$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json) Hash identifier: zJERi8AVNKcVBbamL6kR72gIeQM1iZz6YCQ2Zw2RydA= Subject key identifier: BF:D0:55:5F:B2:12:DE:73:BB:75:3A:F2:E8:AA:D3:D4:80:53:08:99 Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Certificate serial: 100A9F81BFB467ED2C80550E864DF5543B322854 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 15:05:27 +0000 Manifest this update: Sun 25 Oct 2026 15:00:27 +0000 Manifest next update: Mon 26 Oct 2026 19:03:27 +0000 Files and hashes: 1: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: gU2PvPLcWYQpHVqT8nMG/lR3ojGb8coWMP1pIpkKt7Y=) 2: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0a:9f:81:bf:b4:67:ed:2c:80:55:0e:86:4d:f5:54:3b:32:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Validity Not Before: Oct 25 15:00:27 2026 GMT Not After : Oct 26 19:03:27 2026 GMT Subject: CN=BFD0555FB212DE73BB753AF2E8AAD3D480530899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:b6:dc:67:44:f0:b6:73:5c:da:82:91:4e: 07:ea:6f:73:37:31:5a:22:31:f6:3e:c6:e7:39:70: 35:b2:96:01:41:bd:ed:a9:72:c4:e3:62:3b:67:69: 46:c0:49:8e:30:bc:82:5b:ef:fe:34:48:98:f4:7e: 8a:ca:7f:24:99:28:f6:a6:0a:e8:cf:d5:23:7b:0d: 62:62:e7:30:5c:16:31:db:99:37:c8:58:6e:b6:1d: 00:b1:56:7e:0f:a8:10:41:ca:70:04:e9:79:d9:b5: 47:dd:56:9a:34:86:64:88:bb:20:b6:0b:d9:fc:90: 72:2d:04:cf:6e:4a:cd:14:47:3a:1d:d6:71:a7:3d: bc:ba:23:19:54:19:fa:27:d8:3d:52:2f:9b:a3:42: a7:a2:37:91:0c:98:5a:d6:4b:bd:17:bd:4a:1e:bd: 76:4d:12:3c:ba:7d:98:76:79:5f:e9:48:80:eb:7a: 2e:36:03:cf:7a:e8:78:40:e7:01:58:6a:3b:7e:ae: 87:63:cf:a4:21:1a:be:9a:d7:b7:ee:e8:3a:b1:07: 8f:f0:af:97:36:1c:92:ec:9b:e8:c2:4e:77:20:a6: cf:86:86:ed:11:44:da:a7:1e:ce:71:f6:da:e4:78: 7a:b0:f9:12:21:e2:91:6e:2b:13:33:fc:d3:ee:ae: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:55:5F:B2:12:DE:73:BB:75:3A:F2:E8:AA:D3:D4:80:53:08:99 X509v3 Authority Key Identifier: keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cc:a4:00:c2:df:fa:bd:09:3d:10:56:f2:59:45:ae:8b:e2: 9e:9f:4b:32:84:a7:66:6b:cc:e4:45:dd:05:78:e8:c7:f6:42: 38:f1:08:af:e6:a9:08:65:f7:8d:2d:45:86:94:ea:5f:8b:c1: 27:76:18:d2:21:2d:fc:fd:c2:07:65:fd:bc:b6:71:ef:ef:1b: 88:d7:02:6e:ba:4e:01:08:de:e7:b7:8e:52:0a:9f:0c:66:db: e1:11:09:0a:39:fa:c9:0d:2d:e7:79:4a:d5:91:a4:0c:e8:9d: 7d:8c:b6:4b:c3:b4:fd:1a:15:1f:5f:4e:a4:fe:85:0c:55:a8: 36:86:c4:3d:a8:a4:27:5a:de:b7:5b:c8:a5:ca:37:c0:dc:db: 38:b1:9e:2f:52:96:51:68:98:0c:60:c5:72:b4:c6:e4:73:e5: 97:49:d5:fb:8e:aa:6d:63:7b:11:d5:b3:4f:86:54:7a:51:a5: 9f:19:90:c8:4c:03:3f:fc:1c:e1:1d:c3:02:75:e1:cb:70:db: f1:81:68:a5:89:d2:f6:0d:c1:d3:9c:42:f4:d9:37:92:02:1c: 4d:0f:3e:59:45:e2:49:f1:89:85:36:a3:ef:36:4d:7f:91:07: cd:19:25:58:44:6d:d2:64:00:8c:06:cc:2f:86:55:5c:c5:d1: db:29:86:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAqfgb+0Z+0sgFUOhk31VDsyKFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIwMjZD OTZFN0IwRDAeFw0yNjEwMjUxNTAwMjdaFw0yNjEwMjYxOTAzMjdaMDMxMTAvBgNV BAMTKEJGRDA1NTVGQjIxMkRFNzNCQjc1M0FGMkU4QUFEM0Q0ODA1MzA4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBrbcZ0TwtnNc2oKRTgfqb3M3 MVoiMfY+xuc5cDWylgFBve2pcsTjYjtnaUbASY4wvIJb7/40SJj0forKfySZKPam CujP1SN7DWJi5zBcFjHbmTfIWG62HQCxVn4PqBBBynAE6XnZtUfdVpo0hmSIuyC2 C9n8kHItBM9uSs0URzod1nGnPby6IxlUGfon2D1SL5ujQqeiN5EMmFrWS70XvUoe vXZNEjy6fZh2eV/pSIDrei42A8966HhA5wFYajt+rodjz6QhGr6a17fu6DqxB4/w r5c2HJLsm+jCTncgps+Ghu0RRNqnHs5x9trkeHqw+RIh4pFuKxMz/NPurj1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9BVX7IS3nO7dTry6KrT1IBTCJkwHwYDVR0j BBgwFoAUpYh0hACzXbgnH3xcQuSwJsluew0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMwYjM5ZTItNjg3Yi00NjE0LTgwOWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQw MEIzNURCODI3MUY3QzVDNDJFNEIwMjZDOTZFN0IwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTg4NzQ4NDAwQjM1REI4MjcxRjdDNUM0MkU0QjAyNkM5NkU3 QjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIw MjZDOTZFN0IwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrMpADC3/q9CT0QVvJZRa6L4p6fSzKEp2Zr zORF3QV46Mf2QjjxCK/mqQhl940tRYaU6l+LwSd2GNIhLfz9wgdl/by2ce/vG4jX Am66TgEI3ue3jlIKnwxm2+ERCQo5+skNLed5StWRpAzonX2MtkvDtP0aFR9fTqT+ hQxVqDaGxD2opCda3rdbyKXKN8Dc2zixni9SllFomAxgxXK0xuRz5ZdJ1fuOqm1j exHVs0+GVHpRpZ8ZkMhMAz/8HOEdwwJ14ctw2/GBaKWJ0vYNwdOcQvTZN5ICHE0P PllF4knxiYU2o+82TX+RB80ZJVhEbdJkAIwGzC+GVVzF0dsphvg= -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:02 2026 by rpki-client