$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: L8huz4Oc7F/xWGMcIXNu6CQNY1oh6IU3cYmlnJINgBk= Subject key identifier: 50:4C:FA:EF:6C:63:24:A8:D9:01:23:B6:B8:00:B2:DC:B5:B8:F0:DB Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 6AD968BF8C3595AA0369759905618E2FF26C6BAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: EC Signing time: Sun 25 Oct 2026 02:37:15 +0000 Manifest this update: Sun 25 Oct 2026 02:32:15 +0000 Manifest next update: Mon 26 Oct 2026 04:37:15 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: LwYyS3MNf6atD0YIvZUrGqcNwhHsRd3dBMghJfN0wfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d9:68:bf:8c:35:95:aa:03:69:75:99:05:61:8e:2f:f2:6c:6b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Oct 25 02:32:15 2026 GMT Not After : Oct 26 04:37:15 2026 GMT Subject: CN=504CFAEF6C6324A8D90123B6B800B2DCB5B8F0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:e5:8a:57:f2:91:10:cc:29:9d:75:73:b8: ae:51:11:3c:07:fb:3e:4a:f5:43:2e:13:16:7c:23: a1:e3:0e:52:b8:27:66:ef:9a:b5:b3:02:18:0b:ff: 63:ae:96:10:ec:bf:18:6b:01:6f:26:74:54:c6:77: c3:07:96:1f:e1:b7:6c:56:f4:03:7e:02:b8:79:08: 0c:0c:9a:a5:36:27:82:05:7d:23:60:ad:fa:c8:63: 2e:e3:65:02:63:6a:26:12:9f:ea:21:04:fb:b3:5c: 01:55:ec:00:19:8a:68:53:3c:1d:12:32:63:7d:6a: db:9e:29:97:0e:d3:9a:55:dd:68:64:1e:3b:60:79: 12:4d:b5:cd:f2:36:a1:d3:77:76:e8:dd:c9:1b:c9: ae:30:c0:95:01:02:3a:19:fe:b3:54:f0:8b:13:f2: af:af:04:96:cf:7a:5f:27:70:4a:4d:ba:c7:d6:be: 8c:86:fb:64:b1:e1:0d:7d:cd:3b:af:bd:7c:9e:52: 40:d5:1b:52:06:77:27:d8:4c:47:2b:aa:0a:47:3a: 62:7c:2d:cd:56:7c:16:f8:e0:54:1d:98:b4:49:c3: 6d:09:b9:c6:7d:48:49:1f:42:ed:a2:cf:52:40:31: 87:65:a1:f8:d5:51:5f:c8:64:14:c0:1f:0d:61:87: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:FA:EF:6C:63:24:A8:D9:01:23:B6:B8:00:B2:DC:B5:B8:F0:DB X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8c:2b:24:30:76:16:7d:99:c1:34:bf:b5:35:ac:2e:9b:71: cb:2a:5d:29:f3:ab:c8:a7:81:c0:ab:29:3e:d7:dd:9a:55:ec: bd:b0:92:37:25:9d:79:88:12:44:be:ff:6f:3f:bf:f5:69:cd: eb:51:6e:57:47:e3:b6:c3:a6:21:89:c2:f3:fe:60:2d:84:03: 38:7a:85:8e:89:7a:79:9e:59:31:8a:4d:d7:ee:15:ed:9e:42: d5:7f:77:05:c2:60:78:35:0c:d8:16:64:de:07:38:23:98:32: 08:9d:db:1a:60:93:ee:72:7e:0f:c4:9d:85:f4:06:97:d9:ce: 60:ec:d5:fb:26:a3:50:b8:df:a7:1a:9f:6e:b0:64:2c:45:9b: ff:cb:3a:71:dd:fb:62:16:67:c2:e1:8a:1b:b4:5b:95:f3:4d: 64:21:a7:14:b3:b0:0d:eb:88:f3:d5:89:bc:ff:62:8e:ff:3d: 39:ae:1c:8e:71:85:6f:eb:a8:97:40:8b:1f:2f:96:47:67:c4: 6d:ec:57:4a:f9:10:7e:16:05:31:c1:2e:61:9b:b6:ac:38:85: 4e:c8:61:1b:e6:45:7d:32:2c:f0:d7:83:6e:67:2e:fe:d8:08: 2c:20:a8:49:4d:0b:ef:e9:98:a1:40:e5:59:a1:e6:fc:48:d4: 8c:0e:6a:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatlov4w1laoDaXWZBWGOL/Jsa6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjEwMjUwMjMyMTVaFw0yNjEwMjYwNDM3MTVaMDMxMTAvBgNV BAMTKDUwNENGQUVGNkM2MzI0QThEOTAxMjNCNkI4MDBCMkRDQjVCOEYwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHuWKV/KREMwpnXVzuK5RETwH +z5K9UMuExZ8I6HjDlK4J2bvmrWzAhgL/2OulhDsvxhrAW8mdFTGd8MHlh/ht2xW 9AN+Arh5CAwMmqU2J4IFfSNgrfrIYy7jZQJjaiYSn+ohBPuzXAFV7AAZimhTPB0S MmN9atueKZcO05pV3WhkHjtgeRJNtc3yNqHTd3bo3ckbya4wwJUBAjoZ/rNU8IsT 8q+vBJbPel8ncEpNusfWvoyG+2Sx4Q19zTuvvXyeUkDVG1IGdyfYTEcrqgpHOmJ8 Lc1WfBb44FQdmLRJw20JucZ9SEkfQu2iz1JAMYdlofjVUV/IZBTAHw1hh1bNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUEz672xjJKjZASO2uACy3LW48NswHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2MKyQwdhZ9mcE0v7U1rC6bccsqXSnzq8in gcCrKT7X3ZpV7L2wkjclnXmIEkS+/28/v/VpzetRbldH47bDpiGJwvP+YC2EAzh6 hY6JenmeWTGKTdfuFe2eQtV/dwXCYHg1DNgWZN4HOCOYMgid2xpgk+5yfg/EnYX0 BpfZzmDs1fsmo1C436can26wZCxFm//LOnHd+2IWZ8Lhihu0W5XzTWQhpxSzsA3r iPPVibz/Yo7/PTmuHI5xhW/rqJdAix8vlkdnxG3sV0r5EH4WBTHBLmGbtqw4hU7I YRvmRX0yLPDXg25nLv7YCCwgqElNC+/pmKFA5Vmh5vxI1IwOag4= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:03 2026 by rpki-client