$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft File: D225946751D641016A8BDC8983AB89443F4481EE.mft (raw, json) Hash identifier: IJ71r+2H5s+xA9OBV81gb4AokK2pCsXCmQJIbJYwqLg= Subject key identifier: 66:AA:2C:52:68:E9:5D:58:07:F2:63:CD:C4:65:34:1F:A1:6A:AD:4E Authority key identifier: D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE Certificate issuer: /CN=D225946751D641016A8BDC8983AB89443F4481EE Certificate serial: 1D314FA6314575655C87C1D1BE920A1600C4F37F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft Manifest number: EC Signing time: Mon 26 Oct 2026 00:27:25 +0000 Manifest this update: Mon 26 Oct 2026 00:22:25 +0000 Manifest next update: Tue 27 Oct 2026 00:57:25 +0000 Files and hashes: 1: D225946751D641016A8BDC8983AB89443F4481EE.crl (hash: 7jv1/EMF+h0sqWJxxigtYDxXUViLc0STS61ii+oq/FI=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: jbs2GDDsgo2med8aBN6Q/a3OTj8U5cq+mFVfdUXlcps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 00:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:31:4f:a6:31:45:75:65:5c:87:c1:d1:be:92:0a:16:00:c4:f3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D225946751D641016A8BDC8983AB89443F4481EE Validity Not Before: Oct 26 00:22:25 2026 GMT Not After : Oct 27 00:57:25 2026 GMT Subject: CN=66AA2C5268E95D5807F263CDC465341FA16AAD4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:5f:ee:95:b9:c2:ea:99:ea:8a:b1:29:80: 00:a4:80:4c:5f:ca:bb:2b:93:f4:48:04:1f:57:de: 8a:e7:d9:49:6f:f3:83:d4:e8:56:c2:3d:36:e1:ea: 8f:4c:c0:2b:9e:6b:8b:1b:1a:2a:2f:37:d4:65:93: 12:0c:b8:a0:7b:9b:ed:8c:b3:ac:c2:83:ce:43:9c: 88:83:39:79:26:27:21:9e:90:3d:19:0b:7e:5a:ca: be:1c:dc:b8:70:d9:56:9d:8e:a5:25:16:c9:db:06: 88:fe:1b:4c:5d:3e:6b:2b:d2:3f:05:3b:cc:35:71: c5:23:84:89:70:99:3e:61:b8:b0:e1:95:88:53:25: e4:08:e1:f8:6f:8c:68:92:1b:37:27:c3:d5:da:61: 89:d1:66:38:26:97:15:0f:af:0f:09:bb:bc:ff:68: c6:ee:bf:88:29:d7:5d:c9:1e:e9:d2:55:72:cc:77: 5a:6b:72:ac:7e:d5:d4:e9:e1:7f:a5:7e:2c:f8:ae: 30:de:2c:ad:ea:a9:55:0c:fb:b1:c5:28:f0:cb:1f: c6:c1:7e:94:c1:6c:0a:cf:44:ad:2f:a3:72:1e:39: b0:d3:3f:0a:58:e0:3a:aa:17:36:d8:a5:5a:67:70: 67:88:d1:f9:89:8e:22:66:db:d1:ab:1f:34:a1:68: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:2C:52:68:E9:5D:58:07:F2:63:CD:C4:65:34:1F:A1:6A:AD:4E X509v3 Authority Key Identifier: keyid:D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b7:72:94:d7:46:0c:4c:1d:83:c9:5c:40:1a:44:11:28:47: af:ef:b7:57:bc:3d:47:3b:30:f9:ff:78:76:a1:e3:85:f6:37: fb:0c:48:39:ba:53:a9:77:97:f8:16:4a:9e:be:8e:d1:a9:43: 16:e3:50:cd:f5:c4:44:58:d3:5e:ba:eb:dc:92:60:b1:6c:0d: 11:71:36:51:06:cd:c3:bc:23:7e:be:c7:68:b0:28:cd:2b:c7: 33:3a:6c:8d:78:05:47:25:9a:79:84:a3:8f:bd:bb:a8:c1:58: b3:94:34:dc:e9:64:86:ed:24:5c:34:03:7d:3a:b1:39:ee:0b: 56:60:9b:bd:e1:3f:d6:35:1a:74:df:76:de:a1:31:e4:37:cf: f8:ed:03:66:99:60:e5:83:8c:ae:55:ea:2b:23:ad:07:d2:b3: 4e:63:b7:27:a2:ab:bb:f0:9d:90:bc:a5:c5:d4:ac:fb:3e:ee: 4f:f1:7d:6e:16:5a:7e:c9:1a:d8:60:00:30:39:3a:07:e4:22: e5:f5:1b:ae:0d:a8:f2:55:18:47:04:df:13:0e:1d:9e:65:a5: 6e:65:7b:9a:71:d8:a1:e2:b8:aa:70:56:a3:61:fe:d5:d2:06: 48:23:72:75:a2:b1:96:f4:9f:20:8f:0d:a1:3a:86:b1:f9:90: 38:55:8c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTFPpjFFdWVch8HRvpIKFgDE838wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQz RjQ0ODFFRTAeFw0yNjEwMjYwMDIyMjVaFw0yNjEwMjcwMDU3MjVaMDMxMTAvBgNV BAMTKDY2QUEyQzUyNjhFOTVENTgwN0YyNjNDREM0NjUzNDFGQTE2QUFENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF1/ulbnC6pnqirEpgACkgExf yrsrk/RIBB9X3orn2Ulv84PU6FbCPTbh6o9MwCuea4sbGiovN9RlkxIMuKB7m+2M s6zCg85DnIiDOXkmJyGekD0ZC35ayr4c3Lhw2VadjqUlFsnbBoj+G0xdPmsr0j8F O8w1ccUjhIlwmT5huLDhlYhTJeQI4fhvjGiSGzcnw9XaYYnRZjgmlxUPrw8Ju7z/ aMbuv4gp113JHunSVXLMd1prcqx+1dTp4X+lfiz4rjDeLK3qqVUM+7HFKPDLH8bB fpTBbArPRK0vo3IeObDTPwpY4DqqFzbYpVpncGeI0fmJjiJm29GrHzShaFb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqosUmjpXVgH8mPNxGU0H6FqrU4wHwYDVR0j BBgwFoAU0iWUZ1HWQQFqi9yJg6uJRD9Ege4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NTY4MTUtYTQ0NS00OTg4LTlmYTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1 MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQzRjQ0ODFFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjI1OTQ2NzUxRDY0MTAxNkE4QkRDODk4M0FCODk0NDNGNDQ4 MUVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5 NDQzRjQ0ODFFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu3cpTXRgxMHYPJXEAaRBEoR6/vt1e8PUc7 MPn/eHah44X2N/sMSDm6U6l3l/gWSp6+jtGpQxbjUM31xERY016669ySYLFsDRFx NlEGzcO8I36+x2iwKM0rxzM6bI14BUclmnmEo4+9u6jBWLOUNNzpZIbtJFw0A306 sTnuC1Zgm73hP9Y1GnTfdt6hMeQ3z/jtA2aZYOWDjK5V6isjrQfSs05jtyeiq7vw nZC8pcXUrPs+7k/xfW4WWn7JGthgADA5OgfkIuX1G64NqPJVGEcE3xMOHZ5lpW5l e5px2KHiuKpwVqNh/tXSBkgjcnWisZb0nyCPDaE6hrH5kDhVjEk= -----END CERTIFICATE-----Generated at Mon Oct 26 11:15:00 2026 by rpki-client