$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft File: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft (raw, json) Hash identifier: 8vxr/Z8BTWvjJagJV3bGMmzm1V+2eaFczf2Vrbu/L/k= Subject key identifier: 4D:94:3C:70:F0:F6:2E:78:0D:F4:CC:2E:89:49:10:2E:BD:11:86:58 Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A Certificate issuer: /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Certificate serial: 7E95001211CD03477A1C7DD6A8B090EBB7ED86DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft Manifest number: EC Signing time: Mon 26 Oct 2026 10:20:05 +0000 Manifest this update: Mon 26 Oct 2026 10:15:05 +0000 Manifest next update: Tue 27 Oct 2026 10:46:05 +0000 Files and hashes: 1: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl (hash: RV7ZqFLNHUec/sAQUi7V/YLjNCIPZb+Yjz3Qy1vjZCk=) 2: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: 6zf7vx7+kMHdnFJu/oDlY4/HuNaESvsIJtoWRx8KDTI=) 3: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 10:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:95:00:12:11:cd:03:47:7a:1c:7d:d6:a8:b0:90:eb:b7:ed:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Validity Not Before: Oct 26 10:15:05 2026 GMT Not After : Oct 27 10:46:05 2026 GMT Subject: CN=4D943C70F0F62E780DF4CC2E8949102EBD118658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:95:90:73:3a:e8:ae:fa:4c:98:f8:be:da: df:e9:ae:86:43:ce:69:66:ca:0a:2e:57:1b:39:65: ec:f9:06:88:84:c9:73:3a:1e:53:a2:37:a2:64:be: 41:2f:17:4d:ae:db:eb:18:9a:a2:aa:34:f2:68:19: e2:c9:77:1f:ec:4a:11:0f:2c:d1:17:08:e5:5b:a7: 8f:0c:ca:0a:4d:3b:a4:4f:f5:f5:6f:d1:08:ce:63: 77:2d:4a:18:2f:00:51:6e:8b:c1:f4:43:b4:ec:bf: 06:2b:98:6a:08:45:39:c3:d8:18:83:03:77:f7:3f: 05:64:86:d0:88:48:8f:dd:d8:e6:29:80:2c:3a:44: 6a:f6:17:87:fc:d2:4b:bb:48:2e:3a:29:9b:80:dc: 55:e7:1e:c2:27:aa:bc:bd:9e:c4:8a:f5:9f:ac:eb: 1b:29:05:aa:27:e0:c5:66:6b:fc:8a:ee:cf:4c:27: 8f:fe:e6:db:cf:3f:04:5d:ca:2a:98:6c:99:c2:6d: c3:2f:e9:18:15:72:53:b9:2b:2b:eb:4c:7a:3d:c2: 6c:79:8d:42:60:55:e2:85:e5:24:0b:f4:93:42:e7: 42:f4:cb:b2:99:e8:67:9a:f0:97:ce:41:7f:21:47: 5e:f5:ea:57:94:5a:e0:c9:46:20:f8:5b:97:89:ba: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:3C:70:F0:F6:2E:78:0D:F4:CC:2E:89:49:10:2E:BD:11:86:58 X509v3 Authority Key Identifier: keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:e0:ae:d4:bb:d1:64:76:dc:0b:b1:34:e0:89:cd:c4:37: b5:c2:e5:5c:06:b5:89:d3:5a:56:65:41:98:1d:ac:ba:97:1a: b4:83:0b:17:ac:44:2c:8b:3f:b1:26:04:02:12:d4:9d:f6:25: d3:b6:92:08:50:ad:d6:d8:b1:aa:1b:c7:67:b2:bb:e9:16:bc: 04:f2:94:68:a7:4b:05:74:7f:97:22:d0:ed:2f:9b:cf:13:d1: 25:58:4c:84:04:9b:83:37:9a:ff:59:56:2a:de:e9:c0:4f:1c: 39:ce:e0:16:c9:5d:0a:bd:69:b6:12:b0:86:3d:b5:e5:7d:c7: 74:df:6c:83:22:03:a3:4c:82:45:08:44:c0:de:0a:73:2e:aa: e7:84:f8:79:e6:26:17:68:89:3f:40:be:5b:a8:f9:f6:a2:97: b8:ae:f4:ab:98:c8:e5:6f:7a:cb:1e:1f:da:78:1d:6a:76:e9: ad:37:e9:6f:59:76:32:66:29:46:ba:d9:41:d6:02:c3:22:f3: 09:18:1d:43:3b:b2:d8:23:98:3b:66:14:dd:6c:36:a3:9a:a5: d6:60:1a:aa:e0:83:f3:87:5b:c0:33:bd:bf:8a:98:a0:d7:a2: 38:a2:13:81:f7:d5:2c:3a:e5:fb:55:75:df:8a:e2:7e:eb:a7: bc:a4:e6:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpUAEhHNA0d6HH3WqLCQ67ftht8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJG MjcwQUI3QTAeFw0yNjEwMjYxMDE1MDVaFw0yNjEwMjcxMDQ2MDVaMDMxMTAvBgNV BAMTKDREOTQzQzcwRjBGNjJFNzgwREY0Q0MyRTg5NDkxMDJFQkQxMTg2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+JWQczrorvpMmPi+2t/proZD zmlmygouVxs5Zez5BoiEyXM6HlOiN6JkvkEvF02u2+sYmqKqNPJoGeLJdx/sShEP LNEXCOVbp48MygpNO6RP9fVv0QjOY3ctShgvAFFui8H0Q7TsvwYrmGoIRTnD2BiD A3f3PwVkhtCISI/d2OYpgCw6RGr2F4f80ku7SC46KZuA3FXnHsInqry9nsSK9Z+s 6xspBaon4MVma/yK7s9MJ4/+5tvPPwRdyiqYbJnCbcMv6RgVclO5KyvrTHo9wmx5 jUJgVeKF5SQL9JNC50L0y7KZ6Gea8JfOQX8hR1716leUWuDJRiD4W5eJuha3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZQ8cPD2LngN9MwuiUkQLr0RhlgwHwYDVR0j BBgwFoAUHt4RgK6cmStkhc1lnF1+G/Jwq3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RmMDY4YmQtOGUzYS00Njk1LTg5ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBB RTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJGMjcwQUI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRURFMTE4MEFFOUM5OTJCNjQ4NUNENjU5QzVEN0UxQkYyNzBB QjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdF MUJGMjcwQUI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsd4K7Uu9FkdtwLsTTgic3EN7XC5VwGtYnT WlZlQZgdrLqXGrSDCxesRCyLP7EmBAIS1J32JdO2kghQrdbYsaobx2eyu+kWvATy lGinSwV0f5ci0O0vm88T0SVYTIQEm4M3mv9ZVire6cBPHDnO4BbJXQq9abYSsIY9 teV9x3TfbIMiA6NMgkUIRMDeCnMuqueE+HnmJhdoiT9Avluo+fail7iu9KuYyOVv esseH9p4HWp26a036W9ZdjJmKUa62UHWAsMi8wkYHUM7stgjmDtmFN1sNqOapdZg Gqrgg/OHW8Azvb+KmKDXojiiE4H31Sw65ftVdd+K4n7rp7yk5uQ= -----END CERTIFICATE-----Generated at Mon Oct 26 21:10:29 2026 by rpki-client