$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: B/wjidGFmTLZHSaTp1l6OyKohdvgPQMHDEYy+R7NGXM= Subject key identifier: 29:41:37:9A:73:27:4B:27:99:B2:60:74:D6:98:4D:67:CE:51:CF:1B Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 4D00F879BDCF9BE59F273E8C85EE59FD9E9E9B2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: EA Signing time: Sun 25 Oct 2026 01:20:47 +0000 Manifest this update: Sun 25 Oct 2026 01:15:47 +0000 Manifest next update: Mon 26 Oct 2026 01:20:47 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) 2: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: xtkyZ4Am7lB65sdtT9AgmqMYy+FcejdNxtWLXPDyZ4s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:00:f8:79:bd:cf:9b:e5:9f:27:3e:8c:85:ee:59:fd:9e:9e:9b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: Oct 25 01:15:47 2026 GMT Not After : Oct 26 01:20:47 2026 GMT Subject: CN=2941379A73274B2799B26074D6984D67CE51CF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:9e:03:b6:d4:db:be:e8:b1:ab:b0:e8:76: 19:e8:2e:70:c4:69:95:da:8b:7d:1c:91:a3:5b:f4: e8:09:04:75:94:54:90:9f:65:6a:32:a0:e6:a5:a3: 80:e1:d0:e0:76:d8:25:d8:fb:80:83:b4:b0:ed:89: ab:cf:80:39:fc:12:d5:40:40:d0:02:33:18:30:32: e6:dc:b0:1e:ff:ea:80:11:05:74:2f:21:be:27:91: dd:99:65:8a:3c:b2:de:a7:58:53:13:de:4f:8f:ff: d1:3b:4e:97:37:f7:8f:02:ec:d6:41:6d:e5:be:ed: 98:1c:6a:0c:55:e4:0a:86:ff:5e:eb:b4:17:3d:2f: c8:bd:b1:ab:4b:c7:24:c1:76:64:7a:52:0d:a1:88: 90:23:8c:34:70:bc:c6:21:3e:a6:82:ee:40:f9:21: 66:fe:b3:78:f3:6f:c9:ae:ba:ed:98:64:a3:07:50: 8f:54:2e:62:97:3f:9c:19:74:18:5d:86:ea:f7:c2: e2:d5:77:ed:a6:ae:f8:c4:89:ba:0f:26:8c:9d:32: a2:6c:95:8b:a0:c5:89:9e:c3:3f:f6:c1:17:86:d2: 0b:8a:b9:33:3e:46:0a:39:c3:d4:9d:5c:8d:ca:ac: 76:ba:59:51:ab:22:ef:07:28:25:65:49:c4:36:cf: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:37:9A:73:27:4B:27:99:B2:60:74:D6:98:4D:67:CE:51:CF:1B X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:56:06:12:4c:41:85:7a:8c:96:db:83:bd:f2:23:2b:08:4f: ba:42:60:14:78:4f:a4:fb:8d:6d:45:ca:e0:27:5f:2b:24:9e: c0:af:17:a0:c5:1c:32:3c:d0:61:c1:98:c5:24:e2:c4:1f:a6: 7f:d9:47:b7:cc:ef:fb:a1:72:e7:6c:d4:50:bf:b6:19:63:7f: 7d:fc:e3:2b:f4:14:74:b6:56:1a:7f:78:ed:3e:07:8e:9c:33: 3a:fb:22:44:64:c5:c7:45:4c:d8:83:40:62:93:1f:82:b5:77: 56:e3:31:7f:ea:d8:f9:c7:e0:d6:ef:cb:5f:56:e3:86:65:e7: 83:44:24:c4:c5:1d:4e:fa:9b:2f:81:d1:87:b7:2b:fa:66:70: 0c:9c:7f:f7:48:63:0a:a7:0a:8d:66:6c:c7:7c:e5:6f:5f:0a: f3:7f:ed:ca:bd:99:c6:02:d8:06:af:75:af:34:ca:aa:7b:d0: 82:77:37:69:27:ed:7c:5b:eb:98:6d:25:bb:b7:64:02:2d:71: 09:af:b9:86:70:81:55:3d:e2:39:4e:e6:6b:80:82:3d:1f:8e: db:e4:ec:69:5d:f6:00:e4:5d:49:c0:a0:2f:9b:0a:43:d2:8e: 93:ec:f3:4a:81:57:80:df:48:9b:a0:80:44:a2:22:f4:cf:ad: 04:0e:e1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQD4eb3Pm+WfJz6Mhe5Z/Z6emy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjEwMjUwMTE1NDdaFw0yNjEwMjYwMTIwNDdaMDMxMTAvBgNV BAMTKDI5NDEzNzlBNzMyNzRCMjc5OUIyNjA3NEQ2OTg0RDY3Q0U1MUNGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5p4DttTbvuixq7DodhnoLnDE aZXai30ckaNb9OgJBHWUVJCfZWoyoOalo4Dh0OB22CXY+4CDtLDtiavPgDn8EtVA QNACMxgwMubcsB7/6oARBXQvIb4nkd2ZZYo8st6nWFMT3k+P/9E7Tpc3948C7NZB beW+7ZgcagxV5AqG/17rtBc9L8i9satLxyTBdmR6Ug2hiJAjjDRwvMYhPqaC7kD5 IWb+s3jzb8muuu2YZKMHUI9ULmKXP5wZdBhdhur3wuLVd+2mrvjEiboPJoydMqJs lYugxYmewz/2wReG0guKuTM+Rgo5w9SdXI3KrHa6WVGrIu8HKCVlScQ2z5rhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUE3mnMnSyeZsmB01phNZ85RzxswHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJWBhJMQYV6jJbbg73yIysIT7pCYBR4T6T7 jW1FyuAnXysknsCvF6DFHDI80GHBmMUk4sQfpn/ZR7fM7/uhcuds1FC/thljf338 4yv0FHS2Vhp/eO0+B46cMzr7IkRkxcdFTNiDQGKTH4K1d1bjMX/q2PnH4Nbvy19W 44Zl54NEJMTFHU76my+B0Ye3K/pmcAycf/dIYwqnCo1mbMd85W9fCvN/7cq9mcYC 2Aavda80yqp70IJ3N2kn7Xxb65htJbu3ZAItcQmvuYZwgVU94jlO5muAgj0fjtvk 7Gld9gDkXUnAoC+bCkPSjpPs80qBV4DfSJuggESiIvTPrQQO4aE= -----END CERTIFICATE-----Generated at Sun Oct 25 06:07:47 2026 by rpki-client