$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: iSeBx9dE6kTYpiing4FazVF81ew7dFtWCCOi4euL0KQ= Subject key identifier: 3D:3D:96:78:4F:13:DE:56:75:65:38:1F:EB:10:DF:D1:E7:97:2F:D4 Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 45D2B2943294539B6D16F46AC4FBF7956F95C33F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 17:20:24 +0000 Manifest this update: Wed 04 Nov 2026 17:15:24 +0000 Manifest next update: Thu 05 Nov 2026 21:13:24 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) 2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: JXr7X8kC/rqEk5OavKw8e+b8620mAjMABsiLagrqDmU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 21:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d2:b2:94:32:94:53:9b:6d:16:f4:6a:c4:fb:f7:95:6f:95:c3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Nov 4 17:15:24 2026 GMT Not After : Nov 5 21:13:24 2026 GMT Subject: CN=3D3D96784F13DE567565381FEB10DFD1E7972FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:6f:5c:58:ae:4f:ec:11:b0:f4:70:f3:3d: 1e:ff:ef:0e:73:e0:88:97:63:2d:2c:88:a3:84:70: f5:aa:19:f2:bd:2b:6a:8b:31:1a:36:10:82:ba:68: c4:60:db:e7:60:2f:d0:6a:a2:b0:8c:1e:18:a1:bc: 9f:87:3b:ac:43:51:5b:1e:c1:e8:93:2f:43:d8:1e: 63:b3:41:17:8e:df:28:4f:f5:a5:ad:6b:62:97:31: 87:93:7b:6c:53:be:4b:34:81:91:3d:5c:fe:47:10: 0b:eb:59:b9:7b:03:0c:e4:21:24:56:c9:4a:79:fd: fa:57:2c:60:a2:c4:7b:47:a8:70:78:48:d8:26:8e: 72:69:1a:6e:c3:8f:b6:62:fe:a3:ee:79:9c:a4:ab: ca:4a:09:a4:86:43:cd:45:e4:f6:8b:05:f1:a2:a0: 1f:98:85:2c:bf:59:4a:8f:a8:e1:bd:2f:6c:37:6d: 20:16:70:8e:46:24:a3:28:d5:b9:22:25:26:f4:3c: a2:f3:dc:7d:fe:70:f7:72:8b:12:64:b7:24:af:e4: 39:6c:ba:4a:f5:7a:e9:80:e6:47:78:15:92:71:8e: c3:7b:44:fb:e9:ba:5d:50:ce:4e:c4:f1:09:de:87: fd:03:53:d4:0c:d5:16:83:c8:ae:68:fb:2b:72:e0: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:96:78:4F:13:DE:56:75:65:38:1F:EB:10:DF:D1:E7:97:2F:D4 X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f1:99:c5:bd:eb:d9:9d:dd:75:13:f9:27:59:2a:15:47:80: 94:b9:19:7e:fc:60:d7:30:84:b2:90:4f:ca:90:2f:d8:33:14: 16:3a:4d:ae:e3:75:fd:24:22:e0:19:a4:31:79:93:2c:59:43: 27:d6:5a:06:8f:3f:ad:0f:8b:17:f1:76:56:59:86:86:f5:a7: 6f:32:c1:ef:69:ba:f3:82:4d:1b:7c:6f:b8:f3:0e:3a:6e:4d: a2:ab:d0:05:30:2c:91:9f:c6:1f:2b:19:cb:ed:65:9d:34:b7: c2:b7:8a:e5:c7:a2:99:4d:6a:84:a4:67:4f:ef:e7:5a:99:a1: 6e:46:92:48:9c:e0:38:15:84:7a:0b:37:54:33:c3:42:c9:dd: 7f:44:83:9e:36:ff:65:b7:43:87:6a:df:9e:00:ee:8c:ab:7c: 72:99:81:55:e8:f6:ea:94:0c:c4:59:7e:65:2c:99:c9:f9:1f: da:62:cd:e3:e5:c6:89:5e:95:be:33:85:06:51:10:d3:3b:04: 61:00:51:f8:e9:86:0c:4c:01:81:35:0d:9c:1e:bf:6b:01:21: 62:79:8a:5a:61:c9:33:3f:2f:92:c4:6c:65:25:a3:36:c1:7c: 8f:a2:11:2c:1b:ba:ef:e2:32:be:a7:ae:c2:84:c2:be:1a:6a: 38:bd:af:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdKylDKUU5ttFvRqxPv3lW+Vwz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjExMDQxNzE1MjRaFw0yNjExMDUyMTEzMjRaMDMxMTAvBgNV BAMTKDNEM0Q5Njc4NEYxM0RFNTY3NTY1MzgxRkVCMTBERkQxRTc5NzJGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYW9cWK5P7BGw9HDzPR7/7w5z 4IiXYy0siKOEcPWqGfK9K2qLMRo2EIK6aMRg2+dgL9BqorCMHhihvJ+HO6xDUVse weiTL0PYHmOzQReO3yhP9aWta2KXMYeTe2xTvks0gZE9XP5HEAvrWbl7AwzkISRW yUp5/fpXLGCixHtHqHB4SNgmjnJpGm7Dj7Zi/qPueZykq8pKCaSGQ81F5PaLBfGi oB+YhSy/WUqPqOG9L2w3bSAWcI5GJKMo1bkiJSb0PKLz3H3+cPdyixJktySv5Dls ukr1eumA5kd4FZJxjsN7RPvpul1Qzk7E8Qneh/0DU9QM1RaDyK5o+yty4LSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPT2WeE8T3lZ1ZTgf6xDf0eeXL9QwHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHxmcW969md3XUT+SdZKhVHgJS5GX78YNcw hLKQT8qQL9gzFBY6Ta7jdf0kIuAZpDF5kyxZQyfWWgaPP60PixfxdlZZhob1p28y we9puvOCTRt8b7jzDjpuTaKr0AUwLJGfxh8rGcvtZZ00t8K3iuXHoplNaoSkZ0/v 51qZoW5Gkkic4DgVhHoLN1Qzw0LJ3X9Eg542/2W3Q4dq354A7oyrfHKZgVXo9uqU DMRZfmUsmcn5H9pizePlxolelb4zhQZRENM7BGEAUfjphgxMAYE1DZwev2sBIWJ5 ilphyTM/L5LEbGUlozbBfI+iESwbuu/iMr6nrsKEwr4aaji9r1E= -----END CERTIFICATE-----Generated at Thu Nov 5 09:45:05 2026 by rpki-client