$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: ej4ALr1csvPGlLNOSWpmcHLSVCeyT2IJK8SDvz3lpho= Subject key identifier: B7:FA:BE:61:E9:6A:EB:15:A7:B8:44:30:A6:7B:BC:77:A2:37:BF:7E Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 50BC136DC1586FA270D7BF52622F1D248CE1CF2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: EC Signing time: Sun 25 Oct 2026 09:02:47 +0000 Manifest this update: Sun 25 Oct 2026 08:57:47 +0000 Manifest next update: Mon 26 Oct 2026 11:15:47 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) 2: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: SvZZxImmRB3/3NL/5sBqLtB54rC3kz9pRUWBbCYawpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bc:13:6d:c1:58:6f:a2:70:d7:bf:52:62:2f:1d:24:8c:e1:cf:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Oct 25 08:57:47 2026 GMT Not After : Oct 26 11:15:47 2026 GMT Subject: CN=B7FABE61E96AEB15A7B84430A67BBC77A237BF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:07:81:a6:20:e4:36:33:a7:d1:12:08:2a: 81:c7:2b:c0:d2:bf:9f:7f:0a:12:1a:d5:c2:ef:d7: 61:d9:35:18:e0:b4:ba:df:56:3c:ed:31:f3:55:fb: bf:f9:98:69:fb:50:22:d1:6e:31:1b:be:62:ac:6f: 60:9c:cc:47:6f:00:f5:af:ba:75:b3:22:c1:7a:a0: 09:d5:0a:a6:66:6f:f1:f3:16:e6:0d:c2:62:64:37: 3f:37:3e:2f:09:6e:3c:bd:c9:09:09:f7:30:80:8b: 63:51:f7:02:00:d5:ba:65:cb:3b:45:1e:a9:25:bd: 28:97:49:f9:e1:66:eb:6f:a6:4e:cb:b1:08:1d:b9: 38:19:46:73:75:87:04:29:34:da:ae:bb:f4:f9:04: d1:4e:b8:89:8a:f9:1b:a6:31:3a:f1:42:8d:90:50: 8f:37:20:7a:29:87:46:28:3d:a3:36:cb:39:e5:7f: 8d:c1:53:3f:6c:68:f4:ab:4e:2f:73:37:30:83:1d: 7d:b5:e4:48:ca:95:31:fe:7c:e4:03:f1:14:c5:38: 1a:27:03:cb:e7:7d:3c:08:85:c2:6a:72:98:ea:97: a6:53:65:b8:94:24:b9:8c:ba:65:b6:f5:aa:7a:41: 7d:3e:72:a1:38:9e:18:dd:75:cb:16:fd:c8:09:1d: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FA:BE:61:E9:6A:EB:15:A7:B8:44:30:A6:7B:BC:77:A2:37:BF:7E X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:71:f6:a2:ae:a7:59:b6:21:d8:85:f0:80:07:bb:12:53:ee: 49:3c:7a:27:0b:8d:31:4a:83:b1:0e:f5:cf:90:5f:76:ed:8e: 93:86:aa:8c:56:d1:83:42:d3:81:bc:6e:38:52:58:55:e2:d2: 1d:75:bf:c4:12:b0:78:16:53:e1:85:63:0a:dc:47:3b:60:10: 6d:59:aa:b6:65:38:5f:bd:62:57:be:44:25:b8:3a:af:0e:a9: 51:3a:20:4e:1d:7f:15:cf:f7:8b:df:b7:c6:52:f6:d0:51:79: ea:58:a3:b7:b9:90:73:bb:08:c3:34:9f:b7:39:43:2f:f9:17: d2:93:96:86:ce:92:c6:b1:c9:35:36:0e:93:b0:92:df:46:46: 4e:be:60:51:94:d9:ab:08:9c:16:db:a6:08:c1:d4:27:3d:f1: c5:40:ad:05:19:d6:8f:80:c9:b8:66:a9:1a:f5:ac:e0:23:9e: cf:28:39:67:58:3d:b0:2a:f8:8f:c4:49:0c:da:b4:c3:dc:b1: 43:0b:bf:43:66:d4:c0:44:57:8f:c5:52:02:fd:e0:31:ca:0b: 1c:7e:ca:b1:b7:9d:7a:64:81:aa:b8:e6:8b:de:39:2d:5a:9a: d4:89:24:42:da:b5:df:34:af:07:c2:04:cc:72:66:f2:a9:3a: da:0a:d0:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULwTbcFYb6Jw179SYi8dJIzhzy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjEwMjUwODU3NDdaFw0yNjEwMjYxMTE1NDdaMDMxMTAvBgNV BAMTKEI3RkFCRTYxRTk2QUVCMTVBN0I4NDQzMEE2N0JCQzc3QTIzN0JGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55AeBpiDkNjOn0RIIKoHHK8DS v59/ChIa1cLv12HZNRjgtLrfVjztMfNV+7/5mGn7UCLRbjEbvmKsb2CczEdvAPWv unWzIsF6oAnVCqZmb/HzFuYNwmJkNz83Pi8Jbjy9yQkJ9zCAi2NR9wIA1bplyztF HqklvSiXSfnhZutvpk7LsQgduTgZRnN1hwQpNNquu/T5BNFOuImK+RumMTrxQo2Q UI83IHoph0YoPaM2yznlf43BUz9saPSrTi9zNzCDHX215EjKlTH+fOQD8RTFOBon A8vnfTwIhcJqcpjql6ZTZbiUJLmMumW29ap6QX0+cqE4nhjddcsW/cgJHflXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/q+Yelq6xWnuEQwpnu8d6I3v34wHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRx9qKup1m2IdiF8IAHuxJT7kk8eicLjTFK g7EO9c+QX3btjpOGqoxW0YNC04G8bjhSWFXi0h11v8QSsHgWU+GFYwrcRztgEG1Z qrZlOF+9Yle+RCW4Oq8OqVE6IE4dfxXP94vft8ZS9tBReepYo7e5kHO7CMM0n7c5 Qy/5F9KTlobOksaxyTU2DpOwkt9GRk6+YFGU2asInBbbpgjB1Cc98cVArQUZ1o+A ybhmqRr1rOAjns8oOWdYPbAq+I/ESQzatMPcsUMLv0Nm1MBEV4/FUgL94DHKCxx+ yrG3nXpkgaq45oveOS1amtSJJELatd80rwfCBMxyZvKpOtoK0O4= -----END CERTIFICATE-----Generated at Mon Oct 26 02:24:23 2026 by rpki-client