$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: Hd1GLRuZWvn87CtdZP2vuk5cgkwFDTNj8KnPKSasa0Q= Subject key identifier: 4B:ED:79:70:A4:4C:37:EA:9D:39:06:01:D6:F5:A8:3B:6E:FC:01:78 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 018D4D17B6B218B398428F1B1F52923D9E191897 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: EB Signing time: Sat 24 Oct 2026 00:09:16 +0000 Manifest this update: Sat 24 Oct 2026 00:04:16 +0000 Manifest next update: Sun 25 Oct 2026 03:18:16 +0000 Files and hashes: 1: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: RiwkOZ+V8PkAXSuu4Ptt24tkE2pyMy2qMyuIen+yq+U=) 2: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 3: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 4: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:4d:17:b6:b2:18:b3:98:42:8f:1b:1f:52:92:3d:9e:19:18:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Oct 24 00:04:16 2026 GMT Not After : Oct 25 03:18:16 2026 GMT Subject: CN=4BED7970A44C37EA9D390601D6F5A83B6EFC0178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:c8:e2:19:46:c8:cc:14:72:b2:98:65:2b: 99:cd:a9:9b:57:79:b8:c2:b3:83:47:19:c8:69:52: ee:de:13:d8:15:8f:2f:67:7e:08:1c:a3:8a:96:5b: b0:39:c1:55:45:94:18:24:18:70:74:03:be:97:10: c7:3d:e1:cb:13:ca:87:ef:cf:45:36:cb:e4:62:c1: 26:12:c1:9d:72:65:2e:2f:fd:19:8b:e1:f3:e3:3e: cf:86:75:23:08:e6:ef:fa:0a:2d:2e:13:1c:36:3a: 9f:89:cd:13:95:04:cf:f5:e9:86:83:5b:59:76:65: fc:71:41:84:a9:e3:d5:89:28:dc:01:45:d5:87:e7: 5c:08:6d:a6:eb:42:a2:ff:9e:52:a0:2d:ff:60:b8: 2b:e4:d6:86:8a:7c:6b:23:37:84:41:3c:7f:26:b3: ca:cb:dc:4e:d0:78:09:c9:d2:34:bd:4e:1c:79:45: 57:27:77:4e:d0:1f:c7:0c:e9:ce:a8:18:47:45:38: 70:11:92:7e:c3:c3:77:e5:17:3c:e5:fe:32:15:c1: f4:3a:79:4c:8a:b4:d0:de:55:a6:3a:83:9e:e1:60: 16:82:76:ca:05:b3:a1:7a:40:8e:32:37:f8:aa:13: c0:25:65:79:23:9f:3f:2e:22:86:dd:0e:1e:5b:8e: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:ED:79:70:A4:4C:37:EA:9D:39:06:01:D6:F5:A8:3B:6E:FC:01:78 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:bd:29:60:a3:11:09:1a:be:6f:77:22:02:5f:2d:52:52: 81:aa:88:a5:06:d5:04:fc:87:ad:c6:a1:0a:06:b8:6b:28:a8: f6:1f:5e:bf:45:5f:6e:5f:a8:32:5b:17:af:9c:fe:bd:c9:e3: da:6a:fe:10:05:c9:91:9d:31:c8:db:2e:72:3c:ea:ac:ba:48: 8e:67:c4:f7:f9:77:dc:6d:ce:f6:f8:33:fe:36:4d:85:96:5a: 44:cd:61:a0:3a:f8:59:1b:bd:2a:22:e6:e0:70:fe:e3:69:df: 3b:c2:70:7a:1d:a5:30:03:a5:43:c5:38:10:f4:68:b0:6f:15: 7b:f5:a1:8c:83:0d:b3:62:26:60:c4:1a:98:91:41:ff:c9:80: f2:4a:d4:34:ed:01:17:c9:cc:1a:be:44:f8:27:8d:e1:7a:4e: 3f:36:98:76:ff:c8:7b:55:5f:54:74:b3:80:ab:eb:18:89:eb: 03:58:65:a8:c5:e6:4e:b7:b8:c1:03:68:6c:05:0a:6f:b9:ac: 31:ac:70:33:8e:55:8b:3f:e6:f6:4a:28:bb:b2:5d:1a:3f:fe: be:03:d4:df:59:e0:b5:81:20:a4:65:c7:4d:da:7d:57:ff:d0: 67:c7:be:11:58:1f:eb:d0:77:b4:3d:34:78:8f:93:4c:86:12: b7:fd:31:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAY1NF7ayGLOYQo8bH1KSPZ4ZGJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjEwMjQwMDA0MTZaFw0yNjEwMjUwMzE4MTZaMDMxMTAvBgNV BAMTKDRCRUQ3OTcwQTQ0QzM3RUE5RDM5MDYwMUQ2RjVBODNCNkVGQzAxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk38jiGUbIzBRysphlK5nNqZtX ebjCs4NHGchpUu7eE9gVjy9nfggco4qWW7A5wVVFlBgkGHB0A76XEMc94csTyofv z0U2y+RiwSYSwZ1yZS4v/RmL4fPjPs+GdSMI5u/6Ci0uExw2Op+JzROVBM/16YaD W1l2ZfxxQYSp49WJKNwBRdWH51wIbabrQqL/nlKgLf9guCvk1oaKfGsjN4RBPH8m s8rL3E7QeAnJ0jS9Thx5RVcnd07QH8cM6c6oGEdFOHARkn7Dw3flFzzl/jIVwfQ6 eUyKtNDeVaY6g57hYBaCdsoFs6F6QI4yN/iqE8AlZXkjnz8uIobdDh5bjlHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+15cKRMN+qdOQYB1vWoO278AXgwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH4vSlgoxEJGr5vdyICXy1SUoGqiKUG1QT8 h63GoQoGuGsoqPYfXr9FX25fqDJbF6+c/r3J49pq/hAFyZGdMcjbLnI86qy6SI5n xPf5d9xtzvb4M/42TYWWWkTNYaA6+FkbvSoi5uBw/uNp3zvCcHodpTADpUPFOBD0 aLBvFXv1oYyDDbNiJmDEGpiRQf/JgPJK1DTtARfJzBq+RPgnjeF6Tj82mHb/yHtV X1R0s4Cr6xiJ6wNYZajF5k63uMEDaGwFCm+5rDGscDOOVYs/5vZKKLuyXRo//r4D 1N9Z4LWBIKRlx03afVf/0GfHvhFYH+vQd7Q9NHiPk0yGErf9MX4= -----END CERTIFICATE-----Generated at Sat Oct 24 20:38:12 2026 by rpki-client