$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: XioSb8eD+sx1Kb2C51bZTR72sNzALfD1w3Lz1NurGvA= Subject key identifier: 44:20:2A:07:E3:55:38:79:B2:7E:28:0B:85:4F:E2:20:6C:C2:B5:96 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 70593C291042E9E2CE47F2BA1B190AD730D3D8C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: EC Signing time: Sun 25 Oct 2026 14:55:12 +0000 Manifest this update: Sun 25 Oct 2026 14:50:12 +0000 Manifest next update: Mon 26 Oct 2026 17:54:12 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 4: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: Yn+LEGZVmQJwf6CYqpBYWTp2bWhN6vqQiAqGt/hUVmo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:59:3c:29:10:42:e9:e2:ce:47:f2:ba:1b:19:0a:d7:30:d3:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Oct 25 14:50:12 2026 GMT Not After : Oct 26 17:54:12 2026 GMT Subject: CN=44202A07E3553879B27E280B854FE2206CC2B596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:e7:2c:c9:97:bc:12:89:cd:25:13:ac:31: 60:ab:b9:5a:69:8d:d9:57:61:fb:96:7f:b6:7e:4f: 4d:ae:f5:5f:59:9c:3f:c0:fd:c9:27:7e:89:3a:de: 48:f1:65:dc:62:d4:0f:28:f9:9a:2f:a5:a6:f8:3f: 0a:c7:52:d7:b2:f6:2a:76:fd:71:59:8b:90:d1:da: a2:44:2e:0b:fd:6d:37:85:4c:58:25:2b:35:c7:30: 3f:a2:bb:89:bb:03:4f:1d:6f:fd:98:e7:d7:24:77: ae:19:c7:49:2a:d5:35:d9:4e:7c:f1:66:df:f7:9d: 33:7c:7d:f0:ff:d4:2e:19:d0:97:24:9d:c9:b1:df: 63:13:83:7f:03:79:9e:7b:7c:7d:71:cf:b1:13:e8: 11:f0:cf:a0:fa:1a:6b:3e:a2:40:7e:4f:23:b5:5c: cd:aa:14:8c:3c:48:b5:e6:b8:56:f7:cc:c3:70:21: ec:fa:68:ca:c5:5d:d9:fd:fb:3d:85:5c:24:8c:96: 6a:0d:64:4d:1d:8b:3a:76:e4:91:00:6a:c2:b9:d6: 16:67:f8:ab:4a:1b:c9:fb:36:26:ff:36:e5:ee:0b: 28:f8:bb:de:d6:d5:27:19:13:a1:eb:c7:11:80:e5: bf:95:a3:d0:2e:57:f2:09:ca:e9:7f:12:11:24:52: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:2A:07:E3:55:38:79:B2:7E:28:0B:85:4F:E2:20:6C:C2:B5:96 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:46:e1:7f:1d:9c:8e:f0:08:f8:9c:df:f0:5c:0a:ef:20: 74:58:c0:12:94:36:fd:58:b8:a7:03:ea:43:cc:be:9e:d9:84: d9:68:9c:e9:ba:73:49:68:33:c0:30:7d:18:e1:89:5f:58:c3: 23:9a:a3:86:7f:b1:1c:9d:0a:ce:4a:ca:7d:38:d2:70:05:67: a9:ba:bb:20:18:13:01:15:b1:bf:eb:f4:30:d8:a8:44:d1:ab: 52:2d:a2:a1:35:f0:7c:9e:47:96:6a:72:4d:be:7d:fa:45:e5: e9:b0:81:c5:71:96:1b:0f:b9:04:e9:5e:d5:f4:9d:24:7e:af: 13:5e:f7:7d:24:cd:48:13:01:0e:66:5c:c8:24:9b:b3:f7:c7: f9:6b:c1:80:2c:2f:ba:ba:a6:22:2e:2c:b0:95:9e:64:06:2f: 45:56:7b:d6:93:81:66:46:3c:86:ee:6e:d9:b5:cc:f2:04:76: 3a:48:5e:2f:0b:72:47:5d:9f:71:8b:f7:d4:c7:0b:87:19:f9: 43:cc:b3:9c:8a:e0:d2:1c:c6:ad:8c:38:c9:93:6f:a3:a6:10: 07:50:5c:be:df:6a:80:2a:52:86:c9:4e:b6:5e:48:3b:7b:11: 76:78:b9:7c:42:0e:7c:4e:73:64:60:c3:e2:26:4b:de:a9:48: 1c:c6:6d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFk8KRBC6eLOR/K6GxkK1zDT2MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjEwMjUxNDUwMTJaFw0yNjEwMjYxNzU0MTJaMDMxMTAvBgNV BAMTKDQ0MjAyQTA3RTM1NTM4NzlCMjdFMjgwQjg1NEZFMjIwNkNDMkI1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5h+csyZe8EonNJROsMWCruVpp jdlXYfuWf7Z+T02u9V9ZnD/A/cknfok63kjxZdxi1A8o+Zovpab4PwrHUtey9ip2 /XFZi5DR2qJELgv9bTeFTFglKzXHMD+iu4m7A08db/2Y59ckd64Zx0kq1TXZTnzx Zt/3nTN8ffD/1C4Z0Jckncmx32MTg38DeZ57fH1xz7ET6BHwz6D6Gms+okB+TyO1 XM2qFIw8SLXmuFb3zMNwIez6aMrFXdn9+z2FXCSMlmoNZE0dizp25JEAasK51hZn +KtKG8n7Nib/NuXuCyj4u97W1ScZE6HrxxGA5b+Vo9AuV/IJyul/EhEkUkwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURCAqB+NVOHmyfigLhU/iIGzCtZYwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOjRuF/HZyO8Aj4nN/wXArvIHRYwBKUNv1Y uKcD6kPMvp7ZhNlonOm6c0loM8AwfRjhiV9YwyOao4Z/sRydCs5Kyn040nAFZ6m6 uyAYEwEVsb/r9DDYqETRq1ItoqE18HyeR5Zqck2+ffpF5emwgcVxlhsPuQTpXtX0 nSR+rxNe930kzUgTAQ5mXMgkm7P3x/lrwYAsL7q6piIuLLCVnmQGL0VWe9aTgWZG PIbubtm1zPIEdjpIXi8Lckddn3GL99THC4cZ+UPMs5yK4NIcxq2MOMmTb6OmEAdQ XL7faoAqUobJTrZeSDt7EXZ4uXxCDnxOc2Rgw+ImS96pSBzGbaQ= -----END CERTIFICATE-----Generated at Sun Oct 25 18:04:31 2026 by rpki-client