$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: gzGok+LJWffCEhqTWQcjzt4pSa2UI7NEp74loeqwapU= Subject key identifier: 18:86:6C:CC:F6:99:AD:50:34:28:B7:61:A6:68:7A:ED:95:00:8E:FA Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 44B02D5BBB80542B8CE7BBAC7FD60AD633A20729 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: ED Signing time: Sun 25 Oct 2026 20:57:51 +0000 Manifest this update: Sun 25 Oct 2026 20:52:51 +0000 Manifest next update: Mon 26 Oct 2026 23:41:51 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 2: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: ARfIzCF+ObGEZ8ofj5Gul1EKDYk5dr0vPUktdFyEoVo=) 3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 23:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b0:2d:5b:bb:80:54:2b:8c:e7:bb:ac:7f:d6:0a:d6:33:a2:07:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Oct 25 20:52:51 2026 GMT Not After : Oct 26 23:41:51 2026 GMT Subject: CN=18866CCCF699AD503428B761A6687AED95008EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:ed:1e:5a:94:87:ae:7d:d2:0b:c9:bd:14: 37:75:40:f5:39:42:57:a3:8f:c3:86:cf:b6:8c:3b: dc:a8:aa:1d:70:37:8c:af:78:f7:a2:35:1e:2a:6a: 77:fd:b3:1e:67:da:a9:db:69:b9:a2:d4:19:9d:ac: 12:d3:ad:f6:93:7a:03:de:d1:0a:e4:6d:82:27:53: 70:1b:9f:19:b3:15:38:37:7c:cf:81:c1:f0:3a:00: 2d:1b:fb:b1:4e:ec:1c:1e:53:84:ab:6f:4e:c4:ef: ad:e1:4d:91:eb:f9:b1:7b:2d:22:93:cc:6e:1c:f1: 97:51:5c:4a:a2:c8:0f:97:6f:27:98:c4:fe:02:e4: a7:50:08:1b:13:a1:43:e0:a1:51:80:a2:fe:e0:30: 62:c2:40:87:c1:21:b7:f4:93:38:58:64:50:ed:ea: 5c:2a:a3:39:6c:e1:5d:b3:4d:88:ba:ea:71:0f:ff: 72:92:e0:d9:0f:cb:ea:15:b5:0b:37:5a:f1:35:3b: 6e:09:91:88:12:e3:eb:61:71:95:2b:2c:5a:83:fe: e0:38:4f:76:b1:9e:5d:96:be:0e:2c:6b:99:c9:62: f1:c3:6d:4a:6b:f2:00:71:ec:94:7e:ea:9a:94:71: a0:5b:ae:9e:77:95:1a:74:76:0e:cd:1e:e4:2f:da: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:6C:CC:F6:99:AD:50:34:28:B7:61:A6:68:7A:ED:95:00:8E:FA X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c0:17:02:10:54:08:1d:6a:76:a8:c8:cf:f5:84:da:58:22: 5a:c3:01:6a:96:7a:7a:3b:cb:aa:fc:5b:ec:c3:62:e9:bf:4e: 4d:2a:c1:6f:cd:50:54:25:84:b5:7e:3b:93:0e:2d:3e:6f:30: 07:3a:24:fd:da:ec:bc:b8:2b:04:58:ee:ee:fc:3f:ed:92:04: 4d:01:a0:be:44:2d:91:dc:ce:52:60:ea:83:31:96:b4:42:fb: d9:91:f6:95:17:8b:9a:56:16:fa:a8:80:67:6e:81:bd:8b:93: 6f:c2:66:9e:f5:2f:7e:12:b2:c4:61:c0:59:00:8d:40:fc:c4: 2b:3f:9e:75:c3:dd:e3:b1:c1:fd:7e:8f:f7:8c:90:b9:b1:8c: 2d:f5:ff:97:b3:b9:bd:c7:9c:00:35:55:66:e5:72:2f:d9:b8: 96:18:00:16:cd:b9:e6:64:aa:8e:59:a7:12:11:86:ec:4d:d3: 1e:43:b8:11:1e:03:e2:a3:be:b3:08:3e:bc:e0:94:3f:eb:b8: b0:c4:d3:ed:7f:21:b9:93:e4:f2:cd:31:8f:e9:4f:33:5d:30: fb:13:61:8b:99:dc:2b:83:24:43:ad:c4:02:cb:7e:ed:c1:69: c6:18:73:37:4f:2f:b8:15:f4:5b:b0:78:ad:9e:31:ed:d1:fe: 09:cd:b5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLAtW7uAVCuM57usf9YK1jOiBykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjEwMjUyMDUyNTFaFw0yNjEwMjYyMzQxNTFaMDMxMTAvBgNV BAMTKDE4ODY2Q0NDRjY5OUFENTAzNDI4Qjc2MUE2Njg3QUVEOTUwMDhFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu+0eWpSHrn3SC8m9FDd1QPU5 Qlejj8OGz7aMO9yoqh1wN4yvePeiNR4qanf9sx5n2qnbabmi1BmdrBLTrfaTegPe 0QrkbYInU3AbnxmzFTg3fM+BwfA6AC0b+7FO7BweU4Srb07E763hTZHr+bF7LSKT zG4c8ZdRXEqiyA+XbyeYxP4C5KdQCBsToUPgoVGAov7gMGLCQIfBIbf0kzhYZFDt 6lwqozls4V2zTYi66nEP/3KS4NkPy+oVtQs3WvE1O24JkYgS4+thcZUrLFqD/uA4 T3axnl2Wvg4sa5nJYvHDbUpr8gBx7JR+6pqUcaBbrp53lRp0dg7NHuQv2jUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIZszPaZrVA0KLdhpmh67ZUAjvowHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETAFwIQVAgdanaoyM/1hNpYIlrDAWqWeno7 y6r8W+zDYum/Tk0qwW/NUFQlhLV+O5MOLT5vMAc6JP3a7Ly4KwRY7u78P+2SBE0B oL5ELZHczlJg6oMxlrRC+9mR9pUXi5pWFvqogGdugb2Lk2/CZp71L34SssRhwFkA jUD8xCs/nnXD3eOxwf1+j/eMkLmxjC31/5ezub3HnAA1VWblci/ZuJYYABbNueZk qo5ZpxIRhuxN0x5DuBEeA+KjvrMIPrzglD/ruLDE0+1/IbmT5PLNMY/pTzNdMPsT YYuZ3CuDJEOtxALLfu3BacYYczdPL7gV9FuweK2eMe3R/gnNtU4= -----END CERTIFICATE-----Generated at Mon Oct 26 10:56:05 2026 by rpki-client