$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: 9SGtSWTQ9Qt5hMFvqLIcQj6H/4L3aX+OFUl5gPH2V6E= Subject key identifier: DA:1A:9A:F7:38:16:AF:C2:EB:31:30:27:C3:6C:7A:38:34:C9:59:E8 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 12245A2480B8E3A2F4CA74DC3F7554458DD0AEBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: EA Signing time: Sat 24 Oct 2026 16:34:58 +0000 Manifest this update: Sat 24 Oct 2026 16:29:58 +0000 Manifest next update: Sun 25 Oct 2026 20:12:58 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 3: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: ZAINjB9ZRI/Vb52eFjjQQGKbR3My8ZoL6chRdoWYbr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:24:5a:24:80:b8:e3:a2:f4:ca:74:dc:3f:75:54:45:8d:d0:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: Oct 24 16:29:58 2026 GMT Not After : Oct 25 20:12:58 2026 GMT Subject: CN=DA1A9AF73816AFC2EB313027C36C7A3834C959E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:a3:b1:23:3d:b2:53:94:9c:63:93:8f:c6: 34:53:bd:83:89:b7:b4:de:e1:38:8b:c7:e8:b2:6e: 35:ae:a3:59:8d:79:a6:65:07:d5:cc:28:99:41:48: 10:a8:e9:89:9f:90:43:b5:d2:3b:cd:a6:09:65:23: a8:6b:b5:69:81:2d:f0:48:ae:4d:0b:0a:03:95:6f: 9e:c2:d2:2b:70:2d:02:53:79:cb:a2:25:d0:2d:b3: f4:0d:b2:5f:f0:5a:c8:fd:9d:3a:39:f5:e1:d1:2f: 67:21:f2:36:c9:1b:ca:0a:0e:b4:1c:31:d7:00:ef: e6:40:b4:8a:33:a0:8e:55:b4:c7:13:62:70:67:cc: 12:50:17:80:e5:7f:c2:16:a3:ea:6e:29:b3:ae:94: a1:58:28:06:77:ad:f5:75:aa:72:11:b2:d0:4a:43: 32:8f:bf:14:36:f0:9d:3c:1a:b4:d3:71:a5:cf:2e: 9a:db:10:f5:36:44:4f:9f:41:19:b3:c2:86:2a:c7: 99:2f:d8:d7:9a:cc:94:a3:51:28:f5:6a:30:a8:71: 99:89:c0:39:ca:8a:c7:53:f6:41:3a:d5:c6:fd:0f: 89:91:ae:b1:d6:06:67:33:2e:cc:10:f8:42:1f:ae: d3:af:f5:0d:fc:c7:f9:0b:35:2b:68:75:5b:21:e5: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:9A:F7:38:16:AF:C2:EB:31:30:27:C3:6C:7A:38:34:C9:59:E8 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6f:c5:de:15:db:1d:89:f4:d5:f3:cd:7a:90:58:3e:5b:e5: cd:8b:da:7a:00:a9:2b:00:bb:36:e5:f4:20:2d:86:27:50:0d: c6:eb:b8:0c:2c:cb:ad:7d:bb:b9:18:fd:ef:8b:f6:48:7a:d1: ad:26:08:ae:67:6a:40:b7:af:88:01:1a:27:2c:ec:9d:a4:68: 93:ab:d4:f1:b8:b4:cc:49:ae:03:70:cc:27:c6:a2:69:41:96: 7e:ca:66:43:60:cf:5b:4f:45:2b:2d:82:b4:e6:f6:ef:6b:88: 62:36:10:c7:25:5a:ff:c4:42:66:01:69:ac:ff:cc:2e:83:80: d9:5a:4b:a8:5d:0c:b8:b1:40:6d:02:7b:14:b4:85:cd:80:38: a9:d0:6e:ba:4e:e4:bd:25:1e:53:fc:4c:6b:a1:4a:d4:18:1b: 1c:fe:d7:f6:e9:4f:ad:a4:d7:f3:ea:84:63:1c:7c:7e:26:e0: 21:3f:83:4b:48:57:26:45:5e:9b:15:95:0f:27:07:e9:11:00: 5e:07:f3:28:17:e7:47:fb:bd:09:4a:08:59:85:00:a0:b0:e5: d4:c1:df:09:3b:67:9e:59:a1:b0:3f:59:d8:b0:96:ea:01:b3: af:cd:00:72:01:35:2e:01:f3:60:41:1a:98:85:08:1f:e3:2f: 3b:4d:48:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiRaJIC446L0ynTcP3VURY3Qrr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjEwMjQxNjI5NThaFw0yNjEwMjUyMDEyNThaMDMxMTAvBgNV BAMTKERBMUE5QUY3MzgxNkFGQzJFQjMxMzAyN0MzNkM3QTM4MzRDOTU5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNKOxIz2yU5ScY5OPxjRTvYOJ t7Te4TiLx+iybjWuo1mNeaZlB9XMKJlBSBCo6YmfkEO10jvNpgllI6hrtWmBLfBI rk0LCgOVb57C0itwLQJTecuiJdAts/QNsl/wWsj9nTo59eHRL2ch8jbJG8oKDrQc MdcA7+ZAtIozoI5VtMcTYnBnzBJQF4Dlf8IWo+puKbOulKFYKAZ3rfV1qnIRstBK QzKPvxQ28J08GrTTcaXPLprbEPU2RE+fQRmzwoYqx5kv2NeazJSjUSj1ajCocZmJ wDnKisdT9kE61cb9D4mRrrHWBmczLswQ+EIfrtOv9Q38x/kLNStodVsh5c1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2hqa9zgWr8LrMTAnw2x6ODTJWegwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1vxd4V2x2J9NXzzXqQWD5b5c2L2noAqSsA uzbl9CAthidQDcbruAwsy619u7kY/e+L9kh60a0mCK5nakC3r4gBGics7J2kaJOr 1PG4tMxJrgNwzCfGomlBln7KZkNgz1tPRSstgrTm9u9riGI2EMclWv/EQmYBaaz/ zC6DgNlaS6hdDLixQG0CexS0hc2AOKnQbrpO5L0lHlP8TGuhStQYGxz+1/bpT62k 1/PqhGMcfH4m4CE/g0tIVyZFXpsVlQ8nB+kRAF4H8ygX50f7vQlKCFmFAKCw5dTB 3wk7Z55ZobA/WdiwluoBs6/NAHIBNS4B82BBGpiFCB/jLztNSLs= -----END CERTIFICATE-----Generated at Sun Oct 25 03:20:31 2026 by rpki-client