$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: lFRLjjkUgnoJogKelayoHycG/4i7Cgq0LQPIxAiXDmI= Subject key identifier: BA:F8:41:58:0F:2C:D5:10:83:F8:AD:9F:F2:F1:74:B5:CB:E8:7F:D9 Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 49603B41570B46BE94ACD5035E801A30444CBF81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 13:51:24 +0000 Manifest this update: Sat 24 Oct 2026 13:46:24 +0000 Manifest next update: Sun 25 Oct 2026 15:45:24 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 2: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: QOM+HJDqtnEk9PGD9xu8nBLxnghJTZ/160hxkGyeTAk=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:60:3b:41:57:0b:46:be:94:ac:d5:03:5e:80:1a:30:44:4c:bf:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Oct 24 13:46:24 2026 GMT Not After : Oct 25 15:45:24 2026 GMT Subject: CN=BAF841580F2CD51083F8AD9FF2F174B5CBE87FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:39:e6:9c:04:25:f5:32:ff:53:33:6d:02: 45:b2:f1:6a:4d:6e:79:b4:d5:ed:c2:db:58:ad:92: 4a:b5:67:6e:7f:21:c1:90:a2:3f:12:0e:af:41:ac: a2:ec:11:bf:68:b6:26:7c:5a:ab:86:df:67:8f:c9: 1d:d2:bd:58:7e:7a:ac:30:bd:a5:a9:4c:95:fe:4a: 19:15:1c:98:dd:13:64:7f:de:bb:fc:9f:f3:cd:01: e8:ed:8c:38:fa:32:1f:2e:a9:14:9c:23:38:e2:c0: 82:bc:33:ab:ff:c8:fd:aa:15:a1:25:18:a5:6a:88: 4e:66:eb:ce:33:f2:2d:30:1a:57:1e:07:69:cf:91: 74:18:aa:a5:48:41:ac:19:50:51:4e:b4:5e:67:c4: a9:e3:6e:7e:0d:4b:18:b1:76:25:45:38:ff:84:80: 6a:06:2c:2d:64:a1:d0:ce:5c:7a:ad:78:c5:13:f1: 82:41:bb:ec:72:df:c9:cb:2c:87:97:c8:34:d8:22: 48:c1:e0:bf:b8:72:0c:19:d2:4e:9a:9b:08:b9:e0: 3c:fe:40:1a:ab:21:0c:93:d0:92:43:09:4c:b5:92: 19:d7:92:1a:88:79:cf:76:b7:70:be:f3:3b:01:bd: 3f:c3:3b:2b:41:9c:f2:26:b1:51:30:7c:c2:09:25: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:41:58:0F:2C:D5:10:83:F8:AD:9F:F2:F1:74:B5:CB:E8:7F:D9 X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f9:0d:fa:db:03:5a:8b:d5:7f:36:90:04:6c:31:cc:f1:4e: 4e:4e:f5:0f:28:62:c5:59:7b:e4:87:c2:2a:8e:24:f8:8e:fd: da:ff:33:a5:73:24:a5:b7:23:5a:ad:22:fd:39:8c:aa:1b:aa: d7:9b:9a:e1:b6:8a:b1:e9:76:37:e1:fc:62:a6:57:6a:40:7d: 5e:6e:a1:b2:ca:04:8f:3b:8f:3b:65:3d:70:27:80:e8:4c:bc: 06:78:28:01:13:13:23:a9:7c:dd:3f:34:03:ee:7d:65:61:05: 77:97:c3:06:d8:9d:fa:72:af:f5:03:77:a7:2d:97:66:5a:6d: 5f:de:58:bc:f8:b6:9d:1a:64:18:c6:6b:95:3b:42:f0:fc:cf: d3:f9:3c:d9:ea:45:b3:bb:80:b0:4e:61:f4:d3:f9:28:9c:f6: c4:48:26:0e:04:66:dc:da:e0:46:11:96:c6:07:4c:aa:ee:a0: 21:87:91:87:5c:dd:23:aa:d0:7d:c9:2f:d0:aa:03:26:c2:b0: 77:f0:87:a5:ed:39:29:71:a6:fd:6d:63:aa:11:56:fb:9b:8d: d1:8a:7a:24:e1:1d:6b:a5:c2:24:95:65:44:f2:ab:e5:e5:52: 76:5d:82:b9:cd:41:b6:85:ba:e2:67:5f:da:15:50:6c:3a:2f: d0:87:3b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWA7QVcLRr6UrNUDXoAaMERMv4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjEwMjQxMzQ2MjRaFw0yNjEwMjUxNTQ1MjRaMDMxMTAvBgNV BAMTKEJBRjg0MTU4MEYyQ0Q1MTA4M0Y4QUQ5RkYyRjE3NEI1Q0JFODdGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRznmnAQl9TL/UzNtAkWy8WpN bnm01e3C21itkkq1Z25/IcGQoj8SDq9BrKLsEb9otiZ8WquG32ePyR3SvVh+eqww vaWpTJX+ShkVHJjdE2R/3rv8n/PNAejtjDj6Mh8uqRScIzjiwIK8M6v/yP2qFaEl GKVqiE5m684z8i0wGlceB2nPkXQYqqVIQawZUFFOtF5nxKnjbn4NSxixdiVFOP+E gGoGLC1kodDOXHqteMUT8YJBu+xy38nLLIeXyDTYIkjB4L+4cgwZ0k6amwi54Dz+ QBqrIQyT0JJDCUy1khnXkhqIec92t3C+8zsBvT/DOytBnPImsVEwfMIJJay3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvhBWA8s1RCD+K2f8vF0tcvof9kwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL5DfrbA1qL1X82kARsMczxTk5O9Q8oYsVZ e+SHwiqOJPiO/dr/M6VzJKW3I1qtIv05jKobqtebmuG2irHpdjfh/GKmV2pAfV5u obLKBI87jztlPXAngOhMvAZ4KAETEyOpfN0/NAPufWVhBXeXwwbYnfpyr/UDd6ct l2ZabV/eWLz4tp0aZBjGa5U7QvD8z9P5PNnqRbO7gLBOYfTT+Sic9sRIJg4EZtza 4EYRlsYHTKruoCGHkYdc3SOq0H3JL9CqAybCsHfwh6XtOSlxpv1tY6oRVvubjdGK eiThHWulwiSVZUTyq+XlUnZdgrnNQbaFuuJnX9oVUGw6L9CHO8A= -----END CERTIFICATE-----Generated at Sun Oct 25 03:06:39 2026 by rpki-client