$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json) Hash identifier: DeQL82xpUxNYwW6SXJcjHwf/tCF+6tuABEKAAitoOJc= Subject key identifier: 41:81:15:05:A8:B4:FD:37:09:61:69:D9:18:76:8D:42:C7:34:AB:4E Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Certificate serial: 1236846F7F351FC29602D1B9343D71E95108646E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft Manifest number: EE Signing time: Wed 28 Oct 2026 02:28:00 +0000 Manifest this update: Wed 28 Oct 2026 02:23:00 +0000 Manifest next update: Thu 29 Oct 2026 06:26:00 +0000 Files and hashes: 1: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=) 2: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: i4jqtIv9eh8GgS3tVZJC+OKhzIpYkzB5PZVYpSud4tI=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 06:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:36:84:6f:7f:35:1f:c2:96:02:d1:b9:34:3d:71:e9:51:08:64:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Validity Not Before: Oct 28 02:23:00 2026 GMT Not After : Oct 29 06:26:00 2026 GMT Subject: CN=41811505A8B4FD37096169D918768D42C734AB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:7d:d3:91:85:41:4e:94:02:f2:b2:44:2f: be:fe:eb:24:ba:ee:69:e0:da:fb:fa:78:86:98:cb: 81:a2:cf:53:1b:af:ce:93:e9:d4:84:fc:b2:e8:b6: 53:6e:0a:e5:79:bd:ba:2d:7f:65:87:17:3a:bd:9b: ee:c4:ba:90:cb:7a:58:0a:53:77:28:d7:e9:3d:0f: 66:32:bb:c8:04:7a:06:a7:68:8e:cf:db:e5:11:42: e8:76:bd:fc:e5:44:8b:28:e6:fa:1d:27:c0:63:f4: 0d:8e:66:e9:cd:2a:2e:3f:46:64:71:ca:b1:d7:cc: 87:3c:f5:1a:d4:8e:e7:24:e8:90:fa:be:19:23:7e: 4c:b5:4e:a8:ef:a5:7d:cc:91:35:50:a0:b2:bb:7e: 18:93:e6:6b:96:7a:7f:bc:4e:4e:6e:b7:41:cd:cb: ed:64:dd:dc:83:ca:1d:df:5a:54:07:4d:5d:4e:61: bf:01:e0:6a:6e:a6:fc:d2:ad:3b:f7:d3:1a:73:40: 1f:08:6b:c8:0a:65:79:e3:aa:56:f6:01:81:d5:42: 35:85:9e:81:09:a2:b8:7e:9f:d4:75:47:7d:61:e4: 76:31:a5:f0:d7:42:c7:ba:03:a7:54:8e:6f:6c:0f: d3:0f:2f:34:0a:67:26:18:c4:e0:80:5b:2e:a3:1e: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:15:05:A8:B4:FD:37:09:61:69:D9:18:76:8D:42:C7:34:AB:4E X509v3 Authority Key Identifier: keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f9:d5:40:e2:c1:27:98:b4:df:69:23:2d:fa:13:47:8c:94: 99:a5:b9:ba:85:d9:b6:d5:b7:1a:62:e4:1d:1e:b4:11:56:78: 7e:6e:88:dc:fc:01:07:1c:b9:42:61:5c:d7:41:c9:b4:71:d9: 17:90:4e:9a:e8:e7:b7:d8:73:e5:fd:02:62:29:86:ef:fb:6d: aa:fc:83:ef:fb:4d:e1:e5:d5:20:5e:7f:fc:52:c9:fc:7b:46: 8b:28:1c:d5:40:d9:ca:ac:6e:23:6e:7a:4b:4b:ac:d8:5e:97: 9a:ba:b9:78:86:9d:09:41:68:9b:08:5c:41:7e:61:e9:5c:95: 7e:61:75:59:b9:13:f5:05:26:dd:c0:ec:85:86:4f:71:d2:93: 9c:ef:e5:63:5f:ea:c5:db:1c:db:0c:45:03:46:a8:2b:45:f0: 74:37:a4:80:7b:d8:2c:58:36:6a:86:36:07:d9:c7:e9:a3:c6: 0a:78:59:e0:5c:7e:85:f2:a8:37:cc:89:83:6b:16:eb:35:85: 0b:e7:5c:d7:3a:a8:cb:94:8c:7f:1a:d9:f1:27:b4:63:cb:85: e8:a6:c2:08:f3:d0:a0:85:ee:2d:7a:1a:b4:be:ca:e3:b9:ed: c0:42:e8:88:9e:ad:60:ad:62:cc:67:f3:7f:f6:35:bd:54:14: a9:97:bb:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjaEb381H8KWAtG5ND1x6VEIZG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2 NkNCOUQ0NTAeFw0yNjEwMjgwMjIzMDBaFw0yNjEwMjkwNjI2MDBaMDMxMTAvBgNV BAMTKDQxODExNTA1QThCNEZEMzcwOTYxNjlEOTE4NzY4RDQyQzczNEFCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRX3TkYVBTpQC8rJEL77+6yS6 7mng2vv6eIaYy4Giz1Mbr86T6dSE/LLotlNuCuV5vbotf2WHFzq9m+7EupDLelgK U3co1+k9D2Yyu8gEeganaI7P2+URQuh2vfzlRIso5vodJ8Bj9A2OZunNKi4/RmRx yrHXzIc89RrUjuck6JD6vhkjfky1TqjvpX3MkTVQoLK7fhiT5muWen+8Tk5ut0HN y+1k3dyDyh3fWlQHTV1OYb8B4GpupvzSrTv30xpzQB8Ia8gKZXnjqlb2AYHVQjWF noEJorh+n9R1R31h5HYxpfDXQse6A6dUjm9sD9MPLzQKZyYYxOCAWy6jHmhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYEVBai0/TcJYWnZGHaNQsc0q04wHwYDVR0j BBgwFoAUGtlAMjNUKIOokoKlL5KprGbLnUUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MTQ1MDctNzE3NC00ZjFlLTg1NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIz MzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2NkNCOUQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUQ5NDAzMjMzNTQyODgzQTg5MjgyQTUyRjkyQTlBQzY2Q0I5 RDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5 QUM2NkNCOUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALf51UDiwSeYtN9pIy36E0eMlJmlubqF2bbV txpi5B0etBFWeH5uiNz8AQccuUJhXNdBybRx2ReQTpro57fYc+X9AmIphu/7bar8 g+/7TeHl1SBef/xSyfx7RosoHNVA2cqsbiNuektLrNhel5q6uXiGnQlBaJsIXEF+ YelclX5hdVm5E/UFJt3A7IWGT3HSk5zv5WNf6sXbHNsMRQNGqCtF8HQ3pIB72CxY NmqGNgfZx+mjxgp4WeBcfoXyqDfMiYNrFus1hQvnXNc6qMuUjH8a2fEntGPLheim wgjz0KCF7i16GrS+yuO57cBC6IierWCtYsxn83/2Nb1UFKmXu/4= -----END CERTIFICATE-----Generated at Wed Oct 28 11:37:27 2026 by rpki-client