06:24:21 2026 GMT Not After : Oct 26 08:43:21 2026 GMT Subject: CN=6779CBC661F2BE078BAD3118C8402AFA31C6ADE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:de:ca:da:8d:83:d8:86:c9:b2:96:3e:bb: 00:7f:09:79:5a:10:28:a4:2c:77:15:f2:eb:bc:b9: c6:fd:b0:1e:9d:72:43:69:34:2c:64:14:a1:3a:74: 6b:7c:9a:b9:6b:ea:96:69:0e:dd:bf:47:9c:20:51: 13:f1:d1:42:ce:d4:73:5f:f9:80:f3:66:bd:a5:5d: c1:8c:f4:c4:3d:b7:a0:68:ce:5d:ff:25:8c:d5:c4: 0a:d3:e7:7e:d7:74:2c:39:73:4b:f5:88:66:95:94: a0:66:8b:a9:66:c4:15:21:e6:88:5c:3a:45:0d:d2: 93:13:d4:7f:85:51:9f:91:76:9f:e8:aa:74:0f:47: 2b:35:bf:3e:ff:fc:e5:bd:17:06:62:8a:37:09:de: 0f:3e:7d:41:91:4a:db:53:5c:58:60:32:17:13:43: 3f:b7:de:8c:ce:ce:2c:fe:e1:f9:18:c9:26:37:e3: a8:c0:7e:e0:a5:ff:2e:d1:63:81:aa:24:49:62:a4: 5b:03:b2:2a:ef:db:fe:6f:44:e7:b2:66:f3:23:ce: e8:fe:c2:13:45:82:50:23:62:ee:24:ed:a1:6e:da: f4:e4:f0:a3:fb:bf:9b:78:5b:c7:63:e1:24:83:7f: 41:1b:5b:c9:f9:97:f0:8f:33:6f:16:d0:67:0a:32: b1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:79:CB:C6:61:F2:BE:07:8B:AD:31:18:C8:40:2A:FA:31:C6:AD:E1 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fb:18:d3:01:2c:32:a7:10:3c:bd:d7:b4:05:10:f2:f1:c0: 83:85:61:1f:1e:b0:a9:b1:a9:cd:fa:d3:44:2e:c8:10:e3:4c: b7:19:2e:67:00:57:91:ff:11:ff:99:b9:3a:47:38:02:5d:66: de:a6:78:86:89:b9:2c:87:4d:3b:a1:2a:71:03:ee:5f:d7:7f: 52:d9:20:78:09:3c:b2:38:fd:52:6c:09:24:81:18:10:b5:44: 0f:6d:9c:84:93:67:76:fe:69:8b:b9:4c:4f:fd:6a:05:6d:11: b8:b7:86:f8:8b:f5:ac:07:5f:d4:03:09:f3:d0:f7:3f:5a:27: 87:23:0b:ff:4f:11:1a:33:b4:f7:1f:5d:73:63:aa:a1:0f:8d: 46:b3:73:b5:8e:dd:f6:e2:4f:e5:12:a3:68:23:96:4c:4e:40: 7e:70:30:c3:bf:d9:ac:f0:cd:95:ba:ee:35:b1:e4:d4:74:e4: 69:29:31:5e:2f:a5:72:21:02:9a:5b:6d:72:b3:19:76:cf:d5: 7b:b8:7f:8f:4b:b1:d7:54:23:77:2e:79:0a:70:bf:01:fa:e7: 7e:5c:c7:03:52:b0:ab:9f:58:42:78:0d:e9:0e:c3:81:4e:15: a0:1b:29:81:8f:30:7c:48:16:90:31:04:9a:07:74:3a:fb:42: 06:b9:f4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwFMIgnpgJ8SM1jtnBAt5KD4NiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjEwMjUwNjI0MjFaFw0yNjEwMjYwODQzMjFaMDMxMTAvBgNV BAMTKDY3NzlDQkM2NjFGMkJFMDc4QkFEMzExOEM4NDAyQUZBMzFDNkFERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhd7K2o2D2IbJspY+uwB/CXla ECikLHcV8uu8ucb9sB6dckNpNCxkFKE6dGt8mrlr6pZpDt2/R5wgURPx0ULO1HNf +YDzZr2lXcGM9MQ9t6Bozl3/JYzVxArT537XdCw5c0v1iGaVlKBmi6lmxBUh5ohc OkUN0pMT1H+FUZ+Rdp/oqnQPRys1vz7//OW9FwZiijcJ3g8+fUGRSttTXFhgMhcT Qz+33ozOziz+4fkYySY346jAfuCl/y7RY4GqJElipFsDsirv2/5vROeyZvMjzuj+ whNFglAjYu4k7aFu2vTk8KP7v5t4W8dj4SSDf0EbW8n5l/CPM28W0GcKMrHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3nLxmHyvgeLrTEYyEAq+jHGreEwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL7GNMBLDKnEDy917QFEPLxwIOFYR8esKmx qc3600QuyBDjTLcZLmcAV5H/Ef+ZuTpHOAJdZt6meIaJuSyHTTuhKnED7l/Xf1LZ IHgJPLI4/VJsCSSBGBC1RA9tnISTZ3b+aYu5TE/9agVtEbi3hviL9awHX9QDCfPQ 9z9aJ4cjC/9PERoztPcfXXNjqqEPjUazc7WO3fbiT+USo2gjlkxOQH5wMMO/2azw zZW67jWx5NR05GkpMV4vpXIhAppbbXKzGXbP1Xu4f49LsddUI3cueQpwvwH6535c xwNSsKufWEJ4DekOw4FOFaAbKYGPMHxIFpAxBJoHdDr7Qga59Hw= -----END CERTIFICATE-----Generated at Mon Oct 26 01:45:30 2026 by rpki-client