$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: G3NpjswuEIfky3M4tZYB+7cR1PPKnoqxM/ghVfYUM/E= Subject key identifier: FD:E2:E2:7B:45:50:7A:59:3C:52:94:F1:91:A1:9F:AC:0D:84:D5:69 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 6EFC0A96213FD2E9B596B362D0F9441EDC3B89C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: EB Signing time: Mon 26 Oct 2026 09:49:17 +0000 Manifest this update: Mon 26 Oct 2026 09:44:17 +0000 Manifest next update: Tue 27 Oct 2026 10:53:17 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: GKH/AFLzOKgu5JrSNCYl21yy2LrQZJYAXGgpnOiDDyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 10:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fc:0a:96:21:3f:d2:e9:b5:96:b3:62:d0:f9:44:1e:dc:3b:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Oct 26 09:44:17 2026 GMT Not After : Oct 27 10:53:17 2026 GMT Subject: CN=FDE2E27B45507A593C5294F191A19FAC0D84D569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:9b:96:f6:08:7e:02:64:f0:f6:55:86:3e: 7d:77:f7:0b:36:16:0f:0b:b0:14:7a:e9:31:5e:bd: 7a:58:37:e6:eb:50:ee:66:cf:53:fb:0b:a6:8e:af: 1b:fe:58:a9:76:96:02:ee:ff:f9:40:4e:46:6c:85: c3:f3:15:b3:41:fe:23:59:50:c7:38:0a:b4:67:b8: 0a:42:c6:ea:a0:fc:1a:49:79:b2:e5:8a:21:39:be: 9b:6a:07:cd:e0:25:c0:41:78:60:be:3e:0a:9b:68: 8b:94:b0:ec:e0:59:a1:2c:56:92:86:3a:b4:e3:23: 98:d8:e3:0f:6f:6e:dc:1c:ff:0a:46:36:9b:b7:07: 30:00:20:84:aa:ea:23:3a:81:1e:88:cc:f7:11:af: a6:5b:00:a5:a5:67:a3:51:6e:52:8e:91:79:d2:17: 92:56:5a:f7:21:b3:46:c5:e1:71:5e:88:41:5b:4d: cc:fc:f9:59:2d:5b:c8:3f:70:d9:ab:ee:a1:ef:a6: 6f:b3:82:83:53:54:22:eb:1e:03:d2:f5:f6:bb:16: 94:2b:7f:ee:c8:f0:cb:bc:85:e6:04:08:4c:0e:d9: 0c:8f:8c:f0:79:ae:4e:00:52:3f:ab:37:27:19:c8: 7d:a4:0e:45:0d:56:ec:9e:af:b0:94:23:a6:1d:ca: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E2:E2:7B:45:50:7A:59:3C:52:94:F1:91:A1:9F:AC:0D:84:D5:69 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:00:61:91:3f:ab:b1:f2:0b:f6:b5:fc:5a:d2:ac:b2:31: cd:5d:4e:a4:c8:52:00:32:aa:98:e0:49:e8:9c:53:cb:89:31: a9:25:b5:f8:96:96:4b:f2:ff:0a:dc:66:1b:71:90:7e:66:5d: 92:43:62:78:db:dc:11:1a:07:a1:36:ee:c5:61:b0:f7:bf:10: 5e:59:fe:6d:eb:b5:5f:2c:a5:80:99:54:57:e4:85:af:d5:98: ea:0a:7f:24:65:08:85:8e:c8:d2:06:cd:45:7b:3b:f7:7a:8c: b6:0d:44:91:8e:b4:e5:52:ef:a2:51:1a:86:c4:68:d9:81:1f: 4d:2c:a3:0a:d3:5d:d7:f1:d2:4b:63:43:cf:2f:59:4f:d1:6b: 0e:18:b6:57:be:d7:87:49:7d:8d:7a:62:97:fe:d5:ee:8b:13: e9:53:b0:a6:e5:6c:f3:04:98:4a:0c:cb:ca:6e:07:8a:fa:10: 22:96:cd:0c:e3:ea:50:32:45:af:82:12:be:43:e8:ba:56:ef: f4:49:5c:b0:9e:c5:84:78:48:fc:2d:9a:17:2f:d4:f8:c1:bc: 48:9c:ff:4c:73:23:a1:b6:37:f9:b2:93:81:be:26:99:8e:53: e1:bc:11:9e:46:57:ba:ae:54:4d:b0:5c:46:cf:f2:49:8c:59: dd:48:66:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvwKliE/0um1lrNi0PlEHtw7icAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjEwMjYwOTQ0MTdaFw0yNjEwMjcxMDUzMTdaMDMxMTAvBgNV BAMTKEZERTJFMjdCNDU1MDdBNTkzQzUyOTRGMTkxQTE5RkFDMEQ4NEQ1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/5uW9gh+AmTw9lWGPn139ws2 Fg8LsBR66TFevXpYN+brUO5mz1P7C6aOrxv+WKl2lgLu//lATkZshcPzFbNB/iNZ UMc4CrRnuApCxuqg/BpJebLliiE5vptqB83gJcBBeGC+PgqbaIuUsOzgWaEsVpKG OrTjI5jY4w9vbtwc/wpGNpu3BzAAIISq6iM6gR6IzPcRr6ZbAKWlZ6NRblKOkXnS F5JWWvchs0bF4XFeiEFbTcz8+VktW8g/cNmr7qHvpm+zgoNTVCLrHgPS9fa7FpQr f+7I8Mu8heYECEwO2QyPjPB5rk4AUj+rNycZyH2kDkUNVuyer7CUI6Ydym3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eLie0VQelk8UpTxkaGfrA2E1WkwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH4AGGRP6ux8gv2tfxa0qyyMc1dTqTIUgAy qpjgSeicU8uJMakltfiWlkvy/wrcZhtxkH5mXZJDYnjb3BEaB6E27sVhsPe/EF5Z /m3rtV8spYCZVFfkha/VmOoKfyRlCIWOyNIGzUV7O/d6jLYNRJGOtOVS76JRGobE aNmBH00sowrTXdfx0ktjQ88vWU/Raw4Ytle+14dJfY16Ypf+1e6LE+lTsKblbPME mEoMy8puB4r6ECKWzQzj6lAyRa+CEr5D6LpW7/RJXLCexYR4SPwtmhcv1PjBvEic /0xzI6G2N/myk4G+JpmOU+G8EZ5GV7quVE2wXEbP8kmMWd1IZrg= -----END CERTIFICATE-----Generated at Mon Oct 26 22:53:19 2026 by rpki-client