$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: sMz+Fysk9LoaKJoZB+1JauWrCCEnSBUZBSTqP3XIj5A= Subject key identifier: CE:F1:DF:44:D9:43:FD:13:60:ED:37:8A:9B:85:6E:07:61:FC:E3:2B Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 73E47758E15091FE93FC0181506BEB8A62D99EFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: EB Signing time: Sun 25 Oct 2026 17:33:35 +0000 Manifest this update: Sun 25 Oct 2026 17:28:35 +0000 Manifest next update: Mon 26 Oct 2026 20:07:35 +0000 Files and hashes: 1: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: cSTsrdu9XSgLbPwwGMtoLn7R8HQhS+LeNcp/I+sCEa0=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e4:77:58:e1:50:91:fe:93:fc:01:81:50:6b:eb:8a:62:d9:9e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: Oct 25 17:28:35 2026 GMT Not After : Oct 26 20:07:35 2026 GMT Subject: CN=CEF1DF44D943FD1360ED378A9B856E0761FCE32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:a2:d8:41:63:81:37:85:e2:65:e5:bc:ec: 10:8a:e0:49:f5:52:e7:ec:3f:18:ca:02:5c:a2:1d: 17:66:7f:2d:0f:0e:e7:ee:b5:07:b5:69:70:ce:d7: cd:56:d3:ca:77:a6:26:20:cf:82:fb:d6:24:2e:d9: b4:57:e3:b0:b5:eb:95:4e:9a:4b:52:23:59:d9:89: a4:d1:62:43:49:68:90:85:10:78:b1:8d:86:50:25: 3c:7b:c6:63:23:01:29:b5:05:c3:37:84:1f:a6:70: be:ac:d0:16:83:30:22:b6:a5:0c:1a:de:a1:f0:ab: ac:f3:26:0b:10:e0:8b:ee:8b:97:6c:8a:cb:c8:d1: 4a:00:d8:3b:e3:c4:70:0a:cc:08:6e:4a:ac:4b:d1: ed:9f:64:81:e4:f9:5d:24:be:fc:37:ed:8e:36:01: 43:84:04:e7:c5:d4:29:1a:71:d7:a8:8e:a7:ee:ad: 1b:88:a4:f9:30:ca:20:c8:cb:73:5a:7b:ac:ef:17: a7:96:c2:2e:63:10:3f:7a:a7:fd:ca:23:72:ff:ec: ee:26:36:09:f4:bd:88:05:90:45:d4:14:f2:ad:0e: 45:97:29:75:dd:e1:55:a8:1e:b7:9b:6c:8e:7e:c6: 5c:84:b3:44:a7:44:66:29:42:23:56:39:22:61:d5: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:DF:44:D9:43:FD:13:60:ED:37:8A:9B:85:6E:07:61:FC:E3:2B X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9f:11:df:84:8d:a1:5b:b7:a7:22:af:eb:6b:24:0f:14:76: 2b:05:e0:fa:ea:a5:6c:d5:b1:76:09:9b:b8:97:2c:14:91:48: d9:9a:67:14:20:89:72:10:6e:93:af:ca:09:71:64:97:39:4c: 18:44:c4:9f:c8:ee:f9:b9:2e:77:d5:09:31:3c:52:9c:6b:18: 90:d9:68:44:bc:e2:19:5f:79:b0:97:e7:a5:b2:69:ad:e2:39: ed:fd:ce:8a:a5:58:fd:8d:90:45:ff:83:08:cf:d2:fa:29:17: 2c:c8:67:d5:68:84:21:7e:fe:43:55:6f:99:8a:47:38:6c:b9: 96:2c:6d:9d:1c:06:c8:6e:f6:37:95:39:46:0b:4d:dd:a8:32: 28:21:6f:4c:fa:c9:33:8b:df:23:0b:d7:86:5b:55:07:dc:ea: 82:bb:1b:12:c7:1b:b1:b8:c2:48:b0:dc:4b:2e:7a:a9:a1:00: 86:2b:3a:f1:b8:0d:ce:7e:6e:ba:17:82:a0:12:a6:5b:83:1d: c9:28:d3:38:49:6c:88:17:c6:eb:58:db:80:6c:19:07:e0:6f: a9:fb:a5:35:f0:c3:db:3a:a8:57:00:e8:a7:fd:4d:91:d7:9c: 29:ba:97:83:9a:7b:63:b9:96:a7:d0:52:dc:fc:36:c0:79:08: 36:13:5f:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+R3WOFQkf6T/AGBUGvrimLZnv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjEwMjUxNzI4MzVaFw0yNjEwMjYyMDA3MzVaMDMxMTAvBgNV BAMTKENFRjFERjQ0RDk0M0ZEMTM2MEVEMzc4QTlCODU2RTA3NjFGQ0UzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgG6LYQWOBN4XiZeW87BCK4En1 UufsPxjKAlyiHRdmfy0PDufutQe1aXDO181W08p3piYgz4L71iQu2bRX47C165VO mktSI1nZiaTRYkNJaJCFEHixjYZQJTx7xmMjASm1BcM3hB+mcL6s0BaDMCK2pQwa 3qHwq6zzJgsQ4Ivui5dsisvI0UoA2DvjxHAKzAhuSqxL0e2fZIHk+V0kvvw37Y42 AUOEBOfF1CkacdeojqfurRuIpPkwyiDIy3Nae6zvF6eWwi5jED96p/3KI3L/7O4m Ngn0vYgFkEXUFPKtDkWXKXXd4VWoHrebbI5+xlyEs0SnRGYpQiNWOSJh1WTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzvHfRNlD/RNg7TeKm4VuB2H84yswHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACafEd+EjaFbt6cir+trJA8UdisF4PrqpWzV sXYJm7iXLBSRSNmaZxQgiXIQbpOvyglxZJc5TBhExJ/I7vm5LnfVCTE8UpxrGJDZ aES84hlfebCX56Wyaa3iOe39zoqlWP2NkEX/gwjP0vopFyzIZ9VohCF+/kNVb5mK RzhsuZYsbZ0cBshu9jeVOUYLTd2oMighb0z6yTOL3yML14ZbVQfc6oK7GxLHG7G4 wkiw3EsueqmhAIYrOvG4Dc5+broXgqASpluDHcko0zhJbIgXxutY24BsGQfgb6n7 pTXww9s6qFcA6Kf9TZHXnCm6l4Oae2O5lqfQUtz8NsB5CDYTX1w= -----END CERTIFICATE-----Generated at Mon Oct 26 00:38:47 2026 by rpki-client