$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: rjb81WI/lxFzdduDwezZQxlAlUcPs5zOWbWID5BN8Sg= Subject key identifier: 33:A6:B2:C2:CA:D1:72:7B:24:E3:A5:12:B6:0F:7F:11:25:21:8A:26 Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 2AFF72D46F3D6A2AB56E2ACD973AB67961E51470 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: CE Signing time: Sun 04 Oct 2026 00:25:36 +0000 Manifest this update: Sun 04 Oct 2026 00:20:36 +0000 Manifest next update: Mon 05 Oct 2026 02:01:36 +0000 Files and hashes: 1: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: XwfQ3lPXTY309czyeR6BS+QIyX1EYMwyHvwGinyr8nQ=) 2: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ff:72:d4:6f:3d:6a:2a:b5:6e:2a:cd:97:3a:b6:79:61:e5:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Oct 4 00:20:36 2026 GMT Not After : Oct 5 02:01:36 2026 GMT Subject: CN=33A6B2C2CAD1727B24E3A512B60F7F1125218A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:27:33:96:78:49:5d:0a:e6:c5:eb:b5:37: d8:9b:f6:9e:da:58:58:fa:9b:a8:c5:42:6d:52:7c: 90:5a:29:9d:64:57:68:47:4f:d0:f9:5f:f5:e5:2a: 8b:ec:42:c5:70:c1:d2:b5:1e:3e:a8:99:39:bc:9d: 77:3b:c7:d3:69:2b:6e:a6:1f:54:02:d4:2e:0e:3e: 80:d1:9f:64:16:89:a3:37:35:f7:a7:4f:6e:97:df: d1:12:98:1e:d9:be:96:6f:87:cb:b9:43:c2:94:73: 2f:8d:2e:16:d1:84:fa:bf:50:8b:66:e3:7e:f4:c9: c8:fc:48:1b:47:94:fb:46:e9:97:52:ed:22:56:4c: 5e:d0:72:a1:bd:13:db:e3:3a:ef:27:29:e2:25:7b: fd:7a:d2:1e:d4:c8:5b:36:a9:35:a0:fe:25:c9:ca: d4:6d:da:30:c2:b8:c5:08:83:36:b2:5e:c6:88:3c: 9f:38:02:60:60:9d:68:a4:e4:f1:fa:cb:99:f3:32: a0:f7:0d:41:aa:12:50:e3:3a:d8:87:63:7a:88:d1: dd:6b:3c:e6:1e:a0:87:30:ac:44:a5:f1:0b:9d:82: 19:90:e4:6f:9d:e3:7c:a3:a3:88:8f:67:07:bd:fb: 0e:8c:31:f6:c3:a5:ad:37:dd:9b:79:4e:61:7d:71: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A6:B2:C2:CA:D1:72:7B:24:E3:A5:12:B6:0F:7F:11:25:21:8A:26 X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b5:ba:e7:63:cc:3c:11:01:d8:ce:d6:b1:6e:5e:01:7e:25: 4d:f5:d8:6a:64:b1:d2:c8:a0:05:3d:87:47:c2:2d:88:37:8e: e4:da:d8:fe:d0:fc:41:50:44:0b:12:b6:2e:fe:7b:2c:e3:8b: c8:6f:91:18:6b:23:62:aa:c4:5f:18:34:d5:e9:03:5b:f8:32: fd:5d:16:20:6b:8b:04:7a:b2:3a:0f:5f:f7:8f:35:fa:69:2b: da:44:44:f7:58:4c:41:eb:ad:74:d5:bd:df:bb:40:86:32:92: ab:96:6e:d3:d2:55:48:90:d3:ba:43:27:0b:09:f4:26:4d:f4: c3:38:70:56:ad:25:32:74:0c:b3:f2:8b:3f:6f:c1:d9:39:69: 17:44:7e:cf:37:20:65:08:63:97:fd:ee:db:95:ec:1e:a8:9a: b5:0e:bd:1a:0f:77:2a:fa:65:c5:6a:ca:40:48:48:d7:8f:29: dd:65:bf:cc:86:04:1f:65:50:ca:1b:86:6a:0f:81:b4:d6:bf: e3:7e:b9:35:d6:1b:ad:16:27:cd:76:65:ed:9c:c6:16:6e:ed: d6:8b:b1:af:0d:d5:b8:9b:8e:4f:3b:88:2c:25:70:84:8f:3c: 68:be:72:02:20:30:29:66:49:54:89:d8:fe:19:aa:57:3d:83: ce:23:e7:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKv9y1G89aiq1birNlzq2eWHlFHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjEwMDQwMDIwMzZaFw0yNjEwMDUwMjAxMzZaMDMxMTAvBgNV BAMTKDMzQTZCMkMyQ0FEMTcyN0IyNEUzQTUxMkI2MEY3RjExMjUyMThBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOSczlnhJXQrmxeu1N9ib9p7a WFj6m6jFQm1SfJBaKZ1kV2hHT9D5X/XlKovsQsVwwdK1Hj6omTm8nXc7x9NpK26m H1QC1C4OPoDRn2QWiaM3NfenT26X39ESmB7ZvpZvh8u5Q8KUcy+NLhbRhPq/UItm 4370ycj8SBtHlPtG6ZdS7SJWTF7QcqG9E9vjOu8nKeIle/160h7UyFs2qTWg/iXJ ytRt2jDCuMUIgzayXsaIPJ84AmBgnWik5PH6y5nzMqD3DUGqElDjOtiHY3qI0d1r POYeoIcwrESl8QudghmQ5G+d43yjo4iPZwe9+w6MMfbDpa033Zt5TmF9cdyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6aywsrRcnsk46UStg9/ESUhiiYwHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK1uudjzDwRAdjO1rFuXgF+JU312GpksdLI oAU9h0fCLYg3juTa2P7Q/EFQRAsSti7+eyzji8hvkRhrI2KqxF8YNNXpA1v4Mv1d FiBriwR6sjoPX/ePNfppK9pERPdYTEHrrXTVvd+7QIYykquWbtPSVUiQ07pDJwsJ 9CZN9MM4cFatJTJ0DLPyiz9vwdk5aRdEfs83IGUIY5f97tuV7B6omrUOvRoPdyr6 ZcVqykBISNePKd1lv8yGBB9lUMobhmoPgbTWv+N+uTXWG60WJ812Ze2cxhZu7daL sa8N1bibjk87iCwlcISPPGi+cgIgMClmSVSJ2P4Zqlc9g84j548= -----END CERTIFICATE-----Generated at Sun Oct 4 23:15:42 2026 by rpki-client