$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: fv+yMvHUR73zM68vDA3rJ0pAFcikXolHtKasUa+j3tU= Subject key identifier: 57:47:3D:41:3A:D1:C6:A8:6B:4E:58:2B:82:B2:17:A3:F0:9E:B9:9F Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 711142CAD976EAE18C0D5A02622A38C6D6F946 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: ED Signing time: Sun 25 Oct 2026 18:55:28 +0000 Manifest this update: Sun 25 Oct 2026 18:50:28 +0000 Manifest next update: Mon 26 Oct 2026 20:05:28 +0000 Files and hashes: 1: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) 2: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 3: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) 4: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) 5: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) 6: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: yCws++8vWp9oRn9Lr0ylUks5bSgIU+IsqZzXph2/Vw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:11:42:ca:d9:76:ea:e1:8c:0d:5a:02:62:2a:38:c6:d6:f9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Oct 25 18:50:28 2026 GMT Not After : Oct 26 20:05:28 2026 GMT Subject: CN=57473D413AD1C6A86B4E582B82B217A3F09EB99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:80:93:7d:d3:90:33:7e:2a:87:97:a5:c6: 12:47:02:e7:f0:72:72:1b:45:3d:ec:5a:10:5d:e2: ed:77:80:c6:d2:73:38:d5:0d:9b:0e:93:bf:73:90: d1:2d:b1:a0:87:b0:1f:06:e7:7a:4f:d3:4c:0f:55: 5e:f7:da:09:ff:ea:fa:fc:13:41:e0:31:c8:85:79: b9:77:ba:a0:c5:84:9b:ce:60:b0:61:72:9a:7a:08: 4c:17:26:23:c7:41:14:44:c7:ec:59:cb:14:ff:d4: 70:38:5c:db:b5:26:e0:66:29:a4:f5:e1:43:52:f4: f8:71:56:13:b2:1b:95:18:1c:58:36:6c:e8:27:26: d1:7b:9b:fd:da:7f:30:a1:ad:a5:4d:57:e3:cc:34: 1e:0f:0a:35:69:2f:49:d5:7b:38:6a:69:7d:20:6a: ee:64:84:ed:b6:63:41:87:17:be:64:46:0a:24:f5: 2e:1a:11:02:e1:03:10:c9:dc:be:1f:76:c4:73:a1: 4a:5e:65:ab:87:cf:6f:f5:1c:9e:a2:b7:5b:b4:22: d1:b8:d3:13:d9:34:70:c8:e2:a4:c4:23:4b:e2:55: 40:cc:a8:fb:6b:50:38:e2:96:24:1e:cb:94:b0:c9: 26:64:0f:bb:3a:21:70:b7:d9:82:a2:8e:99:75:f4: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:3D:41:3A:D1:C6:A8:6B:4E:58:2B:82:B2:17:A3:F0:9E:B9:9F X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0e:65:b9:b6:17:d2:66:33:46:3b:cb:b3:9b:e3:f3:9d:60: 08:f4:d1:bf:b1:14:48:85:61:da:ae:1d:dd:bd:b8:63:99:52: bc:80:6c:a0:c8:b2:f4:61:20:6b:e8:3d:af:1c:70:63:5a:b2: a2:80:6d:9c:bb:52:59:d2:c2:f9:29:94:3d:54:c7:18:fe:8e: c6:a0:38:23:3d:8a:32:fe:44:ba:c1:a4:02:05:1b:01:48:38: c4:46:57:99:26:d8:48:06:09:b3:c1:31:24:a9:38:ea:0f:b4: d3:88:07:1f:ab:b0:52:27:57:8f:59:2a:d8:70:fc:35:98:d2: f4:2f:92:2c:fb:6a:5c:1c:dc:22:bf:18:81:14:56:5e:b5:9c: 1d:76:d9:b5:1a:eb:77:ea:35:8b:c9:f9:64:55:d2:49:ce:b7: 32:01:76:5b:df:b8:dc:b6:24:b1:13:10:c5:17:ad:5a:bb:04: 8b:99:49:86:21:5e:49:a1:83:dd:41:1c:a5:d8:c7:b0:45:23: 9c:a4:df:26:72:ed:79:38:ab:f9:bc:92:98:dc:69:60:cf:ec: a0:fc:77:e1:05:6e:5c:7e:62:64:a7:ad:3d:e9:82:88:2f:e8: 0b:69:23:93:44:c8:3f:5f:b6:a1:94:7b:73:0a:fe:a8:10:b3: 84:0f:fd:68 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITcRFCytl26uGMDVoCYio4xtb5RjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJE N0MwOEJFMB4XDTI2MTAyNTE4NTAyOFoXDTI2MTAyNjIwMDUyOFowMzExMC8GA1UE AxMoNTc0NzNENDEzQUQxQzZBODZCNEU1ODJCODJCMjE3QTNGMDlFQjk5RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyTgJN905AzfiqHl6XGEkcC5/By chtFPexaEF3i7XeAxtJzONUNmw6Tv3OQ0S2xoIewHwbnek/TTA9VXvfaCf/q+vwT QeAxyIV5uXe6oMWEm85gsGFymnoITBcmI8dBFETH7FnLFP/UcDhc27Um4GYppPXh Q1L0+HFWE7IblRgcWDZs6Ccm0Xub/dp/MKGtpU1X48w0Hg8KNWkvSdV7OGppfSBq 7mSE7bZjQYcXvmRGCiT1LhoRAuEDEMncvh92xHOhSl5lq4fPb/UcnqK3W7Qi0bjT E9k0cMjipMQjS+JVQMyo+2tQOOKWJB7LlLDJJmQPuzohcLfZgqKOmXX0EgMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRXRz1BOtHGqGtOWCuCshej8J65nzAfBgNVHSME GDAWgBSFPt16s++aE6B3nyYSeG9tLXwIvjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC84NTNFREQ3QUIz RUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0MwOEJFLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzg1M0VERDdBQjNFRjlBMTNBMDc3OUYyNjEyNzg2RjZEMkQ3QzA4 QkUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NWRmZjliMy05MDQxLTRkZDYtYjdh Yi0wMjA2MGQ2NWQwOWEvMC84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2 RDJEN0MwOEJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAaQ5lubYX0mYzRjvLs5vj851gCPTRv7EUSIVh 2q4d3b24Y5lSvIBsoMiy9GEga+g9rxxwY1qyooBtnLtSWdLC+SmUPVTHGP6OxqA4 Iz2KMv5EusGkAgUbAUg4xEZXmSbYSAYJs8ExJKk46g+004gHH6uwUidXj1kq2HD8 NZjS9C+SLPtqXBzcIr8YgRRWXrWcHXbZtRrrd+o1i8n5ZFXSSc63MgF2W9+43LYk sRMQxRetWrsEi5lJhiFeSaGD3UEcpdjHsEUjnKTfJnLteTir+bySmNxpYM/soPx3 4QVuXH5iZKetPemCiC/oC2kjk0TIP1+2oZR7cwr+qBCzhA/9aA== -----END CERTIFICATE-----Generated at Mon Oct 26 01:05:06 2026 by rpki-client