$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: M9loDlvAdOUD+l2IIu837wJnzy1TD1EVw/kjxx6jqO8= Subject key identifier: D0:C8:21:49:C0:6A:27:FF:C6:47:2C:24:03:D4:30:22:4A:76:16:55 Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 051F7D8CC48BC6F41425F90543467D4C35A5A7E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: EA Signing time: Sat 24 Oct 2026 15:28:29 +0000 Manifest this update: Sat 24 Oct 2026 15:23:29 +0000 Manifest next update: Sun 25 Oct 2026 15:54:29 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: v4tEKQTyvcMC14KTTr1xaBz7jPwaAmHomgSY5uM/6BI=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1f:7d:8c:c4:8b:c6:f4:14:25:f9:05:43:46:7d:4c:35:a5:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Oct 24 15:23:29 2026 GMT Not After : Oct 25 15:54:29 2026 GMT Subject: CN=D0C82149C06A27FFC6472C2403D430224A761655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:02:31:ac:46:98:37:77:b7:05:44:1d:a6: 6e:e3:57:a3:87:ab:ee:79:37:02:81:62:31:e6:23: 8e:a5:08:dc:70:68:8b:56:d1:52:8c:a7:98:57:90: f9:52:7d:b5:a6:bd:cb:61:7a:23:71:75:8d:39:e1: 32:46:d8:2c:ad:49:e0:c7:72:a2:53:9a:38:3c:74: 7e:bc:a4:9d:4d:4c:b9:d1:64:e3:95:f0:bd:55:a4: 06:bc:d6:4a:98:89:37:4f:61:73:88:f4:31:01:c8: 45:ba:56:0b:88:76:ac:6a:14:74:50:b7:c4:ff:fe: da:bd:c1:ee:ff:bc:48:b5:82:eb:b6:cb:d8:83:22: 3c:c7:6a:61:a6:df:47:30:90:ac:29:05:c4:fb:ea: 21:26:6f:51:09:51:27:5e:9d:2c:64:a5:36:7e:35: 05:19:00:48:77:72:6f:68:53:6b:1d:45:eb:f6:fa: 9b:3d:fa:be:2d:e8:ab:d4:a9:5a:e4:ac:54:66:76: b4:cc:66:80:19:95:b6:6e:94:66:27:45:f4:b8:9c: c1:73:6b:fd:96:13:61:b6:f6:b0:95:a0:25:8f:01: 55:a1:90:82:e9:43:b1:5f:be:b4:36:23:5d:9d:4d: 01:fc:d4:71:58:64:69:71:e1:0b:55:f0:7b:bc:a5: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:21:49:C0:6A:27:FF:C6:47:2C:24:03:D4:30:22:4A:76:16:55 X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:26:08:fe:2c:e3:6a:30:87:6d:dc:4f:4e:5c:d4:f3:c3:68: ad:85:b1:15:c1:cf:18:6e:df:c8:87:ff:34:57:31:f6:1e:19: 6c:cc:42:49:a5:76:a2:af:95:24:0b:cd:a2:41:6f:c8:36:88: e2:61:6a:5b:76:03:c7:80:22:72:2f:40:6c:54:db:4f:33:91: dc:87:2d:45:b0:6a:d4:c4:0b:90:34:be:9e:6d:9e:09:76:60: 84:dd:c5:90:8c:38:eb:49:99:31:48:c4:b1:49:5e:ad:dc:1b: ca:a6:56:87:e8:61:d1:b0:f1:fc:98:8f:fb:6a:a8:92:8f:33: 43:1e:ea:01:a3:49:80:37:96:c2:6c:b6:b8:4c:9d:2c:a3:12: f4:53:62:3b:f6:6e:a8:34:ba:1c:20:93:c2:c9:21:46:54:79: 97:37:ac:05:d4:95:72:0f:05:ea:bf:7b:12:c7:57:6a:4f:1c: f3:57:e6:21:5a:09:66:3b:fe:20:f7:22:5c:5f:d3:cd:78:6b: d6:26:4e:f8:c6:13:2d:23:3d:c8:45:91:9d:2a:33:a9:7c:65: af:1a:f4:d8:af:81:d3:40:2b:67:c3:f2:66:f7:7d:1c:13:d9: 04:14:88:64:55:90:fe:02:66:4e:04:a7:6f:ce:87:23:cc:a7: fd:a3:96:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBR99jMSLxvQUJfkFQ0Z9TDWlp+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjEwMjQxNTIzMjlaFw0yNjEwMjUxNTU0MjlaMDMxMTAvBgNV BAMTKEQwQzgyMTQ5QzA2QTI3RkZDNjQ3MkMyNDAzRDQzMDIyNEE3NjE2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjwIxrEaYN3e3BUQdpm7jV6OH q+55NwKBYjHmI46lCNxwaItW0VKMp5hXkPlSfbWmvctheiNxdY054TJG2CytSeDH cqJTmjg8dH68pJ1NTLnRZOOV8L1VpAa81kqYiTdPYXOI9DEByEW6VguIdqxqFHRQ t8T//tq9we7/vEi1guu2y9iDIjzHamGm30cwkKwpBcT76iEmb1EJUSdenSxkpTZ+ NQUZAEh3cm9oU2sdRev2+ps9+r4t6KvUqVrkrFRmdrTMZoAZlbZulGYnRfS4nMFz a/2WE2G29rCVoCWPAVWhkILpQ7FfvrQ2I12dTQH81HFYZGlx4QtV8Hu8pYOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MghScBqJ//GRywkA9QwIkp2FlUwHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMmCP4s42owh23cT05c1PPDaK2FsRXBzxhu 38iH/zRXMfYeGWzMQkmldqKvlSQLzaJBb8g2iOJhalt2A8eAInIvQGxU208zkdyH LUWwatTEC5A0vp5tngl2YITdxZCMOOtJmTFIxLFJXq3cG8qmVofoYdGw8fyYj/tq qJKPM0Me6gGjSYA3lsJstrhMnSyjEvRTYjv2bqg0uhwgk8LJIUZUeZc3rAXUlXIP Beq/exLHV2pPHPNX5iFaCWY7/iD3Ilxf0814a9YmTvjGEy0jPchFkZ0qM6l8Za8a 9NivgdNAK2fD8mb3fRwT2QQUiGRVkP4CZk4Ep2/OhyPMp/2jln4= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:00 2026 by rpki-client