$ rpki-client -vvvf rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft File: D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft (raw, json) Hash identifier: 9I4TbSMR1CHJQU1HnFQBO7XXt9FXomxajDXO/HAe4tE= Subject key identifier: 26:BA:AD:EE:A0:DE:B1:69:78:72:27:EC:B5:50:E5:2D:6B:21:57:CD Authority key identifier: D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8 Certificate issuer: /CN=D923807D26711727AE4683EA63ABE3CCFCB9F1E8 Certificate serial: 6EB817A6F336E2D4B948781760110A7BA873FE59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft Manifest number: 25 Signing time: Sat 24 Oct 2026 01:51:23 +0000 Manifest this update: Sat 24 Oct 2026 01:46:23 +0000 Manifest next update: Sun 25 Oct 2026 03:58:23 +0000 Files and hashes: 1: 3138302e39342e31312e302f32342d3234203d3e20313339343436.roa (hash: 1g4eR9V3A+kSiE4hjPn0LyRpJqT2c7qfe8cYbf5U62s=) 2: 3138302e39342e31302e302f32342d3234203d3e20313339343436.roa (hash: BuIlszzbvWcauUBCBgYhL883K9NBeeatO59HysL2Fm0=) 3: 3138302e39342e31302e302f32332d3233203d3e20313339343436.roa (hash: Lj2gE3sSIAkEounQdZ/u37yKic8FnlAqCAVvAs2fHzY=) 4: D923807D26711727AE4683EA63ABE3CCFCB9F1E8.crl (hash: rJxpNIyqEbyYDrYlnjejraVmyAVGiBbHOuMZQd6Xaz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.crl rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b8:17:a6:f3:36:e2:d4:b9:48:78:17:60:11:0a:7b:a8:73:fe:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D923807D26711727AE4683EA63ABE3CCFCB9F1E8 Validity Not Before: Oct 24 01:46:23 2026 GMT Not After : Oct 25 03:58:23 2026 GMT Subject: CN=26BAADEEA0DEB169787227ECB550E52D6B2157CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:89:56:90:09:38:e1:fb:21:69:15:11:8a: be:38:4d:6e:a8:e2:f9:09:c1:e0:0c:c9:97:94:25: e4:fe:2b:6c:d8:36:40:89:00:c9:72:51:b4:0b:e7: 21:0b:7d:52:f6:10:5c:07:9e:6f:ea:bb:fa:d5:20: bf:ba:79:5f:e0:8e:6a:ea:9a:8b:a2:5e:18:dd:d5: 97:d7:dd:03:13:4e:48:ec:9f:0e:22:fc:8b:35:63: 22:6b:50:53:0f:87:15:ac:51:93:05:89:0b:46:68: ac:51:e8:7e:0d:5d:c6:cc:3e:12:67:53:e9:f5:d8: 4e:4a:89:d7:52:2b:43:0d:82:da:59:a7:40:04:20: c5:a1:81:de:e2:e1:a4:21:6a:dc:84:a5:50:11:f9: e9:aa:b1:90:97:02:da:62:34:e2:0d:cc:d2:9d:81: 00:40:28:ed:15:41:6e:ff:d5:23:ae:a8:f3:aa:7c: 0e:7b:e8:10:55:a6:6c:1c:b6:aa:fd:72:63:85:5d: 1a:8a:6b:46:e2:c7:aa:f6:d4:8a:70:4b:f8:a9:d7: b9:6b:d1:e7:a3:d5:0d:a9:e3:0c:84:0d:7b:21:61: f0:5b:23:31:d0:a3:af:44:c9:e7:3c:80:ea:05:04: e6:9e:f5:85:5f:82:e3:7f:c2:8b:b4:36:d6:ec:ab: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:AD:EE:A0:DE:B1:69:78:72:27:EC:B5:50:E5:2D:6B:21:57:CD X509v3 Authority Key Identifier: keyid:D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:98:83:f4:86:e1:10:2d:81:17:4c:4d:8f:3e:6c:06:4e: 7a:2e:19:35:75:b3:2f:21:8f:d3:84:ab:11:fe:5c:0a:fe:e4: 33:18:47:80:7c:3d:e2:71:dc:3a:4c:1a:0d:5e:30:60:53:8a: 4b:8a:8f:b3:a3:05:23:b3:cf:ff:56:f9:fb:4a:1d:8a:11:dd: 7b:71:6f:0e:90:30:cc:8f:e8:73:81:59:38:30:92:a0:1e:96: 7a:bd:4a:3b:3d:62:ed:fc:f9:bc:7d:a6:3a:ac:66:d1:7d:83: d3:74:ad:0d:95:08:68:9c:44:8c:fd:30:e3:a7:36:55:2e:e6: 1a:a5:be:b9:d3:9a:40:d1:38:85:36:2a:aa:77:cd:f4:20:f1: 7d:8e:30:a5:a4:56:a7:0c:89:ec:2e:78:56:de:7d:9f:56:ef: 7a:80:06:ae:88:dd:c0:2d:c0:2a:8e:32:2c:1d:f8:4f:c0:40: dd:71:4a:c7:40:2d:5d:b2:e4:2b:73:44:95:85:74:83:b8:2a: 86:80:d7:00:92:86:c8:cc:81:74:f4:ce:51:a0:73:10:29:5a: d0:d5:d2:35:52:76:6f:0f:4e:5d:bc:79:f6:4d:e4:09:90:ae: 24:b1:16:bc:cf:12:e6:aa:91:20:ac:f4:63:87:4f:e6:41:02: 6c:8c:4d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrgXpvM24tS5SHgXYBEKe6hz/lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkyMzgwN0QyNjcxMTcyN0FFNDY4M0VBNjNBQkUzQ0NG Q0I5RjFFODAeFw0yNjEwMjQwMTQ2MjNaFw0yNjEwMjUwMzU4MjNaMDMxMTAvBgNV BAMTKDI2QkFBREVFQTBERUIxNjk3ODcyMjdFQ0I1NTBFNTJENkIyMTU3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTIlWkAk44fshaRURir44TW6o 4vkJweAMyZeUJeT+K2zYNkCJAMlyUbQL5yELfVL2EFwHnm/qu/rVIL+6eV/gjmrq mouiXhjd1ZfX3QMTTkjsnw4i/Is1YyJrUFMPhxWsUZMFiQtGaKxR6H4NXcbMPhJn U+n12E5KiddSK0MNgtpZp0AEIMWhgd7i4aQhatyEpVAR+emqsZCXAtpiNOINzNKd gQBAKO0VQW7/1SOuqPOqfA576BBVpmwctqr9cmOFXRqKa0bix6r21IpwS/ip17lr 0eej1Q2p4wyEDXshYfBbIzHQo69Eyec8gOoFBOae9YVfguN/wou0Ntbsq0WvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJrqt7qDesWl4cifstVDlLWshV80wHwYDVR0j BBgwFoAU2SOAfSZxFyeuRoPqY6vjzPy58egwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1ZTdmMGEtN2Q5MC00Y2I1LTk0YmUtZmZlNDZmNmM2MTQ1LzAvRDkyMzgwN0Qy NjcxMTcyN0FFNDY4M0VBNjNBQkUzQ0NGQ0I5RjFFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTIzODA3RDI2NzExNzI3QUU0NjgzRUE2M0FCRTNDQ0ZDQjlG MUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1ZTdmMGEtN2Q5MC00Y2I1LTk0 YmUtZmZlNDZmNmM2MTQ1LzAvRDkyMzgwN0QyNjcxMTcyN0FFNDY4M0VBNjNBQkUz Q0NGQ0I5RjFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvAmIP0huEQLYEXTE2PPmwGTnouGTV1sy8h j9OEqxH+XAr+5DMYR4B8PeJx3DpMGg1eMGBTikuKj7OjBSOzz/9W+ftKHYoR3Xtx bw6QMMyP6HOBWTgwkqAelnq9Sjs9Yu38+bx9pjqsZtF9g9N0rQ2VCGicRIz9MOOn NlUu5hqlvrnTmkDROIU2Kqp3zfQg8X2OMKWkVqcMiewueFbefZ9W73qABq6I3cAt wCqOMiwd+E/AQN1xSsdALV2y5CtzRJWFdIO4KoaA1wCShsjMgXT0zlGgcxApWtDV 0jVSdm8PTl28efZN5AmQriSxFrzPEuaqkSCs9GOHT+ZBAmyMTVM= -----END CERTIFICATE-----Generated at Sat Oct 24 10:35:41 2026 by rpki-client