$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: LrSZKSeGZUbQ1mGH11F4cIqovXf9d/56XaBg6t9OKrA= Subject key identifier: 72:AD:AE:92:A2:EC:E2:6C:F5:78:AB:66:BE:B1:53:06:9B:2F:66:35 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 4044C8860644F7A9CFEEE70ECDD5C8B237768E86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 20:33:13 +0000 Manifest this update: Tue 03 Nov 2026 20:28:13 +0000 Manifest next update: Wed 04 Nov 2026 22:02:13 +0000 Files and hashes: 1: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 2: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: LeHnm9Epi/+pPt7LyqeRrsc/F7UoEPNJHII60uXThag=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 4: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) 5: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:44:c8:86:06:44:f7:a9:cf:ee:e7:0e:cd:d5:c8:b2:37:76:8e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Nov 3 20:28:13 2026 GMT Not After : Nov 4 22:02:13 2026 GMT Subject: CN=72ADAE92A2ECE26CF578AB66BEB153069B2F6635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:5e:8c:b8:9f:46:d0:91:b6:ba:91:5d:7b: fa:84:ef:80:25:a1:2e:13:07:a2:ee:72:4c:5b:62: f4:ee:c2:a0:dd:64:ec:1c:3b:4b:b4:14:8e:18:e9: d9:65:b2:13:bb:74:40:17:36:4a:82:57:ea:21:be: 24:04:2f:bb:3c:ce:25:c3:65:82:56:dc:94:84:31: 0c:db:50:02:62:59:72:6a:70:51:e8:d6:cd:7f:6d: 0d:5d:e0:b2:ea:cf:d4:be:92:38:57:5b:a5:22:f4: ae:cc:c1:af:30:38:7a:78:27:66:63:23:87:2c:01: 20:7d:84:e3:fa:b3:ae:48:03:d2:20:4c:95:02:ff: 53:ed:63:61:31:f0:67:f9:91:58:31:46:6b:1e:00: d2:2b:7a:47:ee:5a:7f:59:0b:30:01:91:74:ad:0c: 7c:32:a7:09:28:c8:84:ea:40:a0:81:64:93:66:95: ff:eb:ff:67:e0:7b:4a:f3:97:b7:ef:66:a8:ae:da: 19:2f:44:47:a1:66:d9:b9:53:50:cf:9d:8d:df:f1: ed:4c:e6:95:04:cd:4e:0d:53:2f:99:cd:0a:40:57: 29:ce:63:9f:4e:6d:30:84:6a:98:57:b9:41:ea:88: ad:0f:df:a2:af:c9:c3:75:55:14:dc:3f:a6:10:e4: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AD:AE:92:A2:EC:E2:6C:F5:78:AB:66:BE:B1:53:06:9B:2F:66:35 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f4:d4:64:f3:77:48:3a:01:a4:63:8c:b4:6d:9d:4c:6c:1e: 4f:34:4c:27:e4:c4:29:e8:b5:ca:f5:a5:fa:30:93:07:c8:5f: 41:1f:f8:10:c8:b0:84:40:e9:10:33:36:6c:de:47:05:0a:6c: 93:78:cd:c9:10:12:91:41:37:b8:21:3e:56:86:d7:58:41:f3: ae:9d:6d:5e:3f:55:35:25:43:0d:55:8b:a0:66:71:83:52:0d: 1b:63:9d:3b:48:e2:30:ab:41:95:5c:42:27:76:5a:7d:21:3a: 7d:2b:a8:8f:50:e9:46:18:0a:c8:79:f9:0c:0a:46:b4:1b:4c: 32:e3:98:30:3c:0c:15:e9:60:d2:d9:37:ca:40:62:2b:33:be: 4b:29:4c:9b:06:b4:12:c9:f1:0d:2e:3f:c8:6a:2a:bb:29:1a: cc:04:a9:ce:d4:be:5b:c1:85:8b:f9:b5:82:e7:44:4f:83:69: 16:7c:b3:4e:59:18:5e:de:3b:db:25:9e:f1:1d:e9:e2:94:8b: c0:0e:84:78:db:6d:ce:10:a5:f6:40:c0:5b:79:d1:b4:85:83: ea:55:5a:a7:6d:38:75:e7:81:0e:77:cf:38:5a:96:4c:d4:23: 84:df:97:d5:0c:87:fe:1a:ad:7e:c1:d7:5a:a4:40:be:98:78: 88:66:a4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQETIhgZE96nP7ucOzdXIsjd2joYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjExMDMyMDI4MTNaFw0yNjExMDQyMjAyMTNaMDMxMTAvBgNV BAMTKDcyQURBRTkyQTJFQ0UyNkNGNTc4QUI2NkJFQjE1MzA2OUIyRjY2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc216MuJ9G0JG2upFde/qE74Al oS4TB6LuckxbYvTuwqDdZOwcO0u0FI4Y6dllshO7dEAXNkqCV+ohviQEL7s8ziXD ZYJW3JSEMQzbUAJiWXJqcFHo1s1/bQ1d4LLqz9S+kjhXW6Ui9K7Mwa8wOHp4J2Zj I4csASB9hOP6s65IA9IgTJUC/1PtY2Ex8Gf5kVgxRmseANIrekfuWn9ZCzABkXSt DHwypwkoyITqQKCBZJNmlf/r/2fge0rzl7fvZqiu2hkvREehZtm5U1DPnY3f8e1M 5pUEzU4NUy+ZzQpAVynOY59ObTCEaphXuUHqiK0P36KvycN1VRTcP6YQ5IhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcq2ukqLs4mz1eKtmvrFTBpsvZjUwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH01GTzd0g6AaRjjLRtnUxsHk80TCfkxCno tcr1pfowkwfIX0Ef+BDIsIRA6RAzNmzeRwUKbJN4zckQEpFBN7ghPlaG11hB866d bV4/VTUlQw1Vi6BmcYNSDRtjnTtI4jCrQZVcQid2Wn0hOn0rqI9Q6UYYCsh5+QwK RrQbTDLjmDA8DBXpYNLZN8pAYiszvkspTJsGtBLJ8Q0uP8hqKrspGswEqc7UvlvB hYv5tYLnRE+DaRZ8s05ZGF7eO9slnvEd6eKUi8AOhHjbbc4QpfZAwFt50bSFg+pV WqdtOHXngQ53zzhalkzUI4Tfl9UMh/4arX7B11qkQL6YeIhmpIM= -----END CERTIFICATE-----Generated at Wed Nov 4 10:28:37 2026 by rpki-client