$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json) Hash identifier: zS43l9gjzvv1rOg/SsQgE+7BIy4H7MAB00YFKV4kmM8= Subject key identifier: 8B:DC:ED:20:E3:17:39:62:8E:34:83:CB:28:44:70:3B:15:D0:1D:A2 Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Certificate serial: 5804C2EA0E2F1D98E47775CEBD4DF88F22A25EE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft Manifest number: EB Signing time: Sat 24 Oct 2026 13:25:50 +0000 Manifest this update: Sat 24 Oct 2026 13:20:50 +0000 Manifest next update: Sun 25 Oct 2026 15:36:50 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=) 2: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=) 3: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: 5E3qCvbOtE/R9TvdVDmgR3eo3fuv4/Eu4jrRiqhZgMA=) 4: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:04:c2:ea:0e:2f:1d:98:e4:77:75:ce:bd:4d:f8:8f:22:a2:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Validity Not Before: Oct 24 13:20:50 2026 GMT Not After : Oct 25 15:36:50 2026 GMT Subject: CN=8BDCED20E31739628E3483CB2844703B15D01DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:b1:02:69:c2:a7:05:ee:22:e2:81:53:b4: 3c:3b:7b:cd:ac:cd:1c:f8:2f:8e:74:91:2e:db:1d: 50:e7:77:1b:34:46:2c:49:35:72:53:b3:35:a7:87: 68:e5:8b:29:c3:22:56:15:eb:24:e9:cc:a6:75:57: fb:4e:51:48:89:b3:2d:b5:1f:91:cb:10:a1:9a:05: d2:9d:d7:9a:2b:67:ea:54:4c:d6:d9:8d:c5:fa:95: 5f:ae:86:f1:6d:72:20:6f:c1:79:b1:71:a5:c7:b9: 2b:24:57:80:1f:56:8b:6f:31:1a:55:4c:93:3b:30: 5a:5c:19:14:4e:2b:49:c2:5d:b3:85:2f:64:8d:c4: 01:e2:f0:f6:4b:81:0a:de:62:e4:01:80:fc:e0:0b: da:2f:2b:cc:0d:0c:ef:47:fa:a6:6d:82:ff:48:39: 70:0a:8f:d5:10:75:cf:ff:81:d0:27:ac:72:34:e4: 16:ec:2e:4a:70:ec:7b:cc:10:c5:33:e4:cc:6d:49: 05:ec:57:97:80:42:0a:f2:ab:d1:42:21:49:e4:7a: 79:6a:af:85:f7:0a:fe:52:f7:a5:ce:db:b2:5c:93: b8:67:fc:e7:15:47:50:82:31:b5:a7:47:23:64:23: 8a:82:6e:f8:18:9a:c4:29:1a:60:22:ad:40:cb:3a: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:ED:20:E3:17:39:62:8E:34:83:CB:28:44:70:3B:15:D0:1D:A2 X509v3 Authority Key Identifier: keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d5:00:cc:06:8a:00:c8:ae:71:a5:a8:0d:9a:81:d8:d5:3b: 16:df:9a:db:cc:9a:f9:d1:1c:ff:27:ce:f0:82:cc:67:f2:3d: 1c:6c:0e:54:3f:3a:fd:6b:d3:07:12:c9:5c:71:bc:26:52:03: 4a:f2:7d:89:2b:26:0a:97:8b:4b:f3:91:92:54:6f:a7:99:fe: 16:dd:74:d5:80:bf:fd:db:1a:5a:44:42:92:c6:30:0d:41:ff: 4b:10:69:0b:c8:06:4b:91:77:52:df:3a:16:8e:4e:ad:d1:9c: 06:f9:3e:c3:02:2b:f4:9e:69:c0:9f:4b:89:d3:7a:41:43:22: 94:77:50:a7:ac:9c:2f:e5:c1:ec:e9:8b:bf:82:36:cd:0a:48: 8e:fe:67:06:90:24:d3:1c:0a:be:9f:4c:1b:7b:76:44:66:34: 6e:9f:2f:58:5b:32:58:8b:f9:32:a2:c6:69:04:d8:09:48:0a: 34:8b:cd:81:69:09:b0:ca:89:5a:04:7c:e4:f0:9c:5a:b9:17: 7a:ab:f4:1a:b2:16:e8:1a:c8:64:ec:58:b9:15:aa:a6:2c:31: 29:6e:d7:a4:59:24:6f:be:df:ae:4e:6c:00:ae:9c:e1:8d:3e: ea:d7:8d:56:35:20:39:06:ff:34:8f:b9:3b:0f:61:58:5b:3f: 5e:f0:db:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWATC6g4vHZjkd3XOvU34jyKiXuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNBRkUw QjQ4QzEwNTAeFw0yNjEwMjQxMzIwNTBaFw0yNjEwMjUxNTM2NTBaMDMxMTAvBgNV BAMTKDhCRENFRDIwRTMxNzM5NjI4RTM0ODNDQjI4NDQ3MDNCMTVEMDFEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pLECacKnBe4i4oFTtDw7e82s zRz4L450kS7bHVDndxs0RixJNXJTszWnh2jliynDIlYV6yTpzKZ1V/tOUUiJsy21 H5HLEKGaBdKd15orZ+pUTNbZjcX6lV+uhvFtciBvwXmxcaXHuSskV4AfVotvMRpV TJM7MFpcGRROK0nCXbOFL2SNxAHi8PZLgQreYuQBgPzgC9ovK8wNDO9H+qZtgv9I OXAKj9UQdc//gdAnrHI05BbsLkpw7HvMEMUz5MxtSQXsV5eAQgryq9FCIUnkenlq r4X3Cv5S96XO27Jck7hn/OcVR1CCMbWnRyNkI4qCbvgYmsQpGmAirUDLOmnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9ztIOMXOWKONIPLKERwOxXQHaIwHwYDVR0j BBgwFoAU0nB9U+B9U7AK8ZF8ewbK/gtIwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlMjQ5MDctYTZmMi00YTU1LWFhNmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNF MDdENTNCMDBBRjE5MTdDN0IwNkNBRkUwQjQ4QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjcwN0Q1M0UwN0Q1M0IwMEFGMTkxN0M3QjA2Q0FGRTBCNDhD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNB RkUwQjQ4QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHVAMwGigDIrnGlqA2agdjVOxbfmtvMmvnR HP8nzvCCzGfyPRxsDlQ/Ov1r0wcSyVxxvCZSA0ryfYkrJgqXi0vzkZJUb6eZ/hbd dNWAv/3bGlpEQpLGMA1B/0sQaQvIBkuRd1LfOhaOTq3RnAb5PsMCK/SeacCfS4nT ekFDIpR3UKesnC/lwezpi7+CNs0KSI7+ZwaQJNMcCr6fTBt7dkRmNG6fL1hbMliL +TKixmkE2AlICjSLzYFpCbDKiVoEfOTwnFq5F3qr9BqyFugayGTsWLkVqqYsMSlu 16RZJG++365ObACunOGNPurXjVY1IDkG/zSPuTsPYVhbP17w26c= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:53 2026 by rpki-client