$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json) Hash identifier: E+DXVxiS+ZX6HIs8ezuGAUPLg8rh0/ttCXP+9qUHE8k= Subject key identifier: 0D:3E:BB:C3:FA:0A:C8:07:3D:19:AD:65:F6:7E:6C:4D:EF:A5:F2:21 Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Certificate serial: 4ABD67350234411720420B147A94EDA74B150E40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft Manifest number: EA Signing time: Sat 24 Oct 2026 17:30:56 +0000 Manifest this update: Sat 24 Oct 2026 17:25:55 +0000 Manifest next update: Sun 25 Oct 2026 17:44:55 +0000 Files and hashes: 1: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: AlLW2+qt3YzGgfcoRrJdplSF3LuOTpi/y9MbLgYaxpo=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bd:67:35:02:34:41:17:20:42:0b:14:7a:94:ed:a7:4b:15:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Validity Not Before: Oct 24 17:25:55 2026 GMT Not After : Oct 25 17:44:55 2026 GMT Subject: CN=0D3EBBC3FA0AC8073D19AD65F67E6C4DEFA5F221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:6b:0c:1a:a4:65:56:22:9d:9b:cb:07:c3: ba:86:d6:f8:e7:63:40:65:08:f0:d5:6c:8a:94:3f: 7b:f8:79:00:66:6c:bf:d7:a8:69:4d:db:d0:da:b3: 97:a0:d6:3f:4c:d2:f2:e8:db:33:c2:07:d7:b8:98: a1:2a:c7:39:27:64:6d:6f:cf:07:49:86:11:5f:8d: 6b:fa:c0:30:bb:c8:c4:59:16:b9:8f:b2:c4:db:23: 86:bf:06:94:f9:cf:f5:2d:e1:bc:5c:55:63:32:95: 54:cb:a1:cf:09:a9:02:42:ab:6b:cb:69:c4:d1:66: ae:8d:0b:cb:f3:5e:41:1f:52:3d:8f:c3:e7:0a:8c: f5:65:cf:78:cf:fa:0c:fe:b4:71:e3:95:5e:48:3f: 57:8b:6d:1c:a2:db:07:6e:df:65:04:0e:bd:e2:8f: 7b:43:f4:11:93:82:fe:4a:51:f8:2d:f5:c2:d1:db: 3c:db:c8:02:67:4d:52:5a:e7:4a:62:bb:35:50:ae: 12:37:c2:91:7d:07:38:56:10:2b:80:84:fc:11:0d: 74:62:58:95:ec:ed:17:15:f2:47:51:68:e1:54:4d: a3:54:95:03:19:bf:4a:e5:50:24:5c:cb:51:d6:a8: b8:67:91:96:8f:95:20:9d:dc:a3:cc:d6:73:ee:14: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3E:BB:C3:FA:0A:C8:07:3D:19:AD:65:F6:7E:6C:4D:EF:A5:F2:21 X509v3 Authority Key Identifier: keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:8e:a3:55:db:5a:54:18:fd:b1:d4:e9:4a:c0:44:d1:9a: b4:b5:9b:b6:94:dc:bb:89:24:3b:98:2e:b8:9a:03:c8:73:04: ea:bc:78:be:5a:24:a9:9d:7a:56:59:ec:ad:b0:ae:c5:3f:de: 1f:b5:2b:25:92:a7:e6:e9:2b:4c:1c:20:7a:50:bc:c3:20:b0: 74:1e:f3:1d:89:37:14:2d:54:24:e3:6b:76:5b:86:8f:9d:29: 6e:23:58:33:24:75:51:5b:a7:6f:54:f0:b1:46:61:39:e2:e6: a5:db:1c:e7:95:f6:b7:1d:26:21:73:98:6b:a8:c6:96:50:13: aa:39:fe:4f:7e:ef:dd:5b:ca:5f:36:4f:aa:92:72:ce:2d:ea: 64:c9:a8:1e:0f:f1:03:dd:df:8e:22:96:ba:00:e4:3d:f2:e3: 55:1d:a4:5e:cc:76:11:e0:32:55:1f:a5:7d:09:02:79:ff:4c: 21:1b:dd:a2:61:94:39:66:4f:f6:c4:8c:1c:0b:ee:d7:63:cc: 58:58:29:4b:87:01:01:7b:d2:ae:1f:db:c0:18:b2:17:03:15: e6:d2:99:17:a2:7f:b9:7b:6a:14:de:c8:c9:a9:56:91:ec:00: cc:65:2b:c2:c2:1d:22:88:57:97:ee:29:1f:d8:25:13:f8:87: ff:df:4c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSr1nNQI0QRcgQgsUepTtp0sVDkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG MTJBNEExRjAeFw0yNjEwMjQxNzI1NTVaFw0yNjEwMjUxNzQ0NTVaMDMxMTAvBgNV BAMTKDBEM0VCQkMzRkEwQUM4MDczRDE5QUQ2NUY2N0U2QzRERUZBNUYyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0GsMGqRlViKdm8sHw7qG1vjn Y0BlCPDVbIqUP3v4eQBmbL/XqGlN29Das5eg1j9M0vLo2zPCB9e4mKEqxzknZG1v zwdJhhFfjWv6wDC7yMRZFrmPssTbI4a/BpT5z/Ut4bxcVWMylVTLoc8JqQJCq2vL acTRZq6NC8vzXkEfUj2Pw+cKjPVlz3jP+gz+tHHjlV5IP1eLbRyi2wdu32UEDr3i j3tD9BGTgv5KUfgt9cLR2zzbyAJnTVJa50piuzVQrhI3wpF9BzhWECuAhPwRDXRi WJXs7RcV8kdRaOFUTaNUlQMZv0rlUCRcy1HWqLhnkZaPlSCd3KPM1nPuFMTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDT67w/oKyAc9Ga1l9n5sTe+l8iEwHwYDVR0j BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4 OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0 QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpnjqNV21pUGP2x1OlKwETRmrS1m7aU3LuJ JDuYLriaA8hzBOq8eL5aJKmdelZZ7K2wrsU/3h+1KyWSp+bpK0wcIHpQvMMgsHQe 8x2JNxQtVCTja3Zbho+dKW4jWDMkdVFbp29U8LFGYTni5qXbHOeV9rcdJiFzmGuo xpZQE6o5/k9+791byl82T6qScs4t6mTJqB4P8QPd344ilroA5D3y41UdpF7MdhHg MlUfpX0JAnn/TCEb3aJhlDlmT/bEjBwL7tdjzFhYKUuHAQF70q4f28AYshcDFebS mReif7l7ahTeyMmpVpHsAMxlK8LCHSKIV5fuKR/YJRP4h//fTEk= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:59 2026 by rpki-client