$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft File: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft (raw, json) Hash identifier: va6iSGhOdKOBbTgEVXFd0hpLGNiAeysieoIDPjD0nHs= Subject key identifier: 39:17:12:C2:7C:C9:7D:1E:19:E6:4C:AD:21:DA:FB:98:60:FB:5E:70 Authority key identifier: 1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6 Certificate issuer: /CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6 Certificate serial: 0958A97CFBD9BC8BCDDA0CB93BE3AE87E28E78DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft Manifest number: EA Signing time: Sat 24 Oct 2026 20:04:14 +0000 Manifest this update: Sat 24 Oct 2026 19:59:14 +0000 Manifest next update: Sun 25 Oct 2026 20:43:14 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: JrEW/30RO3gUW1ByazsB4J+UwUtCgvPKBe7wSHvmciQ=) 2: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl (hash: Dt6sGFaOPEPUJCFxMouLo4hIrPAyfUqunfYvvI99aFE=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: /gkps6YmjETNnD4xTy2XTErh7Br1EnrDL/N1FLVMik4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:58:a9:7c:fb:d9:bc:8b:cd:da:0c:b9:3b:e3:ae:87:e2:8e:78:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6 Validity Not Before: Oct 24 19:59:14 2026 GMT Not After : Oct 25 20:43:14 2026 GMT Subject: CN=391712C27CC97D1E19E64CAD21DAFB9860FB5E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:8d:38:ca:73:97:37:27:36:35:49:e0:2b: ed:c6:ab:ed:8f:31:78:3c:24:5c:2e:a5:43:aa:60: 54:fc:fe:4c:0e:4c:07:08:f7:4f:b5:1a:d6:bd:fd: ac:cf:e1:36:0e:97:27:b9:76:62:3d:9f:66:c1:12: a8:f5:1d:58:29:13:03:8a:e6:ee:7f:e5:e9:ca:48: f8:93:49:91:f2:85:86:7a:4d:ec:7d:b1:d7:90:e5: 78:ac:1e:41:64:69:bd:26:38:81:a9:29:e0:49:27: 31:84:66:eb:4f:02:3f:b1:d3:b4:a8:1f:fa:d9:f0: ab:f8:78:a2:d0:71:02:b6:04:d3:f5:a0:6c:2d:e6: 7a:9d:3a:3f:62:50:37:06:f0:6b:a0:2b:a0:96:5f: af:d8:e8:3f:af:13:33:82:7e:f9:f7:2d:db:0b:ac: 0b:d0:c2:3f:49:cd:79:c1:00:cc:e3:ce:e8:df:9e: d3:c1:80:59:5e:46:80:87:86:0e:5b:7f:1d:03:be: d4:3f:24:79:a1:1c:c5:6b:37:d9:1d:be:5c:cd:60: f7:36:c9:27:b2:d7:83:74:d3:9c:e4:e5:92:46:31: 35:66:e6:76:4b:4b:dc:40:87:ad:58:1f:12:3f:60: 67:99:ba:41:1c:f7:17:18:2b:01:cb:19:9a:13:f6: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:12:C2:7C:C9:7D:1E:19:E6:4C:AD:21:DA:FB:98:60:FB:5E:70 X509v3 Authority Key Identifier: keyid:1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e0:a1:24:08:f8:1d:5c:15:fe:02:0e:46:ab:76:86:f1:f2: 56:69:57:f5:95:fb:60:08:de:dc:63:bb:28:79:64:f4:1d:78: d3:7b:1e:d3:93:db:d4:f7:87:04:79:5f:2c:30:4b:6e:ab:0c: 35:a0:80:1c:13:e7:40:29:1b:05:6d:9c:d8:9a:00:7f:e7:02: a3:7b:34:6c:9c:d2:1a:3f:ab:d7:78:30:8d:ec:e0:63:4b:5b: da:39:8a:4d:81:41:ae:45:ba:31:4c:cb:91:5a:04:5b:2c:02: cb:b0:d7:f4:90:08:0e:ed:57:89:0c:3b:ff:fb:ad:d9:21:f1: d5:b9:02:6b:df:70:a7:ee:71:46:60:e8:ef:e5:26:21:32:1e: 14:ee:03:23:8e:77:67:2a:63:93:19:0e:f2:5a:17:1f:2d:66: 26:67:47:b4:3c:6f:b7:b4:02:d9:e4:a8:69:4e:9d:32:8f:74: 5a:ca:af:b3:49:80:59:5f:69:97:e1:ac:ce:20:7e:54:1f:49: d4:24:22:17:e8:6f:06:c3:85:85:0a:74:d2:19:2e:78:00:4d: b7:a5:d5:3a:82:9a:fa:91:2c:4b:c6:3e:66:70:96:28:d6:17: c1:5e:24:da:17:39:f6:fd:6d:d8:94:06:44:5b:30:af:7a:84: a9:eb:e6:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVipfPvZvIvN2gy5O+Ouh+KOeNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1MEVEOUE2OTY2REFDQjA5MDNGNzA1REYwM0JCMjg2 NTgxRjRBNjAeFw0yNjEwMjQxOTU5MTRaFw0yNjEwMjUyMDQzMTRaMDMxMTAvBgNV BAMTKDM5MTcxMkMyN0NDOTdEMUUxOUU2NENBRDIxREFGQjk4NjBGQjVFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPn404ynOXNyc2NUngK+3Gq+2P MXg8JFwupUOqYFT8/kwOTAcI90+1Gta9/azP4TYOlye5dmI9n2bBEqj1HVgpEwOK 5u5/5enKSPiTSZHyhYZ6Tex9sdeQ5XisHkFkab0mOIGpKeBJJzGEZutPAj+x07So H/rZ8Kv4eKLQcQK2BNP1oGwt5nqdOj9iUDcG8GugK6CWX6/Y6D+vEzOCfvn3LdsL rAvQwj9JzXnBAMzjzujfntPBgFleRoCHhg5bfx0DvtQ/JHmhHMVrN9kdvlzNYPc2 ySey14N005zk5ZJGMTVm5nZLS9xAh61YHxI/YGeZukEc9xcYKwHLGZoT9r3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORcSwnzJfR4Z5kytIdr7mGD7XnAwHwYDVR0j BBgwFoAUGlDtmmlm2ssJA/cF3wO7KGWB9KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0N2E2YTItMWFkMC00NmM3LTljYWQtNThiYmQ3MWZiNWE0LzAvMUE1MEVEOUE2 OTY2REFDQjA5MDNGNzA1REYwM0JCMjg2NTgxRjRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTUwRUQ5QTY5NjZEQUNCMDkwM0Y3MDVERjAzQkIyODY1ODFG NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvMUE1MEVEOUE2OTY2REFDQjA5MDNGNzA1REYwM0JC Mjg2NTgxRjRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvgoSQI+B1cFf4CDkardobx8lZpV/WV+2AI 3txjuyh5ZPQdeNN7HtOT29T3hwR5XywwS26rDDWggBwT50ApGwVtnNiaAH/nAqN7 NGyc0ho/q9d4MI3s4GNLW9o5ik2BQa5FujFMy5FaBFssAsuw1/SQCA7tV4kMO//7 rdkh8dW5AmvfcKfucUZg6O/lJiEyHhTuAyOOd2cqY5MZDvJaFx8tZiZnR7Q8b7e0 AtnkqGlOnTKPdFrKr7NJgFlfaZfhrM4gflQfSdQkIhfobwbDhYUKdNIZLngATbel 1TqCmvqRLEvGPmZwlijWF8FeJNoXOfb9bdiUBkRbMK96hKnr5r8= -----END CERTIFICATE-----Generated at Sun Oct 25 09:03:20 2026 by rpki-client