$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: OoHA9j6GeZ0UHU7sPxUJKFnDGUZTItAbwrkwUBbIJAU= Subject key identifier: 02:20:41:A4:80:00:11:F9:B6:62:BE:D8:B4:E8:84:A9:7D:33:21:5C Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 3642E31080B4E705E5C2D0A22FF3A20D72A376CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: EB Signing time: Sat 24 Oct 2026 18:01:36 +0000 Manifest this update: Sat 24 Oct 2026 17:56:36 +0000 Manifest next update: Sun 25 Oct 2026 21:26:36 +0000 Files and hashes: 1: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: UqVtAHXUH6r9R51fcqBNPfxOPw+Y74ajjnvxAPkJGbE=) 2: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:42:e3:10:80:b4:e7:05:e5:c2:d0:a2:2f:f3:a2:0d:72:a3:76:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: Oct 24 17:56:36 2026 GMT Not After : Oct 25 21:26:36 2026 GMT Subject: CN=022041A4800011F9B662BED8B4E884A97D33215C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:d0:b4:0a:1b:f5:c8:7c:00:a8:04:44:94: 34:16:17:32:f3:27:c8:b1:1a:42:8e:a2:0e:ee:9c: 54:46:c9:17:fd:1a:82:bd:06:61:57:04:95:88:77: 38:cd:e9:c4:4b:0c:20:92:40:9b:27:8d:6e:93:1f: 55:6e:95:fd:9e:fe:9e:ad:7e:38:b2:ae:35:d0:cc: f0:84:4e:13:50:0a:56:dd:d8:54:52:4e:bb:6a:61: 62:c4:62:d8:f2:af:05:e3:97:28:cb:36:43:77:50: cc:6a:fc:53:a8:36:0a:16:d0:01:82:2b:40:22:18: b1:34:6b:2d:3f:05:15:2a:22:6d:b4:68:1b:80:23: 6c:b3:40:28:c1:13:06:c1:a8:1c:0f:6c:52:d4:c3: 39:72:c3:91:7d:0e:70:f1:fb:57:c0:b1:d8:9f:73: bc:f3:48:14:ec:a8:35:c5:13:83:73:b5:05:f8:0d: c1:c4:7c:e8:43:39:08:97:a8:e5:8c:eb:5d:69:2a: 4a:40:43:16:7d:7a:ca:40:15:ca:58:6f:09:95:e7: a5:b9:66:34:e3:e1:eb:2a:84:1a:43:56:c1:dc:d6: 77:15:78:87:3e:0a:e7:60:46:f5:bc:3b:1c:2b:b0: f7:0a:03:e0:f1:d0:62:d5:60:64:55:e0:9e:38:38: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:41:A4:80:00:11:F9:B6:62:BE:D8:B4:E8:84:A9:7D:33:21:5C X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:8d:92:83:ad:f1:d4:d9:89:d4:21:61:87:e3:2c:dc:2c: 64:e7:14:15:47:5f:ce:0f:4e:55:03:57:f1:95:ae:93:3b:1b: 7a:8a:fb:36:7e:d0:c9:b2:bf:a1:b4:39:1c:b9:ad:82:18:bb: 02:0e:1d:0b:10:73:f9:a7:0f:6e:04:5b:78:6c:ea:86:78:e2: 32:c6:c3:09:75:76:ad:39:35:79:f1:69:60:6d:06:32:e1:46: 26:34:1f:40:a9:79:33:f7:3d:22:1f:c7:4a:0f:f7:c8:ee:79: aa:7d:86:14:0d:d1:f3:1c:33:9f:ab:25:86:20:4f:2d:3b:f3: f3:f0:ef:95:dc:16:b5:cb:4f:7f:f4:84:f1:d9:03:4f:bf:ea: 70:e6:6b:ee:71:81:00:bf:ca:78:7f:76:f0:37:c5:b0:a1:d7: e3:e3:db:71:ce:5c:d4:37:63:90:cc:65:f1:90:79:7b:ca:7b: c2:16:d7:b3:46:38:bd:c1:87:3e:6b:21:82:39:34:68:ed:6c: 09:af:61:57:8e:0d:c7:ac:2b:43:48:1d:e4:28:7c:85:ec:9d: 08:6e:5f:c6:c0:5a:8d:59:4a:75:77:cd:89:c3:0f:6c:b2:a2: 70:22:88:47:7a:b5:0d:44:ab:49:f9:d2:a8:4d:3b:80:d2:bc: 73:d2:96:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkLjEIC05wXlwtCiL/OiDXKjdsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjEwMjQxNzU2MzZaFw0yNjEwMjUyMTI2MzZaMDMxMTAvBgNV BAMTKDAyMjA0MUE0ODAwMDExRjlCNjYyQkVEOEI0RTg4NEE5N0QzMzIxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxNC0Chv1yHwAqARElDQWFzLz J8ixGkKOog7unFRGyRf9GoK9BmFXBJWIdzjN6cRLDCCSQJsnjW6TH1Vulf2e/p6t fjiyrjXQzPCEThNQClbd2FRSTrtqYWLEYtjyrwXjlyjLNkN3UMxq/FOoNgoW0AGC K0AiGLE0ay0/BRUqIm20aBuAI2yzQCjBEwbBqBwPbFLUwzlyw5F9DnDx+1fAsdif c7zzSBTsqDXFE4NztQX4DcHEfOhDOQiXqOWM611pKkpAQxZ9espAFcpYbwmV56W5 ZjTj4esqhBpDVsHc1ncVeIc+CudgRvW8OxwrsPcKA+Dx0GLVYGRV4J44OBiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAiBBpIAAEfm2Yr7YtOiEqX0zIVwwHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0VjZKDrfHU2YnUIWGH4yzcLGTnFBVHX84P TlUDV/GVrpM7G3qK+zZ+0Mmyv6G0ORy5rYIYuwIOHQsQc/mnD24EW3hs6oZ44jLG wwl1dq05NXnxaWBtBjLhRiY0H0CpeTP3PSIfx0oP98jueap9hhQN0fMcM5+rJYYg Ty078/Pw75XcFrXLT3/0hPHZA0+/6nDma+5xgQC/ynh/dvA3xbCh1+Pj23HOXNQ3 Y5DMZfGQeXvKe8IW17NGOL3Bhz5rIYI5NGjtbAmvYVeODcesK0NIHeQofIXsnQhu X8bAWo1ZSnV3zYnDD2yyonAiiEd6tQ1Eq0n50qhNO4DSvHPSluE= -----END CERTIFICATE-----Generated at Sun Oct 25 10:45:48 2026 by rpki-client