$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json) Hash identifier: P3+C3zce6m94OvCvbrjxL1nCrB/8tjF3fw0cykbDpTY= Subject key identifier: E7:94:8F:2C:CC:CB:56:8C:95:31:8A:27:F8:7A:B9:22:D9:37:23:56 Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 4928C89D3A5347018F8CBFA92951D59146F1895B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft Manifest number: E3 Signing time: Mon 19 Oct 2026 17:00:37 +0000 Manifest this update: Mon 19 Oct 2026 16:55:37 +0000 Manifest next update: Tue 20 Oct 2026 17:54:37 +0000 Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=) 2: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: X8N1GvJedWEnQoePjA7zos59wGJX+ORwlQOFMAsmnKI=) 3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=) 4: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 17:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:28:c8:9d:3a:53:47:01:8f:8c:bf:a9:29:51:d5:91:46:f1:89:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: Oct 19 16:55:37 2026 GMT Not After : Oct 20 17:54:37 2026 GMT Subject: CN=E7948F2CCCCB568C95318A27F87AB922D9372356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:4f:9c:b7:a2:29:03:2c:b6:1b:4c:aa:37: bd:7c:ad:e3:f8:9a:bd:56:0b:28:dd:74:89:62:40: 9d:5d:ac:52:89:56:52:55:16:68:8d:de:f3:22:50: 24:da:8b:20:2f:59:b8:3d:ed:c4:11:3e:80:3f:1d: ad:a9:2c:46:ba:a8:e6:7e:a0:91:fd:2c:5e:79:9e: 17:85:60:20:ae:65:f5:74:95:a2:ac:8e:05:ad:2e: 04:68:8d:4c:97:dd:86:42:06:e4:d1:a5:9e:82:55: ac:51:03:fe:52:2e:73:25:12:a8:d4:fa:14:a0:9a: 88:47:02:b3:f7:c4:7f:e6:2c:dc:e3:11:d9:07:47: 70:dc:40:44:1e:16:94:08:c6:d3:c7:d7:58:f6:22: 77:47:bc:80:df:2e:12:3e:5e:04:5d:96:ec:9c:4e: f9:72:d0:88:5f:a3:66:4a:1a:3a:fc:5c:c8:74:0c: 42:9f:d8:20:09:4d:e1:ec:24:bc:fd:20:29:0d:b8: 47:b5:f6:11:74:d8:9a:3c:1d:9f:b4:7b:2d:b5:54: f6:bc:2d:6b:20:98:64:29:93:8b:06:be:c9:7f:0f: f1:14:61:25:57:c9:ee:7d:b1:9a:9b:ee:99:2c:55: e9:96:53:3a:56:59:6f:50:56:3a:39:71:83:e6:04: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:8F:2C:CC:CB:56:8C:95:31:8A:27:F8:7A:B9:22:D9:37:23:56 X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ce:9a:e7:ad:62:ba:59:c9:e0:da:25:39:e8:76:4e:70:8b: 51:10:58:a3:28:90:40:32:65:52:b0:d3:f2:06:d3:e5:74:7b: cc:a4:8c:e1:1a:51:98:18:3e:fd:1b:5e:e9:11:a2:af:97:4e: 85:0f:39:fc:02:87:a1:ce:c9:ea:d1:aa:28:b2:22:6c:65:ef: 84:c6:b5:fc:e2:cc:18:eb:1c:73:3d:d2:e8:b9:54:61:eb:94: 0b:09:43:00:44:b2:5a:a4:3f:b5:ce:f0:8f:ca:c9:5e:89:d7: d3:7b:be:17:68:39:b5:e6:22:af:e7:f5:a0:ac:69:56:a1:52: 4f:7d:4a:70:15:31:48:98:4c:34:db:ae:cb:8b:05:f7:7b:f1: 3d:c0:6d:74:67:06:c6:a9:11:ef:90:da:fb:bb:57:fd:99:4d: 0b:20:e7:75:2b:69:c9:dc:52:f0:8e:dc:11:65:08:ab:76:05: 1f:9a:14:10:d4:bc:07:18:30:82:e7:8f:9b:32:2d:54:ec:89: 2d:6c:54:5e:96:0d:5e:ec:0e:e9:7d:3b:d3:12:b0:fb:71:25: ca:a7:dc:3e:94:81:09:48:b3:46:54:42:03:98:7c:91:ef:17: 07:01:dc:ba:da:6f:aa:e2:cb:5c:ab:9e:d9:4d:dc:d9:29:aa: ff:72:27:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSjInTpTRwGPjL+pKVHVkUbxiVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy Q0U2RUZGNjAeFw0yNjEwMTkxNjU1MzdaFw0yNjEwMjAxNzU0MzdaMDMxMTAvBgNV BAMTKEU3OTQ4RjJDQ0NDQjU2OEM5NTMxOEEyN0Y4N0FCOTIyRDkzNzIzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjE+ct6IpAyy2G0yqN718reP4 mr1WCyjddIliQJ1drFKJVlJVFmiN3vMiUCTaiyAvWbg97cQRPoA/Ha2pLEa6qOZ+ oJH9LF55nheFYCCuZfV0laKsjgWtLgRojUyX3YZCBuTRpZ6CVaxRA/5SLnMlEqjU +hSgmohHArP3xH/mLNzjEdkHR3DcQEQeFpQIxtPH11j2IndHvIDfLhI+XgRdluyc Tvly0Ihfo2ZKGjr8XMh0DEKf2CAJTeHsJLz9ICkNuEe19hF02Jo8HZ+0ey21VPa8 LWsgmGQpk4sGvsl/D/EUYSVXye59sZqb7pksVemWUzpWWW9QVjo5cYPmBBunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55SPLMzLVoyVMYon+Hq5Itk3I1YwHwYDVR0j BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2 MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1 OEYyQ0U2RUZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXOmuetYrpZyeDaJTnodk5wi1EQWKMokEAy ZVKw0/IG0+V0e8ykjOEaUZgYPv0bXukRoq+XToUPOfwCh6HOyerRqiiyImxl74TG tfzizBjrHHM90ui5VGHrlAsJQwBEslqkP7XO8I/KyV6J19N7vhdoObXmIq/n9aCs aVahUk99SnAVMUiYTDTbrsuLBfd78T3AbXRnBsapEe+Q2vu7V/2ZTQsg53Uracnc UvCO3BFlCKt2BR+aFBDUvAcYMILnj5syLVTsiS1sVF6WDV7sDul9O9MSsPtxJcqn 3D6UgQlIs0ZUQgOYfJHvFwcB3Lrab6riy1yrntlN3Nkpqv9yJ5s= -----END CERTIFICATE-----Generated at Tue Oct 20 10:06:51 2026 by rpki-client