$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: I/xN5PZzcWX4pzyUBFW4XL+x+Zn5hAoYTncZBKq0bxk= Subject key identifier: 8E:53:14:DF:EC:65:F6:F7:1F:BB:D0:98:0C:8F:66:1F:95:2C:D5:7A Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 6A0B6C2AA4D3BC4D77E48143D9D2FB4FA461BC40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: EB Signing time: Sun 25 Oct 2026 03:43:28 +0000 Manifest this update: Sun 25 Oct 2026 03:38:28 +0000 Manifest next update: Mon 26 Oct 2026 03:53:28 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) 2: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: I4U8ZezyXIviD1dla31peRn2U4uLLyN3+X53FY8f7fA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0b:6c:2a:a4:d3:bc:4d:77:e4:81:43:d9:d2:fb:4f:a4:61:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: Oct 25 03:38:28 2026 GMT Not After : Oct 26 03:53:28 2026 GMT Subject: CN=8E5314DFEC65F6F71FBBD0980C8F661F952CD57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:20:a4:7a:82:05:3a:27:7a:ef:0c:0a:b3: 6d:f2:57:02:32:8d:97:34:ea:e4:d5:47:75:69:1f: 70:f9:34:90:cd:f2:95:9b:94:09:be:25:c2:ab:cf: 12:a0:81:3e:e7:a7:b0:8d:91:24:84:8c:a7:5e:d4: d6:25:cc:5c:88:38:46:35:d3:fa:18:3d:91:83:71: 0d:15:a2:60:f5:2a:a0:f6:24:71:e7:9a:41:b6:49: 60:97:34:01:31:07:cb:e2:64:e9:6f:43:e0:28:0a: 46:f3:66:b6:40:53:c0:5f:a2:3a:a3:d4:91:9a:64: 5b:59:2a:ce:1f:42:3f:3d:f5:45:29:fd:e7:69:03: b8:21:de:33:ce:c1:51:4e:71:c8:7c:d3:be:f8:82: 3d:82:6e:26:bc:b3:5f:f2:16:56:75:32:6f:e8:74: c2:2e:c8:94:79:d6:37:0c:0a:be:5c:7e:b2:de:b9: 43:de:d2:23:28:19:7c:87:3e:9f:9c:7b:3e:de:e2: 54:4a:a5:24:ee:8d:56:f0:59:60:9e:d6:3c:66:65: 7b:a2:fe:5d:db:34:c8:f2:af:4c:5a:24:73:72:bc: a4:1e:14:2f:65:72:fb:7e:01:43:15:11:df:0a:0c: b6:62:82:dd:29:a9:d3:e2:fa:ac:20:4c:16:4b:b1: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:53:14:DF:EC:65:F6:F7:1F:BB:D0:98:0C:8F:66:1F:95:2C:D5:7A X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:aa:0e:2e:64:b3:57:bb:3f:e7:1f:20:ee:eb:fe:8f:4e:2b: 57:5d:f8:1b:8a:8f:5f:d9:31:79:a8:0d:c4:95:87:cd:1a:d5: e5:7d:11:28:16:3c:f7:15:bb:f5:4a:dc:db:1a:1b:31:38:0a: b4:95:6f:9b:16:67:78:e1:31:67:1d:aa:c7:69:8c:c0:94:68: a7:62:22:88:ca:de:ef:c4:2b:72:07:2d:28:5d:39:c5:50:ca: 0e:39:32:fa:4f:92:b3:fd:5e:09:4a:d4:52:a7:37:53:4d:16: fa:b2:54:bc:0d:50:56:52:ff:d8:7e:68:b0:bc:a9:28:98:28: 24:1b:b7:1c:bd:08:ba:45:cc:b2:e6:8e:f5:d8:32:ea:a0:a1: 84:c9:35:3f:c1:1d:b2:49:11:81:42:3a:19:38:da:24:8b:ba: 08:13:9f:14:11:8d:16:76:34:61:7d:44:21:58:79:d5:50:54: 93:56:cd:ed:81:91:0a:8e:ad:0d:99:e0:73:d3:f5:8b:29:f2: 27:59:72:e9:ff:c9:03:ac:55:64:d6:ae:21:49:7e:52:08:f3: 2b:07:ab:63:5a:5d:96:d1:a2:d2:62:54:4a:40:62:f7:dc:6a: f7:34:c9:96:a3:69:a7:0c:8d:47:ef:51:15:02:67:eb:ce:ed: 9e:c5:f1:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagtsKqTTvE135IFD2dL7T6RhvEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjEwMjUwMzM4MjhaFw0yNjEwMjYwMzUzMjhaMDMxMTAvBgNV BAMTKDhFNTMxNERGRUM2NUY2RjcxRkJCRDA5ODBDOEY2NjFGOTUyQ0Q1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpCCkeoIFOid67wwKs23yVwIy jZc06uTVR3VpH3D5NJDN8pWblAm+JcKrzxKggT7np7CNkSSEjKde1NYlzFyIOEY1 0/oYPZGDcQ0VomD1KqD2JHHnmkG2SWCXNAExB8viZOlvQ+AoCkbzZrZAU8Bfojqj 1JGaZFtZKs4fQj899UUp/edpA7gh3jPOwVFOcch80774gj2Cbia8s1/yFlZ1Mm/o dMIuyJR51jcMCr5cfrLeuUPe0iMoGXyHPp+cez7e4lRKpSTujVbwWWCe1jxmZXui /l3bNMjyr0xaJHNyvKQeFC9lcvt+AUMVEd8KDLZigt0pqdPi+qwgTBZLsZ67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlMU3+xl9vcfu9CYDI9mH5Us1XowHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyqDi5ks1e7P+cfIO7r/o9OK1dd+BuKj1/Z MXmoDcSVh80a1eV9ESgWPPcVu/VK3NsaGzE4CrSVb5sWZ3jhMWcdqsdpjMCUaKdi IojK3u/EK3IHLShdOcVQyg45MvpPkrP9XglK1FKnN1NNFvqyVLwNUFZS/9h+aLC8 qSiYKCQbtxy9CLpFzLLmjvXYMuqgoYTJNT/BHbJJEYFCOhk42iSLuggTnxQRjRZ2 NGF9RCFYedVQVJNWze2BkQqOrQ2Z4HPT9Ysp8idZcun/yQOsVWTWriFJflII8ysH q2NaXZbRotJiVEpAYvfcavc0yZajaacMjUfvURUCZ+vO7Z7F8bg= -----END CERTIFICATE-----Generated at Sun Oct 25 09:25:28 2026 by rpki-client