$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: METss26OR3AERgaZIECrVnAloiz9IMq9l7TWZkVQt7Q= Subject key identifier: C1:ED:2D:05:9F:C0:F0:7F:42:D3:7B:70:9A:C7:39:C4:2E:D2:4B:CF Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 4A26D90250C0C4BE7628AD4CD3E930140E7D7093 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: EA Signing time: Fri 23 Oct 2026 19:53:52 +0000 Manifest this update: Fri 23 Oct 2026 19:48:52 +0000 Manifest next update: Sat 24 Oct 2026 21:27:52 +0000 Files and hashes: 1: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 2: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 3: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: osJUjBZ2rgDug2xYmzLUlyvO9iLXbx/aFeFud3z+npQ=) 4: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:26:d9:02:50:c0:c4:be:76:28:ad:4c:d3:e9:30:14:0e:7d:70:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Oct 23 19:48:52 2026 GMT Not After : Oct 24 21:27:52 2026 GMT Subject: CN=C1ED2D059FC0F07F42D37B709AC739C42ED24BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:52:35:6f:29:1c:c6:20:e1:ee:43:82:b1: 08:10:b7:09:c5:66:d6:ad:97:79:74:03:26:01:a4: d0:73:93:66:80:b8:5e:c4:dd:88:13:30:ba:d5:10: a3:a3:a3:1f:d3:5e:f2:cb:87:1e:b8:96:50:1c:7a: ad:90:ef:bb:e4:12:ee:16:61:f6:5d:88:85:d7:b6: 0a:76:24:67:8d:fe:92:bb:56:9b:dc:86:c8:f1:4d: b2:cb:0a:e8:33:aa:c9:b2:1f:76:04:1c:11:ff:71: b5:a1:4a:8d:08:30:d0:ff:62:55:97:71:81:59:27: 54:f0:f5:0a:a8:4e:82:52:05:d5:e2:b2:65:26:82: b5:82:56:78:48:79:e1:18:2b:4a:46:4f:06:40:fc: 40:55:b8:53:aa:21:96:34:e9:37:bb:ca:ac:5d:1f: 16:03:28:2a:5f:23:f7:e6:92:88:12:44:d7:0b:ab: 4a:fc:2a:d2:15:d1:30:a7:5f:1f:84:40:45:b0:de: fc:19:2c:55:00:1c:46:29:bd:69:2e:b1:3b:42:2d: 2b:83:d2:7c:8e:b0:68:75:12:a9:5a:ac:80:e1:30: b8:99:de:cd:47:23:1b:3b:b9:87:50:28:a2:9c:a7: 2d:81:9b:3b:31:ed:3c:af:24:fc:d0:f8:8c:0d:08: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:2D:05:9F:C0:F0:7F:42:D3:7B:70:9A:C7:39:C4:2E:D2:4B:CF X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:af:46:d7:7a:6a:85:c9:11:ca:74:c9:ce:e6:32:01:68:e8: 7f:f9:65:20:0c:d8:b8:ec:af:11:16:64:84:be:af:12:d1:4b: 6c:1f:83:d6:e8:d8:f5:47:5f:50:0a:d4:a8:2c:26:72:dc:5a: 6a:46:65:6e:2e:d8:d5:8b:8b:0f:1b:c8:2c:5a:f1:11:9d:4d: fa:41:5b:b0:9e:5e:f6:2e:cf:19:dc:dd:03:dc:29:fc:5d:25: ef:56:27:31:8f:24:a3:b3:8f:ef:bb:57:7c:e9:a3:ec:d6:b4: ba:63:9c:cd:88:52:e2:58:c9:b4:90:dd:54:c6:26:30:91:04: 18:92:f5:52:37:57:e5:53:38:7f:1c:a3:bd:9f:ca:57:57:22: d1:e4:93:5f:e6:fc:1b:b5:a3:36:e1:1f:f6:63:cc:0b:38:6b: a9:47:b7:42:8a:ea:13:43:28:20:de:e7:a0:64:43:86:d0:3c: b3:6c:4f:d9:a2:d7:93:27:97:00:ae:09:a7:3c:59:a6:04:83: d0:06:2c:4c:c3:f6:8e:35:dd:90:87:b2:19:84:29:33:fb:e9: 35:3b:1b:b5:94:79:e0:00:eb:18:03:bf:46:f4:5e:f3:3a:1b: f6:be:64:06:48:ad:7b:6f:e2:90:30:5c:4b:71:92:42:1b:ef: 8b:f3:7f:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSibZAlDAxL52KK1M0+kwFA59cJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjEwMjMxOTQ4NTJaFw0yNjEwMjQyMTI3NTJaMDMxMTAvBgNV BAMTKEMxRUQyRDA1OUZDMEYwN0Y0MkQzN0I3MDlBQzczOUM0MkVEMjRCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM1VI1bykcxiDh7kOCsQgQtwnF Ztatl3l0AyYBpNBzk2aAuF7E3YgTMLrVEKOjox/TXvLLhx64llAceq2Q77vkEu4W YfZdiIXXtgp2JGeN/pK7VpvchsjxTbLLCugzqsmyH3YEHBH/cbWhSo0IMND/YlWX cYFZJ1Tw9QqoToJSBdXismUmgrWCVnhIeeEYK0pGTwZA/EBVuFOqIZY06Te7yqxd HxYDKCpfI/fmkogSRNcLq0r8KtIV0TCnXx+EQEWw3vwZLFUAHEYpvWkusTtCLSuD 0nyOsGh1EqlarIDhMLiZ3s1HIxs7uYdQKKKcpy2Bmzsx7TyvJPzQ+IwNCO+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwe0tBZ/A8H9C03twmsc5xC7SS88wHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmvRtd6aoXJEcp0yc7mMgFo6H/5ZSAM2Ljs rxEWZIS+rxLRS2wfg9bo2PVHX1AK1KgsJnLcWmpGZW4u2NWLiw8byCxa8RGdTfpB W7CeXvYuzxnc3QPcKfxdJe9WJzGPJKOzj++7V3zpo+zWtLpjnM2IUuJYybSQ3VTG JjCRBBiS9VI3V+VTOH8co72fyldXItHkk1/m/Bu1ozbhH/ZjzAs4a6lHt0KK6hND KCDe56BkQ4bQPLNsT9mi15MnlwCuCac8WaYEg9AGLEzD9o413ZCHshmEKTP76TU7 G7WUeeAA6xgDv0b0XvM6G/a+ZAZIrXtv4pAwXEtxkkIb74vzf+U= -----END CERTIFICATE-----Generated at Sat Oct 24 01:44:56 2026 by rpki-client