$ rpki-client -vvvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json) Hash identifier: On5A6O31j9FKv3hYGde30Bo0SDTz4vWxRYGPW11F4P8= Subject key identifier: EF:79:54:38:88:CD:C2:89:33:FF:5E:B6:83:32:0F:BF:80:D9:2D:00 Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Certificate serial: 1CC09059893E1EC0C0907413445EBB75CAC55EB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft Manifest number: EC Signing time: Mon 26 Oct 2026 10:14:58 +0000 Manifest this update: Mon 26 Oct 2026 10:09:58 +0000 Manifest next update: Tue 27 Oct 2026 11:38:58 +0000 Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=) 3: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: 8i87KtSrTUAp5YcHevIfZGk2zVDfulxlZoAN60+2ARI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 11:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c0:90:59:89:3e:1e:c0:c0:90:74:13:44:5e:bb:75:ca:c5:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Validity Not Before: Oct 26 10:09:58 2026 GMT Not After : Oct 27 11:38:58 2026 GMT Subject: CN=EF79543888CDC28933FF5EB683320FBF80D92D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:07:00:d1:88:1c:9c:fe:5d:11:b9:2a:33: 76:89:2c:9d:5d:3d:86:94:1e:8b:44:52:52:9d:35: 8b:de:e2:cf:fa:89:95:68:da:dc:6e:2c:74:15:33: f7:a9:1b:9f:c9:cd:f5:39:13:f7:92:47:4d:8b:89: a9:bc:66:16:2f:10:38:d4:b8:f8:48:73:16:87:88: 93:a0:2e:1f:79:bf:be:3e:30:5e:de:4a:3f:2a:67: ad:1d:8d:9d:9a:49:7d:3d:7b:f5:a3:b0:7e:9f:00: 97:8b:a3:97:cf:5c:06:67:70:46:a3:5c:73:e3:91: 42:9e:30:27:c5:ac:b4:35:0c:0a:31:9e:18:c0:18: 28:48:5a:af:25:de:10:54:e4:dd:4b:78:cf:ff:8c: d7:78:2c:34:45:63:cd:da:54:be:60:06:7e:10:ed: f8:b4:85:56:7a:fd:0a:a2:bc:be:a9:8f:5b:a3:7f: 04:3f:10:52:8e:f6:f2:52:9c:87:db:9f:47:87:70: 1a:f3:4c:27:ca:0c:6a:1c:3f:4e:9e:1d:c3:23:ec: f5:5e:df:8b:a3:0c:94:cc:8c:b6:9d:07:b9:b9:fd: 6e:d6:4a:e7:b1:3c:42:9a:c3:50:cd:30:e5:28:c7: 54:0e:3c:51:0a:cd:59:6e:73:71:c5:21:99:96:3a: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:79:54:38:88:CD:C2:89:33:FF:5E:B6:83:32:0F:BF:80:D9:2D:00 X509v3 Authority Key Identifier: keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:05:bd:af:dd:09:53:5b:2a:6f:bf:b0:4a:a5:38:1e:7e:ca: e7:1e:7b:df:b8:cd:67:b8:51:93:b8:5f:c5:71:64:a8:df:e5: ab:5c:e1:8e:64:dc:f6:8a:52:38:f7:cc:ee:7e:b0:37:a5:40: a4:28:71:8d:7a:95:89:d2:7b:7a:a4:47:3e:b3:7a:88:2a:b4: 67:55:fd:ec:dd:47:7a:7f:c0:6d:d9:fc:3a:a8:13:ff:fc:4c: 89:7a:32:f7:7b:f4:13:f3:32:3f:56:f2:1d:8b:42:bd:87:59: 91:03:9d:51:66:30:1b:e1:1c:f9:82:ef:22:b9:7d:d5:81:5e: 33:51:3b:a5:2d:36:40:8c:b6:5d:2b:10:fb:9c:95:cb:1c:64: 4a:0f:fe:86:60:59:95:62:21:9a:b9:97:98:61:02:aa:7d:72: a5:46:99:e0:31:0f:c2:a1:89:f6:3b:57:56:c3:be:93:71:ee: d6:65:75:84:3a:0b:9b:2d:43:2c:03:96:57:14:39:1d:c7:4b: 43:b1:c2:54:68:ba:b6:80:35:de:7a:86:4d:08:42:37:82:0c: 78:b7:2c:d6:35:26:89:52:e3:98:d1:2e:9e:44:8d:fa:5d:90: 1a:2a:e0:17:8b:c0:6c:c9:38:b1:55:fe:79:19:56:86:a8:15: 6f:ab:31:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMCQWYk+HsDAkHQTRF67dcrFXrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD RDZGQjlCOTAeFw0yNjEwMjYxMDA5NThaFw0yNjEwMjcxMTM4NThaMDMxMTAvBgNV BAMTKEVGNzk1NDM4ODhDREMyODkzM0ZGNUVCNjgzMzIwRkJGODBEOTJEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TQcA0YgcnP5dEbkqM3aJLJ1d PYaUHotEUlKdNYve4s/6iZVo2txuLHQVM/epG5/JzfU5E/eSR02Liam8ZhYvEDjU uPhIcxaHiJOgLh95v74+MF7eSj8qZ60djZ2aSX09e/WjsH6fAJeLo5fPXAZncEaj XHPjkUKeMCfFrLQ1DAoxnhjAGChIWq8l3hBU5N1LeM//jNd4LDRFY83aVL5gBn4Q 7fi0hVZ6/QqivL6pj1ujfwQ/EFKO9vJSnIfbn0eHcBrzTCfKDGocP06eHcMj7PVe 34ujDJTMjLadB7m5/W7WSuexPEKaw1DNMOUox1QOPFEKzVluc3HFIZmWOn+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73lUOIjNwokz/162gzIPv4DZLQAwHwYDVR0j BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAFva/dCVNbKm+/sEqlOB5+yucee9+4zWe4 UZO4X8VxZKjf5atc4Y5k3PaKUjj3zO5+sDelQKQocY16lYnSe3qkRz6zeogqtGdV /ezdR3p/wG3Z/DqoE//8TIl6Mvd79BPzMj9W8h2LQr2HWZEDnVFmMBvhHPmC7yK5 fdWBXjNRO6UtNkCMtl0rEPuclcscZEoP/oZgWZViIZq5l5hhAqp9cqVGmeAxD8Kh ifY7V1bDvpNx7tZldYQ6C5stQywDllcUOR3HS0OxwlRouraANd56hk0IQjeCDHi3 LNY1JolS45jRLp5EjfpdkBoq4BeLwGzJOLFV/nkZVoaoFW+rMdE= -----END CERTIFICATE-----Generated at Mon Oct 26 21:16:57 2026 by rpki-client