$ rpki-client -vvvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: bO+Is4ZfGETBXnnoPct8RP0lnfgs4zeNXsETu00wIc4= Subject key identifier: 95:97:99:09:80:F8:86:5E:B9:F7:A7:AE:AA:7E:D0:3C:86:54:68:2B Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 37415021E802F659A69422606452D48F7E9C836E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: EE Signing time: Wed 28 Oct 2026 02:48:29 +0000 Manifest this update: Wed 28 Oct 2026 02:43:29 +0000 Manifest next update: Thu 29 Oct 2026 05:54:29 +0000 Files and hashes: 1: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) 3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) 4: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: UUUHxtBkQ2QHQV6h4v0gRw9tmuu4PXecJ6SDV7aH1+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 05:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:41:50:21:e8:02:f6:59:a6:94:22:60:64:52:d4:8f:7e:9c:83:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Oct 28 02:43:29 2026 GMT Not After : Oct 29 05:54:29 2026 GMT Subject: CN=9597990980F8865EB9F7A7AEAA7ED03C8654682B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:c1:9d:68:73:10:46:85:9b:78:99:e2:8f: a8:62:57:8d:f7:bd:45:56:00:65:f8:83:e7:6a:d2: b8:e1:19:ac:c9:89:a8:42:22:44:86:e8:02:48:5b: 19:09:e3:06:5a:b3:9a:50:88:fa:27:9d:c1:8c:d7: a4:99:bb:45:a7:51:09:8b:07:e4:5b:50:ce:eb:1d: ed:87:22:b3:ed:4d:e0:7d:a0:9c:a3:e7:01:63:32: 5a:82:93:05:12:eb:b3:c0:da:2b:f2:f9:1e:01:dd: bf:83:32:44:3b:d5:21:be:d0:2b:f5:e5:1c:05:5f: 25:fb:1a:91:1d:c4:8e:d5:1a:a9:34:d3:1e:59:94: 64:a8:2c:31:e4:e7:0c:f5:d4:da:dc:ab:c8:ec:32: c5:56:1b:4a:f1:43:c3:ef:da:b7:a3:0d:00:5d:d8: f9:60:28:2a:b7:2c:13:5e:5c:5c:2b:f3:ff:ed:19: 00:38:9d:cf:5a:8c:48:9b:e9:d3:58:b8:0f:ee:b6: 70:16:b8:96:15:ac:18:5c:dd:ec:a6:5e:5a:b9:37: bb:bc:c3:cb:b7:5d:07:7e:c5:ca:d2:7e:85:91:b0: 31:ff:3f:70:aa:28:21:bb:34:de:c2:0e:81:0d:22: 8c:79:55:2f:17:39:8e:84:7d:7d:6f:e3:de:13:54: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:97:99:09:80:F8:86:5E:B9:F7:A7:AE:AA:7E:D0:3C:86:54:68:2B X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ef:b5:54:1f:7d:25:31:fd:55:5b:a9:88:70:1e:68:78:fd: 7f:89:cc:ea:04:ad:ce:fd:41:a0:a2:82:51:d0:95:03:fa:c6: 38:13:e5:75:2d:41:5b:82:dd:ac:96:14:49:03:69:e1:14:89: ff:67:bc:a6:f0:60:cc:53:49:c6:54:99:ae:1c:53:46:2a:20: 2a:40:a2:7e:5f:8a:54:13:f3:00:20:ad:75:70:07:09:51:47: 22:18:7d:f8:17:41:33:ae:eb:d8:96:ff:ed:72:47:8d:fb:1b: 05:7d:13:6e:51:de:07:cc:05:a7:fd:17:7b:38:1f:1d:25:62: b7:58:b1:93:93:2d:84:2f:d0:c0:c6:3f:13:a3:a1:d2:ad:7e: 14:3f:1d:dd:2c:e7:f0:c0:1a:d2:4a:60:ce:9e:ff:84:cf:20: 73:76:1d:19:6c:42:49:28:cc:3a:f6:5c:ba:06:ef:e2:ee:5d: 41:60:bb:46:23:ea:6d:0a:0e:75:40:12:a6:17:85:2b:a7:83: 58:13:a3:c0:ea:3e:a0:5c:53:38:15:25:3a:dc:d8:24:02:51: 62:5a:49:84:b7:1f:6b:1e:49:44:9b:ae:af:48:3e:75:12:fd: 34:06:f7:fc:75:74:c0:83:b3:3d:79:3d:01:b9:77:30:49:03: 79:be:4d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0FQIegC9lmmlCJgZFLUj36cg24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjEwMjgwMjQzMjlaFw0yNjEwMjkwNTU0MjlaMDMxMTAvBgNV BAMTKDk1OTc5OTA5ODBGODg2NUVCOUY3QTdBRUFBN0VEMDNDODY1NDY4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZcGdaHMQRoWbeJnij6hiV433 vUVWAGX4g+dq0rjhGazJiahCIkSG6AJIWxkJ4wZas5pQiPonncGM16SZu0WnUQmL B+RbUM7rHe2HIrPtTeB9oJyj5wFjMlqCkwUS67PA2ivy+R4B3b+DMkQ71SG+0Cv1 5RwFXyX7GpEdxI7VGqk00x5ZlGSoLDHk5wz11Nrcq8jsMsVWG0rxQ8Pv2rejDQBd 2PlgKCq3LBNeXFwr8//tGQA4nc9ajEib6dNYuA/utnAWuJYVrBhc3eymXlq5N7u8 w8u3XQd+xcrSfoWRsDH/P3CqKCG7NN7CDoENIox5VS8XOY6EfX1v494TVGeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlZeZCYD4hl6596euqn7QPIZUaCswHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnvtVQffSUx/VVbqYhwHmh4/X+JzOoErc79 QaCiglHQlQP6xjgT5XUtQVuC3ayWFEkDaeEUif9nvKbwYMxTScZUma4cU0YqICpA on5filQT8wAgrXVwBwlRRyIYffgXQTOu69iW/+1yR437GwV9E25R3gfMBaf9F3s4 Hx0lYrdYsZOTLYQv0MDGPxOjodKtfhQ/Hd0s5/DAGtJKYM6e/4TPIHN2HRlsQkko zDr2XLoG7+LuXUFgu0Yj6m0KDnVAEqYXhSung1gTo8DqPqBcUzgVJTrc2CQCUWJa SYS3H2seSUSbrq9IPnUS/TQG9/x1dMCDsz15PQG5dzBJA3m+TR0= -----END CERTIFICATE-----Generated at Wed Oct 28 08:33:47 2026 by rpki-client