$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft File: 1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft (raw, json) Hash identifier: 5siDXIgVBqDBPPMwAyTfXv0Ay5u8/bJsY1euDaDZeLI= Subject key identifier: 31:4A:E3:E0:BC:48:36:54:79:7B:FC:A2:AF:35:DA:F7:08:ED:BF:FA Authority key identifier: 1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 Certificate issuer: /CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Certificate serial: 4E9DEFB12A495E32217067F7BA388E0D33EB4F69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft Manifest number: 2A Signing time: Wed 21 Oct 2026 23:33:36 +0000 Manifest this update: Wed 21 Oct 2026 23:28:36 +0000 Manifest next update: Fri 23 Oct 2026 02:38:36 +0000 Files and hashes: 1: 1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl (hash: HH5LgI9Us0PTo1nU/TVBB/2RbaOvFC+FXfss4BFEKS8=) 2: 3130332e33382e3231372e302f32342d3234203d3e20313335363336.roa (hash: O3q6+PrMwjC/v1N00BOhE0lN+RyM+0CkmZlgbHl5SP0=) 3: 3130332e33382e3231362e302f32342d3234203d3e20313335363336.roa (hash: mHJUFDeltP4mrmNUyCNMwaucSdGHP2VKqjZ/4bFuMiY=) 4: 3130332e33382e3231362e302f32332d3233203d3e20313335363336.roa (hash: 5DAzRoGMu3XXzMaa76xle0lQH8L2zRzEUNkEsL3fylI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 02:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:ef:b1:2a:49:5e:32:21:70:67:f7:ba:38:8e:0d:33:eb:4f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7 Validity Not Before: Oct 21 23:28:36 2026 GMT Not After : Oct 23 02:38:36 2026 GMT Subject: CN=314AE3E0BC483654797BFCA2AF35DAF708EDBFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:1b:95:88:7c:b5:a3:78:0e:ad:69:f9:24: 6d:95:ea:bd:e2:dd:ad:1b:46:23:f1:20:15:6a:7b: 81:d9:82:f4:73:86:ac:05:14:d3:19:05:28:25:de: 8d:ef:b2:11:f6:cb:6e:1c:b3:30:0b:82:50:ac:44: c7:75:c1:de:0b:9c:a3:cc:f0:35:1c:06:ec:ae:07: db:1d:d0:97:98:95:16:b6:21:b5:83:3f:5c:be:27: d6:a2:a0:24:a8:31:97:d8:fa:56:40:cc:2b:f4:8c: 41:d6:ef:49:d6:3f:d5:98:5b:ce:92:0e:24:65:a0: 50:f8:0e:41:49:ed:53:6f:6c:17:26:9b:f4:f8:89: c9:0a:06:2c:0f:54:bd:e1:63:d0:f8:d7:f6:22:03: 3e:ff:93:ba:c8:ba:91:33:e8:33:c9:c4:3e:d0:57: dc:e1:f4:98:c9:35:3c:e3:6b:9a:31:38:c7:30:e8: 9e:89:02:85:4f:56:7f:5a:d9:b0:a3:32:b1:1b:72: 86:6e:e5:e7:3e:75:ef:13:eb:cd:d1:2f:05:1b:82: 2d:01:0e:c4:e9:82:e5:63:38:f6:04:6d:7d:a8:14: d5:65:1c:63:ab:dc:16:20:58:26:c1:25:47:41:bf: 9b:81:75:31:7b:d5:76:8b:cc:be:0e:18:76:75:63: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:E3:E0:BC:48:36:54:79:7B:FC:A2:AF:35:DA:F7:08:ED:BF:FA X509v3 Authority Key Identifier: keyid:1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b3:13:b5:ba:de:9e:6a:ce:5c:f3:5c:09:78:a5:2b:6a:3b: 80:48:0c:5c:4f:7b:2d:e4:f9:45:4b:09:b9:43:8f:46:66:5f: fd:28:43:34:2a:29:2c:56:10:18:1a:89:8d:74:e5:6e:d9:85: 72:5b:15:26:90:0c:12:da:6d:74:95:6f:f8:52:60:4e:8b:48: b6:cc:58:30:22:81:b7:55:2e:be:a7:67:86:9c:ce:5a:9f:23: cd:bf:ef:39:d8:7d:70:f9:c8:67:18:b9:51:a6:c6:db:01:05: db:13:48:15:da:2a:82:02:bb:0c:f7:36:c7:5c:dd:47:ac:63: a9:2a:b7:c3:7a:83:3d:fc:6d:d9:98:15:3c:75:af:bf:54:44: 8a:91:39:5f:8b:80:05:ff:52:ba:b9:00:65:ce:16:50:12:93: e0:c6:0e:fe:fb:2e:92:b9:c2:47:0a:9a:45:e5:bc:6d:4f:32: d0:41:5b:2c:0a:bb:76:09:33:b2:b4:d3:2d:21:46:96:ab:ce: ea:b2:2a:86:3c:c7:92:56:2c:ea:44:a2:1d:af:96:1b:39:ea: 02:4f:b9:61:70:0c:82:fa:8c:6d:0a:89:65:ea:bf:03:ba:fe: 73:63:b6:f5:4b:e6:8c:b7:41:99:c9:31:60:46:88:2d:b9:dd: 8e:03:d5:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTp3vsSpJXjIhcGf3ujiODTPrT2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBQjZGRjY5OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkx NjFCQTJDNzAeFw0yNjEwMjEyMzI4MzZaFw0yNjEwMjMwMjM4MzZaMDMxMTAvBgNV BAMTKDMxNEFFM0UwQkM0ODM2NTQ3OTdCRkNBMkFGMzVEQUY3MDhFREJGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeBuViHy1o3gOrWn5JG2V6r3i 3a0bRiPxIBVqe4HZgvRzhqwFFNMZBSgl3o3vshH2y24cszALglCsRMd1wd4LnKPM 8DUcBuyuB9sd0JeYlRa2IbWDP1y+J9aioCSoMZfY+lZAzCv0jEHW70nWP9WYW86S DiRloFD4DkFJ7VNvbBcmm/T4ickKBiwPVL3hY9D41/YiAz7/k7rIupEz6DPJxD7Q V9zh9JjJNTzja5oxOMcw6J6JAoVPVn9a2bCjMrEbcoZu5ec+de8T683RLwUbgi0B DsTpguVjOPYEbX2oFNVlHGOr3BYgWCbBJUdBv5uBdTF71XaLzL4OGHZ1Y4HnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUrj4LxINlR5e/yirzXa9wjtv/owHwYDVR0j BBgwFoAUHatv9pmo8UEgsO8tq9Z4SRYboscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNjMWVhYmMtZWQxMy00MmM5LWJjNWQtN2JkMDQyMTdjY2FhLzAvMURBQjZGRjY5 OUE4RjE0MTIwQjBFRjJEQUJENjc4NDkxNjFCQTJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREFCNkZGNjk5QThGMTQxMjBCMEVGMkRBQkQ2Nzg0OTE2MUJB MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNjMWVhYmMtZWQxMy00MmM5LWJj NWQtN2JkMDQyMTdjY2FhLzAvMURBQjZGRjY5OUE4RjE0MTIwQjBFRjJEQUJENjc4 NDkxNjFCQTJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCzE7W63p5qzlzzXAl4pStqO4BIDFxPey3k +UVLCblDj0ZmX/0oQzQqKSxWEBgaiY105W7ZhXJbFSaQDBLabXSVb/hSYE6LSLbM WDAigbdVLr6nZ4aczlqfI82/7znYfXD5yGcYuVGmxtsBBdsTSBXaKoICuwz3Nsdc 3UesY6kqt8N6gz38bdmYFTx1r79URIqROV+LgAX/Urq5AGXOFlASk+DGDv77LpK5 wkcKmkXlvG1PMtBBWywKu3YJM7K00y0hRparzuqyKoY8x5JWLOpEoh2vlhs56gJP uWFwDIL6jG0KiWXqvwO6/nNjtvVL5oy3QZnJMWBGiC253Y4D1YE= -----END CERTIFICATE-----Generated at Thu Oct 22 11:44:45 2026 by rpki-client