$ rpki-client -vvvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: 5Q+tUfSZFY6ALDR/zfjeTrFBcAflsNJEEmdm73gN9As= Subject key identifier: 7D:42:FC:1B:7A:56:FC:66:FF:CD:45:8F:8B:DE:B0:FF:04:B4:27:3E Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 2D21DD43C81277AC6672903C90703C3F88DB7BBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: EB Signing time: Sun 25 Oct 2026 08:42:22 +0000 Manifest this update: Sun 25 Oct 2026 08:37:22 +0000 Manifest next update: Mon 26 Oct 2026 11:38:22 +0000 Files and hashes: 1: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: fsrl368lK0sBDkJ7dCyFwschIhtvT2t6u7ML/vJZJYY=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 3: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 4: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:dd:43:c8:12:77:ac:66:72:90:3c:90:70:3c:3f:88:db:7b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: Oct 25 08:37:22 2026 GMT Not After : Oct 26 11:38:22 2026 GMT Subject: CN=7D42FC1B7A56FC66FFCD458F8BDEB0FF04B4273E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:6d:9b:3d:44:13:10:ab:d2:9a:d6:4f:51: a3:70:6d:fb:94:41:8a:f5:27:17:3e:fa:36:fc:4e: 42:3c:59:54:7e:47:26:2b:17:97:1e:ea:fc:c9:3f: e7:07:44:15:4a:a9:ef:2f:fd:3a:6f:bb:93:c5:6d: 06:3b:b5:78:87:f0:a5:7e:18:24:fe:cb:c7:0a:09: 5d:8f:17:c4:d6:58:77:b4:37:85:82:7f:1b:f0:a6: 0f:7b:d7:90:43:f0:bd:3e:ab:c9:51:ca:33:e9:85: 2e:42:9b:0b:92:e0:b3:a2:84:71:45:64:32:79:78: af:e2:51:dc:ea:12:ea:59:a0:c8:1a:a5:91:03:54: c9:a8:1a:09:cf:e3:26:13:30:fa:36:16:8f:4a:fb: 9b:6c:87:78:ae:f6:e2:42:d5:68:5c:d0:27:6f:d3: f8:c6:a0:77:ab:c1:28:b2:eb:af:af:97:c2:c4:fd: c7:30:71:4a:94:64:53:40:32:12:41:5f:eb:0b:9e: 0a:6a:28:34:a2:6f:39:bf:62:e9:b1:9d:85:97:54: 1d:e7:b5:19:34:61:5f:f0:2d:e0:eb:77:48:6b:eb: b3:fd:c3:02:5e:af:52:d7:6c:f8:89:74:4f:b9:bf: 3d:95:69:e1:12:c6:2f:3b:87:b0:5e:af:89:c6:27: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:FC:1B:7A:56:FC:66:FF:CD:45:8F:8B:DE:B0:FF:04:B4:27:3E X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0f:00:ea:ec:2b:3c:84:7c:97:77:8f:bd:1d:ac:4a:22:27: be:14:6d:91:97:6b:da:1b:a1:8c:8e:ca:69:c0:f9:59:a9:7f: 1f:e5:22:70:8f:66:cd:ed:58:79:4a:d6:2e:5b:64:69:a8:15: e4:51:68:f8:07:ee:e1:8e:40:4d:d7:63:1d:5e:e8:a2:66:95: 5f:bd:2f:22:e6:4f:e8:98:0b:8f:1a:a9:05:be:eb:8e:e1:33: 0b:a4:d3:3f:48:c8:c0:e5:90:6b:61:9d:03:7b:23:d0:6e:94: 8d:50:73:0b:1e:87:28:53:39:02:a6:0e:28:42:a8:be:91:2f: 73:c4:b3:aa:fb:28:bf:a9:d9:a6:0d:d1:7f:4e:ed:16:2f:85: 7e:f6:9c:3e:65:ca:f2:85:26:55:c2:c5:59:ff:3d:b5:e9:5e: 31:ce:89:6c:07:3c:5a:05:80:c1:ba:d9:09:b7:f5:c3:51:d2: 76:66:ff:0d:b0:c4:81:dd:b1:ce:c0:00:57:a0:25:ca:e4:f3: 59:03:e7:10:d2:cb:93:22:66:88:0f:29:59:ad:29:a9:85:1a: 63:16:d2:de:7a:ad:d8:f1:e2:62:71:60:65:02:e6:86:c6:c4: e9:84:aa:07:0a:4b:43:89:12:0f:6e:27:60:5c:05:7c:9e:8a: f2:80:a8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSHdQ8gSd6xmcpA8kHA8P4jbe70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjEwMjUwODM3MjJaFw0yNjEwMjYxMTM4MjJaMDMxMTAvBgNV BAMTKDdENDJGQzFCN0E1NkZDNjZGRkNENDU4RjhCREVCMEZGMDRCNDI3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5m2bPUQTEKvSmtZPUaNwbfuU QYr1Jxc++jb8TkI8WVR+RyYrF5ce6vzJP+cHRBVKqe8v/Tpvu5PFbQY7tXiH8KV+ GCT+y8cKCV2PF8TWWHe0N4WCfxvwpg9715BD8L0+q8lRyjPphS5CmwuS4LOihHFF ZDJ5eK/iUdzqEupZoMgapZEDVMmoGgnP4yYTMPo2Fo9K+5tsh3iu9uJC1Whc0Cdv 0/jGoHerwSiy66+vl8LE/ccwcUqUZFNAMhJBX+sLngpqKDSibzm/YumxnYWXVB3n tRk0YV/wLeDrd0hr67P9wwJer1LXbPiJdE+5vz2VaeESxi87h7Ber4nGJ+JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUL8G3pW/Gb/zUWPi96w/wS0Jz4wHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMPAOrsKzyEfJd3j70drEoiJ74UbZGXa9ob oYyOymnA+Vmpfx/lInCPZs3tWHlK1i5bZGmoFeRRaPgH7uGOQE3XYx1e6KJmlV+9 LyLmT+iYC48aqQW+647hMwuk0z9IyMDlkGthnQN7I9BulI1QcwsehyhTOQKmDihC qL6RL3PEs6r7KL+p2aYN0X9O7RYvhX72nD5lyvKFJlXCxVn/PbXpXjHOiWwHPFoF gMG62Qm39cNR0nZm/w2wxIHdsc7AAFegJcrk81kD5xDSy5MiZogPKVmtKamFGmMW 0t56rdjx4mJxYGUC5obGxOmEqgcKS0OJEg9uJ2BcBXyeivKAqKU= -----END CERTIFICATE-----Generated at Mon Oct 26 01:43:36 2026 by rpki-client