$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: 9hBgeL5TDn7jK/ZmumRX+3kILx33RUSd8P04/HWduag= Subject key identifier: 27:0A:92:0E:F2:43:FB:6A:01:AA:3A:AC:C9:B9:26:6D:A5:B1:BA:95 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 69D1C7B18C0FDEDCA276134B778D73EC1F2C1DF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: ED Signing time: Mon 26 Oct 2026 14:04:52 +0000 Manifest this update: Mon 26 Oct 2026 13:59:52 +0000 Manifest next update: Tue 27 Oct 2026 16:37:52 +0000 Files and hashes: 1: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: chYV6t2UdfsJr6gdEpGAdRCB1p52pPJZXqHq4MdK3fg=) 2: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 4: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d1:c7:b1:8c:0f:de:dc:a2:76:13:4b:77:8d:73:ec:1f:2c:1d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Oct 26 13:59:52 2026 GMT Not After : Oct 27 16:37:52 2026 GMT Subject: CN=270A920EF243FB6A01AA3AACC9B9266DA5B1BA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:22:e0:bb:e5:17:62:18:b5:b1:73:77:8f: 48:75:7d:3e:71:56:ff:19:cb:57:43:97:b9:9e:25: 5e:f6:71:7e:99:19:9e:6d:1a:4e:ba:1b:02:f9:65: 42:37:6e:d1:3b:50:a7:51:1c:01:27:6a:23:06:95: d0:f6:d0:ff:9a:c1:5f:59:06:43:64:68:01:99:64: e6:ad:18:e3:78:9b:d0:d8:72:c8:ae:a0:24:ae:24: 9b:2d:2e:35:1e:95:ec:7a:d9:b3:d4:13:16:40:5b: 92:75:62:b9:96:93:85:fe:15:26:82:d3:a5:71:b7: 74:26:92:8d:a7:5d:47:15:25:f8:f3:4b:f0:1c:5e: 98:4d:62:0b:ae:4d:2d:29:e6:94:dd:c0:ae:8a:dc: 3f:04:93:df:db:48:06:89:31:36:8c:c1:96:50:55: 0f:d1:43:cf:a2:7d:7a:37:5d:60:7f:5a:45:a1:e2: 0e:92:5d:04:4b:18:32:46:37:df:b9:b3:8e:f6:92: 52:c9:10:cd:9b:74:ff:bc:d8:12:3c:4d:78:29:78: 2d:a3:5e:5d:09:8a:fa:10:55:47:50:66:f6:22:60: 5c:1b:58:6b:4a:b4:bc:38:68:2d:77:b3:b4:1f:8b: 0b:55:7c:ef:c1:23:f5:cc:06:82:8a:0f:77:3b:bf: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:92:0E:F2:43:FB:6A:01:AA:3A:AC:C9:B9:26:6D:A5:B1:BA:95 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5c:66:0b:31:e7:b7:ea:5a:d5:28:3f:87:47:6a:8e:08:46: 00:61:2b:99:28:87:40:e6:b4:7e:81:f1:82:b5:57:17:4e:74: 44:45:3f:13:f7:7b:ee:b3:db:e8:40:d4:a3:a7:9a:f7:19:92: fe:11:d4:63:0b:25:86:5e:ca:ca:8a:84:35:a4:29:e8:96:d5: 2b:c9:c4:8d:65:96:71:e3:2d:26:7c:e2:76:e5:12:b3:10:ed: 87:ba:61:c1:51:aa:b6:8d:32:ea:4b:55:e6:7d:a0:67:f6:28: f6:f0:30:d9:e3:b8:72:93:ad:72:e0:db:bd:0e:14:c4:41:39: 02:3f:b0:fc:6e:6a:78:ad:4c:14:22:cf:29:82:9e:65:07:8a: 50:48:5e:ab:e8:9f:f0:e5:aa:3f:30:83:3d:08:92:9e:c1:da: 25:04:8c:01:64:43:05:d6:06:81:1d:8c:ab:5c:06:46:aa:11: 35:0d:65:ad:a2:18:15:71:df:11:bb:b2:78:f7:6b:bf:db:ae: 71:84:8a:75:15:bf:a8:e4:cc:d4:8c:a2:50:71:11:d6:8f:cf: 1c:1f:e9:4e:85:14:b8:fd:75:c0:b9:53:bb:0e:4b:b8:bc:fb: 5f:bc:06:a0:eb:b9:55:44:72:39:71:f1:03:62:09:ba:14:5c: 87:7b:ec:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadHHsYwP3tyidhNLd41z7B8sHfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjEwMjYxMzU5NTJaFw0yNjEwMjcxNjM3NTJaMDMxMTAvBgNV BAMTKDI3MEE5MjBFRjI0M0ZCNkEwMUFBM0FBQ0M5QjkyNjZEQTVCMUJBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRSLgu+UXYhi1sXN3j0h1fT5x Vv8Zy1dDl7meJV72cX6ZGZ5tGk66GwL5ZUI3btE7UKdRHAEnaiMGldD20P+awV9Z BkNkaAGZZOatGON4m9DYcsiuoCSuJJstLjUelex62bPUExZAW5J1YrmWk4X+FSaC 06Vxt3Qmko2nXUcVJfjzS/AcXphNYguuTS0p5pTdwK6K3D8Ek9/bSAaJMTaMwZZQ VQ/RQ8+ifXo3XWB/WkWh4g6SXQRLGDJGN9+5s472klLJEM2bdP+82BI8TXgpeC2j Xl0JivoQVUdQZvYiYFwbWGtKtLw4aC13s7QfiwtVfO/BI/XMBoKKD3c7v8ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwqSDvJD+2oBqjqsybkmbaWxupUwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBcZgsx57fqWtUoP4dHao4IRgBhK5koh0Dm tH6B8YK1VxdOdERFPxP3e+6z2+hA1KOnmvcZkv4R1GMLJYZeysqKhDWkKeiW1SvJ xI1llnHjLSZ84nblErMQ7Ye6YcFRqraNMupLVeZ9oGf2KPbwMNnjuHKTrXLg270O FMRBOQI/sPxuanitTBQizymCnmUHilBIXqvon/Dlqj8wgz0Ikp7B2iUEjAFkQwXW BoEdjKtcBkaqETUNZa2iGBVx3xG7snj3a7/brnGEinUVv6jkzNSMolBxEdaPzxwf 6U6FFLj9dcC5U7sOS7i8+1+8BqDruVVEcjlx8QNiCboUXId77OM= -----END CERTIFICATE-----Generated at Tue Oct 27 02:50:54 2026 by rpki-client