$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: nk2pVi5d3+nccGrzHkXV1LFewxBp12U428lY3gWzxOk= Subject key identifier: 64:E3:59:E7:F7:91:F0:2B:BA:98:FC:AD:EF:56:66:2D:C3:97:C6:C9 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 46581876E96DCB30FDAA9FC0CD6DDDF5403803C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: E3 Signing time: Sun 18 Oct 2026 17:36:08 +0000 Manifest this update: Sun 18 Oct 2026 17:31:08 +0000 Manifest next update: Mon 19 Oct 2026 19:02:08 +0000 Files and hashes: 1: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: 9YooJGFXi5o1zMOmsiHWQSl5Kgz0GO9Q2unJ1i5XJVY=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 3: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 4: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:58:18:76:e9:6d:cb:30:fd:aa:9f:c0:cd:6d:dd:f5:40:38:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Oct 18 17:31:08 2026 GMT Not After : Oct 19 19:02:08 2026 GMT Subject: CN=64E359E7F791F02BBA98FCADEF56662DC397C6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:28:d8:d6:33:62:fb:f2:38:15:7a:0b:ee: e5:55:3f:3a:01:cf:cd:98:03:b4:98:0a:97:e4:13: b3:37:fb:85:4c:70:dc:8b:7b:f7:12:8d:0a:c4:66: 97:e8:9e:25:76:fd:cf:33:2f:29:38:49:e0:4f:63: 6c:73:45:c0:47:a9:82:a3:bd:e0:1e:94:16:68:8a: e3:b4:2e:e0:75:32:34:2c:cf:2d:68:8a:0d:42:1d: e4:d4:09:f1:e8:80:9f:07:b6:68:9c:04:d0:34:2c: 24:e9:38:3d:50:98:bc:ee:79:e2:ad:83:31:b2:0d: 17:e4:70:b6:0f:77:56:f7:17:66:6b:b7:98:4f:dc: ff:1b:fe:b1:d8:69:58:71:0c:f2:6a:bc:2f:66:77: 50:da:24:15:eb:5c:c2:bb:ce:4c:d4:cd:a1:30:de: 66:a7:84:98:29:66:f8:9b:a2:09:49:6b:1d:3b:0f: 72:7c:b1:3a:9e:9f:6d:b5:3e:e3:1a:08:87:db:f7: 6d:f5:3d:7e:b3:dc:81:ec:69:f9:9c:3c:2e:57:0b: fc:89:86:29:1c:87:16:68:9e:92:81:3e:57:d8:7b: 47:ae:cb:59:9f:18:77:5c:c4:8d:56:65:95:6f:eb: fd:b4:dc:ad:44:a1:06:52:17:bb:b1:83:c7:c4:89: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:59:E7:F7:91:F0:2B:BA:98:FC:AD:EF:56:66:2D:C3:97:C6:C9 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:72:82:91:54:b7:f0:e9:43:06:c7:61:cd:3e:9c:d2:dd:1d: 1b:7b:45:6d:b5:05:3b:4a:03:83:a5:79:c5:d5:1d:9d:be:2c: 12:07:88:ac:07:c5:4a:1b:e3:ed:a6:b7:84:83:01:84:b6:1d: 61:dc:bf:71:fc:27:b6:b8:e8:45:66:63:94:04:62:86:5e:df: 93:fd:e0:6a:4e:03:d6:f2:d6:1e:1e:a4:ce:c7:a8:3e:59:09: 09:16:7b:32:00:d2:30:30:7b:3a:9b:58:dd:43:ec:ba:6c:6f: 69:3c:4f:88:e6:e2:42:ca:36:6f:d7:a6:1c:5e:11:01:7d:1b: 15:b8:f7:bc:37:e3:9e:14:3a:39:18:1a:79:96:bf:09:39:61: ec:38:cc:fe:9e:b4:16:04:24:f3:85:d5:52:ff:59:09:7f:92: ae:a3:31:55:e0:fd:59:3c:84:88:b3:a7:b8:a3:e8:47:6f:17: df:d0:94:40:40:5f:7e:9e:ea:de:01:91:f7:9e:2b:73:b7:74: d5:73:b3:35:36:f2:25:d9:3f:51:f7:91:8e:81:17:12:5d:10: 62:2a:bf:1f:4d:e9:51:3c:0a:20:e9:50:c3:36:c4:c2:b3:ad: dc:04:44:94:35:ca:1f:57:38:50:d4:c9:fe:6c:2d:89:e4:07: d1:4b:0f:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlgYdultyzD9qp/AzW3d9UA4A8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjEwMTgxNzMxMDhaFw0yNjEwMTkxOTAyMDhaMDMxMTAvBgNV BAMTKDY0RTM1OUU3Rjc5MUYwMkJCQTk4RkNBREVGNTY2NjJEQzM5N0M2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iSjY1jNi+/I4FXoL7uVVPzoB z82YA7SYCpfkE7M3+4VMcNyLe/cSjQrEZpfoniV2/c8zLyk4SeBPY2xzRcBHqYKj veAelBZoiuO0LuB1MjQszy1oig1CHeTUCfHogJ8HtmicBNA0LCTpOD1QmLzueeKt gzGyDRfkcLYPd1b3F2Zrt5hP3P8b/rHYaVhxDPJqvC9md1DaJBXrXMK7zkzUzaEw 3manhJgpZviboglJax07D3J8sTqen221PuMaCIfb9231PX6z3IHsafmcPC5XC/yJ hikchxZonpKBPlfYe0euy1mfGHdcxI1WZZVv6/203K1EoQZSF7uxg8fEiV9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZONZ5/eR8Cu6mPyt71ZmLcOXxskwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpygpFUt/DpQwbHYc0+nNLdHRt7RW21BTtK A4OlecXVHZ2+LBIHiKwHxUob4+2mt4SDAYS2HWHcv3H8J7a46EVmY5QEYoZe35P9 4GpOA9by1h4epM7HqD5ZCQkWezIA0jAwezqbWN1D7Lpsb2k8T4jm4kLKNm/Xphxe EQF9GxW497w3454UOjkYGnmWvwk5Yew4zP6etBYEJPOF1VL/WQl/kq6jMVXg/Vk8 hIizp7ij6EdvF9/QlEBAX36e6t4BkfeeK3O3dNVzszU28iXZP1H3kY6BFxJdEGIq vx9N6VE8CiDpUMM2xMKzrdwERJQ1yh9XOFDUyf5sLYnkB9FLD5Y= -----END CERTIFICATE-----Generated at Mon Oct 19 14:29:52 2026 by rpki-client