$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft File: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft (raw, json) Hash identifier: 0vozYqYyp0cW89MZ/oIsLva3WfW9oTQHvm1afBhzoXo= Subject key identifier: 2A:43:5A:54:0B:3D:83:4D:53:24:8E:B3:31:6F:37:1F:01:06:0A:91 Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A Certificate issuer: /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A Certificate serial: 367C0D7027C968F958C01E96DC81F8332F804BD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft Manifest number: F0 Signing time: Sat 24 Oct 2026 16:34:50 +0000 Manifest this update: Sat 24 Oct 2026 16:29:50 +0000 Manifest next update: Sun 25 Oct 2026 17:38:50 +0000 Files and hashes: 1: 3130332e3138362e39312e302f32342d3234203d3e20313534323137.roa (hash: in24u07VazKYRNUfv6MLrnj92FvAMx7IUV0O7/Qh+/I=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313534323137.roa (hash: rgywsINzbVz7ZlQmqQUAOTUhfUluT0fl5xYs0+HAjXQ=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa (hash: SF6wFvB92++pgvhJiz3ViTnExdueiHmwDxFQcyeOg9g=) 4: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl (hash: DKt3lbWrrJr5pMqf/aJGlwn4+aSp9HpjAvGI3SvMb+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7c:0d:70:27:c9:68:f9:58:c0:1e:96:dc:81:f8:33:2f:80:4b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A Validity Not Before: Oct 24 16:29:50 2026 GMT Not After : Oct 25 17:38:50 2026 GMT Subject: CN=2A435A540B3D834D53248EB3316F371F01060A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:83:ba:77:3b:0e:4c:0e:8b:d4:a6:94:70: e8:48:72:80:27:2e:47:1b:ce:a6:33:25:30:ca:07: a6:1b:41:2c:08:80:a1:cb:4f:55:79:74:ce:a8:6d: 0b:f0:51:c1:9f:43:c5:84:e1:7d:68:96:e6:ee:b8: 0a:05:8f:fd:c7:a1:13:2c:a7:4c:73:18:a3:6a:df: fd:08:59:9f:0a:5a:c8:c5:78:d0:f3:b5:d3:f0:90: 8a:ea:17:6a:b2:7d:8c:4f:4d:ec:c8:eb:ec:2a:af: 39:4f:1b:12:ef:3e:79:3d:54:4a:b6:d9:fd:86:67: 4f:f4:7f:35:d8:97:9f:73:21:bd:3b:a3:5b:dc:13: db:44:e6:98:7a:3a:b0:83:6d:58:47:07:89:73:49: 76:c3:24:5d:25:1b:e4:37:9e:29:ce:88:f0:75:50: 46:a8:92:a0:f6:d0:af:36:54:98:e4:9d:74:ff:e7: d1:8b:ed:df:9e:85:47:3c:a9:7b:35:06:e2:42:41: de:a4:b0:4b:1c:9f:ea:26:5a:2e:56:5b:c5:7f:0f: 80:ae:92:97:e6:96:14:4d:a1:4c:90:f1:4c:45:dd: d5:d5:fb:32:70:e7:73:a8:25:2a:c2:bb:35:76:8e: 5e:38:dc:96:11:f1:02:d4:95:59:30:f6:80:54:ae: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:5A:54:0B:3D:83:4D:53:24:8E:B3:31:6F:37:1F:01:06:0A:91 X509v3 Authority Key Identifier: keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:39:64:4a:03:42:db:1a:f7:f2:79:87:1c:15:3e:6d:41:b6: f3:59:37:25:0a:b8:27:0c:d7:aa:4a:7d:ab:34:85:40:ae:4a: f0:2b:49:bb:2c:42:53:b3:3e:f5:af:9a:cb:48:26:9f:85:ab: 33:c9:e2:53:97:c3:cf:1f:e9:77:20:11:7a:da:25:24:66:6c: 29:a1:da:24:cd:d2:3b:04:aa:54:45:f5:6f:e8:f9:70:c8:d1: 71:a1:e9:78:62:31:f8:09:ba:65:46:f5:3f:a4:82:32:0e:88: 96:e8:e4:d4:5e:68:c0:fd:e2:27:f8:2e:d1:11:49:bb:9d:c0: a8:a1:33:1d:b6:78:10:62:80:9e:4c:ae:cb:d1:ce:b1:37:5a: 8f:81:ce:1d:7d:3a:67:55:42:ab:54:a9:5b:db:b1:4d:5b:22: 3e:51:5d:23:c8:25:1b:01:69:6a:44:60:70:df:78:43:3b:84: 8f:ed:ce:7a:82:78:7c:c5:28:0d:41:b1:50:45:2a:53:9b:48: b9:60:75:a2:d4:e1:40:2a:fb:44:93:8a:3b:1e:8f:ae:5e:f8: f6:ac:02:2a:3a:26:93:0f:84:e7:db:5c:f4:da:5f:1a:e1:bb: 2f:07:18:4f:58:0f:ac:38:8a:57:fe:42:89:b3:12:36:d8:e9: c5:a6:4e:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnwNcCfJaPlYwB6W3IH4My+AS9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ4M0FEQzk3QUNBNDVFRUM2QUJFQzc2MTE5RjEzMjFD NjdFNEUxQTAeFw0yNjEwMjQxNjI5NTBaFw0yNjEwMjUxNzM4NTBaMDMxMTAvBgNV BAMTKDJBNDM1QTU0MEIzRDgzNEQ1MzI0OEVCMzMxNkYzNzFGMDEwNjBBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R4O6dzsOTA6L1KaUcOhIcoAn LkcbzqYzJTDKB6YbQSwIgKHLT1V5dM6obQvwUcGfQ8WE4X1olubuuAoFj/3HoRMs p0xzGKNq3/0IWZ8KWsjFeNDztdPwkIrqF2qyfYxPTezI6+wqrzlPGxLvPnk9VEq2 2f2GZ0/0fzXYl59zIb07o1vcE9tE5ph6OrCDbVhHB4lzSXbDJF0lG+Q3ninOiPB1 UEaokqD20K82VJjknXT/59GL7d+ehUc8qXs1BuJCQd6ksEscn+omWi5WW8V/D4Cu kpfmlhRNoUyQ8UxF3dXV+zJw53OoJSrCuzV2jl443JYR8QLUlVkw9oBUrmJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkNaVAs9g01TJI6zMW83HwEGCpEwHwYDVR0j BBgwFoAUFIOtyXrKRe7Gq+x2EZ8TIcZ+ThowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk0YzFlOTUtYTczOC00ZTQ3LThlNWMtN2FmNjgxYjM2YjAwLzAvMTQ4M0FEQzk3 QUNBNDVFRUM2QUJFQzc2MTE5RjEzMjFDNjdFNEUxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDgzQURDOTdBQ0E0NUVFQzZBQkVDNzYxMTlGMTMyMUM2N0U0 RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvMTQ4M0FEQzk3QUNBNDVFRUM2QUJFQzc2MTE5RjEz MjFDNjdFNEUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI5ZEoDQtsa9/J5hxwVPm1BtvNZNyUKuCcM 16pKfas0hUCuSvArSbssQlOzPvWvmstIJp+FqzPJ4lOXw88f6XcgEXraJSRmbCmh 2iTN0jsEqlRF9W/o+XDI0XGh6XhiMfgJumVG9T+kgjIOiJbo5NReaMD94if4LtER SbudwKihMx22eBBigJ5MrsvRzrE3Wo+Bzh19OmdVQqtUqVvbsU1bIj5RXSPIJRsB aWpEYHDfeEM7hI/tznqCeHzFKA1BsVBFKlObSLlgdaLU4UAq+0STijsej65e+Pas Aio6JpMPhOfbXPTaXxrhuy8HGE9YD6w4ilf+QomzEjbY6cWmTh4= -----END CERTIFICATE-----Generated at Sat Oct 24 20:36:44 2026 by rpki-client