$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: 9KaT+nGwuWECMWkPnvO5l5i1s0SaVRfhy/69SzJPsD4= Subject key identifier: 7C:69:F6:46:20:06:2A:90:39:05:A4:AB:81:FA:48:B6:6F:7E:4C:C1 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 144BF78C16734CA7A89E6819535E72981B103CAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 16:59:50 +0000 Manifest this update: Wed 04 Nov 2026 16:54:50 +0000 Manifest next update: Thu 05 Nov 2026 20:53:50 +0000 Files and hashes: 1: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: dg1kpJp2Y5dAMYeOJEjMQLrlNgTMGerKIIJeoP1y0Kk=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 20:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4b:f7:8c:16:73:4c:a7:a8:9e:68:19:53:5e:72:98:1b:10:3c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Nov 4 16:54:50 2026 GMT Not After : Nov 5 20:53:50 2026 GMT Subject: CN=7C69F64620062A903905A4AB81FA48B66F7E4CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:95:24:1c:ef:3f:cd:81:09:35:9d:45:fe: 8a:33:3e:48:ba:67:96:36:b5:c8:d7:9e:02:79:10: de:94:34:5c:54:5f:cf:d2:4e:70:49:34:16:ec:20: d6:dd:89:e7:02:27:ac:60:80:46:5d:e4:b5:fd:01: 30:6d:fb:49:9a:12:a0:c9:c1:cf:d3:f1:ba:1a:a9: 18:a1:37:ac:e8:35:44:49:31:c4:aa:7a:22:f0:e7: 38:1a:f6:08:ac:31:7f:2e:54:11:5a:57:7c:68:aa: e5:ab:7e:1d:6e:f9:64:99:06:ee:e5:a8:40:dc:63: 54:f7:8a:96:8b:73:37:f0:e6:60:a6:05:aa:c6:3a: 6f:6f:da:7d:eb:0c:40:27:ec:98:9b:63:ca:ac:24: 39:86:42:51:d4:38:58:56:56:3b:fb:fb:ff:91:76: 13:8a:ac:5b:fd:fb:8e:d4:02:b6:83:19:76:38:87: 88:72:e2:d3:66:58:ca:37:0b:09:75:2c:a0:3d:93: 9e:4c:82:d1:2a:65:74:82:49:52:ee:60:ad:a0:21: e3:f5:b9:0a:53:30:ab:89:1a:88:48:40:74:95:8d: e2:dd:87:d0:08:ff:5c:54:3a:a5:39:99:06:8d:62: 2b:ae:e6:80:fc:b9:a2:71:a2:07:ba:b3:52:41:c3: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:F6:46:20:06:2A:90:39:05:A4:AB:81:FA:48:B6:6F:7E:4C:C1 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:89:bc:88:56:fc:44:97:9e:32:2f:a8:4d:e6:b5:dc:43:b2: a2:58:08:de:19:1f:09:33:11:30:e3:7c:1d:34:f9:f5:d6:fa: 41:55:fa:e0:b7:e1:75:23:29:a2:06:19:3d:e0:11:c5:5d:49: af:0f:99:06:9d:ed:6c:c4:25:e0:c7:a0:59:6f:13:db:ef:37: 2a:ca:20:88:dd:f8:9d:9b:fc:6e:33:f9:ef:c8:31:a1:a4:24: 91:7b:a1:02:e6:59:11:70:60:b6:b2:43:b0:ff:40:48:96:55: c4:c9:85:22:02:26:52:30:df:a3:91:f6:ed:3d:eb:ff:f7:4f: 11:1d:b1:0a:18:a5:41:e0:fc:32:65:68:41:e1:51:4e:43:b4: f5:0d:8b:93:91:5b:63:c2:11:fa:ab:46:8c:87:7b:2d:d4:0e: 22:e7:a1:94:01:ee:ef:ef:c0:3c:cf:1e:7f:57:2d:81:23:e2: 32:2d:79:13:78:d5:96:59:cb:9f:8f:e2:73:8a:f7:0e:ea:4d: c8:3c:32:5a:7b:65:73:e7:78:a9:2b:31:92:1e:14:26:cc:9c: 5f:06:d9:0e:2c:7f:16:67:6b:4d:48:9b:b8:54:c9:c2:b3:27: 4f:2e:ab:9a:b8:7d:42:19:2c:fa:9b:bb:5e:2f:91:90:53:3a: d4:26:f5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEv3jBZzTKeonmgZU15ymBsQPK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjExMDQxNjU0NTBaFw0yNjExMDUyMDUzNTBaMDMxMTAvBgNV BAMTKDdDNjlGNjQ2MjAwNjJBOTAzOTA1QTRBQjgxRkE0OEI2NkY3RTRDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sZUkHO8/zYEJNZ1F/oozPki6 Z5Y2tcjXngJ5EN6UNFxUX8/STnBJNBbsINbdiecCJ6xggEZd5LX9ATBt+0maEqDJ wc/T8boaqRihN6zoNURJMcSqeiLw5zga9gisMX8uVBFaV3xoquWrfh1u+WSZBu7l qEDcY1T3ipaLczfw5mCmBarGOm9v2n3rDEAn7JibY8qsJDmGQlHUOFhWVjv7+/+R dhOKrFv9+47UAraDGXY4h4hy4tNmWMo3Cwl1LKA9k55MgtEqZXSCSVLuYK2gIeP1 uQpTMKuJGohIQHSVjeLdh9AI/1xUOqU5mQaNYiuu5oD8uaJxoge6s1JBw5hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGn2RiAGKpA5BaSrgfpItm9+TMEwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGJvIhW/ESXnjIvqE3mtdxDsqJYCN4ZHwkz ETDjfB00+fXW+kFV+uC34XUjKaIGGT3gEcVdSa8PmQad7WzEJeDHoFlvE9vvNyrK IIjd+J2b/G4z+e/IMaGkJJF7oQLmWRFwYLayQ7D/QEiWVcTJhSICJlIw36OR9u09 6//3TxEdsQoYpUHg/DJlaEHhUU5DtPUNi5ORW2PCEfqrRoyHey3UDiLnoZQB7u/v wDzPHn9XLYEj4jIteRN41ZZZy5+P4nOK9w7qTcg8Mlp7ZXPneKkrMZIeFCbMnF8G 2Q4sfxZna01Im7hUycKzJ08uq5q4fUIZLPqbu14vkZBTOtQm9Tc= -----END CERTIFICATE-----Generated at Thu Nov 5 05:24:08 2026 by rpki-client