$ rpki-client -vvvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: W6qT6EGD2Y6YM5zd+h4+R1+MKzYt6ndLPBayJ547BY4= Subject key identifier: 53:14:F5:F7:76:CB:5E:40:27:03:5F:22:E1:E0:82:E2:2A:BC:D0:72 Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 4BCDC2563034B8D1A68A904F345746D579505562 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: EC Signing time: Sun 25 Oct 2026 04:36:59 +0000 Manifest this update: Sun 25 Oct 2026 04:31:59 +0000 Manifest next update: Mon 26 Oct 2026 06:11:59 +0000 Files and hashes: 1: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: lws5DiSjZcRW8uXixv4xznuj+VQz691KOvaHT7g8iM8=) 2: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cd:c2:56:30:34:b8:d1:a6:8a:90:4f:34:57:46:d5:79:50:55:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: Oct 25 04:31:59 2026 GMT Not After : Oct 26 06:11:59 2026 GMT Subject: CN=5314F5F776CB5E4027035F22E1E082E22ABCD072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:33:7e:11:d0:02:3e:10:4b:25:9c:72:72: 92:99:3e:90:c0:d4:de:c5:18:cd:e6:75:ad:6f:22: 65:d0:18:69:e1:0b:fe:f9:0c:66:8e:a0:8d:c5:aa: 62:1b:3b:b7:3c:01:66:50:bf:ef:2f:38:f6:7f:82: 34:d5:1f:93:19:79:32:34:0b:55:f3:10:0c:ec:c9: 35:6b:fb:4b:2f:39:b7:df:6a:48:9a:0b:2a:8f:7b: 0c:df:7a:66:eb:2f:c9:ba:c7:c8:fb:51:6a:e8:d5: 1e:d6:b1:a8:c0:d0:e5:43:b3:38:eb:ae:24:35:f6: 96:55:83:07:4b:4f:a4:37:f0:70:33:33:b6:99:e6: 8c:83:3c:a3:8a:2c:99:74:cf:da:a2:c5:e7:43:d7: 1b:ac:8f:f1:27:07:ba:b5:2c:df:6d:4c:64:0b:dd: 96:47:2f:3f:40:f8:7a:e9:cd:8c:4c:64:84:04:47: 26:d8:67:f6:2c:d4:b3:4f:50:24:c2:2e:53:97:64: 33:54:7d:27:a5:2e:31:a6:6b:ea:2e:b5:bb:82:36: bc:87:a2:14:0d:65:de:77:74:18:71:f9:77:15:77: e2:c1:5f:5c:69:5c:4d:ee:16:19:6d:bf:5e:69:66: f1:14:25:b6:29:9b:ed:2b:3e:68:65:5f:c5:ef:19: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:F5:F7:76:CB:5E:40:27:03:5F:22:E1:E0:82:E2:2A:BC:D0:72 X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:58:2e:6b:24:18:8c:5b:17:38:7d:db:0e:64:19:f5:82:7f: 02:7b:b7:26:91:4d:6b:e9:be:75:72:22:13:a1:a2:25:93:94: 22:ee:76:27:b8:8d:18:97:88:d3:11:9e:6a:dc:26:4d:d6:19: ec:c3:09:a0:e5:3a:44:dc:15:52:53:02:37:e0:86:0d:5a:38: a7:b5:2f:9d:4b:8d:00:ae:72:6b:2d:f4:28:1e:23:66:a0:d9: 5b:06:eb:8d:38:d4:8d:f5:32:cf:01:4b:b2:d9:be:86:a3:89: 2e:a8:86:02:46:1c:79:4c:4b:d2:d8:d9:e3:18:79:1e:f5:19: 5b:9e:e5:81:51:e5:d6:09:05:94:fd:95:9d:c1:d6:92:38:3b: eb:51:35:3e:7a:8c:1b:e3:8b:12:b1:9c:65:c8:88:45:e0:f6: e2:bb:0d:58:10:ed:3b:55:9d:2f:bd:79:d9:24:64:e5:c6:09: dd:3a:c6:72:e2:c4:86:08:76:6d:2f:c3:f1:12:95:64:b1:d1: 59:36:e0:a8:30:b7:4b:b0:8f:26:a7:e3:8c:65:49:65:4b:3d: 71:3d:e0:1c:b0:b2:a9:07:53:fc:56:eb:55:a2:c6:6d:34:55: e3:b1:2b:03:24:fa:43:79:6b:d7:d8:b2:a2:c0:68:0f:ed:fc: bc:4c:70:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS83CVjA0uNGmipBPNFdG1XlQVWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjEwMjUwNDMxNTlaFw0yNjEwMjYwNjExNTlaMDMxMTAvBgNV BAMTKDUzMTRGNUY3NzZDQjVFNDAyNzAzNUYyMkUxRTA4MkUyMkFCQ0QwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarzN+EdACPhBLJZxycpKZPpDA 1N7FGM3mda1vImXQGGnhC/75DGaOoI3FqmIbO7c8AWZQv+8vOPZ/gjTVH5MZeTI0 C1XzEAzsyTVr+0svObffakiaCyqPewzfembrL8m6x8j7UWro1R7WsajA0OVDszjr riQ19pZVgwdLT6Q38HAzM7aZ5oyDPKOKLJl0z9qixedD1xusj/EnB7q1LN9tTGQL 3ZZHLz9A+HrpzYxMZIQERybYZ/Ys1LNPUCTCLlOXZDNUfSelLjGma+outbuCNryH ohQNZd53dBhx+XcVd+LBX1xpXE3uFhltv15pZvEUJbYpm+0rPmhlX8XvGaxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUxT193bLXkAnA18i4eCC4iq80HIwHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVYLmskGIxbFzh92w5kGfWCfwJ7tyaRTWvp vnVyIhOhoiWTlCLudie4jRiXiNMRnmrcJk3WGezDCaDlOkTcFVJTAjfghg1aOKe1 L51LjQCucmst9CgeI2ag2VsG64041I31Ms8BS7LZvoajiS6ohgJGHHlMS9LY2eMY eR71GVue5YFR5dYJBZT9lZ3B1pI4O+tRNT56jBvjixKxnGXIiEXg9uK7DVgQ7TtV nS+9edkkZOXGCd06xnLixIYIdm0vw/ESlWSx0Vk24Kgwt0uwjyan44xlSWVLPXE9 4BywsqkHU/xW61Wixm00VeOxKwMk+kN5a9fYsqLAaA/t/LxMcNQ= -----END CERTIFICATE-----Generated at Mon Oct 26 00:53:21 2026 by rpki-client