$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft File: 815468AF79588A14560E794FB64918D01C6C1FDC.mft (raw, json) Hash identifier: ICptMgmcyIRAAI7OYkNsqOEVYmGyheupl4+ixHGZVi0= Subject key identifier: 8F:50:26:7E:AD:8D:7A:9B:72:73:7B:93:94:9B:05:A4:0F:41:52:AC Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC Certificate issuer: /CN=815468AF79588A14560E794FB64918D01C6C1FDC Certificate serial: 1CAAF1EA108F958B56B46A82364E75DF2390F8FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 12:34:31 +0000 Manifest this update: Sat 24 Oct 2026 12:29:31 +0000 Manifest next update: Sun 25 Oct 2026 15:02:31 +0000 Files and hashes: 1: 815468AF79588A14560E794FB64918D01C6C1FDC.crl (hash: sp17zu1mazVetSw3FMZf/z9mN8e5IjRKlxuhwqm+EWs=) 2: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: j6ecS+LU2IE57nqnTMCP3ISPfe6p/tZiprWjSdtyRJI=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: 4TyXOZJITcEyepgGV7UqSgIx7GZrhhX2jvzd83SSTg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:aa:f1:ea:10:8f:95:8b:56:b4:6a:82:36:4e:75:df:23:90:f8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC Validity Not Before: Oct 24 12:29:31 2026 GMT Not After : Oct 25 15:02:31 2026 GMT Subject: CN=8F50267EAD8D7A9B72737B93949B05A40F4152AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:18:ee:ae:08:d4:d2:95:09:fe:e8:aa:cf:92: 89:2e:e6:f7:bb:52:8b:07:65:c8:cd:c5:64:56:a8: 3f:a3:11:59:4e:88:c0:51:f0:84:17:d7:d7:59:7c: cf:a1:12:fe:f9:89:66:5d:6a:fa:ff:c0:79:03:a1: 95:63:b4:bf:96:6a:37:90:aa:f5:09:00:e5:43:69: d7:b4:38:68:3b:59:a6:a2:f5:70:79:20:ec:e7:12: 33:2f:5f:8b:94:48:a7:b8:90:70:47:e6:0e:16:fb: 46:12:58:0f:e8:b9:5b:10:fe:80:c5:06:a8:03:26: 35:5c:6e:c7:57:32:42:ee:5c:ce:61:9d:06:cc:9c: d1:eb:65:5b:f7:2d:8a:72:84:7f:d2:c5:e9:09:72: 06:2f:2a:da:89:63:79:ac:c3:34:e5:42:29:db:cf: 3a:da:47:9d:da:84:20:03:4f:76:6c:c5:9b:3a:b2: 36:e6:7f:f1:31:ac:c1:97:c2:5c:ab:fe:24:b1:f0: be:a5:ba:3a:a4:ea:ae:7b:15:d8:5b:cf:f7:46:55: 32:ef:3b:15:9d:92:02:1f:0b:f4:a6:36:00:af:bc: 46:2b:2f:ae:c5:a6:f0:1d:2f:ad:8a:86:fc:e8:56: c5:ae:9c:31:64:03:4c:9f:d5:53:e0:9b:6b:fe:8f: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:50:26:7E:AD:8D:7A:9B:72:73:7B:93:94:9B:05:A4:0F:41:52:AC X509v3 Authority Key Identifier: keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:26:fd:63:83:c5:f1:f9:c3:2d:ac:50:c0:50:48:ad:85:a8: 61:75:b9:dd:8a:11:65:76:1b:99:d4:fb:42:7d:3c:d1:f7:bc: 6b:c6:36:dd:58:01:99:ef:f5:6b:6d:3c:7c:d2:c1:b0:f8:a2: 2a:6b:f7:38:c0:f6:d2:64:41:3c:20:d1:17:d9:2b:e0:20:f2: 1c:68:a5:dd:f1:20:93:71:2d:83:18:e7:f0:be:ed:69:f5:c0: 35:c7:b6:e5:b4:a3:34:65:db:7c:a0:9f:9e:f5:1d:d3:73:f6: 7a:73:ef:64:63:85:94:69:63:4e:eb:74:4a:9b:c2:da:8c:a6: 8e:d9:56:55:f6:19:d0:61:75:46:f8:72:ac:d3:de:07:9e:c3: ea:5b:d1:b6:7e:79:15:a6:f5:47:28:a9:62:59:a7:85:72:e6: 71:50:f6:bb:14:85:25:31:43:ff:d7:72:f2:fa:cf:99:d6:9a: c9:84:c8:cf:77:89:4e:54:d9:08:67:c6:bd:1e:44:a9:da:64: c8:b5:d2:c6:30:e4:bf:05:93:ab:cc:96:f7:05:c4:40:a7:24: 43:38:87:72:d2:5a:8a:67:02:1b:70:65:15:86:a1:5d:64:f6: 9f:5c:cb:48:0a:7c:37:d9:dd:c4:3a:a3:74:f6:32:7a:92:d9: fd:af:8e:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKrx6hCPlYtWtGqCNk513yOQ+P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAx QzZDMUZEQzAeFw0yNjEwMjQxMjI5MzFaFw0yNjEwMjUxNTAyMzFaMDMxMTAvBgNV BAMTKDhGNTAyNjdFQUQ4RDdBOUI3MjczN0I5Mzk0OUIwNUE0MEY0MTUyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKGO6uCNTSlQn+6KrPkoku5ve7 UosHZcjNxWRWqD+jEVlOiMBR8IQX19dZfM+hEv75iWZdavr/wHkDoZVjtL+WajeQ qvUJAOVDade0OGg7Waai9XB5IOznEjMvX4uUSKe4kHBH5g4W+0YSWA/ouVsQ/oDF BqgDJjVcbsdXMkLuXM5hnQbMnNHrZVv3LYpyhH/SxekJcgYvKtqJY3mswzTlQinb zzraR53ahCADT3ZsxZs6sjbmf/ExrMGXwlyr/iSx8L6lujqk6q57Fdhbz/dGVTLv OxWdkgIfC/SmNgCvvEYrL67FpvAdL62KhvzoVsWunDFkA0yf1VPgm2v+jylHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1Amfq2Neptyc3uTlJsFpA9BUqwwHwYDVR0j BBgwFoAUgVRor3lYihRWDnlPtkkY0BxsH9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTAwNGU1MzAtMmZjZi00Y2Q2LWIwNWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3 OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAxQzZDMUZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTU0NjhBRjc5NTg4QTE0NTYwRTc5NEZCNjQ5MThEMDFDNkMx RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4 RDAxQzZDMUZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUm/WODxfH5wy2sUMBQSK2FqGF1ud2KEWV2 G5nU+0J9PNH3vGvGNt1YAZnv9WttPHzSwbD4oipr9zjA9tJkQTwg0RfZK+Ag8hxo pd3xIJNxLYMY5/C+7Wn1wDXHtuW0ozRl23ygn571HdNz9npz72RjhZRpY07rdEqb wtqMpo7ZVlX2GdBhdUb4cqzT3geew+pb0bZ+eRWm9UcoqWJZp4Vy5nFQ9rsUhSUx Q//XcvL6z5nWmsmEyM93iU5U2Qhnxr0eRKnaZMi10sYw5L8Fk6vMlvcFxECnJEM4 h3LSWopnAhtwZRWGoV1k9p9cy0gKfDfZ3cQ6o3T2MnqS2f2vjq0= -----END CERTIFICATE-----Generated at Sun Oct 25 01:39:50 2026 by rpki-client