$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: YsYclyVToDOj11Y/jWc72btIzlZ6PvPnLM4gbzyJl84= Subject key identifier: 55:E7:AC:57:95:7A:B9:33:6A:04:56:F2:B0:3B:FA:24:94:08:34:FD Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 0EA44DD8F36910B1231CD56471C45A9EB5284FA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: CE Signing time: Sat 03 Oct 2026 18:07:37 +0000 Manifest this update: Sat 03 Oct 2026 18:02:37 +0000 Manifest next update: Sun 04 Oct 2026 19:56:37 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 2: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 3: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 4: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) 5: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 6: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 7: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 8: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: gXrQ3BeLi8xGNw5RpkVmrP2VdKPcAkKWFdb4zYFy2j4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 19:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:4d:d8:f3:69:10:b1:23:1c:d5:64:71:c4:5a:9e:b5:28:4f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Oct 3 18:02:37 2026 GMT Not After : Oct 4 19:56:37 2026 GMT Subject: CN=55E7AC57957AB9336A0456F2B03BFA24940834FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:a2:eb:b1:75:f7:fe:29:21:c9:97:fb:1b: ef:98:96:8e:a6:0c:9b:78:85:5d:79:a0:10:ef:dd: 00:ed:4a:3c:e5:31:88:94:71:c6:97:f5:89:80:41: cc:da:38:38:4f:b8:35:ed:0e:cf:23:17:83:d3:d7: 6f:48:a4:3c:a9:8c:d2:6e:8b:af:4c:e0:02:7c:55: 46:24:dd:45:ef:ea:ab:25:6a:02:24:80:bf:13:61: 71:39:32:34:51:de:da:21:e4:80:59:b3:3e:70:d0: 5a:29:1d:01:fa:d1:88:3c:2a:01:29:b5:bd:6a:6b: 16:92:b2:6c:5b:1e:f7:1f:05:c3:e0:5d:f1:28:e5: 4d:e7:8a:cb:57:b2:69:ae:de:35:87:13:b3:18:0d: bc:80:28:e4:9a:e2:98:4c:fa:04:aa:84:29:13:e2: b2:30:4c:a5:03:4d:1a:f8:7b:46:86:c4:65:74:cd: 79:25:cb:d0:c2:13:e3:27:ff:b9:44:89:5d:b6:de: 8e:63:e3:42:a2:cd:5b:fe:25:a3:51:86:6b:b6:34: b3:60:35:16:e7:b0:5e:a4:2e:e7:3a:58:83:4c:c8: 70:37:63:3e:ac:b5:f2:69:3a:4d:aa:fe:25:8b:10: 7e:62:67:a3:c7:4a:a7:38:b3:d6:45:e1:82:7e:bb: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E7:AC:57:95:7A:B9:33:6A:04:56:F2:B0:3B:FA:24:94:08:34:FD X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:69:b0:d4:78:c4:05:42:f0:e5:ea:31:cc:c5:0d:54:cc:07: 1c:dd:37:c3:7a:8f:fc:3a:ce:e1:a2:de:c8:ed:9b:42:20:9f: 82:4b:83:37:9c:b8:d9:14:5e:80:b8:68:ac:37:49:a2:aa:26: f8:21:83:34:83:0d:dc:bf:3a:36:70:e5:e7:7f:0d:e7:ce:97: e6:51:ba:54:65:7b:c8:9f:19:22:b8:a1:88:33:9f:7d:17:f1: 1b:75:9b:5d:74:9b:1f:24:0e:40:8a:e4:e3:f6:f3:b7:01:0b: a4:e5:1a:15:a3:a6:e8:cc:de:dc:94:56:dd:d3:0a:e0:81:18: a4:45:4a:db:1b:ee:59:03:b9:b6:eb:20:a4:af:9d:b9:de:83: c3:86:46:1b:3c:6d:7a:b6:ee:37:39:e3:26:cc:fc:fe:7b:e8: e2:9c:30:00:9e:ce:cd:9a:c4:f2:c9:09:58:5d:7a:2b:4b:f1: b4:87:3c:00:1f:62:76:df:98:d3:ea:d2:7a:80:70:57:f6:3b: fb:d3:48:c6:e5:67:25:d0:4d:3a:c6:3a:66:02:1b:52:2e:ac: 99:6c:0c:51:52:89:15:12:2f:7a:2e:af:3f:89:f3:07:8a:9c: 46:60:06:07:d7:d4:ed:dc:32:08:30:8a:d0:3e:96:0f:73:16: bb:87:a8:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqRN2PNpELEjHNVkccRanrUoT6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjEwMDMxODAyMzdaFw0yNjEwMDQxOTU2MzdaMDMxMTAvBgNV BAMTKDU1RTdBQzU3OTU3QUI5MzM2QTA0NTZGMkIwM0JGQTI0OTQwODM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/KLrsXX3/ikhyZf7G++Ylo6m DJt4hV15oBDv3QDtSjzlMYiUccaX9YmAQczaODhPuDXtDs8jF4PT129IpDypjNJu i69M4AJ8VUYk3UXv6qslagIkgL8TYXE5MjRR3toh5IBZsz5w0FopHQH60Yg8KgEp tb1qaxaSsmxbHvcfBcPgXfEo5U3nistXsmmu3jWHE7MYDbyAKOSa4phM+gSqhCkT 4rIwTKUDTRr4e0aGxGV0zXkly9DCE+Mn/7lEiV223o5j40KizVv+JaNRhmu2NLNg NRbnsF6kLuc6WINMyHA3Yz6stfJpOk2q/iWLEH5iZ6PHSqc4s9ZF4YJ+u5eZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVeesV5V6uTNqBFbysDv6JJQINP0wHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5psNR4xAVC8OXqMczFDVTMBxzdN8N6j/w6 zuGi3sjtm0Ign4JLgzecuNkUXoC4aKw3SaKqJvghgzSDDdy/OjZw5ed/DefOl+ZR ulRle8ifGSK4oYgzn30X8Rt1m110mx8kDkCK5OP287cBC6TlGhWjpujM3tyUVt3T CuCBGKRFStsb7lkDubbrIKSvnbneg8OGRhs8bXq27jc54ybM/P576OKcMACezs2a xPLJCVhdeitL8bSHPAAfYnbfmNPq0nqAcFf2O/vTSMblZyXQTTrGOmYCG1IurJls DFFSiRUSL3ourz+J8weKnEZgBgfX1O3cMggwitA+lg9zFruHqHY= -----END CERTIFICATE-----Generated at Sun Oct 4 17:22:20 2026 by rpki-client