$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: p4wdQJ1qISk1Y+xqVsigrey/ibM0wCSb9qJoXQ0aSt0= Subject key identifier: 0B:32:5B:CA:DC:BF:CB:FF:CC:02:B1:4F:F6:0F:7A:96:34:01:8D:72 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 452844651E46B89CC8C7F435D23277B8BA66A4E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: ED Signing time: Sun 25 Oct 2026 17:59:03 +0000 Manifest this update: Sun 25 Oct 2026 17:54:03 +0000 Manifest next update: Mon 26 Oct 2026 20:21:03 +0000 Files and hashes: 1: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: o7UMftiU9QcaPMcIFHm/dyibP5gZM00OfvWZIjszQOI=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:28:44:65:1e:46:b8:9c:c8:c7:f4:35:d2:32:77:b8:ba:66:a4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Oct 25 17:54:03 2026 GMT Not After : Oct 26 20:21:03 2026 GMT Subject: CN=0B325BCADCBFCBFFCC02B14FF60F7A9634018D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:d4:59:2c:9f:47:08:9c:8d:87:bc:1e:ba: 1c:ba:4f:2f:a0:0b:60:b0:bb:8b:38:45:02:af:19: 13:e8:8e:7f:b9:ca:45:03:a2:e7:33:c5:90:3d:5f: 6e:56:5e:11:f7:f1:50:1f:8d:0f:d3:85:61:d5:e9: e8:ad:88:9a:c0:6b:77:59:aa:0a:45:42:c3:6a:d2: a6:db:89:f6:1d:37:d7:28:18:5b:6a:45:66:ee:b8: b8:54:a4:b6:a2:69:00:f9:b3:20:a5:69:b6:fd:e5: 24:b0:36:92:89:0e:43:96:b8:e2:81:67:af:d3:71: e5:19:b9:28:ca:72:6e:6f:6e:41:f2:34:a0:b3:ff: 34:1e:86:a6:9a:af:c7:3f:69:7e:62:bb:21:68:47: f9:fb:af:c2:ab:5d:0b:0b:59:db:85:a6:49:51:32: 73:7f:83:55:fa:20:e8:89:35:ca:72:fe:b1:d1:93: a6:95:5f:7b:9f:86:79:02:3b:64:65:bf:a7:c7:3a: 4f:4a:39:90:09:5c:6f:b3:15:0e:3a:9e:70:5f:18: c5:be:44:47:df:26:e1:81:76:ec:61:e5:3f:83:90: 8c:d2:8f:c9:49:95:57:29:97:65:c2:87:8b:00:21: 58:56:6d:e9:cd:37:24:31:da:44:0d:1e:37:d8:a0: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:32:5B:CA:DC:BF:CB:FF:CC:02:B1:4F:F6:0F:7A:96:34:01:8D:72 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:62:1a:98:11:d5:a2:9c:af:3d:8d:76:69:d7:ee:73:34:68: 9f:75:80:c8:a9:42:ef:cf:fa:1c:d4:a4:a0:96:71:4e:78:08: 3c:e5:38:22:0f:d9:44:d3:75:13:f4:91:a2:13:d8:80:26:36: b6:ad:60:31:bd:d3:c9:5f:da:19:cd:36:e6:bb:fc:c4:d8:0f: 26:d4:43:f5:26:30:b2:cf:94:a6:16:39:66:c7:a4:fb:f5:d2: 4e:7a:c6:9b:c7:09:c2:a1:c8:27:76:2b:c8:c1:52:00:0e:83: 0c:63:81:b1:1b:db:32:16:26:50:ac:4c:e8:b5:0a:62:4b:19: 2e:f1:57:2e:d4:00:2a:a1:0d:39:dc:97:34:d3:c4:e4:f7:9d: 56:48:63:58:d5:1a:1a:37:35:33:dc:35:9c:72:59:22:60:59: 9d:7a:07:68:00:a0:64:23:84:ff:61:a8:87:65:58:ef:a4:85: 69:01:1c:87:9c:ff:cc:c2:6c:ef:da:32:14:f7:09:99:ef:12: db:e8:a4:06:b1:9a:a3:a1:26:0c:b0:44:2c:99:b7:12:0a:c8: 0d:6e:4e:e4:53:b3:17:dc:bc:48:70:10:8e:96:45:31:e2:6a: 26:31:94:ac:e3:e6:57:92:25:ba:87:98:eb:65:8b:03:27:41: fd:40:46:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURShEZR5GuJzIx/Q10jJ3uLpmpOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjEwMjUxNzU0MDNaFw0yNjEwMjYyMDIxMDNaMDMxMTAvBgNV BAMTKDBCMzI1QkNBRENCRkNCRkZDQzAyQjE0RkY2MEY3QTk2MzQwMThENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzNRZLJ9HCJyNh7weuhy6Ty+g C2Cwu4s4RQKvGRPojn+5ykUDouczxZA9X25WXhH38VAfjQ/ThWHV6eitiJrAa3dZ qgpFQsNq0qbbifYdN9coGFtqRWbuuLhUpLaiaQD5syClabb95SSwNpKJDkOWuOKB Z6/TceUZuSjKcm5vbkHyNKCz/zQehqaar8c/aX5iuyFoR/n7r8KrXQsLWduFpklR MnN/g1X6IOiJNcpy/rHRk6aVX3ufhnkCO2Rlv6fHOk9KOZAJXG+zFQ46nnBfGMW+ REffJuGBduxh5T+DkIzSj8lJlVcpl2XCh4sAIVhWbenNNyQx2kQNHjfYoOvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzJbyty/y//MArFP9g96ljQBjXIwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEliGpgR1aKcrz2NdmnX7nM0aJ91gMipQu/P +hzUpKCWcU54CDzlOCIP2UTTdRP0kaIT2IAmNratYDG908lf2hnNNua7/MTYDybU Q/UmMLLPlKYWOWbHpPv10k56xpvHCcKhyCd2K8jBUgAOgwxjgbEb2zIWJlCsTOi1 CmJLGS7xVy7UACqhDTnclzTTxOT3nVZIY1jVGho3NTPcNZxyWSJgWZ16B2gAoGQj hP9hqIdlWO+khWkBHIec/8zCbO/aMhT3CZnvEtvopAaxmqOhJgywRCyZtxIKyA1u TuRTsxfcvEhwEI6WRTHiaiYxlKzj5leSJbqHmOtliwMnQf1ARtI= -----END CERTIFICATE-----Generated at Mon Oct 26 00:42:28 2026 by rpki-client