$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: ObWIUQMaS24RSQocOl6iUULaBR0WdqI02zlRf5V81rc= Subject key identifier: A8:21:60:CC:C7:0F:33:BD:0A:54:4F:91:F5:7D:0C:9E:06:4A:C2:20 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 2F8734DD6ED3A98F7BC2E6192CD3AC976B73A8E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 12:34:35 +0000 Manifest this update: Sat 24 Oct 2026 12:29:35 +0000 Manifest next update: Sun 25 Oct 2026 15:49:35 +0000 Files and hashes: 1: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 2: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: iE0znXR+d2wcZqGQ2UB8GjPXWd/Uwrh6Gkl7glHrgpM=) 3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) 4: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:87:34:dd:6e:d3:a9:8f:7b:c2:e6:19:2c:d3:ac:97:6b:73:a8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Oct 24 12:29:35 2026 GMT Not After : Oct 25 15:49:35 2026 GMT Subject: CN=A82160CCC70F33BD0A544F91F57D0C9E064AC220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:e1:c0:80:53:f2:84:6b:32:c7:ca:a0:d8: 63:ec:74:0a:86:c7:28:d2:68:90:bd:e0:f0:5f:0e: ad:09:3f:fa:6b:6e:32:d0:2d:f8:e0:6a:39:9f:86: 06:78:05:7d:25:2b:bd:a7:38:a3:70:0d:25:5b:c2: 5f:8f:33:bf:e5:c1:3c:d3:b9:f4:bf:af:ad:88:c8: ba:70:6f:ec:c9:be:85:45:bf:2d:a8:ef:53:69:7f: 90:73:6d:47:55:69:90:df:ec:aa:c4:0f:11:71:51: 72:0c:4d:78:d1:7a:42:c2:40:ed:78:09:cb:cb:fc: 1a:80:21:e9:44:2e:06:be:4a:ad:f0:a6:65:2c:38: c8:5c:3d:f0:d1:ab:55:67:a4:84:6e:7f:27:bb:70: 07:68:c4:d5:7e:aa:e4:fd:a1:3a:46:90:e6:81:6f: 97:ac:90:b9:1a:26:b2:e1:eb:f7:b2:32:9b:b2:25: c7:59:73:2c:ea:74:23:6f:2f:66:57:82:ca:8f:c1: 10:33:82:dd:8a:68:be:af:95:39:15:83:79:a5:89: 34:b1:f8:0b:de:38:13:cd:9b:e0:c6:6c:68:a7:d6: 10:cc:65:ea:14:79:28:d7:98:87:c9:3d:8b:6d:24: 8d:66:f4:03:e2:b1:e1:8f:0e:74:52:91:90:53:9e: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:60:CC:C7:0F:33:BD:0A:54:4F:91:F5:7D:0C:9E:06:4A:C2:20 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:90:d5:8b:35:dd:a9:35:00:12:0c:2c:b7:46:6f:6c:57:da: ee:ca:22:63:cc:7a:e9:3f:c7:00:9a:b1:b3:cf:4d:bd:8f:83: 73:e1:35:01:c3:65:d7:8c:b5:3b:52:81:76:f6:b4:ba:4d:17: 72:44:ed:3c:b2:6a:56:7f:1e:49:a4:88:34:d8:c2:dd:88:17: 58:cf:3f:04:ad:47:1b:b9:7d:6a:15:92:18:37:e9:82:ad:d1: 8f:2d:8b:d8:82:6b:40:0a:df:a0:fe:c2:f4:2e:c3:12:df:79: 9a:be:fa:fd:4c:f6:e3:3d:2f:b8:19:15:80:83:89:dc:29:72: 67:e2:45:b2:37:7d:d0:64:d2:f7:7a:c7:79:46:5a:69:89:ce: f4:52:30:30:d8:0b:00:18:cd:28:ee:dd:a8:a1:79:98:b5:d3: c5:02:33:58:17:3e:79:e7:9f:46:f5:56:86:96:52:ac:29:b8: ca:3e:ea:03:e6:f2:b9:d4:75:60:f2:f1:7a:1a:b1:5d:13:9d: 7e:97:d9:b6:c3:ad:77:2a:e5:85:6c:47:93:42:50:35:8e:17: c7:8d:54:9c:22:c9:d0:ed:c5:42:ba:f8:17:09:89:5e:d7:cb: d9:8f:38:7f:63:e7:b3:3a:33:e0:ec:47:85:b3:33:bc:b4:d9: e1:b7:39:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4c03W7TqY97wuYZLNOsl2tzqOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjEwMjQxMjI5MzVaFw0yNjEwMjUxNTQ5MzVaMDMxMTAvBgNV BAMTKEE4MjE2MENDQzcwRjMzQkQwQTU0NEY5MUY1N0QwQzlFMDY0QUMyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuS+HAgFPyhGsyx8qg2GPsdAqG xyjSaJC94PBfDq0JP/prbjLQLfjgajmfhgZ4BX0lK72nOKNwDSVbwl+PM7/lwTzT ufS/r62IyLpwb+zJvoVFvy2o71Npf5BzbUdVaZDf7KrEDxFxUXIMTXjRekLCQO14 CcvL/BqAIelELga+Sq3wpmUsOMhcPfDRq1VnpIRufye7cAdoxNV+quT9oTpGkOaB b5eskLkaJrLh6/eyMpuyJcdZcyzqdCNvL2ZXgsqPwRAzgt2KaL6vlTkVg3mliTSx +AveOBPNm+DGbGin1hDMZeoUeSjXmIfJPYttJI1m9APiseGPDnRSkZBTnm/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCFgzMcPM70KVE+R9X0MngZKwiAwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaQ1Ys13ak1ABIMLLdGb2xX2u7KImPMeuk/ xwCasbPPTb2Pg3PhNQHDZdeMtTtSgXb2tLpNF3JE7TyyalZ/HkmkiDTYwt2IF1jP PwStRxu5fWoVkhg36YKt0Y8ti9iCa0AK36D+wvQuwxLfeZq++v1M9uM9L7gZFYCD idwpcmfiRbI3fdBk0vd6x3lGWmmJzvRSMDDYCwAYzSju3aiheZi108UCM1gXPnnn n0b1VoaWUqwpuMo+6gPm8rnUdWDy8XoasV0TnX6X2bbDrXcq5YVsR5NCUDWOF8eN VJwiydDtxUK6+BcJiV7Xy9mPOH9j57M6M+DsR4WzM7y02eG3OR8= -----END CERTIFICATE-----Generated at Sun Oct 25 03:23:54 2026 by rpki-client