$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: DcqSiDlKPkYGFayZwNMuFurYzpKTYsebW9WsPfNs8DE= Subject key identifier: AD:CC:2C:D5:03:57:C4:E9:B5:AE:12:D0:B3:45:78:AB:4B:88:AD:55 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 757C01C5FB25B8B598E2B07A953E388D44F9A21A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: DF Signing time: Fri 16 Oct 2026 07:28:34 +0000 Manifest this update: Fri 16 Oct 2026 07:23:34 +0000 Manifest next update: Sat 17 Oct 2026 07:35:34 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 3: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: 6dpQ0DU0Tia59BsEI0BBF0FaQj6WkIZJC/yUqNiHTiY=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 02:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7c:01:c5:fb:25:b8:b5:98:e2:b0:7a:95:3e:38:8d:44:f9:a2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Oct 16 07:23:34 2026 GMT Not After : Oct 17 07:35:34 2026 GMT Subject: CN=ADCC2CD50357C4E9B5AE12D0B34578AB4B88AD55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:8c:6f:51:90:60:20:3d:5d:b6:47:21:84: d5:94:6c:44:f7:7d:34:19:30:f6:9b:0f:db:be:67: 44:08:69:ea:cc:42:69:8f:f7:b9:7f:4f:11:ba:bc: 8e:45:e3:a0:09:3e:5d:63:1c:a6:b8:05:e1:33:74: 67:43:bd:ee:7a:4b:c6:d4:c8:39:a4:2e:ae:b0:90: 9c:8e:bb:ea:2c:c8:96:e3:db:99:0d:63:f7:4f:80: 52:75:68:ae:7c:5b:f2:a1:c5:c2:6f:40:6c:38:96: 53:6c:5e:46:c9:b1:b3:a5:1d:8a:ec:de:8e:e5:d9: 03:ea:71:87:fc:7a:60:93:b0:64:70:25:27:93:08: 0f:2b:7e:65:7d:39:d2:21:16:bd:13:e6:5d:02:4d: f3:29:da:d5:37:29:32:63:ab:fc:30:5d:1d:e1:f0: b6:b0:eb:82:61:a0:5b:ce:dd:dd:ce:a7:d8:4a:4a: 96:e8:1f:34:e8:87:8d:2f:d1:d6:82:0e:96:f9:41: e7:7d:90:cd:32:70:27:f9:c0:c9:e9:8b:74:7d:71: 7e:5e:4c:2f:b9:c5:39:ae:06:07:37:e5:d5:c6:c6: a3:9a:8e:e2:dd:f5:06:7e:62:73:ed:37:4f:71:20: 43:14:81:0e:57:a9:82:8e:6e:a2:de:c8:4c:df:10: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CC:2C:D5:03:57:C4:E9:B5:AE:12:D0:B3:45:78:AB:4B:88:AD:55 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4f:5d:0c:22:f0:17:f5:9e:45:79:e0:ea:52:80:9b:f3:86: a2:54:0a:aa:f7:a6:2c:8a:ce:db:b7:5c:5d:06:b3:63:f1:3c: c0:db:76:c6:c9:2c:77:8b:1c:79:8c:4d:78:63:a1:e1:45:21: 53:f9:2b:05:77:ef:62:9e:e9:80:d0:7e:43:a5:10:6d:34:b1: b9:c3:69:e0:a6:39:f5:82:e3:6e:cd:76:71:f8:dc:7d:4c:49: 91:42:fa:cd:db:0d:57:7e:31:49:d4:81:58:94:6c:af:f3:79: 2d:cf:8b:c2:86:50:aa:a4:8a:b8:4e:fa:ae:e3:86:55:52:3f: 45:39:18:78:8c:a9:4e:83:2a:1b:8f:a3:3c:fb:fa:82:40:87: aa:fe:11:bc:9d:82:73:71:dd:ad:15:03:d0:77:24:fb:6e:65: 14:d9:3f:2f:58:65:d5:7b:e7:ac:8c:e4:fc:c9:02:fc:40:b4: e5:74:d8:01:3d:42:74:47:a7:93:87:7e:38:e8:96:e9:53:1c: bb:e8:39:72:b6:12:9a:ca:dc:65:0d:44:1d:0f:ee:c1:07:04: f8:b9:a5:ed:27:31:b4:f9:af:80:44:96:28:7f:4f:31:33:a0: 0f:e2:c3:2d:4f:ff:67:d3:44:cb:0c:39:e2:eb:ce:25:47:e9: 90:77:b1:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXwBxfsluLWY4rB6lT44jUT5ohowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjEwMTYwNzIzMzRaFw0yNjEwMTcwNzM1MzRaMDMxMTAvBgNV BAMTKEFEQ0MyQ0Q1MDM1N0M0RTlCNUFFMTJEMEIzNDU3OEFCNEI4OEFENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6oxvUZBgID1dtkchhNWUbET3 fTQZMPabD9u+Z0QIaerMQmmP97l/TxG6vI5F46AJPl1jHKa4BeEzdGdDve56S8bU yDmkLq6wkJyOu+osyJbj25kNY/dPgFJ1aK58W/KhxcJvQGw4llNsXkbJsbOlHYrs 3o7l2QPqcYf8emCTsGRwJSeTCA8rfmV9OdIhFr0T5l0CTfMp2tU3KTJjq/wwXR3h 8Law64JhoFvO3d3Op9hKSpboHzToh40v0daCDpb5Qed9kM0ycCf5wMnpi3R9cX5e TC+5xTmuBgc35dXGxqOajuLd9QZ+YnPtN09xIEMUgQ5XqYKObqLeyEzfECMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcws1QNXxOm1rhLQs0V4q0uIrVUwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRPXQwi8Bf1nkV54OpSgJvzhqJUCqr3piyK ztu3XF0Gs2PxPMDbdsbJLHeLHHmMTXhjoeFFIVP5KwV372Ke6YDQfkOlEG00sbnD aeCmOfWC427NdnH43H1MSZFC+s3bDVd+MUnUgViUbK/zeS3Pi8KGUKqkirhO+q7j hlVSP0U5GHiMqU6DKhuPozz7+oJAh6r+EbydgnNx3a0VA9B3JPtuZRTZPy9YZdV7 56yM5PzJAvxAtOV02AE9QnRHp5OHfjjolulTHLvoOXK2EprK3GUNRB0P7sEHBPi5 pe0nMbT5r4BElih/TzEzoA/iwy1P/2fTRMsMOeLrziVH6ZB3sVE= -----END CERTIFICATE-----Generated at Fri Oct 16 11:13:31 2026 by rpki-client