$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: KwmJsu3+HAxek6Zp2bZTefvprFCoGADJx5EnupUYANU= Subject key identifier: 28:85:B0:9F:CA:33:3F:A8:01:7E:C2:B7:DC:F8:DC:FD:AA:D7:3C:AA Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 6A308B4D3FB9AD9CD9D6B0CB6196C9B67350F9C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 18:16:56 +0000 Manifest this update: Sat 24 Oct 2026 18:11:56 +0000 Manifest next update: Sun 25 Oct 2026 20:34:56 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) 2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) 3: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: /ZsBdwQMP9BeQq4nIJe+25bUOLtLrnUs0vmzlEuQDDQ=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:30:8b:4d:3f:b9:ad:9c:d9:d6:b0:cb:61:96:c9:b6:73:50:f9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Oct 24 18:11:56 2026 GMT Not After : Oct 25 20:34:56 2026 GMT Subject: CN=2885B09FCA333FA8017EC2B7DCF8DCFDAAD73CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2d:c6:31:3b:e2:71:7c:79:60:9f:fd:d1:69: 11:8a:72:39:5b:86:95:16:fd:62:44:6a:14:f9:c9: fb:32:8c:9a:94:99:22:f5:62:67:80:01:18:d4:1f: d0:4f:a2:0a:5a:e4:12:a0:26:3a:c1:ba:0d:d6:9f: 8f:49:40:84:ab:65:b9:06:7a:63:4d:0c:e9:e6:4c: cc:81:c2:db:5a:91:1a:35:a8:69:f3:55:56:fd:13: da:b5:04:1c:77:0e:de:bd:60:e8:83:9c:d0:18:db: c1:0f:61:41:a7:05:c1:96:5e:60:9d:9f:59:1b:84: 1b:56:2e:c4:5c:c6:d4:7a:8e:18:58:d3:7b:81:c1: 65:a2:7b:ce:8b:9c:a3:e2:ba:9a:85:1b:3e:c7:55: 6b:3f:d7:fd:31:29:26:33:cc:fc:b2:d5:b8:56:7e: ea:0d:4b:6e:b3:4f:ac:8f:17:b6:fe:f9:0b:bf:34: 22:c9:a9:d3:08:e7:ef:8b:73:a7:8b:aa:93:99:71: e2:26:64:99:da:c4:ec:76:7d:15:21:e3:3e:84:96: 2d:6f:26:2a:ac:8a:44:e9:b0:f6:62:a7:cc:22:2e: c7:be:36:b9:e5:70:65:a6:68:ef:45:cc:cd:d4:ac: ec:fd:b5:ae:80:41:bd:be:2e:da:8c:e8:72:6a:7e: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:85:B0:9F:CA:33:3F:A8:01:7E:C2:B7:DC:F8:DC:FD:AA:D7:3C:AA X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a9:72:ac:3c:21:22:3f:e2:49:de:c2:18:f4:4e:4f:45:10: e1:98:2b:d3:49:fe:56:18:7d:10:12:17:ac:30:b1:de:10:32: 54:c3:7b:09:7b:4c:26:cd:d6:73:be:90:ce:f5:c4:9c:30:11: f8:6d:f6:11:72:75:35:8e:eb:66:22:07:64:94:5c:00:3b:17: 7c:53:7e:2a:11:b0:72:e0:ec:c8:9a:55:cd:0d:ef:e2:1c:7c: c5:d0:ed:1f:ee:ad:7d:fc:29:b1:77:1d:98:58:05:a8:15:1b: 15:c3:65:cf:96:39:86:27:6c:89:b7:d3:4b:06:08:31:fa:cf: 7e:b7:9d:63:3a:f1:6e:a4:f9:f9:71:9b:43:d4:79:a5:5f:71: 5e:b2:84:b5:b9:82:93:34:30:65:59:c3:14:e6:f1:ee:d0:a1: 0d:4c:51:cb:b4:1c:60:3a:fb:5f:74:c5:5a:25:e8:b8:0a:68: 12:ad:a5:54:69:17:bf:90:ea:22:af:eb:16:42:d8:37:63:f1: 9f:be:6b:1f:29:7b:a6:13:94:0c:0e:ed:61:d8:12:ea:d9:0f: fa:de:00:0d:5b:12:74:03:d2:6c:1f:6d:5b:36:ce:ca:a8:e6: 0b:9c:e5:c0:5f:0e:b1:f7:ae:f8:82:58:bc:32:bc:ff:85:38: b4:d2:e0:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajCLTT+5rZzZ1rDLYZbJtnNQ+cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjEwMjQxODExNTZaFw0yNjEwMjUyMDM0NTZaMDMxMTAvBgNV BAMTKDI4ODVCMDlGQ0EzMzNGQTgwMTdFQzJCN0RDRjhEQ0ZEQUFENzNDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLcYxO+JxfHlgn/3RaRGKcjlb hpUW/WJEahT5yfsyjJqUmSL1YmeAARjUH9BPogpa5BKgJjrBug3Wn49JQISrZbkG emNNDOnmTMyBwttakRo1qGnzVVb9E9q1BBx3Dt69YOiDnNAY28EPYUGnBcGWXmCd n1kbhBtWLsRcxtR6jhhY03uBwWWie86LnKPiupqFGz7HVWs/1/0xKSYzzPyy1bhW fuoNS26zT6yPF7b++Qu/NCLJqdMI5++Lc6eLqpOZceImZJnaxOx2fRUh4z6Eli1v JiqsikTpsPZip8wiLse+NrnlcGWmaO9FzM3UrOz9ta6AQb2+LtqM6HJqfiofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIWwn8ozP6gBfsK33Pjc/arXPKowHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHypcqw8ISI/4knewhj0Tk9FEOGYK9NJ/lYY fRASF6wwsd4QMlTDewl7TCbN1nO+kM71xJwwEfht9hFydTWO62YiB2SUXAA7F3xT fioRsHLg7MiaVc0N7+IcfMXQ7R/urX38KbF3HZhYBagVGxXDZc+WOYYnbIm300sG CDH6z363nWM68W6k+flxm0PUeaVfcV6yhLW5gpM0MGVZwxTm8e7QoQ1MUcu0HGA6 +190xVol6LgKaBKtpVRpF7+Q6iKv6xZC2Ddj8Z++ax8pe6YTlAwO7WHYEurZD/re AA1bEnQD0mwfbVs2zsqo5guc5cBfDrH3rviCWLwyvP+FOLTS4EU= -----END CERTIFICATE-----Generated at Sun Oct 25 14:21:52 2026 by rpki-client