$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: Us1ldMYcmmJBGhW6qawOL8SN2IRxxSsFOyHILz3rgmg= Subject key identifier: 18:91:87:F4:60:9D:56:FE:9E:9F:22:93:92:32:B5:0A:69:AF:09:FC Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 24DFCD838C36A6396E4D69913D22DC8699B8147B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: EA Signing time: Sat 24 Oct 2026 11:18:01 +0000 Manifest this update: Sat 24 Oct 2026 11:13:01 +0000 Manifest next update: Sun 25 Oct 2026 12:23:01 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) 3: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: RkrXor0FP5270esyNhDQjwDCvuk1yAA2uxMrZPkP2NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 12:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:df:cd:83:8c:36:a6:39:6e:4d:69:91:3d:22:dc:86:99:b8:14:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Oct 24 11:13:01 2026 GMT Not After : Oct 25 12:23:01 2026 GMT Subject: CN=189187F4609D56FE9E9F22939232B50A69AF09FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:31:13:c3:50:c5:f8:8d:77:6a:66:3f:97: 0b:a0:5e:03:6b:b1:28:76:b0:bd:fd:15:c6:32:42: 70:36:6f:19:58:04:59:b1:48:d7:fd:46:c5:a8:7b: e5:ad:ef:f9:44:29:b5:b0:d0:41:16:fe:6c:93:cb: 94:62:6d:26:5b:66:7b:0b:ce:8e:3f:93:11:7f:9c: 40:a4:54:1a:87:da:d8:3a:c2:b0:2b:52:d6:f9:9d: da:5b:b9:ba:98:29:d6:fe:fd:78:f7:7a:45:d1:f8: bb:d6:8a:76:47:25:20:1d:86:dc:f8:07:9f:15:c3: d3:c1:3c:87:a8:f5:fc:65:27:dc:74:4c:6f:43:f0: 72:13:58:ad:e9:d9:36:08:a5:0a:99:7c:dd:4f:93: 94:c1:e0:c6:94:f0:49:42:67:0e:b2:cd:f2:1a:87: c8:6e:3f:8d:18:d4:f6:01:58:f4:95:c4:7f:07:89: 0f:5c:1b:dc:b8:d1:85:fc:54:0d:41:32:c2:44:7e: 5c:f2:bf:68:9b:26:5c:3d:98:27:25:87:05:ff:ba: 40:2b:bf:6f:24:8a:2e:1e:47:ee:a2:3d:4b:d3:5e: 78:d8:2b:39:c2:8a:84:93:67:f1:72:dd:d3:89:ef: fb:a7:5b:7c:d3:c9:86:96:0c:a2:54:4a:be:db:47: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:87:F4:60:9D:56:FE:9E:9F:22:93:92:32:B5:0A:69:AF:09:FC X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:da:36:68:53:de:9f:d1:81:25:a4:c4:68:4d:a1:a9:70:a5: 42:e5:16:7c:6d:91:5c:a3:3f:7b:c1:a5:59:55:9f:09:06:61: ae:b7:a1:b2:ef:b3:6f:91:79:3a:34:d7:b3:ab:74:34:d3:75: 24:6a:bf:74:e3:ac:e6:fe:9b:da:c8:a8:40:d0:ec:78:20:8c: 72:d5:c4:ab:88:44:8f:9b:3d:74:d0:97:ce:a5:41:db:53:31: 44:39:25:12:df:89:ea:eb:b8:15:6f:fc:1d:13:b7:9e:5d:46: 70:45:d1:c5:78:7d:13:b8:ae:12:f6:89:00:00:a6:ff:d8:df: 86:c2:41:4d:1e:df:35:53:df:21:3d:e2:1f:13:8c:4d:fc:71: c8:5c:20:b7:d0:75:da:c1:0f:8b:2c:75:27:8d:a6:84:70:a9: 64:36:ae:70:bf:b3:2e:4a:eb:c0:5a:3f:7c:1a:6c:db:e0:9f: 91:1d:b4:2d:6a:03:6e:ac:c8:89:48:07:59:74:d2:aa:1e:a7: 74:66:1c:43:8d:a9:18:c5:be:35:2a:bc:77:07:1a:8e:56:b1: 77:45:e0:3f:5c:24:92:79:3a:45:6d:c0:52:94:96:7e:a4:b0: 2b:24:21:19:74:ca:b1:aa:21:de:45:eb:cd:5c:bf:c5:b7:09: b6:65:82:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJN/Ng4w2pjluTWmRPSLchpm4FHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjEwMjQxMTEzMDFaFw0yNjEwMjUxMjIzMDFaMDMxMTAvBgNV BAMTKDE4OTE4N0Y0NjA5RDU2RkU5RTlGMjI5MzkyMzJCNTBBNjlBRjA5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUDETw1DF+I13amY/lwugXgNr sSh2sL39FcYyQnA2bxlYBFmxSNf9RsWoe+Wt7/lEKbWw0EEW/myTy5RibSZbZnsL zo4/kxF/nECkVBqH2tg6wrArUtb5ndpbubqYKdb+/Xj3ekXR+LvWinZHJSAdhtz4 B58Vw9PBPIeo9fxlJ9x0TG9D8HITWK3p2TYIpQqZfN1Pk5TB4MaU8ElCZw6yzfIa h8huP40Y1PYBWPSVxH8HiQ9cG9y40YX8VA1BMsJEflzyv2ibJlw9mCclhwX/ukAr v28kii4eR+6iPUvTXnjYKznCioSTZ/Fy3dOJ7/unW3zTyYaWDKJUSr7bRybzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGJGH9GCdVv6enyKTkjK1CmmvCfwwHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXaNmhT3p/RgSWkxGhNoalwpULlFnxtkVyj P3vBpVlVnwkGYa63obLvs2+ReTo017OrdDTTdSRqv3TjrOb+m9rIqEDQ7HggjHLV xKuIRI+bPXTQl86lQdtTMUQ5JRLfierruBVv/B0Tt55dRnBF0cV4fRO4rhL2iQAA pv/Y34bCQU0e3zVT3yE94h8TjE38cchcILfQddrBD4ssdSeNpoRwqWQ2rnC/sy5K 68BaP3wabNvgn5EdtC1qA26syIlIB1l00qoep3RmHEONqRjFvjUqvHcHGo5WsXdF 4D9cJJJ5OkVtwFKUln6ksCskIRl0yrGqId5F681cv8W3CbZlgtg= -----END CERTIFICATE-----Generated at Sun Oct 25 05:29:30 2026 by rpki-client