$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: uV+UIndEW0US8kGZO5kWP91t6w9TFmBF2txFM6kAyyg= Subject key identifier: 3E:19:0F:F3:DD:8E:89:41:D0:66:57:D5:1A:80:49:36:0A:BF:59:F2 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 459D064F9D6DD7502542E4ACCB0B867A49148C11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: EB Signing time: Sun 25 Oct 2026 16:47:39 +0000 Manifest this update: Sun 25 Oct 2026 16:42:39 +0000 Manifest next update: Mon 26 Oct 2026 17:54:39 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 3: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: BZmyEI1BfRNkntCwp3//BaTA0klDSc+5wLev8jyoS8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9d:06:4f:9d:6d:d7:50:25:42:e4:ac:cb:0b:86:7a:49:14:8c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Oct 25 16:42:39 2026 GMT Not After : Oct 26 17:54:39 2026 GMT Subject: CN=3E190FF3DD8E8941D06657D51A8049360ABF59F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:c2:05:bd:47:13:f8:02:14:c4:4d:89:e4: 73:cc:79:a6:46:42:6f:4c:61:95:61:40:26:94:2d: 7e:40:f9:20:52:b7:10:67:51:35:38:6d:fa:2d:29: 60:2d:c5:fa:8b:bc:09:ea:0f:db:87:8a:b6:c2:54: 24:e8:e5:aa:ec:9c:c5:9c:d9:3f:65:6f:6b:5d:c1: 09:65:62:6e:a6:c9:47:c9:9e:6c:64:64:da:91:57: e9:0c:db:53:e9:7c:bd:d3:fa:ab:c5:0c:b1:9d:64: 23:56:57:47:b4:f1:69:5d:a2:cd:90:5a:a4:f5:10: e5:79:c8:39:db:64:14:50:5a:2b:28:2d:3b:a5:50: e9:da:6b:bb:87:8b:65:82:85:ff:0b:7e:1d:d8:37: 57:79:ee:2d:77:ee:be:66:6b:6f:3e:c9:f9:a7:65: 02:a9:64:06:e7:06:de:6e:94:f7:3b:1c:3d:df:48: 54:62:22:c8:04:ba:85:d4:61:9a:e1:e8:2f:c9:38: b5:99:3c:00:d1:cd:73:f9:ea:7e:f1:8f:f4:fa:30: 42:aa:b8:e4:b0:4d:8d:84:6d:7c:67:5d:61:49:c1: 0c:a8:16:00:b9:85:7f:d7:b0:45:ad:04:4d:a2:e2: fc:2e:b7:0a:30:43:47:c2:12:42:a2:a2:86:79:c7: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:19:0F:F3:DD:8E:89:41:D0:66:57:D5:1A:80:49:36:0A:BF:59:F2 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5d:8e:3a:99:5b:14:39:66:f9:87:f7:df:61:d0:1d:cb:5b: 2d:74:6b:f4:18:0f:92:f9:a2:05:3c:e7:98:bf:2c:59:fc:06: 5d:ff:d6:e1:83:7e:fc:2d:f3:4f:5d:86:84:c3:04:75:27:6a: a9:c7:4f:57:33:5e:af:33:ee:3e:7e:0e:0d:94:70:71:2d:a7: 52:e8:72:69:0f:93:24:60:2a:6f:a2:75:33:86:55:68:c5:e4: 33:d2:70:02:ad:47:47:c5:99:a4:21:96:d3:4f:94:89:f9:89: 42:95:a9:35:56:1d:8f:d5:2c:bd:32:30:fa:40:dd:6a:e7:a6: 16:7e:12:f6:d9:7e:d2:77:06:da:0c:a0:77:27:fc:58:65:8d: 33:3d:8f:7b:30:da:02:71:30:82:13:42:32:73:3f:85:6e:3d: 71:6d:9e:c5:1a:39:f1:ad:bf:33:8a:10:2a:8f:de:60:db:e9: 21:c8:cc:9e:05:dd:7e:d8:fe:36:20:32:40:cb:fb:1c:b7:9f: ac:1d:32:03:0c:08:b8:d4:98:f7:9a:40:9e:33:10:98:84:47: 5e:61:7d:e7:1d:e0:6d:1a:31:6e:d0:7a:59:28:14:c4:48:4e: d1:3c:92:8c:0b:21:c7:db:97:f3:70:53:b6:c5:a0:2f:b8:a1: dd:4a:d2:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ0GT51t11AlQuSsywuGekkUjBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjEwMjUxNjQyMzlaFw0yNjEwMjYxNzU0MzlaMDMxMTAvBgNV BAMTKDNFMTkwRkYzREQ4RTg5NDFEMDY2NTdENTFBODA0OTM2MEFCRjU5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAMIFvUcT+AIUxE2J5HPMeaZG Qm9MYZVhQCaULX5A+SBStxBnUTU4bfotKWAtxfqLvAnqD9uHirbCVCTo5arsnMWc 2T9lb2tdwQllYm6myUfJnmxkZNqRV+kM21PpfL3T+qvFDLGdZCNWV0e08Wldos2Q WqT1EOV5yDnbZBRQWisoLTulUOnaa7uHi2WChf8Lfh3YN1d57i137r5ma28+yfmn ZQKpZAbnBt5ulPc7HD3fSFRiIsgEuoXUYZrh6C/JOLWZPADRzXP56n7xj/T6MEKq uOSwTY2EbXxnXWFJwQyoFgC5hX/XsEWtBE2i4vwutwowQ0fCEkKiooZ5x1/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPhkP892OiUHQZlfVGoBJNgq/WfIwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1djjqZWxQ5ZvmH999h0B3LWy10a/QYD5L5 ogU855i/LFn8Bl3/1uGDfvwt809dhoTDBHUnaqnHT1czXq8z7j5+Dg2UcHEtp1Lo cmkPkyRgKm+idTOGVWjF5DPScAKtR0fFmaQhltNPlIn5iUKVqTVWHY/VLL0yMPpA 3WrnphZ+EvbZftJ3BtoMoHcn/FhljTM9j3sw2gJxMIITQjJzP4VuPXFtnsUaOfGt vzOKECqP3mDb6SHIzJ4F3X7Y/jYgMkDL+xy3n6wdMgMMCLjUmPeaQJ4zEJiER15h fecd4G0aMW7QelkoFMRITtE8kowLIcfbl/NwU7bFoC+4od1K0vc= -----END CERTIFICATE-----Generated at Sun Oct 25 19:50:52 2026 by rpki-client