$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: QhRU4wvA+ODuRwndpJQwqef7OhPkucJ6OeJkRrTFVDQ= Subject key identifier: E3:CE:59:33:00:A3:76:FC:56:02:B5:70:85:C4:8D:13:2A:78:75:33 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 76BD7BF4AFD13C7664B3A8A247D29A235052FA61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: EA Signing time: Fri 23 Oct 2026 23:48:55 +0000 Manifest this update: Fri 23 Oct 2026 23:43:55 +0000 Manifest next update: Sun 25 Oct 2026 00:11:55 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) 2: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: ZAnwsrVWNEVBZLURN1hs+bep05fQ7zpKXAP9RyA6ix0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 00:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bd:7b:f4:af:d1:3c:76:64:b3:a8:a2:47:d2:9a:23:50:52:fa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Oct 23 23:43:55 2026 GMT Not After : Oct 25 00:11:55 2026 GMT Subject: CN=E3CE593300A376FC5602B57085C48D132A787533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2b:8f:a1:57:74:0a:9a:b1:40:d9:76:57:aa: 62:3f:62:7c:0c:96:4f:30:43:d0:09:fb:3b:68:82: 01:ab:2f:e9:1b:af:fa:64:56:b0:b7:32:97:d3:ee: 90:f1:82:75:f8:1d:c6:aa:ce:56:30:d0:d3:40:6d: a9:52:ad:ee:da:d9:fe:ef:d2:e3:13:63:24:17:63: fd:02:ca:20:58:73:e5:5c:f6:b6:2f:4f:91:1f:76: 1b:6d:9c:f2:bd:2b:ec:87:a6:1a:dc:66:50:4c:37: 86:ba:2e:cb:20:56:be:6f:63:77:dc:a3:b2:01:ea: 19:94:94:40:c5:9d:06:b2:c4:19:1e:ce:40:36:cd: 9d:4f:96:da:e4:d8:f5:51:21:9e:61:37:38:11:64: 1a:5f:3a:4e:a9:57:69:26:15:61:05:73:3d:e7:18: 4b:84:75:53:93:89:35:0b:f2:cf:e3:26:36:ec:58: f8:e5:d7:80:ce:b7:7d:96:bb:26:63:b9:14:ef:96: cb:aa:9c:d2:e0:2a:6e:32:4d:dd:9b:5c:4f:7c:3c: 5f:dc:ce:fd:34:cf:9a:a2:0d:d3:cd:9a:e1:ad:d5: a7:41:53:e1:7d:67:83:5d:9a:1d:0c:57:f9:dc:c7: cd:ff:4c:52:60:a7:ea:47:13:ad:2d:76:82:b4:cb: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CE:59:33:00:A3:76:FC:56:02:B5:70:85:C4:8D:13:2A:78:75:33 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:c5:b4:74:ca:9d:d8:6f:b0:d0:a2:38:51:c6:05:9d:3d:6b: 2e:a6:67:01:26:8f:9b:75:42:fe:8f:21:66:59:c9:20:1d:7b: d7:ed:d6:16:3c:c7:bf:cd:9b:58:a8:b6:f4:16:5c:45:86:50: 8b:df:34:7e:62:90:c0:a5:95:2a:6c:75:ea:0c:cb:42:cb:fe: bf:ef:e3:49:6a:e5:bd:9b:91:40:55:04:3a:1a:af:e6:da:6b: 37:ef:b0:9d:7b:ce:bf:80:6f:97:b9:69:e1:7c:2e:52:a9:9c: 95:33:bb:d5:f0:bf:77:c6:0b:75:33:c5:55:c7:12:4f:d1:4f: f6:49:7a:3f:00:5c:2e:13:e8:d1:94:e4:53:d4:5b:8f:fa:da: 9c:ee:96:2d:e1:a4:d4:19:31:88:ec:b7:f3:5a:83:1d:09:3b: 1b:a2:fc:16:15:58:d8:ed:1f:db:1e:73:11:0d:8d:11:04:73: db:44:2e:15:cb:a9:87:6b:a7:c3:61:2e:d3:2e:59:74:52:78: 4e:5a:03:1b:ee:f7:6c:08:c9:a9:bb:db:c0:dd:55:ec:65:50: 5a:4b:5a:a5:ff:ab:09:bb:34:d1:8c:be:06:04:53:83:a4:08: f0:32:92:f4:3b:28:f4:cd:0d:d9:9f:0f:ee:47:79:a8:07:4c: a0:40:90:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdr179K/RPHZks6iiR9KaI1BS+mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjEwMjMyMzQzNTVaFw0yNjEwMjUwMDExNTVaMDMxMTAvBgNV BAMTKEUzQ0U1OTMzMDBBMzc2RkM1NjAyQjU3MDg1QzQ4RDEzMkE3ODc1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvK4+hV3QKmrFA2XZXqmI/YnwM lk8wQ9AJ+ztoggGrL+kbr/pkVrC3MpfT7pDxgnX4HcaqzlYw0NNAbalSre7a2f7v 0uMTYyQXY/0CyiBYc+Vc9rYvT5EfdhttnPK9K+yHphrcZlBMN4a6LssgVr5vY3fc o7IB6hmUlEDFnQayxBkezkA2zZ1Pltrk2PVRIZ5hNzgRZBpfOk6pV2kmFWEFcz3n GEuEdVOTiTUL8s/jJjbsWPjl14DOt32WuyZjuRTvlsuqnNLgKm4yTd2bXE98PF/c zv00z5qiDdPNmuGt1adBU+F9Z4Ndmh0MV/ncx83/TFJgp+pHE60tdoK0y8eBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU485ZMwCjdvxWArVwhcSNEyp4dTMwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAObFtHTKndhvsNCiOFHGBZ09ay6mZwEmj5t1 Qv6PIWZZySAde9ft1hY8x7/Nm1iotvQWXEWGUIvfNH5ikMCllSpsdeoMy0LL/r/v 40lq5b2bkUBVBDoar+baazfvsJ17zr+Ab5e5aeF8LlKpnJUzu9Xwv3fGC3UzxVXH Ek/RT/ZJej8AXC4T6NGU5FPUW4/62pzuli3hpNQZMYjst/Nagx0JOxui/BYVWNjt H9secxENjREEc9tELhXLqYdrp8NhLtMuWXRSeE5aAxvu92wIyam728DdVexlUFpL WqX/qwm7NNGMvgYEU4OkCPAykvQ7KPTNDdmfD+5HeagHTKBAkFs= -----END CERTIFICATE-----Generated at Sat Oct 24 12:22:23 2026 by rpki-client