$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft (raw, json) Hash identifier: RTTNn0z3+O+L310qI3B0YNlk13eume96GprhbEMnxqA= Subject key identifier: C6:08:FF:9C:27:F8:C0:8F:C0:04:4F:AF:00:2A:F1:9E:3D:FF:73:44 Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 Certificate issuer: /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Certificate serial: 66961189F487E9C9BC3B3F286C856B2D6DBF9944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 20:23:04 +0000 Manifest this update: Tue 03 Nov 2026 20:18:04 +0000 Manifest next update: Wed 04 Nov 2026 20:29:04 +0000 Files and hashes: 1: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl (hash: glTLAGEM9UjLAf1UhzGfnkI4VUbz1bTZwMPTkg95lJ0=) 2: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=) 3: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=) 4: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: OGO8y1XI3uaFZBO8XdrSwCG094qddn+s0g2Ctr82rYM=) 5: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:96:11:89:f4:87:e9:c9:bc:3b:3f:28:6c:85:6b:2d:6d:bf:99:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Validity Not Before: Nov 3 20:18:04 2026 GMT Not After : Nov 4 20:29:04 2026 GMT Subject: CN=C608FF9C27F8C08FC0044FAF002AF19E3DFF7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:c0:33:2b:43:e1:a5:be:7d:6f:86:ea:30: 50:98:69:f1:15:63:60:96:cb:11:9c:8a:21:65:f8: f9:90:d9:aa:54:b9:8d:ae:7a:6c:08:f2:e1:aa:78: fc:bd:d4:c7:31:a3:94:7f:ec:37:64:36:8f:5e:50: f5:49:24:1d:82:f3:d4:52:d6:e2:2e:61:1b:d8:37: 80:a2:3e:f5:9f:21:7d:c1:53:58:07:e1:6a:05:7c: 0f:64:a5:cb:2b:07:a9:de:25:ee:20:3c:f9:32:45: 63:a4:3a:fd:5d:a5:41:04:57:a7:59:99:58:05:e7: bd:96:aa:dc:44:1a:8e:d0:f5:ce:ec:2b:fb:51:4a: 4a:4a:d5:d6:60:be:12:dd:4c:14:7a:e4:6f:53:a7: 07:2a:ab:d5:5e:4a:5f:fb:9e:4f:df:8b:97:e3:b6: 6e:23:d1:2f:dc:fd:df:37:62:d7:49:70:b0:e7:c9: 4c:b1:00:29:a1:fb:25:5c:ef:5c:65:d0:cf:0c:d3: 0d:fe:69:3f:e1:c3:4d:ff:dd:2d:a3:4c:9d:fd:c3: 12:13:8f:5f:60:91:04:31:10:9a:89:46:b4:d7:7d: b5:6f:e8:0d:ea:a8:95:11:c7:35:9e:b1:f0:1c:bf: dc:85:29:cb:e0:a0:79:e5:f7:94:0c:d6:e6:52:3b: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:FF:9C:27:F8:C0:8F:C0:04:4F:AF:00:2A:F1:9E:3D:FF:73:44 X509v3 Authority Key Identifier: keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:26:d7:1b:d9:9c:46:00:92:dc:30:86:32:26:30:a1:e4: 8e:e3:6c:27:67:c9:36:42:0a:31:45:e1:a5:7b:93:36:5b:ec: 23:1b:12:ee:19:94:3c:8b:17:ad:e0:e6:fe:d3:a1:27:62:27: 8c:56:cd:f1:30:d7:e1:e0:ae:f7:7e:41:70:2e:c0:14:40:75: 24:c9:19:0f:f1:13:85:37:27:54:7b:4c:0e:13:44:86:27:f4: 14:a3:38:2d:e8:a8:07:56:ce:d3:3b:e3:d4:1c:ec:4d:a8:16: c0:f5:f2:c4:88:bb:16:e7:c1:2d:3d:50:47:f6:ac:e4:55:5c: e9:d0:17:53:dd:d7:89:ed:72:9a:40:ff:e6:17:7c:04:7e:4c: 11:4c:c0:ab:5e:6d:28:47:dd:ca:7b:7f:38:d1:fa:54:10:8d: a4:5a:a1:fe:62:cf:62:e7:aa:01:86:c5:72:0c:a3:a5:b7:3a: e9:ca:4f:e0:9f:1a:4d:48:02:4a:e3:df:25:85:d9:9d:35:16: 13:16:b1:8d:36:67:1e:96:90:7b:de:82:a5:54:95:ec:16:15: 71:66:ab:87:9f:27:d8:9d:83:65:bd:a4:94:04:d1:1b:43:20: cf:eb:fe:88:8d:f1:e5:9e:be:04:51:ca:3f:ba:c0:68:f0:cf: f8:cf:c5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpYRifSH6cm8Oz8obIVrLW2/mUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkNDNjYw NjkxNTkxMDAeFw0yNjExMDMyMDE4MDRaFw0yNjExMDQyMDI5MDRaMDMxMTAvBgNV BAMTKEM2MDhGRjlDMjdGOEMwOEZDMDA0NEZBRjAwMkFGMTlFM0RGRjczNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHMAzK0Phpb59b4bqMFCYafEV Y2CWyxGciiFl+PmQ2apUuY2uemwI8uGqePy91Mcxo5R/7DdkNo9eUPVJJB2C89RS 1uIuYRvYN4CiPvWfIX3BU1gH4WoFfA9kpcsrB6neJe4gPPkyRWOkOv1dpUEEV6dZ mVgF572WqtxEGo7Q9c7sK/tRSkpK1dZgvhLdTBR65G9Tpwcqq9VeSl/7nk/fi5fj tm4j0S/c/d83YtdJcLDnyUyxACmh+yVc71xl0M8M0w3+aT/hw03/3S2jTJ39wxIT j19gkQQxEJqJRrTXfbVv6A3qqJURxzWesfAcv9yFKcvgoHnl95QM1uZSO7x3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxgj/nCf4wI/ABE+vACrxnj3/c0QwHwYDVR0j BBgwFoAUHCQa0cwwHoFcpNb6XxvMZgaRWRAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg3NjZkNjYtMjkyMy00Y2UwLWFhODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFD QzMwMUU4MTVDQTRENkZBNUYxQkNDNjYwNjkxNTkxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzI0MUFEMUNDMzAxRTgxNUNBNEQ2RkE1RjFCQ0M2NjA2OTE1 OTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkND NjYwNjkxNTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD/Jtcb2ZxGAJLcMIYyJjCh5I7jbCdnyTZC CjFF4aV7kzZb7CMbEu4ZlDyLF63g5v7ToSdiJ4xWzfEw1+Hgrvd+QXAuwBRAdSTJ GQ/xE4U3J1R7TA4TRIYn9BSjOC3oqAdWztM749Qc7E2oFsD18sSIuxbnwS09UEf2 rORVXOnQF1Pd14ntcppA/+YXfAR+TBFMwKtebShH3cp7fzjR+lQQjaRaof5iz2Ln qgGGxXIMo6W3OunKT+CfGk1IAkrj3yWF2Z01FhMWsY02Zx6WkHvegqVUlewWFXFm q4efJ9idg2W9pJQE0RtDIM/r/oiN8eWevgRRyj+6wGjwz/jPxfA= -----END CERTIFICATE-----Generated at Wed Nov 4 05:44:23 2026 by rpki-client