$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: omIbGEdsSAe6qAkz+jTL6darxg3JIdQYeViyHAWJzzc= Subject key identifier: 2A:80:5F:5E:8D:DD:F6:0C:20:63:18:32:B1:77:8C:45:47:B4:38:77 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 208CA398E943174A0B8EF0A8BDA6306EEE25ED72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: EC Signing time: Sun 25 Oct 2026 15:25:54 +0000 Manifest this update: Sun 25 Oct 2026 15:20:54 +0000 Manifest next update: Mon 26 Oct 2026 18:42:54 +0000 Files and hashes: 1: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 2: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: F9vjyGUK2AWpJoxeKdquMxZB1r1/oZloMHsIxE+8q/4=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 18:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8c:a3:98:e9:43:17:4a:0b:8e:f0:a8:bd:a6:30:6e:ee:25:ed:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Oct 25 15:20:54 2026 GMT Not After : Oct 26 18:42:54 2026 GMT Subject: CN=2A805F5E8DDDF60C20631832B1778C4547B43877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:26:a7:92:d9:64:38:32:27:ea:10:8d:33: 88:f4:ad:a4:fe:af:ea:d5:10:65:7a:10:58:c3:42: 11:38:ba:1d:5c:94:45:87:e4:aa:98:4b:9b:9c:1e: 1c:df:2c:20:3d:57:ee:72:75:ca:4d:ca:8d:1b:80: 32:08:e9:61:e1:99:a7:0b:bd:8d:39:6f:b3:70:15: 20:f7:39:1e:7e:81:c6:ee:43:b3:5e:47:14:da:0a: 97:6e:a3:10:c1:98:65:35:7c:51:20:6b:d4:a8:b6: 6a:5d:16:b4:c7:af:eb:72:b3:ae:3c:29:1d:05:e8: 6a:66:98:86:ab:dd:a5:d5:58:66:4f:d1:02:fc:1d: d1:c7:aa:3c:1c:bb:34:be:b4:fc:35:07:08:d4:2a: d1:f8:29:92:e8:a2:af:b6:89:7c:9a:68:df:92:db: 8c:50:ba:7f:07:55:77:e5:75:08:8e:c9:53:a3:59: e7:35:a0:65:3b:5d:cd:06:ee:b9:62:c8:68:33:01: 9d:c0:4c:0b:23:ec:97:b5:41:91:45:e9:cc:96:3b: dc:50:a3:86:af:1f:ba:8e:1c:2f:9a:26:85:92:1f: 4c:ce:15:e4:03:e9:b1:ec:a5:7a:9c:1c:ca:ee:f9: ce:ba:19:10:04:15:d6:8d:2a:8d:5a:b3:06:b9:e6: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:5F:5E:8D:DD:F6:0C:20:63:18:32:B1:77:8C:45:47:B4:38:77 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d7:b8:33:aa:af:78:86:5b:c7:98:f8:5b:96:31:38:7f:38: 34:61:d5:a6:89:15:07:82:04:c6:37:33:97:99:c5:33:b9:b6: 5d:ef:e4:8c:1f:d6:ed:75:3c:ab:24:90:ac:00:c9:40:7e:54: d1:a3:6e:16:39:53:0c:33:cd:8a:6b:0e:b7:6d:74:92:f8:7d: 9f:fb:f0:37:3b:ef:82:9f:ab:c3:02:c2:d5:49:e1:47:cc:89: 55:06:f7:f5:a2:ef:23:11:15:d9:63:ab:7d:07:be:f7:14:a9: f8:72:11:69:49:84:b8:24:12:1a:ed:2d:d8:c1:e1:e7:90:30: 99:27:83:17:ba:59:28:13:ed:4b:51:77:8f:2b:0e:53:6f:03: f6:39:58:c7:10:c8:ab:fb:3f:b1:17:85:11:29:92:99:ed:36: c3:3c:4e:e1:c5:59:e4:05:83:6c:8a:55:0c:f1:68:69:8e:f7: 71:f3:99:00:8d:25:8d:23:74:69:90:c7:fd:0a:28:c0:82:ba: 30:73:93:f0:c9:0a:20:e2:00:1d:80:28:1f:cc:cd:da:33:d1: 45:ed:0c:c4:1a:fb:c1:41:74:b3:ac:93:52:3f:cd:3f:34:f0: 0e:f7:fc:55:5a:4e:0a:8b:52:75:05:9d:c1:d4:53:1d:0d:0c: 4a:3e:8f:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIyjmOlDF0oLjvCovaYwbu4l7XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjEwMjUxNTIwNTRaFw0yNjEwMjYxODQyNTRaMDMxMTAvBgNV BAMTKDJBODA1RjVFOEREREY2MEMyMDYzMTgzMkIxNzc4QzQ1NDdCNDM4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUCanktlkODIn6hCNM4j0raT+ r+rVEGV6EFjDQhE4uh1clEWH5KqYS5ucHhzfLCA9V+5ydcpNyo0bgDII6WHhmacL vY05b7NwFSD3OR5+gcbuQ7NeRxTaCpduoxDBmGU1fFEga9SotmpdFrTHr+tys648 KR0F6GpmmIar3aXVWGZP0QL8HdHHqjwcuzS+tPw1BwjUKtH4KZLooq+2iXyaaN+S 24xQun8HVXfldQiOyVOjWec1oGU7Xc0G7rliyGgzAZ3ATAsj7Je1QZFF6cyWO9xQ o4avH7qOHC+aJoWSH0zOFeQD6bHspXqcHMru+c66GRAEFdaNKo1aswa55k/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoBfXo3d9gwgYxgysXeMRUe0OHcwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3XuDOqr3iGW8eY+FuWMTh/ODRh1aaJFQeC BMY3M5eZxTO5tl3v5Iwf1u11PKskkKwAyUB+VNGjbhY5UwwzzYprDrdtdJL4fZ/7 8Dc774Kfq8MCwtVJ4UfMiVUG9/Wi7yMRFdljq30HvvcUqfhyEWlJhLgkEhrtLdjB 4eeQMJkngxe6WSgT7UtRd48rDlNvA/Y5WMcQyKv7P7EXhREpkpntNsM8TuHFWeQF g2yKVQzxaGmO93HzmQCNJY0jdGmQx/0KKMCCujBzk/DJCiDiAB2AKB/Mzdoz0UXt DMQa+8FBdLOsk1I/zT808A73/FVaTgqLUnUFncHUUx0NDEo+j/A= -----END CERTIFICATE-----Generated at Mon Oct 26 12:38:44 2026 by rpki-client