$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft File: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft (raw, json) Hash identifier: /gum8gOrMz2oexYY6Edk1Fy0bY0/zOkOGEatL78Ygm8= Subject key identifier: B9:55:C5:52:6C:74:9F:69:96:5C:BB:B9:78:D2:FF:38:19:C4:88:14 Authority key identifier: A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 Certificate issuer: /CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Certificate serial: 424C8F196E58EF7F83497424194534CC4483A938 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft Manifest number: EB Signing time: Sun 25 Oct 2026 11:56:30 +0000 Manifest this update: Sun 25 Oct 2026 11:51:30 +0000 Manifest next update: Mon 26 Oct 2026 12:36:30 +0000 Files and hashes: 1: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl (hash: j6U2ThZpBhInohH+ZZaVXcNqvlGPqHV6YfwDdFGLtic=) 2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: dyba1Oz6Wp8hX68WIp/FlT5kkFNyYyRCOC354wRZyeE=) 3: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: bcrYp2H/z0S0hWGYzTC5YNTUZlTQYIqRD2WSLvGlQYs=) 4: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: Mtfzs1yZWVTcj+jwor1tUEKlyotPWoajpPtYoZFvsps=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: eVEWrgAX4ZnGtqRKMu7y1kldAhV5Bn5D8vbPp3E9838=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:8f:19:6e:58:ef:7f:83:49:74:24:19:45:34:cc:44:83:a9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Validity Not Before: Oct 25 11:51:30 2026 GMT Not After : Oct 26 12:36:30 2026 GMT Subject: CN=B955C5526C749F69965CBBB978D2FF3819C48814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:41:3e:bd:72:c6:a1:4f:b5:1d:18:e2:b2: ab:be:d8:c1:a1:ff:dc:ee:6d:cc:5a:69:fc:75:bb: 76:8b:d6:1a:8b:58:11:6b:f5:9d:da:2f:df:bf:cd: b1:88:9d:8e:80:94:0d:6c:46:c9:d8:08:b1:d7:87: c5:a2:34:e1:2b:e3:21:7c:50:25:ee:44:32:ff:a2: ab:96:98:25:42:49:e9:55:6a:a0:2d:66:26:16:06: e6:ab:22:45:a4:90:12:29:14:dc:18:17:0d:d0:0a: ab:c7:6c:b1:71:d4:bd:41:93:6e:60:93:3f:1f:68: 9c:de:37:95:94:c6:67:ed:63:cc:59:b4:b7:ff:0f: 04:7b:e1:79:1b:ce:12:33:14:07:11:12:e7:03:6d: ee:63:48:10:6a:e7:be:93:79:ee:19:49:14:f8:57: d6:3e:bb:bb:54:97:ef:68:90:78:ba:da:cf:35:ab: ef:a0:59:8c:46:4c:cc:81:4c:39:4b:b3:79:39:d0: bb:0a:7b:00:ba:2e:90:a5:5a:fa:d8:26:42:25:01: 48:2b:2e:fd:1a:7e:0d:d8:06:b4:fb:99:a5:ff:36: 66:b8:03:bb:52:05:21:09:77:cc:d5:8e:55:c1:b0: 60:f7:4c:8b:af:e9:25:c3:0a:7c:ad:bc:90:4d:81: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:C5:52:6C:74:9F:69:96:5C:BB:B9:78:D2:FF:38:19:C4:88:14 X509v3 Authority Key Identifier: keyid:A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ab:2d:10:15:89:a8:90:89:83:78:a6:03:0a:d1:14:15:20: 32:83:6a:d6:87:10:31:99:39:1e:03:d4:cb:1e:a0:df:e5:24: d3:b4:18:37:80:51:bc:1a:f1:f4:a3:21:1e:7c:eb:47:d9:95: 94:15:df:b3:4c:7d:a2:94:08:a2:08:01:af:f1:62:16:13:17: 45:53:09:0c:f1:b3:8a:4d:6e:3e:c0:ae:33:f9:7b:5c:2e:77: 85:75:f0:83:04:0e:c0:ab:3c:e1:0b:26:d0:fe:26:42:87:50: eb:08:71:4c:a1:ea:b3:1a:2d:c5:20:34:6c:e4:ac:88:e2:43: e5:a3:ca:55:14:ec:78:03:77:f1:a2:ee:bb:65:2c:f3:ed:3b: 6e:2a:86:b3:a6:9f:9d:eb:c4:cc:e1:68:a2:53:dd:32:8a:10: 49:75:ce:07:1c:e9:a6:5a:2a:c0:87:5e:2a:25:99:f6:85:87: 9f:c6:ac:c7:cc:9a:3d:2b:9a:03:0d:44:a2:75:2f:ec:b5:5e: 11:a4:99:73:c1:9e:c0:4b:b0:eb:04:76:3f:bb:cc:f8:7f:3b: 1c:89:d2:35:71:2a:ff:12:4c:a8:13:25:c6:59:5a:47:0a:0a: 8f:20:0d:18:3f:6c:0d:07:91:d9:30:bb:a9:0c:b4:f1:79:a0: e5:d8:34:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkyPGW5Y73+DSXQkGUU0zESDqTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVCMjNF NTY5QUZENjAeFw0yNjEwMjUxMTUxMzBaFw0yNjEwMjYxMjM2MzBaMDMxMTAvBgNV BAMTKEI5NTVDNTUyNkM3NDlGNjk5NjVDQkJCOTc4RDJGRjM4MTlDNDg4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfskE+vXLGoU+1HRjisqu+2MGh /9zubcxaafx1u3aL1hqLWBFr9Z3aL9+/zbGInY6AlA1sRsnYCLHXh8WiNOEr4yF8 UCXuRDL/oquWmCVCSelVaqAtZiYWBuarIkWkkBIpFNwYFw3QCqvHbLFx1L1Bk25g kz8faJzeN5WUxmftY8xZtLf/DwR74XkbzhIzFAcREucDbe5jSBBq576Tee4ZSRT4 V9Y+u7tUl+9okHi62s81q++gWYxGTMyBTDlLs3k50LsKewC6LpClWvrYJkIlAUgr Lv0afg3YBrT7maX/Nma4A7tSBSEJd8zVjlXBsGD3TIuv6SXDCnytvJBNgY8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVXFUmx0n2mWXLu5eNL/OBnEiBQwHwYDVR0j BBgwFoAUpR8Igtwb2uK/bckdPsbrI+Vpr9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjljZTBjOTQtMGQ2Yy00NWIzLWFhYzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJE QzFCREFFMkJGNkRDOTFEM0VDNkVCMjNFNTY5QUZENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTFGMDg4MkRDMUJEQUUyQkY2REM5MUQzRUM2RUIyM0U1NjlB RkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVC MjNFNTY5QUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWrLRAViaiQiYN4pgMK0RQVIDKDataHEDGZ OR4D1MseoN/lJNO0GDeAUbwa8fSjIR5860fZlZQV37NMfaKUCKIIAa/xYhYTF0VT CQzxs4pNbj7ArjP5e1wud4V18IMEDsCrPOELJtD+JkKHUOsIcUyh6rMaLcUgNGzk rIjiQ+WjylUU7HgDd/Gi7rtlLPPtO24qhrOmn53rxMzhaKJT3TKKEEl1zgcc6aZa KsCHXiolmfaFh5/GrMfMmj0rmgMNRKJ1L+y1XhGkmXPBnsBLsOsEdj+7zPh/OxyJ 0jVxKv8STKgTJcZZWkcKCo8gDRg/bA0Hkdkwu6kMtPF5oOXYNP4= -----END CERTIFICATE-----Generated at Mon Oct 26 04:03:52 2026 by rpki-client