$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json) Hash identifier: r+55iTsW/d4jZXIXTE3G59scLYSmJU3m4jJwuYV0+mo= Subject key identifier: 0A:10:4E:8C:99:CF:5B:F6:43:C0:D4:57:60:B3:D1:59:7A:B1:66:A4 Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 41FE7321CE6EE751DA4FE186AA01DFD75F7170BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:47:14 +0000 Manifest this update: Mon 21 Sep 2026 12:42:14 +0000 Manifest next update: Tue 22 Sep 2026 15:31:14 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32332d3234203d3e20313439373034.roa (hash: iLoKSE1pdd15H1Hz5134mXWItT5DvP5967h6GjP5mKY=) 2: 323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa (hash: +7gxgZA4R6XZfqKIvJi9Q/LxoHJw6/TCBpYF4xmvuqk=) 3: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: jp9huDc6JVq0buRwKmPUfWwxhQIeKUCNPWNIuv6cclo=) 4: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=) 5: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fe:73:21:ce:6e:e7:51:da:4f:e1:86:aa:01:df:d7:5f:71:70:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: Sep 21 12:42:14 2026 GMT Not After : Sep 22 15:31:14 2026 GMT Subject: CN=0A104E8C99CF5BF643C0D45760B3D1597AB166A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:01:cd:2b:6d:cc:db:99:a6:2a:cf:41:56: 04:2e:89:16:60:7f:72:ca:09:10:b1:fc:4b:25:b4: 40:74:a7:d9:3f:d1:e5:b9:76:ab:e6:d8:88:28:98: 15:b7:75:62:35:78:45:f6:56:11:cf:6b:5b:97:de: 83:34:9b:4b:4f:09:ce:b2:c2:c7:32:94:9b:d7:c6: b2:e4:b1:20:e4:63:3a:72:23:4e:bc:a2:86:46:69: 3a:7c:10:47:86:fb:26:db:c6:e1:87:c4:89:d0:58: cb:a5:c7:76:29:70:11:b3:f2:ba:87:a9:92:e9:e9: b6:1e:f0:89:3d:a3:88:7e:ff:47:23:f6:03:25:26: 7a:da:c9:6e:72:2e:26:31:f3:ca:46:b8:7d:80:47: e2:c8:d3:97:ba:d1:f3:91:78:86:11:21:42:f9:ad: 84:c9:b1:87:77:7c:dc:e5:47:12:30:4e:dd:9e:fc: 7c:b7:c4:27:87:01:bc:c0:67:6b:2c:82:0b:8c:25: c4:99:6f:7a:e3:80:00:c2:08:07:24:02:39:be:0c: 28:54:35:55:e6:8d:a7:f5:83:80:4c:f4:a7:60:b2: 2b:ec:77:56:2c:a9:cb:f3:9c:b0:4d:de:6c:eb:5e: 30:3a:ba:31:53:c5:75:b4:26:da:bb:69:be:70:6f: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:4E:8C:99:CF:5B:F6:43:C0:D4:57:60:B3:D1:59:7A:B1:66:A4 X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1e:52:7f:02:e4:e5:82:af:ee:c6:f5:a3:50:35:03:ca:83: 42:07:55:39:32:03:ad:7e:a9:42:a3:17:5c:8b:af:d6:76:f7: 37:9c:40:48:06:a8:59:a4:ee:6d:a5:03:32:47:76:84:df:ce: ee:29:d8:e2:18:f6:1e:44:4e:9d:45:db:40:9e:04:23:8d:a9: 4b:ba:dc:17:8e:ad:e9:a4:59:58:50:ea:80:f1:61:5f:1d:ef: 59:30:72:34:10:47:30:c5:6d:34:fe:67:be:a2:21:79:8d:2e: 88:4b:0f:d7:7d:51:39:b7:2f:b1:e9:29:c2:e0:e8:77:48:2a: 9d:69:dd:0c:f7:6e:1b:d6:2d:1d:2b:44:78:f9:64:4d:98:93: 2b:c2:71:f5:b3:3d:2c:8f:4f:ee:85:a1:c9:ec:b2:29:45:e6: 98:f8:4d:7f:ce:c5:61:79:97:dc:55:28:ef:fc:f8:bc:f1:8b: 66:b3:2c:0a:2a:24:50:0d:a2:c8:49:4e:d7:9f:3d:6e:02:b3: 15:43:ce:a4:88:51:db:30:c2:8b:9d:68:fd:f1:02:e5:8e:58: 28:89:bf:00:18:c6:c2:6c:e4:45:9a:23:8b:0f:6f:a3:67:24: 60:d2:4c:60:c7:48:dd:56:a1:a8:c6:ea:b0:fe:e1:90:95:9b: 52:fc:06:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQf5zIc5u51HaT+GGqgHf119xcL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjA5MjExMjQyMTRaFw0yNjA5MjIxNTMxMTRaMDMxMTAvBgNV BAMTKDBBMTA0RThDOTlDRjVCRjY0M0MwRDQ1NzYwQjNEMTU5N0FCMTY2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tQHNK23M25mmKs9BVgQuiRZg f3LKCRCx/EsltEB0p9k/0eW5dqvm2IgomBW3dWI1eEX2VhHPa1uX3oM0m0tPCc6y wscylJvXxrLksSDkYzpyI068ooZGaTp8EEeG+ybbxuGHxInQWMulx3YpcBGz8rqH qZLp6bYe8Ik9o4h+/0cj9gMlJnrayW5yLiYx88pGuH2AR+LI05e60fOReIYRIUL5 rYTJsYd3fNzlRxIwTt2e/Hy3xCeHAbzAZ2ssgguMJcSZb3rjgADCCAckAjm+DChU NVXmjaf1g4BM9Kdgsivsd1YsqcvznLBN3mzrXjA6ujFTxXW0Jtq7ab5wbyHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChBOjJnPW/ZDwNRXYLPRWXqxZqQwHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERG QUYyNzMwMjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEeUn8C5OWCr+7G9aNQNQPKg0IHVTkyA61+ qUKjF1yLr9Z29zecQEgGqFmk7m2lAzJHdoTfzu4p2OIY9h5ETp1F20CeBCONqUu6 3BeOremkWVhQ6oDxYV8d71kwcjQQRzDFbTT+Z76iIXmNLohLD9d9UTm3L7HpKcLg 6HdIKp1p3Qz3bhvWLR0rRHj5ZE2YkyvCcfWzPSyPT+6FocnssilF5pj4TX/OxWF5 l9xVKO/8+Lzxi2azLAoqJFANoshJTtefPW4CsxVDzqSIUdswwoudaP3xAuWOWCiJ vwAYxsJs5EWaI4sPb6NnJGDSTGDHSN1WoajG6rD+4ZCVm1L8Bhk= -----END CERTIFICATE-----Generated at Tue Sep 22 08:37:50 2026 by rpki-client