$ rpki-client -vvvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json) Hash identifier: imIuMWxvybCIWRjdDJqzRs0K2LreVWEiKsAOCNZNWuM= Subject key identifier: 2D:99:0D:17:CE:91:10:9F:A5:AF:5C:FC:58:3D:95:F2:EF:CB:BA:C7 Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Certificate serial: 554295BFF90FDAC234061907B43671043B224BEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft Manifest number: EC Signing time: Mon 26 Oct 2026 06:34:59 +0000 Manifest this update: Mon 26 Oct 2026 06:29:59 +0000 Manifest next update: Tue 27 Oct 2026 08:32:59 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=) 2: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=) 3: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: sS4CHLzUorMpb75TUBJTkx881VsWQrvuRJf3vgmXdtc=) 4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 08:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:42:95:bf:f9:0f:da:c2:34:06:19:07:b4:36:71:04:3b:22:4b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Validity Not Before: Oct 26 06:29:59 2026 GMT Not After : Oct 27 08:32:59 2026 GMT Subject: CN=2D990D17CE91109FA5AF5CFC583D95F2EFCBBAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:2f:a9:5d:5a:ed:2e:62:f3:8b:79:4a:16: b1:60:8b:9f:a3:ff:9d:eb:f1:ff:32:ec:cf:ba:e4: 9b:aa:e8:09:22:de:e9:1c:af:b8:71:b6:04:4e:5e: 25:66:e2:04:46:84:bb:bc:a3:99:6d:25:90:0b:13: b3:f0:73:0d:65:08:63:57:cb:08:8b:e2:eb:ac:19: c7:45:2d:2f:c3:86:ba:23:1f:70:85:46:d6:bb:12: 8c:95:c5:23:10:89:f6:1e:6b:03:9b:e0:87:16:25: be:85:e2:9b:45:8b:ca:c3:c7:48:b2:1c:8e:d4:55: b7:10:77:e9:73:6d:fa:a7:c5:2e:47:84:c0:e6:c9: 3e:4e:ec:c9:16:7c:37:9f:17:89:6d:23:25:74:fd: cf:20:9e:c1:ff:a8:1c:d5:2a:42:77:12:8f:74:cb: 97:ef:f8:16:c0:23:9f:8c:67:35:22:d9:e9:84:e1: bd:7e:92:b0:60:85:f7:16:3b:0e:bf:e9:20:a4:01: 1b:e0:71:d1:82:05:91:9d:b0:d3:bf:32:46:76:e2: e3:8c:97:59:ce:de:d6:e9:c7:49:ac:de:14:4e:cd: 57:cb:b7:ac:5b:da:ee:8c:23:77:88:fe:70:c9:22: 0f:23:74:68:ac:b0:d0:5f:69:83:30:a8:b0:d5:47: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:99:0D:17:CE:91:10:9F:A5:AF:5C:FC:58:3D:95:F2:EF:CB:BA:C7 X509v3 Authority Key Identifier: keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:27:9f:c3:14:b8:6c:2d:c4:7d:18:d8:79:a2:03:b6:79:2a: 9d:fb:16:22:eb:af:0b:5e:84:25:d7:8e:da:c0:d3:8e:34:e3: 14:9e:ba:28:9c:e5:61:90:ef:7c:25:8e:c8:78:0b:76:cc:1f: c1:4f:11:ba:19:78:61:b4:b6:76:56:75:36:a5:41:ed:9d:37: 26:f6:cc:bf:1e:89:71:52:c9:e2:c6:e0:b0:ff:92:0f:e8:27: 89:88:19:a6:79:5e:56:67:04:87:61:fb:28:0a:bc:b5:90:b5: 39:b4:b4:b7:e9:10:8a:31:46:2a:63:92:f3:e9:2d:a3:96:e8: 2a:8e:a0:06:2e:b4:6d:c0:2b:4a:27:1d:63:df:af:76:e0:5b: 32:95:1e:fc:8c:94:31:a8:3f:1f:52:15:73:0d:da:a8:d6:e2: a4:89:3b:4b:a3:b1:a7:72:ca:d3:1f:de:f1:25:7e:4d:2b:e3: 0d:80:99:8d:1d:9a:17:20:cf:be:f2:13:9d:6e:58:f1:1e:2e: c6:d1:2a:52:48:62:a2:60:69:8e:95:47:c2:29:6e:ee:1f:41: 0a:80:4f:eb:c6:11:c4:3d:d3:1e:f3:66:a4:7d:aa:f0:f9:9b: 7a:1b:3e:e7:7c:7f:74:a0:02:d9:c1:d2:85:21:89:1e:1c:6e: 89:d1:30:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUKVv/kP2sI0BhkHtDZxBDsiS+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFG MzBBRjM3MzAeFw0yNjEwMjYwNjI5NTlaFw0yNjEwMjcwODMyNTlaMDMxMTAvBgNV BAMTKDJEOTkwRDE3Q0U5MTEwOUZBNUFGNUNGQzU4M0Q5NUYyRUZDQkJBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEy+pXVrtLmLzi3lKFrFgi5+j /53r8f8y7M+65Juq6Aki3ukcr7hxtgROXiVm4gRGhLu8o5ltJZALE7Pwcw1lCGNX ywiL4uusGcdFLS/DhrojH3CFRta7EoyVxSMQifYeawOb4IcWJb6F4ptFi8rDx0iy HI7UVbcQd+lzbfqnxS5HhMDmyT5O7MkWfDefF4ltIyV0/c8gnsH/qBzVKkJ3Eo90 y5fv+BbAI5+MZzUi2emE4b1+krBghfcWOw6/6SCkARvgcdGCBZGdsNO/MkZ24uOM l1nO3tbpx0ms3hROzVfLt6xb2u6MI3eI/nDJIg8jdGissNBfaYMwqLDVR85HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZkNF86REJ+lr1z8WD2V8u/LuscwHwYDVR0j BBgwFoAUiF828oGw1MxRbjgYMjy5wfMK83MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUyMjI2ZWEtNWUyNi00ZWE1LWE2ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4 MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFGMzBBRjM3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODVGMzZGMjgxQjBENENDNTE2RTM4MTgzMjNDQjlDMUYzMEFG MzczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5 QzFGMzBBRjM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0nn8MUuGwtxH0Y2HmiA7Z5Kp37FiLrrwte hCXXjtrA04404xSeuiic5WGQ73wljsh4C3bMH8FPEboZeGG0tnZWdTalQe2dNyb2 zL8eiXFSyeLG4LD/kg/oJ4mIGaZ5XlZnBIdh+ygKvLWQtTm0tLfpEIoxRipjkvPp LaOW6CqOoAYutG3AK0onHWPfr3bgWzKVHvyMlDGoPx9SFXMN2qjW4qSJO0ujsady ytMf3vElfk0r4w2AmY0dmhcgz77yE51uWPEeLsbRKlJIYqJgaY6VR8Ipbu4fQQqA T+vGEcQ90x7zZqR9qvD5m3obPud8f3SgAtnB0oUhiR4cbonRMHg= -----END CERTIFICATE-----Generated at Mon Oct 26 21:11:13 2026 by rpki-client