$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: I44qs42nWd+PGfzJwXnyr/zOQ36we/GAbQVhsxgFI0M= Subject key identifier: E0:7F:A8:0C:E7:C5:EB:0B:F8:77:E1:BB:BB:60:3C:88:D0:7C:89:8B Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 3967DD8A3CF4578F660059936A25C5F11FC839D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: ED Signing time: Tue 27 Oct 2026 07:09:08 +0000 Manifest this update: Tue 27 Oct 2026 07:04:08 +0000 Manifest next update: Wed 28 Oct 2026 11:07:08 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 2: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: MZnoZOmfLjn7eN9Fqv0BRHVXPC9KeH+bCawKzkjTUMk=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 7: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 8: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 11:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:67:dd:8a:3c:f4:57:8f:66:00:59:93:6a:25:c5:f1:1f:c8:39:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Oct 27 07:04:08 2026 GMT Not After : Oct 28 11:07:08 2026 GMT Subject: CN=E07FA80CE7C5EB0BF877E1BBBB603C88D07C898B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:d2:a3:76:a0:f2:08:5a:ea:73:2c:c7:20: 31:fb:02:ab:fb:bb:9d:ad:05:e0:94:e1:af:41:79: 72:b2:4b:20:f1:c4:30:43:a8:6e:33:23:b6:25:85: 79:97:9e:d6:16:4a:2a:6c:e8:bb:9c:20:9b:db:2c: c2:82:a2:b6:3e:6f:bc:a6:68:11:6d:16:78:d1:e2: c5:a8:dc:a4:76:56:ab:2d:15:bb:a8:67:3b:82:8b: 6d:4a:ac:1a:1f:95:87:33:1e:4f:5a:f8:aa:73:69: 7a:5f:ff:92:3c:86:45:01:8c:7f:95:8d:95:90:1d: 8d:d4:84:18:64:cd:a6:f6:42:f9:00:7d:f9:6e:43: b2:f0:27:86:13:d9:31:a6:7f:77:9b:4d:4b:b7:58: 14:ed:51:93:6b:5b:73:65:fc:a9:9a:39:23:bd:92: 6a:7c:b1:2d:b9:de:56:1a:90:9a:7d:91:4f:78:10: 96:4c:bc:3b:3c:3d:7a:cd:fd:de:ac:82:74:f8:ce: 03:9f:23:00:3c:bd:81:d5:90:8f:61:8b:44:4e:fc: d5:84:e8:dc:50:3a:a7:1f:d1:e3:2e:77:41:f0:08: 40:69:5b:2e:5a:3f:aa:d0:4a:41:7c:68:14:39:44: 8d:6f:25:bf:43:e5:09:0d:32:1f:8b:59:ca:75:09: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7F:A8:0C:E7:C5:EB:0B:F8:77:E1:BB:BB:60:3C:88:D0:7C:89:8B X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2b:96:1a:7e:46:0b:24:e5:7e:23:36:d8:c3:b8:4a:42:d3: 2f:27:0c:78:4f:a9:48:5a:ca:2a:2e:02:63:4b:ce:bf:68:82: 17:50:49:55:4b:fb:14:8b:73:ab:42:3f:80:b4:1c:28:3c:e9: 2f:53:ae:f6:fc:f7:01:4a:eb:43:61:4d:33:7f:bb:ff:ff:5f: d7:40:a6:3a:3f:dd:05:80:05:22:19:f9:37:83:b9:1c:26:1c: 47:3e:c2:e1:22:96:ae:22:5b:79:21:a4:17:32:35:20:40:99: 3d:6d:dd:36:ee:94:cc:79:6c:90:02:47:c5:23:3c:14:9f:b8: 1c:ca:9e:29:3f:52:17:9c:1d:c5:6b:38:e6:ca:54:07:ff:ac: 41:46:e3:0f:7b:81:c3:d0:12:fb:24:3d:36:35:71:f4:19:d8: 89:40:21:8e:22:e0:d4:2f:68:eb:8b:9e:3b:46:b0:a2:44:67: aa:66:06:e5:43:0c:e6:b6:33:d7:06:98:67:3b:a1:03:dd:8e: f3:6e:f9:d4:dc:23:72:fe:24:c7:3f:64:71:63:b0:dc:5d:c8: 7b:67:c7:39:6f:5f:c9:0e:ed:e5:19:eb:31:30:e8:81:66:c5: ce:d9:26:60:5c:f5:70:50:c4:38:a9:4d:a0:cc:c4:a2:a0:f2: 63:d4:50:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWfdijz0V49mAFmTaiXF8R/IOdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjEwMjcwNzA0MDhaFw0yNjEwMjgxMTA3MDhaMDMxMTAvBgNV BAMTKEUwN0ZBODBDRTdDNUVCMEJGODc3RTFCQkJCNjAzQzg4RDA3Qzg5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWNKjdqDyCFrqcyzHIDH7Aqv7 u52tBeCU4a9BeXKySyDxxDBDqG4zI7YlhXmXntYWSips6LucIJvbLMKCorY+b7ym aBFtFnjR4sWo3KR2VqstFbuoZzuCi21KrBoflYczHk9a+KpzaXpf/5I8hkUBjH+V jZWQHY3UhBhkzab2QvkAffluQ7LwJ4YT2TGmf3ebTUu3WBTtUZNrW3Nl/KmaOSO9 kmp8sS253lYakJp9kU94EJZMvDs8PXrN/d6sgnT4zgOfIwA8vYHVkI9hi0RO/NWE 6NxQOqcf0eMud0HwCEBpWy5aP6rQSkF8aBQ5RI1vJb9D5QkNMh+LWcp1CWcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4H+oDOfF6wv4d+G7u2A8iNB8iYswHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwrlhp+Rgsk5X4jNtjDuEpC0y8nDHhPqUha yiouAmNLzr9oghdQSVVL+xSLc6tCP4C0HCg86S9Trvb89wFK60NhTTN/u///X9dA pjo/3QWABSIZ+TeDuRwmHEc+wuEilq4iW3khpBcyNSBAmT1t3TbulMx5bJACR8Uj PBSfuBzKnik/UhecHcVrOObKVAf/rEFG4w97gcPQEvskPTY1cfQZ2IlAIY4i4NQv aOuLnjtGsKJEZ6pmBuVDDOa2M9cGmGc7oQPdjvNu+dTcI3L+JMc/ZHFjsNxdyHtn xzlvX8kO7eUZ6zEw6IFmxc7ZJmBc9XBQxDipTaDMxKKg8mPUUK0= -----END CERTIFICATE-----Generated at Tue Oct 27 22:51:27 2026 by rpki-client