$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: ndeuATBlvmjAcG0pkkg8jMkjdEYV3dg8y1irQQnV7zQ= Subject key identifier: CD:94:1C:A2:DD:F7:7C:3F:EF:C9:B4:AB:5B:E3:2B:51:65:C9:45:11 Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 524C6C3BA3F27BDAC3F36FC32047CDA777289609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: ED Signing time: Mon 26 Oct 2026 15:03:58 +0000 Manifest this update: Mon 26 Oct 2026 14:58:58 +0000 Manifest next update: Tue 27 Oct 2026 18:10:58 +0000 Files and hashes: 1: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: AXDj6/XAYT1EQKhBTi2XNaKx0wM55ZOjyMJKEAWIjuo=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4c:6c:3b:a3:f2:7b:da:c3:f3:6f:c3:20:47:cd:a7:77:28:96:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Oct 26 14:58:58 2026 GMT Not After : Oct 27 18:10:58 2026 GMT Subject: CN=CD941CA2DDF77C3FEFC9B4AB5BE32B5165C94511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:f2:6e:99:7d:1b:88:1d:c4:b6:c3:cf:ec: b4:cc:ea:24:6d:48:ea:64:dc:b0:60:7b:4d:4b:c3: 03:e0:41:1e:82:fb:0a:15:ea:01:53:66:c1:66:7f: d3:9f:cb:b1:da:09:52:e6:55:a4:6d:1e:31:1f:a4: fd:a7:ed:4f:15:49:5f:36:f6:07:29:7b:ae:9a:0a: e9:f0:56:96:3a:1a:55:f6:6d:49:62:98:1b:43:07: 03:3a:c5:4c:1a:dc:21:ba:da:87:6f:bb:1f:90:05: ad:ef:e8:84:68:39:a3:04:c6:aa:62:8c:99:39:6e: b1:d5:95:c4:9b:17:e9:4a:a3:14:f4:b2:b5:77:89: 6c:f9:c8:e2:29:29:c4:e8:0f:fe:85:5a:90:8c:e6: e0:cc:8e:e2:65:4c:35:4b:57:c9:fa:d9:0b:4e:5f: 00:1f:22:13:cd:1a:04:bd:cd:03:b3:49:a5:6c:5d: 23:04:8b:3f:42:92:1b:59:f6:f8:db:01:8a:89:2c: 5d:72:ef:05:29:42:42:c5:30:9a:b7:c8:51:43:7a: 12:31:36:4a:8d:ae:58:b1:6d:c7:e1:49:40:af:8d: 5d:04:60:7c:1c:de:e3:27:cb:12:18:ae:64:17:da: 4b:eb:c7:fd:fc:a7:68:e8:ab:d7:1f:78:b9:5e:64: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:94:1C:A2:DD:F7:7C:3F:EF:C9:B4:AB:5B:E3:2B:51:65:C9:45:11 X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:aa:c7:2b:35:d2:76:94:15:38:6a:3a:4d:93:a5:c5:4f:08: 7c:96:37:e6:31:50:1f:0d:b2:e8:78:f6:b7:22:bc:1d:c9:b9: 20:78:8b:04:94:ed:7a:4e:8b:f0:65:07:96:92:82:12:0e:87: 6a:6e:a5:b0:5b:a1:dd:ba:bd:99:cc:29:a1:b0:18:c0:95:cc: 67:cf:1b:84:43:42:9f:aa:0f:74:76:28:f2:51:2c:23:90:fb: 10:15:e0:87:5c:0f:15:ae:24:3a:e1:10:87:a5:0a:b4:66:53: 74:cd:09:ca:d2:02:4e:6a:64:49:07:93:df:1a:3f:db:7a:3f: ab:dc:a8:fd:ed:f1:b2:78:2e:6a:d4:e8:63:b3:5d:4e:dc:45: 56:16:68:bd:f4:1c:7d:86:db:e5:b6:20:1b:2d:b8:6a:16:26: 76:5b:13:99:f7:49:95:a0:0c:16:e2:56:44:cb:82:9d:04:cb: 1b:7a:36:d2:01:0f:69:bb:b8:84:14:81:88:65:07:48:fb:49: 97:9f:13:e0:58:f7:33:02:44:b8:ee:6e:be:22:11:ed:b1:28: 0f:36:fb:58:49:5d:6a:d7:dd:5a:4a:63:bf:1e:68:c9:35:d5: 55:01:d1:d2:b7:b2:ca:a8:36:20:79:cf:dd:77:da:7a:eb:ee: 04:12:d6:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkxsO6Pye9rD82/DIEfNp3colgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjEwMjYxNDU4NThaFw0yNjEwMjcxODEwNThaMDMxMTAvBgNV BAMTKENEOTQxQ0EyRERGNzdDM0ZFRkM5QjRBQjVCRTMyQjUxNjVDOTQ1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+fJumX0biB3EtsPP7LTM6iRt SOpk3LBge01LwwPgQR6C+woV6gFTZsFmf9Ofy7HaCVLmVaRtHjEfpP2n7U8VSV82 9gcpe66aCunwVpY6GlX2bUlimBtDBwM6xUwa3CG62odvux+QBa3v6IRoOaMExqpi jJk5brHVlcSbF+lKoxT0srV3iWz5yOIpKcToD/6FWpCM5uDMjuJlTDVLV8n62QtO XwAfIhPNGgS9zQOzSaVsXSMEiz9CkhtZ9vjbAYqJLF1y7wUpQkLFMJq3yFFDehIx NkqNrlixbcfhSUCvjV0EYHwc3uMnyxIYrmQX2kvrx/38p2joq9cfeLleZOWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZQcot33fD/vybSrW+MrUWXJRREwHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOqxys10naUFThqOk2TpcVPCHyWN+YxUB8N suh49rcivB3JuSB4iwSU7XpOi/BlB5aSghIOh2pupbBbod26vZnMKaGwGMCVzGfP G4RDQp+qD3R2KPJRLCOQ+xAV4IdcDxWuJDrhEIelCrRmU3TNCcrSAk5qZEkHk98a P9t6P6vcqP3t8bJ4LmrU6GOzXU7cRVYWaL30HH2G2+W2IBstuGoWJnZbE5n3SZWg DBbiVkTLgp0Eyxt6NtIBD2m7uIQUgYhlB0j7SZefE+BY9zMCRLjubr4iEe2xKA82 +1hJXWrX3VpKY78eaMk11VUB0dK3ssqoNiB5z9132nrr7gQS1jA= -----END CERTIFICATE-----Generated at Mon Oct 26 22:01:44 2026 by rpki-client