$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json) Hash identifier: 0a7CIVXIALm/NjoFsNoD43e/6W8vc7JMc6JXTlnTi8I= Subject key identifier: 5D:66:32:63:CF:2A:10:37:DA:28:4B:73:64:9B:84:BD:2D:11:03:8A Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Certificate serial: 7646BE63F476BF0CCEE3DC044F5533FBA0FC0095 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 06:47:16 +0000 Manifest this update: Sat 24 Oct 2026 06:42:16 +0000 Manifest next update: Sun 25 Oct 2026 07:37:16 +0000 Files and hashes: 1: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: VhbePV08HCOqVbZMkzqCvSIz272zAHqnBLR08yT8cxo=) 2: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=) 3: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=) 4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 07:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:46:be:63:f4:76:bf:0c:ce:e3:dc:04:4f:55:33:fb:a0:fc:00:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Validity Not Before: Oct 24 06:42:16 2026 GMT Not After : Oct 25 07:37:16 2026 GMT Subject: CN=5D663263CF2A1037DA284B73649B84BD2D11038A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:c4:c7:b8:95:45:c1:94:e7:d3:71:77:34: ac:43:6d:fa:17:90:a9:97:d7:8d:01:5e:c8:6c:db: fb:f0:2a:79:01:7c:39:a3:32:66:cd:9d:a3:61:3a: 53:b3:ce:94:25:0b:46:4c:0b:6c:13:af:b6:66:2a: 9f:6b:45:99:ec:06:6b:b0:3c:2c:bb:21:9f:35:df: 45:dd:1e:d9:d8:38:ce:ca:59:c2:5b:a7:6a:f6:af: 8d:be:3a:4b:b5:ee:7d:bd:54:a7:ea:ce:49:68:e0: 3e:f8:15:70:48:4b:67:4a:71:70:15:b0:76:fd:6c: 82:a7:62:c7:43:ee:81:99:94:e6:5a:b1:06:b9:02: 49:f0:16:19:68:da:80:c3:3c:20:53:78:5b:c4:f4: 54:e9:43:a4:12:c5:f1:1c:b1:a7:27:68:33:61:6c: d5:c6:b9:df:09:da:eb:74:00:70:b5:1a:1f:39:51: 60:a5:15:2d:b7:e2:83:48:aa:e3:1d:f4:7c:81:7b: ac:d9:8b:38:8a:1c:c3:52:30:57:3b:8e:a0:d9:8b: fe:a4:60:9e:ae:89:95:62:20:fa:03:b2:a5:25:71: 8e:d8:f7:77:f3:b0:37:c5:a1:df:f1:bc:26:c3:8c: 7e:8b:11:6d:14:2f:42:aa:6d:a3:85:b8:df:b9:05: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:66:32:63:CF:2A:10:37:DA:28:4B:73:64:9B:84:BD:2D:11:03:8A X509v3 Authority Key Identifier: keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4a:3f:2f:f2:71:a9:d0:be:2e:c1:45:03:cb:d4:52:3f:e4: 20:39:75:61:d6:f9:fd:df:88:8d:a9:07:80:1f:63:32:43:0e: 66:c6:37:23:b6:69:00:fd:8b:e5:bf:42:d8:02:85:55:f6:9f: 7e:1d:66:bf:9a:37:f6:2f:77:d0:d7:d9:74:11:ff:c2:13:78: f6:dc:08:b7:8f:47:cc:a7:61:98:75:c6:30:ed:73:33:eb:0f: 43:86:47:e5:ec:9b:34:ad:bd:f2:ae:02:d6:fa:86:09:93:ba: c5:ae:df:37:6e:ea:40:6a:c2:0d:eb:21:5d:bf:69:f1:5e:b3: 85:2c:72:1a:33:09:4f:78:a4:83:bb:3f:de:5c:ae:93:c3:39: 53:7f:bc:8d:95:10:11:c9:20:3d:40:a5:da:9e:7a:76:08:28: c2:ee:3b:ad:b2:12:ca:4f:6e:97:e8:54:f3:1a:16:02:90:76: 2e:1b:a9:4f:0d:ea:3b:dc:ac:de:e6:75:cb:ac:f0:b5:c3:4a: d6:c3:67:c4:47:9c:af:8e:c1:d5:10:06:4d:4e:e3:e9:5e:13: 43:b7:dd:9b:40:4a:a4:74:9f:aa:a4:a8:16:58:db:7e:0a:a8: 31:f9:06:ec:6e:cc:51:79:20:e4:f2:8a:ae:b7:68:05:12:76: d7:46:70:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdka+Y/R2vwzO49wET1Uz+6D8AJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYz QkQ0QUYxQTAeFw0yNjEwMjQwNjQyMTZaFw0yNjEwMjUwNzM3MTZaMDMxMTAvBgNV BAMTKDVENjYzMjYzQ0YyQTEwMzdEQTI4NEI3MzY0OUI4NEJEMkQxMTAzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMMTHuJVFwZTn03F3NKxDbfoX kKmX140BXshs2/vwKnkBfDmjMmbNnaNhOlOzzpQlC0ZMC2wTr7ZmKp9rRZnsBmuw PCy7IZ8130XdHtnYOM7KWcJbp2r2r42+Oku17n29VKfqzklo4D74FXBIS2dKcXAV sHb9bIKnYsdD7oGZlOZasQa5AknwFhlo2oDDPCBTeFvE9FTpQ6QSxfEcsacnaDNh bNXGud8J2ut0AHC1Gh85UWClFS234oNIquMd9HyBe6zZiziKHMNSMFc7jqDZi/6k YJ6uiZViIPoDsqUlcY7Y93fzsDfFod/xvCbDjH6LEW0UL0KqbaOFuN+5BdBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWYyY88qEDfaKEtzZJuEvS0RA4owHwYDVR0j BBgwFoAUHgMB4OoKBtyENeQ7zGl37zvUrxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzMmVlZTEtMTBmNy00NTdkLWE4YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBF QTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYzQkQ0QUYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTAzMDFFMEVBMEEwNkRDODQzNUU0M0JDQzY5NzdFRjNCRDRB RjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3 RUYzQkQ0QUYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5KPy/ycanQvi7BRQPL1FI/5CA5dWHW+f3f iI2pB4AfYzJDDmbGNyO2aQD9i+W/QtgChVX2n34dZr+aN/Yvd9DX2XQR/8ITePbc CLePR8ynYZh1xjDtczPrD0OGR+XsmzStvfKuAtb6hgmTusWu3zdu6kBqwg3rIV2/ afFes4UschozCU94pIO7P95crpPDOVN/vI2VEBHJID1ApdqeenYIKMLuO62yEspP bpfoVPMaFgKQdi4bqU8N6jvcrN7mdcus8LXDStbDZ8RHnK+OwdUQBk1O4+leE0O3 3ZtASqR0n6qkqBZY234KqDH5BuxuzFF5IOTyiq63aAUSdtdGcDw= -----END CERTIFICATE-----Generated at Sun Oct 25 01:45:32 2026 by rpki-client