$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: 3r1hXmcYAk8UGG7zK0bnctT0gEehqDgjjiGCj2prglc= Subject key identifier: 88:A7:F1:4B:23:9C:87:E8:E2:F8:4B:88:C2:A0:01:7B:FD:01:D1:AD Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 18AAC2EC098DC18BC3AE2E7E50E394FDC0770B27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: EB Signing time: Sun 25 Oct 2026 03:23:09 +0000 Manifest this update: Sun 25 Oct 2026 03:18:09 +0000 Manifest next update: Mon 26 Oct 2026 06:59:09 +0000 Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 2: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: 70j1v9SS8neFl3xHDXtj6Tf8U+IgN5ww2+s/FiO9j3M=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:aa:c2:ec:09:8d:c1:8b:c3:ae:2e:7e:50:e3:94:fd:c0:77:0b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Oct 25 03:18:09 2026 GMT Not After : Oct 26 06:59:09 2026 GMT Subject: CN=88A7F14B239C87E8E2F84B88C2A0017BFD01D1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:59:f2:9c:80:a4:55:cd:79:c1:18:c5:48: 6f:d8:9f:37:45:e7:b1:68:3b:7d:1b:ad:5b:c3:f0: 17:21:b3:10:74:ef:a6:b4:7c:a6:4c:35:09:b5:01: ec:76:b9:5b:60:03:24:b0:f9:e3:66:bf:46:18:42: 5f:d6:c3:44:70:c6:26:85:3c:0d:12:c2:94:df:3f: c3:41:d3:3a:82:10:58:2b:24:e8:b4:ea:58:13:94: 1b:f0:d6:03:43:68:6b:d3:39:3c:69:be:ff:a4:b0: ef:c9:7d:9d:dd:8e:f0:47:f2:d3:72:b9:72:0b:f8: d2:ce:f0:5e:f6:28:54:20:d2:cf:fe:b2:36:f8:be: 6e:2f:ec:3b:d5:99:35:92:50:0d:18:8b:c2:ed:67: 63:f5:fa:d6:b0:30:35:17:35:7d:4c:a9:45:85:84: 0d:b4:84:75:39:4a:7b:78:8d:02:26:1f:ed:90:d8: 1b:af:5e:5c:3e:5f:b0:30:67:e0:a1:86:01:6b:ff: b5:b5:c6:30:21:f2:53:5a:58:29:81:a5:ad:9a:58: 7c:7b:fa:c0:8d:e4:c2:85:fb:f3:94:cc:4b:3a:89: 0a:97:06:11:c8:25:2b:d8:16:f0:13:a5:82:ac:fb: cd:cf:2e:92:8e:c0:b4:d5:65:8d:c0:cd:24:3d:ad: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:F1:4B:23:9C:87:E8:E2:F8:4B:88:C2:A0:01:7B:FD:01:D1:AD X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:94:6e:77:4e:b9:0f:d3:d3:73:ed:52:32:35:de:ea:6a:dd: 71:29:e9:ee:72:de:d4:ef:9f:92:9b:a4:70:ce:c7:15:b3:f6: 25:3d:02:5a:26:8c:73:cd:0f:52:54:88:59:ec:02:92:e8:04: 12:79:74:89:38:55:97:3a:63:fa:f0:d7:00:53:4e:3d:fd:86: f1:c3:c0:b9:70:14:2b:fa:4f:86:71:0b:0e:59:7a:88:87:eb: a3:b0:10:23:1d:fb:ad:38:2d:f8:f2:70:10:dd:4d:41:b4:c3: 22:48:30:0b:9e:95:05:0c:e1:3f:c3:e6:4b:ab:18:b2:f5:1e: cd:39:63:5d:d5:11:2c:e9:12:e8:96:f2:ac:fe:2f:8c:d4:c5: 86:74:d7:bd:10:f0:62:4f:95:04:95:d8:3f:0d:c8:ca:f9:e0: b5:3f:7e:79:75:e6:92:03:16:2a:52:77:a5:cd:d5:f3:f1:cb: c9:14:db:b6:18:52:ed:d3:91:80:34:a0:35:21:bb:07:d6:32: 7b:7b:7a:ae:e5:4c:ff:5f:d6:a6:ed:78:50:94:6b:e0:39:7f: e4:bf:d7:4c:a6:1a:79:56:f6:30:e1:e3:96:f7:e6:4f:d0:a7: b4:51:32:c1:3d:43:15:19:dc:bf:e0:b9:9f:54:98:7a:e5:a7: 4e:a1:91:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKrC7AmNwYvDri5+UOOU/cB3CycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjEwMjUwMzE4MDlaFw0yNjEwMjYwNjU5MDlaMDMxMTAvBgNV BAMTKDg4QTdGMTRCMjM5Qzg3RThFMkY4NEI4OEMyQTAwMTdCRkQwMUQxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9FnynICkVc15wRjFSG/YnzdF 57FoO30brVvD8BchsxB076a0fKZMNQm1Aex2uVtgAySw+eNmv0YYQl/Ww0RwxiaF PA0SwpTfP8NB0zqCEFgrJOi06lgTlBvw1gNDaGvTOTxpvv+ksO/JfZ3djvBH8tNy uXIL+NLO8F72KFQg0s/+sjb4vm4v7DvVmTWSUA0Yi8LtZ2P1+tawMDUXNX1MqUWF hA20hHU5Snt4jQImH+2Q2BuvXlw+X7AwZ+ChhgFr/7W1xjAh8lNaWCmBpa2aWHx7 +sCN5MKF+/OUzEs6iQqXBhHIJSvYFvATpYKs+83PLpKOwLTVZY3AzSQ9rYsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKfxSyOch+ji+EuIwqABe/0B0a0wHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSUbndOuQ/T03PtUjI13upq3XEp6e5y3tTv n5KbpHDOxxWz9iU9AlomjHPND1JUiFnsApLoBBJ5dIk4VZc6Y/rw1wBTTj39hvHD wLlwFCv6T4ZxCw5ZeoiH66OwECMd+604LfjycBDdTUG0wyJIMAuelQUM4T/D5kur GLL1Hs05Y13VESzpEuiW8qz+L4zUxYZ0170Q8GJPlQSV2D8NyMr54LU/fnl15pID FipSd6XN1fPxy8kU27YYUu3TkYA0oDUhuwfWMnt7eq7lTP9f1qbteFCUa+A5f+S/ 10ymGnlW9jDh45b35k/Qp7RRMsE9QxUZ3L/guZ9UmHrlp06hkZE= -----END CERTIFICATE-----Generated at Sun Oct 25 16:11:11 2026 by rpki-client