$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json) Hash identifier: 928Gyi2csWDV4ZsszFbrBZRNzNy8NJFjXjM4/bM73rE= Subject key identifier: A7:20:55:0B:93:79:C4:9F:2C:D7:28:1D:6C:AD:9B:30:CD:EF:D2:2C Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Certificate serial: 03B4D62F82A73195CF8C9FC02F891B4AE3888A49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft Manifest number: EB Signing time: Sun 25 Oct 2026 14:45:00 +0000 Manifest this update: Sun 25 Oct 2026 14:40:00 +0000 Manifest next update: Mon 26 Oct 2026 15:36:00 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=) 3: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: OdxkWHoyoSwAybct7rrSeOLh1RZkpeFOrwYJsf5rWQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b4:d6:2f:82:a7:31:95:cf:8c:9f:c0:2f:89:1b:4a:e3:88:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC Validity Not Before: Oct 25 14:40:00 2026 GMT Not After : Oct 26 15:36:00 2026 GMT Subject: CN=A720550B9379C49F2CD7281D6CAD9B30CDEFD22C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:c5:92:48:2a:a6:f9:12:11:f6:4c:0c:12: ea:e7:1b:d1:e5:52:8b:88:88:e5:3f:52:fb:be:d9: ac:28:fd:7d:03:ad:88:81:80:ff:6f:c7:56:62:1b: 24:73:a6:34:87:02:1f:ed:2b:08:2d:f8:e7:61:99: 5c:bf:13:44:69:3b:24:3e:95:0d:b3:23:2f:64:32: 26:45:9f:7a:05:fd:6a:4c:7e:ea:b2:29:eb:a2:04: 88:60:05:7a:b3:a6:96:7e:e3:b4:bd:fb:3d:9a:60: 5a:45:7d:e7:90:92:1f:e5:82:0a:0b:df:76:a9:23: 33:79:7a:10:b9:0b:95:50:8d:96:78:c6:2a:f8:41: 76:92:08:36:30:54:f7:b9:4f:6a:a2:34:d3:9e:4e: d0:17:6d:11:7a:29:d2:45:1e:bb:3d:af:93:ab:a2: a4:67:3b:01:62:76:09:ab:c7:28:ad:02:6f:1f:62: 53:d1:99:f5:f3:0c:e1:f7:c1:d2:59:6a:73:76:ad: 2e:8b:cd:32:8c:f8:1f:6b:24:88:cb:70:8d:cf:c4: 2f:0c:a0:c1:cc:ec:5e:3a:a8:04:81:ec:58:2f:f1: a8:22:4b:d5:35:42:7a:85:70:19:c4:11:fc:ac:2f: 65:20:19:2a:c3:25:95:bf:ed:7a:01:e8:b9:fd:3f: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:20:55:0B:93:79:C4:9F:2C:D7:28:1D:6C:AD:9B:30:CD:EF:D2:2C X509v3 Authority Key Identifier: keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cd:ac:d1:6f:99:6d:fb:01:a8:cb:a5:55:df:b7:f5:85:ea: 31:55:98:79:b3:99:b1:93:f4:22:07:f7:c4:50:e5:22:2e:b8: b9:26:7c:8e:92:cf:0c:c7:5f:69:d9:75:a7:4c:8e:9f:91:e3: 32:da:57:2b:8a:78:60:42:39:89:05:43:cc:6e:af:bd:86:21: 25:82:a0:d9:70:88:ce:bc:d5:0b:7c:ae:c3:e0:cb:26:f8:11: f3:10:73:2c:b2:dc:2f:6a:fe:0c:66:87:c6:0c:3b:e4:81:d3: 44:e8:90:9e:25:c2:81:19:5f:52:5a:68:4f:e8:7a:2c:27:98: ce:c9:4e:d8:9b:78:95:09:34:5a:5c:09:78:81:37:13:a2:43: 09:cb:56:91:68:67:34:74:ad:d8:4b:ef:5e:66:cd:d5:c8:98: 4d:9d:be:45:3b:26:04:1a:66:fa:ef:f4:c6:8f:7d:63:d1:69: d0:c4:4f:fd:36:f7:e1:97:dd:ab:36:87:8f:85:24:ae:2b:48: 5f:dc:42:fe:bf:49:80:a2:a9:01:95:18:78:3b:11:ed:9a:c1: 9f:22:ff:f0:59:92:e6:f2:16:03:3f:13:a8:e1:fe:63:b9:f1: 35:71:7f:70:4b:ad:1b:92:fa:eb:df:1b:55:91:bb:0a:de:c6: 43:83:a7:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7TWL4KnMZXPjJ/AL4kbSuOIikkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FB MTA0QUJGQzAeFw0yNjEwMjUxNDQwMDBaFw0yNjEwMjYxNTM2MDBaMDMxMTAvBgNV BAMTKEE3MjA1NTBCOTM3OUM0OUYyQ0Q3MjgxRDZDQUQ5QjMwQ0RFRkQyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBMWSSCqm+RIR9kwMEurnG9Hl UouIiOU/Uvu+2awo/X0DrYiBgP9vx1ZiGyRzpjSHAh/tKwgt+OdhmVy/E0RpOyQ+ lQ2zIy9kMiZFn3oF/WpMfuqyKeuiBIhgBXqzppZ+47S9+z2aYFpFfeeQkh/lggoL 33apIzN5ehC5C5VQjZZ4xir4QXaSCDYwVPe5T2qiNNOeTtAXbRF6KdJFHrs9r5Or oqRnOwFidgmrxyitAm8fYlPRmfXzDOH3wdJZanN2rS6LzTKM+B9rJIjLcI3PxC8M oMHM7F46qASB7Fgv8agiS9U1QnqFcBnEEfysL2UgGSrDJZW/7XoB6Ln9Py1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpyBVC5N5xJ8s1ygdbK2bMM3v0iwwHwYDVR0j BBgwFoAU3qySA4AsF5eJskxaMWmqeqEEq/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhNzRhYzktOGZhNS00MzliLThmMjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4 MDJDMTc5Nzg5QjI0QzVBMzE2OUFBN0FBMTA0QUJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFDOTIwMzgwMkMxNzk3ODlCMjRDNUEzMTY5QUE3QUExMDRB QkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvREVBQzkyMDM4MDJDMTc5Nzg5QjI0QzVBMzE2OUFB N0FBMTA0QUJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfNrNFvmW37AajLpVXft/WF6jFVmHmzmbGT 9CIH98RQ5SIuuLkmfI6SzwzHX2nZdadMjp+R4zLaVyuKeGBCOYkFQ8xur72GISWC oNlwiM681Qt8rsPgyyb4EfMQcyyy3C9q/gxmh8YMO+SB00TokJ4lwoEZX1JaaE/o eiwnmM7JTtibeJUJNFpcCXiBNxOiQwnLVpFoZzR0rdhL715mzdXImE2dvkU7JgQa Zvrv9MaPfWPRadDET/029+GX3as2h4+FJK4rSF/cQv6/SYCiqQGVGHg7Ee2awZ8i //BZkubyFgM/E6jh/mO58TVxf3BLrRuS+uvfG1WRuwrexkODp4c= -----END CERTIFICATE-----Generated at Sun Oct 25 19:55:13 2026 by rpki-client