$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft File: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft (raw, json) Hash identifier: S9PGI+jN1FxgR/E9YekMEBk4LZn//7HRiHdlJPVRnMI= Subject key identifier: 83:74:8F:8D:84:09:57:07:AE:C2:0C:00:0E:A7:6D:8C:EA:43:92:68 Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Certificate serial: 6D4E44C88823ED259A028820A8F2939B222C5089 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft Manifest number: EB Signing time: Sun 25 Oct 2026 10:34:50 +0000 Manifest this update: Sun 25 Oct 2026 10:29:50 +0000 Manifest next update: Mon 26 Oct 2026 13:28:50 +0000 Files and hashes: 1: AS137346.roa (hash: NZ6wUFk5XR7PD9+fJ1hvHsTgRiRIMRLn5KDTlukuqTs=) 2: AS46024.roa (hash: ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=) 3: AS135457.roa (hash: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=) 4: AS138885.roa (hash: MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=) 5: AS24520.roa (hash: RlHOKG3iuobVB1DAMGAm+asFdd1ASONRpQ1lrWJUUMA=) 6: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl (hash: Yg0s+vvKiKisYiihSCkbhqR99P6yn/OFn06hQF7xnLk=) 7: AS38496.roa (hash: yYz1sIG6N2Kn9PvkhdiFovkBZr7zFMKsgWeqKN8ae+8=) 8: AS38768.roa (hash: cYG0UjFfYvF8rnbWyEC/rqKPjOD6XMnko8jMH8VBKzc=) 9: AS38755.roa (hash: rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=) 10: AS140421.roa (hash: NubwM9MWXF/shtYPHNCf93qRquIZw5eXxpOBi0ubSeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4e:44:c8:88:23:ed:25:9a:02:88:20:a8:f2:93:9b:22:2c:50:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Validity Not Before: Oct 25 10:29:50 2026 GMT Not After : Oct 26 13:28:50 2026 GMT Subject: CN=83748F8D84095707AEC20C000EA76D8CEA439268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:a4:3e:60:f1:e4:c9:70:2d:67:ec:a7:93: 0f:77:a4:e6:07:66:5d:c9:7f:20:d2:f0:27:89:73: ec:3e:7a:70:10:d7:8b:7e:bc:14:3e:c5:1a:5d:d7: 1e:1c:b9:fe:50:cd:5c:e0:9f:03:97:4b:d1:13:bd: 19:e9:85:45:2c:d1:9a:f1:65:36:f3:9f:02:f2:a7: 20:b7:30:22:72:8c:c2:27:2b:d7:37:32:60:e3:75: 53:4b:a9:77:2a:29:d0:80:66:a3:96:3a:b9:f3:31: fa:53:59:c6:5a:d5:0e:5e:35:e3:8c:2c:d3:f6:3b: 9c:7c:32:5c:a4:5e:07:9a:9f:cd:37:68:a1:cb:fd: 71:d4:76:0d:15:a0:c4:82:09:1e:3b:7c:cc:03:97: e7:23:e3:a2:8f:aa:7c:35:38:2a:b3:48:c4:5f:40: 10:38:c5:9d:92:66:35:05:4b:20:8d:ed:f7:dc:7d: 0d:99:ea:62:ba:8c:b1:c2:0d:e5:01:d4:8f:59:b6: 1b:87:38:14:f4:12:5c:1e:bb:28:f0:d1:7a:61:c0: 1a:5c:8a:fb:61:ba:9a:e2:1c:97:7f:e0:f4:81:96: ed:8d:9b:fd:48:87:15:28:19:f9:cc:ce:41:b0:46: 3a:d0:d6:da:36:cb:62:c3:a5:e0:e6:5c:35:52:48: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:74:8F:8D:84:09:57:07:AE:C2:0C:00:0E:A7:6D:8C:EA:43:92:68 X509v3 Authority Key Identifier: keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:05:fe:7c:a1:12:12:ed:9a:9e:d3:97:27:fa:d0:cf:4c: 71:fc:14:df:3b:31:89:39:29:c4:a5:0d:00:cf:a2:b4:3e:9f: 98:79:1e:29:7f:6b:ec:07:18:a4:f8:41:21:02:8a:aa:71:e4: a5:33:be:67:86:15:53:e2:36:8d:84:ba:82:10:95:50:ba:f4: d9:29:98:2a:19:5f:d1:6f:f6:20:e5:fc:e0:1a:fe:ee:c9:6c: 0d:27:83:c2:e2:51:f3:a9:06:39:78:52:40:94:c2:83:b1:69: 32:0f:48:4b:77:23:bb:2d:ce:d3:72:4b:c4:7f:90:29:57:26: 78:f1:d8:5a:77:41:8f:ac:eb:2d:f3:63:b7:4c:d8:ca:9f:dc: f5:83:a2:14:7d:30:41:c3:3c:1d:6a:6a:b2:1c:93:92:b6:21: 32:b6:c9:35:58:de:86:cb:68:f1:87:fd:5b:08:50:33:93:2e: 31:a7:81:8f:2c:08:37:0d:2e:6d:fb:cb:a7:c3:29:34:f8:a4: 8f:b3:59:5e:bc:21:a7:a6:49:a5:b2:b1:7d:27:85:02:60:81: 84:24:b7:c3:bc:70:43:95:ea:f1:49:8d:72:99:f1:20:d9:98: 23:05:b0:12:73:85:04:66:6b:24:f4:a1:90:5c:f9:7e:b1:02: c6:8b:75:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbU5EyIgj7SWaAoggqPKTmyIsUIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0 MTREOEQ0OTAeFw0yNjEwMjUxMDI5NTBaFw0yNjEwMjYxMzI4NTBaMDMxMTAvBgNV BAMTKDgzNzQ4RjhEODQwOTU3MDdBRUMyMEMwMDBFQTc2RDhDRUE0MzkyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdqQ+YPHkyXAtZ+ynkw93pOYH Zl3JfyDS8CeJc+w+enAQ14t+vBQ+xRpd1x4cuf5QzVzgnwOXS9ETvRnphUUs0Zrx ZTbznwLypyC3MCJyjMInK9c3MmDjdVNLqXcqKdCAZqOWOrnzMfpTWcZa1Q5eNeOM LNP2O5x8MlykXgean803aKHL/XHUdg0VoMSCCR47fMwDl+cj46KPqnw1OCqzSMRf QBA4xZ2SZjUFSyCN7ffcfQ2Z6mK6jLHCDeUB1I9ZthuHOBT0Elweuyjw0XphwBpc ivthupriHJd/4PSBlu2Nm/1IhxUoGfnMzkGwRjrQ1to2y2LDpeDmXDVSSGFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3SPjYQJVweuwgwADqdtjOpDkmgwHwYDVR0j BBgwFoAUH9E4gU7W7RCnSu3mIOzGy0FNjUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg3MzQ5ZmItNDY1ZS00ZThiLWE5NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0 RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0MTREOEQ0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkQxMzg4MTRFRDZFRDEwQTc0QUVERTYyMEVDQzZDQjQxNEQ4 RDQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2 Q0I0MTREOEQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT6Bf58oRIS7Zqe05cn+tDPTHH8FN87MYk5 KcSlDQDPorQ+n5h5Hil/a+wHGKT4QSECiqpx5KUzvmeGFVPiNo2EuoIQlVC69Nkp mCoZX9Fv9iDl/OAa/u7JbA0ng8LiUfOpBjl4UkCUwoOxaTIPSEt3I7stztNyS8R/ kClXJnjx2Fp3QY+s6y3zY7dM2Mqf3PWDohR9MEHDPB1qarIck5K2ITK2yTVY3obL aPGH/VsIUDOTLjGngY8sCDcNLm37y6fDKTT4pI+zWV68IaemSaWysX0nhQJggYQk t8O8cEOV6vFJjXKZ8SDZmCMFsBJzhQRmayT0oZBc+X6xAsaLdVI= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:19 2026 by rpki-client