$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: kvNQyvW+RYOaNBLsb1KaNqxfiNxOTboC+2u/nlcuBVU= Subject key identifier: 5D:3F:C3:CB:B4:9E:00:C1:12:45:13:70:FE:81:4A:66:6B:E3:22:D7 Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 2D144CE140CAD55930FDA32904764BEA58034176 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: EC Signing time: Sun 25 Oct 2026 17:02:54 +0000 Manifest this update: Sun 25 Oct 2026 16:57:54 +0000 Manifest next update: Mon 26 Oct 2026 17:55:54 +0000 Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: WLJRCNs+e3qtWxYPzrVu6SfBtSEGnelPBRileRVEPhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:14:4c:e1:40:ca:d5:59:30:fd:a3:29:04:76:4b:ea:58:03:41:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Oct 25 16:57:54 2026 GMT Not After : Oct 26 17:55:54 2026 GMT Subject: CN=5D3FC3CBB49E00C112451370FE814A666BE322D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:ba:f3:57:54:f5:49:05:70:af:b0:81:c2: da:be:f5:c5:a4:92:8b:8a:af:27:42:a0:b1:9a:e5: 88:6c:ea:cf:86:5c:90:1b:d6:32:fd:87:3d:d6:9a: c1:ca:cd:d0:a3:81:46:71:0f:0e:30:8d:2d:ac:a2: dc:ea:f2:34:b9:30:f3:3d:7f:98:81:83:de:e3:e1: fe:27:43:23:1c:ca:5d:7c:82:17:84:a6:8c:09:b2: 51:e1:f5:7a:75:85:3a:e6:40:a0:65:85:c1:17:1e: 5e:58:79:52:3b:92:b7:e1:eb:37:7c:8c:22:14:96: 0d:76:a2:19:60:2f:7f:b7:ea:db:8d:b7:3b:f0:25: 0e:7f:e4:41:11:28:1f:45:b6:4f:67:7b:34:2e:2c: 88:c3:05:aa:b3:cf:9f:ce:62:e2:db:cd:ca:41:0b: dc:b8:dc:a2:c8:88:74:d3:8a:9e:14:5d:f8:8e:6c: f9:47:00:18:29:c5:6b:61:b5:c9:1b:d1:a4:5d:7a: c9:8a:9a:56:7f:86:f3:3f:68:d4:36:fd:0d:fc:34: 86:f3:c0:e1:8e:57:f7:bf:20:ee:e3:8f:29:17:f3: a5:c9:91:b6:0e:16:4e:90:e9:46:54:5e:03:e1:d5: a6:d3:63:2c:23:3c:9c:14:45:22:22:26:ab:a5:07: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3F:C3:CB:B4:9E:00:C1:12:45:13:70:FE:81:4A:66:6B:E3:22:D7 X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:50:0c:14:e4:e1:1b:d5:3f:00:87:f0:49:8c:e8:3f:68:32: 1c:2a:bd:53:23:4f:aa:aa:9d:d5:26:80:92:28:16:d1:32:45: 25:02:2c:fb:b4:00:f9:71:95:bb:5e:47:2c:72:b5:d6:c2:6f: 8b:bb:16:07:c1:d2:30:cb:f4:ce:5e:c2:58:16:27:2b:bc:2e: 8f:d3:a2:42:ad:d2:fa:d8:9c:5f:e4:42:f1:7b:96:01:e5:66: 30:f2:2e:e0:8b:da:12:7d:4c:77:f9:13:d0:e3:41:63:fa:26: 36:a4:bd:30:98:70:d3:7d:dc:81:78:27:0a:b2:1f:c9:bc:17: df:f0:22:64:37:50:c7:bf:85:72:54:8f:2e:6a:23:fd:22:f9: 7a:ed:5f:9f:e5:ff:62:0c:a8:7d:48:d4:50:94:54:8e:15:81: 75:2a:cf:23:43:36:a2:35:5a:7c:b5:f9:68:57:9c:fc:ed:e9: 16:4e:3c:d1:f0:33:79:6e:4d:2a:b3:e9:1a:9d:7b:8f:dc:92: 2a:1d:06:5d:21:f1:f7:ba:28:86:50:7f:57:e8:9e:f8:cb:63: 4f:ee:fb:5e:09:ba:b5:a3:1c:04:69:c4:28:ae:97:d4:08:e4: 6e:47:2b:e1:42:49:34:b8:9b:b7:4b:bd:2c:23:0b:85:32:00: 58:af:d3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRRM4UDK1Vkw/aMpBHZL6lgDQXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjEwMjUxNjU3NTRaFw0yNjEwMjYxNzU1NTRaMDMxMTAvBgNV BAMTKDVEM0ZDM0NCQjQ5RTAwQzExMjQ1MTM3MEZFODE0QTY2NkJFMzIyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHW7rzV1T1SQVwr7CBwtq+9cWk kouKrydCoLGa5Yhs6s+GXJAb1jL9hz3WmsHKzdCjgUZxDw4wjS2sotzq8jS5MPM9 f5iBg97j4f4nQyMcyl18gheEpowJslHh9Xp1hTrmQKBlhcEXHl5YeVI7krfh6zd8 jCIUlg12ohlgL3+36tuNtzvwJQ5/5EERKB9Ftk9nezQuLIjDBaqzz5/OYuLbzcpB C9y43KLIiHTTip4UXfiObPlHABgpxWthtckb0aRdesmKmlZ/hvM/aNQ2/Q38NIbz wOGOV/e/IO7jjykX86XJkbYOFk6Q6UZUXgPh1abTYywjPJwURSIiJqulB0izAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXT/Dy7SeAMESRRNw/oFKZmvjItcwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtQDBTk4RvVPwCH8EmM6D9oMhwqvVMjT6qq ndUmgJIoFtEyRSUCLPu0APlxlbteRyxytdbCb4u7FgfB0jDL9M5ewlgWJyu8Lo/T okKt0vrYnF/kQvF7lgHlZjDyLuCL2hJ9THf5E9DjQWP6JjakvTCYcNN93IF4Jwqy H8m8F9/wImQ3UMe/hXJUjy5qI/0i+XrtX5/l/2IMqH1I1FCUVI4VgXUqzyNDNqI1 Wny1+WhXnPzt6RZOPNHwM3luTSqz6Rqde4/ckiodBl0h8fe6KIZQf1fonvjLY0/u +14JurWjHARpxCiul9QI5G5HK+FCSTS4m7dLvSwjC4UyAFiv00s= -----END CERTIFICATE-----Generated at Mon Oct 26 02:21:37 2026 by rpki-client