$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: yr30EjmgYzW+V5K+t9BlsYMjWfpPizB3KXcqZzwtV4o= Subject key identifier: A2:57:66:34:E7:56:53:D4:29:C2:BA:47:5F:D6:28:3E:7F:62:4A:01 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 25138B8D9E25E77526AA76772D0D8605E441CCB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 02:52:06 +0000 Manifest this update: Fri 23 Oct 2026 02:47:06 +0000 Manifest next update: Sat 24 Oct 2026 03:50:06 +0000 Files and hashes: 1: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 2: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 3: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: o6oIlaXFJx8wU1f9XIir62Jwj7D/DtxBCfDfECwogz8=) 4: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 03:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:13:8b:8d:9e:25:e7:75:26:aa:76:77:2d:0d:86:05:e4:41:cc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Oct 23 02:47:06 2026 GMT Not After : Oct 24 03:50:06 2026 GMT Subject: CN=A2576634E75653D429C2BA475FD6283E7F624A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:62:04:9c:25:3f:30:ae:dd:60:da:c6:59: 5d:6e:c6:2d:49:2d:74:d1:a2:fb:0c:ef:28:b4:32: 69:2a:2f:e5:05:16:b1:02:56:f7:b6:09:02:e6:df: c6:c0:d1:8a:5a:32:fa:5b:82:37:8f:cd:19:0b:1d: ff:34:a4:d6:c0:a9:ee:55:16:8b:6b:0c:9a:b3:ef: d9:7e:54:7f:5d:d0:40:1d:fd:c0:a6:ed:8b:c2:d5: 06:e4:49:73:65:4a:bf:6c:fc:9c:1a:06:72:3e:ce: 8f:73:b6:71:86:48:5a:c6:5d:69:8f:53:5d:46:37: 67:e7:fe:be:73:00:cc:43:80:ac:82:79:c0:6b:f6: c1:53:7b:e8:00:7a:e1:ba:0d:2d:d5:3b:e4:b0:23: a9:22:66:ee:93:7d:1a:56:53:d3:99:21:42:d8:3f: 65:27:1d:d5:c8:ae:2d:eb:54:bc:8e:bd:f4:fe:e7: d9:36:17:17:98:0e:c7:92:39:02:79:d3:28:7f:5d: 51:96:b9:9f:82:fd:42:21:e4:7a:8f:7b:86:8e:dd: a6:09:90:ef:8d:15:91:02:d3:86:d2:cd:d0:96:9e: a9:ea:91:32:87:fd:20:6d:8f:d0:79:f4:8b:aa:ab: 6a:af:c6:9a:71:b8:e3:cb:70:7a:21:96:84:57:5f: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:66:34:E7:56:53:D4:29:C2:BA:47:5F:D6:28:3E:7F:62:4A:01 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0a:dd:86:52:cf:16:7a:00:b3:42:e1:7b:68:a3:1f:50:02: 50:af:e2:c5:97:d0:1b:4e:df:cf:ef:30:ec:b1:d2:11:87:0d: 26:b6:48:53:21:25:e2:71:51:f6:d0:c3:7f:c1:60:b0:2a:48: f1:9a:43:dc:0d:f8:ec:00:6c:f6:15:78:1a:d0:a5:89:c6:7c: 3c:1b:89:26:21:c3:e7:5b:d4:03:2e:9a:27:bd:f4:14:2a:aa: 23:1b:01:19:19:b5:41:d7:a6:45:48:ff:16:ed:ee:22:7a:05: e3:ed:14:07:06:c8:06:35:73:e8:00:a2:f0:d7:ec:b8:28:95: 93:75:40:b6:60:69:24:5a:2d:ea:bc:ee:54:77:3f:d5:f5:b2: ad:f7:2d:a6:29:44:3c:63:30:03:87:ae:3c:18:db:c4:28:71: d4:40:71:1f:24:6b:24:2b:41:50:5e:62:f2:1c:4e:e4:5f:c8: 02:ed:54:33:f4:7c:c0:ff:21:bf:be:16:50:9b:af:ff:9a:84: 3b:a6:48:86:7e:ac:aa:21:14:44:aa:7a:d8:08:30:b8:4e:33: da:ac:68:23:8c:37:54:67:3e:55:6e:84:36:8d:7d:7c:2e:f6: 5b:aa:45:8b:80:77:e9:b7:65:92:cf:e6:35:61:da:ed:91:c5: e8:09:4d:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJROLjZ4l53UmqnZ3LQ2GBeRBzLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjEwMjMwMjQ3MDZaFw0yNjEwMjQwMzUwMDZaMDMxMTAvBgNV BAMTKEEyNTc2NjM0RTc1NjUzRDQyOUMyQkE0NzVGRDYyODNFN0Y2MjRBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP2IEnCU/MK7dYNrGWV1uxi1J LXTRovsM7yi0MmkqL+UFFrECVve2CQLm38bA0YpaMvpbgjePzRkLHf80pNbAqe5V FotrDJqz79l+VH9d0EAd/cCm7YvC1QbkSXNlSr9s/JwaBnI+zo9ztnGGSFrGXWmP U11GN2fn/r5zAMxDgKyCecBr9sFTe+gAeuG6DS3VO+SwI6kiZu6TfRpWU9OZIULY P2UnHdXIri3rVLyOvfT+59k2FxeYDseSOQJ50yh/XVGWuZ+C/UIh5HqPe4aO3aYJ kO+NFZEC04bSzdCWnqnqkTKH/SBtj9B59Iuqq2qvxppxuOPLcHohloRXXwEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoldmNOdWU9QpwrpHX9YoPn9iSgEwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8K3YZSzxZ6ALNC4Xtoox9QAlCv4sWX0BtO 38/vMOyx0hGHDSa2SFMhJeJxUfbQw3/BYLAqSPGaQ9wN+OwAbPYVeBrQpYnGfDwb iSYhw+db1AMumie99BQqqiMbARkZtUHXpkVI/xbt7iJ6BePtFAcGyAY1c+gAovDX 7LgolZN1QLZgaSRaLeq87lR3P9X1sq33LaYpRDxjMAOHrjwY28QocdRAcR8kayQr QVBeYvIcTuRfyALtVDP0fMD/Ib++FlCbr/+ahDumSIZ+rKohFESqetgIMLhOM9qs aCOMN1RnPlVuhDaNfXwu9luqRYuAd+m3ZZLP5jVh2u2RxegJTRQ= -----END CERTIFICATE-----Generated at Fri Oct 23 20:37:10 2026 by rpki-client