$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: S8pWjuzMbyeGa+5Z5E0PC1+AcowGntDkvJVHv4T1Hx8= Subject key identifier: EE:9F:93:62:E6:4B:79:71:D8:0C:8D:BF:DE:2C:0E:23:3D:A3:F3:69 Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 0BD85732557550FE460507826118A56BA4732492 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: EA Signing time: Sun 25 Oct 2026 06:14:00 +0000 Manifest this update: Sun 25 Oct 2026 06:09:00 +0000 Manifest next update: Mon 26 Oct 2026 06:20:00 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) 2: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: fu5dzxzpTzJH4ZlwMEanWqXQeZQt6Tt/2KGToyCGSYI=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d8:57:32:55:75:50:fe:46:05:07:82:61:18:a5:6b:a4:73:24:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: Oct 25 06:09:00 2026 GMT Not After : Oct 26 06:20:00 2026 GMT Subject: CN=EE9F9362E64B7971D80C8DBFDE2C0E233DA3F369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:dc:0b:79:51:9f:a0:ae:16:63:8a:50:85:e4: 08:1f:2a:40:4d:40:16:96:b4:10:46:f1:7e:92:7a: a8:67:1d:60:a5:df:cd:42:3b:5f:d8:1e:7e:3d:cd: 9f:1f:e5:b8:42:cc:0f:ee:38:bd:59:9f:84:40:e8: 68:56:29:30:df:e9:4a:b8:f1:63:0f:e5:ad:37:76: 27:2b:15:9a:da:71:a3:b6:23:96:37:ec:92:5f:b9: ce:e6:a8:8f:5f:94:e2:80:b1:17:8e:79:28:6d:fc: 49:30:a7:8b:7d:fb:3d:6f:16:1f:bc:b9:2a:a1:47: cc:a8:54:29:ce:2e:e4:62:04:28:4f:05:5d:16:c1: e3:c2:4a:61:b9:e2:81:a7:5a:67:ab:43:b3:fa:41: 52:cb:60:68:3e:d3:4c:cc:78:82:9d:ea:84:ab:00: c1:53:29:57:7d:93:8b:b8:41:b5:83:c4:0f:ef:e6: 36:17:24:8e:e9:85:49:c6:28:79:81:ff:a6:19:1f: bc:70:d7:f7:64:6b:36:ed:4c:52:ee:7e:1b:bc:8a: 49:0b:39:89:89:be:c4:25:06:5c:6a:b1:8e:a5:4e: a9:5c:0c:3e:8c:03:a4:ff:b6:0f:ae:2b:7a:d8:41: eb:d0:bc:82:d5:3e:78:99:42:c4:f4:8a:d3:1f:13: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9F:93:62:E6:4B:79:71:D8:0C:8D:BF:DE:2C:0E:23:3D:A3:F3:69 X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:31:e8:9f:6e:4d:32:35:4f:e4:db:5a:87:d1:a0:82:2a:a1: 8a:40:ea:8a:ac:80:c5:49:e2:90:8f:7d:38:a2:34:3d:63:45: bf:08:dc:58:99:32:b2:c1:69:f0:2a:c0:40:c8:c1:8a:07:ba: 1f:8f:63:93:de:1a:17:41:e0:5a:da:a6:43:19:df:e6:b3:d3: 6d:ef:16:84:52:ea:37:50:fc:ac:3b:3a:85:c7:10:f1:a0:b3: 71:fe:c4:78:1d:b4:d9:ed:5a:f7:d8:b8:3a:28:0f:fd:39:7b: b0:b4:37:d0:8a:72:3f:3b:0a:39:84:80:8d:66:a5:5c:1a:62: 39:b2:fc:02:7f:7c:8b:e4:e5:55:b1:09:b0:7a:57:9b:d6:24: ea:fe:62:0e:42:4a:fb:b9:e7:bc:4c:98:d0:be:17:03:7f:2a: bd:88:20:09:40:05:5e:38:e8:a4:bd:d7:2c:6a:f8:3c:41:7c: 15:28:9d:93:53:8e:f9:17:9d:00:9b:d7:7b:da:00:70:ec:e8: 6b:33:cb:bd:cc:3c:50:eb:d7:9c:64:92:6b:be:52:59:27:eb: d8:5d:79:fc:db:5a:4e:a6:57:c3:0a:39:a6:29:7c:39:7b:bb: 9c:08:3b:22:67:7e:b4:a0:e5:88:b3:62:e1:b0:39:85:6f:fb: 87:51:ca:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9hXMlV1UP5GBQeCYRila6RzJJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjEwMjUwNjA5MDBaFw0yNjEwMjYwNjIwMDBaMDMxMTAvBgNV BAMTKEVFOUY5MzYyRTY0Qjc5NzFEODBDOERCRkRFMkMwRTIzM0RBM0YzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23At5UZ+grhZjilCF5AgfKkBN QBaWtBBG8X6SeqhnHWCl381CO1/YHn49zZ8f5bhCzA/uOL1Zn4RA6GhWKTDf6Uq4 8WMP5a03dicrFZracaO2I5Y37JJfuc7mqI9flOKAsReOeSht/Ekwp4t9+z1vFh+8 uSqhR8yoVCnOLuRiBChPBV0WwePCSmG54oGnWmerQ7P6QVLLYGg+00zMeIKd6oSr AMFTKVd9k4u4QbWDxA/v5jYXJI7phUnGKHmB/6YZH7xw1/dkazbtTFLufhu8ikkL OYmJvsQlBlxqsY6lTqlcDD6MA6T/tg+uK3rYQevQvILVPniZQsT0itMfE2udAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7p+TYuZLeXHYDI2/3iwOIz2j82kwHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwx6J9uTTI1T+TbWofRoIIqoYpA6oqsgMVJ 4pCPfTiiND1jRb8I3FiZMrLBafAqwEDIwYoHuh+PY5PeGhdB4FrapkMZ3+az023v FoRS6jdQ/Kw7OoXHEPGgs3H+xHgdtNntWvfYuDooD/05e7C0N9CKcj87CjmEgI1m pVwaYjmy/AJ/fIvk5VWxCbB6V5vWJOr+Yg5CSvu557xMmNC+FwN/Kr2IIAlABV44 6KS91yxq+DxBfBUonZNTjvkXnQCb13vaAHDs6Gszy73MPFDr15xkkmu+Ulkn69hd efzbWk6mV8MKOaYpfDl7u5wIOyJnfrSg5YizYuGwOYVv+4dRynM= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:20 2026 by rpki-client