$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: 1zTLFqBwmqipDgkyL4uYo7kGns/JI/hi9U2Lvjv64Ac= Subject key identifier: E6:10:6B:39:47:CD:14:7A:E9:AD:FD:6D:3E:09:A1:0E:3B:6C:3C:8E Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 3E76130983301F5F88DBC50B870F3A8C48E9A059 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: E5 Signing time: Mon 19 Oct 2026 16:55:33 +0000 Manifest this update: Mon 19 Oct 2026 16:50:33 +0000 Manifest next update: Tue 20 Oct 2026 17:18:33 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) 3: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: lrVv2vhrDe5Lp5ym3rVKXZV+gniTdBF1nmR+mtqaJ94=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 12:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:76:13:09:83:30:1f:5f:88:db:c5:0b:87:0f:3a:8c:48:e9:a0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: Oct 19 16:50:33 2026 GMT Not After : Oct 20 17:18:33 2026 GMT Subject: CN=E6106B3947CD147AE9ADFD6D3E09A10E3B6C3C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:37:b2:cc:6e:38:4e:5d:5d:ea:c2:59:68:1a: 6a:85:90:eb:4d:ad:4e:02:fd:ea:11:f9:4d:0a:96: c4:67:f8:a8:b2:1d:7e:b8:55:0f:50:9e:4d:56:3d: fe:87:16:8a:b9:b1:83:37:90:fd:9d:25:00:3d:88: 6d:23:2d:6f:cf:bb:b9:f6:52:fd:a8:e0:d5:09:a7: d8:c9:ec:61:09:a0:eb:f1:77:6a:4e:d3:4b:a3:88: 88:c1:34:91:30:8f:1e:2d:62:0c:d4:1b:66:ab:6c: 0a:47:82:b9:aa:5b:7a:f1:3e:64:5e:6b:db:a3:4c: 07:79:4d:d1:68:f4:84:6c:60:20:7d:c2:fb:78:b8: cf:f3:93:29:bf:50:32:31:04:cd:4b:e7:6f:21:8a: 7e:64:91:90:ce:b0:2b:71:2d:71:2f:59:3a:eb:36: 6d:5e:36:4c:bc:5d:f6:a0:be:b6:f8:ba:70:fa:b9: cd:ae:df:1f:5e:02:6a:70:12:45:70:34:43:42:65: 76:85:b2:b4:b7:3a:41:f8:88:68:58:9e:bb:6b:21: 74:6a:54:0f:78:20:ce:d2:e2:80:dc:5d:c0:c2:4a: 54:1c:54:35:41:d8:7f:19:70:40:79:af:da:6b:d9: 85:42:f0:07:08:93:4c:b3:6d:a0:90:ff:df:14:5f: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:10:6B:39:47:CD:14:7A:E9:AD:FD:6D:3E:09:A1:0E:3B:6C:3C:8E X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e5:57:71:c4:9a:03:83:4c:fa:91:ee:81:46:67:0f:18:74: 5d:5d:a7:df:ec:86:64:7d:13:8e:dd:45:d6:7d:91:47:09:6c: db:ad:44:1d:8a:56:b3:14:27:e3:26:c6:ad:d4:f3:07:3d:93: 6d:d8:c5:e7:31:69:5a:bb:f5:1c:ef:db:84:4d:ab:67:b9:79: 3d:b5:ec:2e:cb:03:7f:f1:2c:61:de:ad:fb:04:a2:84:83:42: a1:20:7a:57:f3:5a:1b:39:90:fe:dc:1b:0d:dd:9e:93:d0:09: 51:45:98:17:3f:61:3e:fa:ef:c2:8c:bb:76:2b:b8:97:f0:68: e7:c4:f3:b1:d7:58:8e:8f:e9:e4:fa:b5:2a:fa:82:ed:97:1d: cd:7b:38:1f:ff:0c:71:20:35:03:0c:fd:28:f3:07:59:41:92: da:16:82:4a:5c:f4:77:84:81:bc:dd:3c:81:18:0a:9d:70:e2: 78:e3:8e:5c:b9:2f:90:df:ca:84:32:9a:65:a5:4c:6c:60:9e: ac:19:63:59:cb:b5:f7:02:f6:67:82:10:e3:77:76:e1:8d:0f: af:80:ed:e0:11:7f:d5:45:ae:b3:68:8b:4f:08:10:b9:bd:3f: f4:36:a9:5e:0e:b5:85:9d:56:ac:c6:07:5f:e2:3f:ab:0c:aa: df:c8:83:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnYTCYMwH1+I28ULhw86jEjpoFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjEwMTkxNjUwMzNaFw0yNjEwMjAxNzE4MzNaMDMxMTAvBgNV BAMTKEU2MTA2QjM5NDdDRDE0N0FFOUFERkQ2RDNFMDlBMTBFM0I2QzNDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDN7LMbjhOXV3qwlloGmqFkOtN rU4C/eoR+U0KlsRn+KiyHX64VQ9Qnk1WPf6HFoq5sYM3kP2dJQA9iG0jLW/Pu7n2 Uv2o4NUJp9jJ7GEJoOvxd2pO00ujiIjBNJEwjx4tYgzUG2arbApHgrmqW3rxPmRe a9ujTAd5TdFo9IRsYCB9wvt4uM/zkym/UDIxBM1L528hin5kkZDOsCtxLXEvWTrr Nm1eNky8Xfagvrb4unD6uc2u3x9eAmpwEkVwNENCZXaFsrS3OkH4iGhYnrtrIXRq VA94IM7S4oDcXcDCSlQcVDVB2H8ZcEB5r9pr2YVC8AcIk0yzbaCQ/98UX1n7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hBrOUfNFHrprf1tPgmhDjtsPI4wHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArlV3HEmgODTPqR7oFGZw8YdF1dp9/shmR9 E47dRdZ9kUcJbNutRB2KVrMUJ+Mmxq3U8wc9k23YxecxaVq79Rzv24RNq2e5eT21 7C7LA3/xLGHerfsEooSDQqEgelfzWhs5kP7cGw3dnpPQCVFFmBc/YT7678KMu3Yr uJfwaOfE87HXWI6P6eT6tSr6gu2XHc17OB//DHEgNQMM/SjzB1lBktoWgkpc9HeE gbzdPIEYCp1w4njjjly5L5DfyoQymmWlTGxgnqwZY1nLtfcC9meCEON3duGND6+A 7eARf9VFrrNoi08IELm9P/Q2qV4OtYWdVqzGB1/iP6sMqt/Ig40= -----END CERTIFICATE-----Generated at Mon Oct 19 22:46:40 2026 by rpki-client