$ rpki-client -vvvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: jXIa8L9DjUPVfzwR315MDM4BWNB4IcVylIcH5dRMeag= Subject key identifier: 1B:00:BD:3D:DC:56:27:41:2B:11:9B:E3:92:80:AD:6D:02:6B:B2:84 Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 0A8AC4087D2FF509D9AB7028F3E7740B361BE243 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: EB Signing time: Sun 25 Oct 2026 16:22:09 +0000 Manifest this update: Sun 25 Oct 2026 16:17:09 +0000 Manifest next update: Mon 26 Oct 2026 17:05:09 +0000 Files and hashes: 1: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 3: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) 4: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: Re0xUzsdTkZsOut4dHd1ziR86Qat5PhVlkApNTeV4ns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8a:c4:08:7d:2f:f5:09:d9:ab:70:28:f3:e7:74:0b:36:1b:e2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Oct 25 16:17:09 2026 GMT Not After : Oct 26 17:05:09 2026 GMT Subject: CN=1B00BD3DDC5627412B119BE39280AD6D026BB284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:9f:43:19:eb:3a:b2:d6:d8:39:36:de:6e: 25:e3:d2:31:fc:6e:e0:2c:69:84:b0:4b:ee:20:c1: cc:f1:1a:69:73:c8:ef:bd:12:9a:4e:2e:8d:97:57: d2:3c:cb:43:11:cb:d6:ca:55:15:bd:23:ff:f9:41: 8e:c7:da:73:37:1d:75:24:c5:fd:c9:bb:ab:2a:f2: cc:d7:9e:aa:a8:d8:f0:74:86:1c:1c:1b:ba:35:54: 4d:90:eb:ee:b8:d4:6f:de:71:9d:8c:41:79:e8:7f: 3a:db:d8:81:5e:53:22:43:d6:da:11:10:9c:37:46: eb:81:4f:00:f6:77:48:d3:50:0b:f1:49:ea:93:f2: 2e:38:ad:b9:4d:f9:d5:9c:d6:59:17:0b:10:1a:ad: 5c:fe:20:66:99:c3:f7:cf:9f:f6:79:1b:50:39:db: b1:5a:65:65:89:a4:67:5e:c7:ac:8a:32:bb:84:fc: 8a:87:a4:70:e4:a6:6b:06:32:eb:bf:cb:6c:94:34: b0:32:39:9b:8f:94:2c:6e:50:aa:a6:cc:f4:91:c7: 63:71:f6:76:31:8b:03:b2:b1:3c:0b:8e:4e:0e:fb: 36:ce:f2:53:ae:fe:69:d0:aa:74:4d:9c:8b:49:eb: d1:33:dc:64:3b:b1:a5:5f:53:23:af:d6:ea:1e:1c: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:00:BD:3D:DC:56:27:41:2B:11:9B:E3:92:80:AD:6D:02:6B:B2:84 X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fb:16:52:f0:35:b8:2c:77:96:94:17:3c:50:e6:69:38:ef: 4a:53:3c:8e:f4:f3:99:90:83:18:1a:56:71:1f:79:64:e8:ec: a2:0a:1e:20:13:f7:18:ea:94:2e:e1:b5:66:b3:e5:94:20:8b: d3:b8:8c:1b:e0:07:ca:a6:51:8f:0e:2c:b4:1b:89:ae:da:2b: 00:70:da:2c:90:cc:d9:d9:5e:b8:b1:e6:4d:b6:91:d0:3b:b2: d4:c0:b1:2d:e0:17:8c:38:8e:7c:48:ea:0a:88:c3:a1:3a:85: 5c:fa:f3:06:e0:0a:cf:09:f9:f9:7c:7e:c4:2a:28:5c:02:84: fe:c3:a3:a2:ea:90:80:8e:20:15:b7:59:20:1a:01:38:d8:7e: 9b:c2:0a:92:2a:d7:cf:e0:95:f7:9f:01:f4:56:2e:a2:ba:0e: d0:fc:4d:44:e2:d8:68:09:dc:51:af:de:07:b4:7c:cb:29:d5: dc:47:17:d9:13:0f:ac:82:c5:e6:25:cc:96:70:f1:11:8c:3e: 0e:7e:4f:d7:13:fe:bb:37:a4:b1:dd:6b:4a:45:0d:93:43:b7: 6b:39:6d:c3:74:de:2c:14:f7:54:29:5b:93:98:ee:f8:ae:55: 95:d1:b6:f2:1c:cd:d2:8f:8f:b9:8d:9a:e3:7f:07:e2:c5:eb: 9a:b2:e8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCorECH0v9QnZq3Ao8+d0CzYb4kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjEwMjUxNjE3MDlaFw0yNjEwMjYxNzA1MDlaMDMxMTAvBgNV BAMTKDFCMDBCRDNEREM1NjI3NDEyQjExOUJFMzkyODBBRDZEMDI2QkIyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6p9DGes6stbYOTbebiXj0jH8 buAsaYSwS+4gwczxGmlzyO+9EppOLo2XV9I8y0MRy9bKVRW9I//5QY7H2nM3HXUk xf3Ju6sq8szXnqqo2PB0hhwcG7o1VE2Q6+641G/ecZ2MQXnofzrb2IFeUyJD1toR EJw3RuuBTwD2d0jTUAvxSeqT8i44rblN+dWc1lkXCxAarVz+IGaZw/fPn/Z5G1A5 27FaZWWJpGdex6yKMruE/IqHpHDkpmsGMuu/y2yUNLAyOZuPlCxuUKqmzPSRx2Nx 9nYxiwOysTwLjk4O+zbO8lOu/mnQqnRNnItJ69Ez3GQ7saVfUyOv1uoeHBUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwC9PdxWJ0ErEZvjkoCtbQJrsoQwHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv7FlLwNbgsd5aUFzxQ5mk470pTPI7085mQ gxgaVnEfeWTo7KIKHiAT9xjqlC7htWaz5ZQgi9O4jBvgB8qmUY8OLLQbia7aKwBw 2iyQzNnZXrix5k22kdA7stTAsS3gF4w4jnxI6gqIw6E6hVz68wbgCs8J+fl8fsQq KFwChP7Do6LqkICOIBW3WSAaATjYfpvCCpIq18/glfefAfRWLqK6DtD8TUTi2GgJ 3FGv3ge0fMsp1dxHF9kTD6yCxeYlzJZw8RGMPg5+T9cT/rs3pLHda0pFDZNDt2s5 bcN03iwU91QpW5OY7viuVZXRtvIczdKPj7mNmuN/B+LF65qy6PY= -----END CERTIFICATE-----Generated at Mon Oct 26 00:55:57 2026 by rpki-client