$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: E9UCOUQ+KtNGns8rih5t+CykBDQdZ3eO39S7H4wkGwQ= Subject key identifier: 9B:81:AA:27:6B:A1:9A:45:98:71:60:AF:15:70:39:7E:0D:F3:06:24 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 6DC9C4919EB629CF523D4724F6887637F0A32C9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: FA Signing time: Wed 04 Nov 2026 15:58:25 +0000 Manifest this update: Wed 04 Nov 2026 15:53:25 +0000 Manifest next update: Thu 05 Nov 2026 16:42:25 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 2: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: eLpzt+3IBfUvkXSnWI55h8p8i/tYunqEz2ow6Tx1esg=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 4: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 16:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c9:c4:91:9e:b6:29:cf:52:3d:47:24:f6:88:76:37:f0:a3:2c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Nov 4 15:53:25 2026 GMT Not After : Nov 5 16:42:25 2026 GMT Subject: CN=9B81AA276BA19A45987160AF1570397E0DF30624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:fa:3a:70:a6:64:e5:4d:6e:ad:02:bb:3f: 89:2b:ac:9a:5b:51:7a:ff:dd:5d:de:d9:72:82:64: 7c:9d:ef:b3:52:cd:cf:fc:0d:1a:14:7a:07:e9:7a: 12:77:3f:68:40:02:e3:c8:20:2a:96:5f:48:fb:82: fb:85:87:e6:61:84:a3:75:4d:08:57:c2:61:3e:52: 0c:89:92:42:4a:4a:18:1d:3b:47:47:0d:65:b7:32: 06:e7:bc:f7:6d:a5:b7:32:5f:82:60:71:b4:71:91: 69:dd:07:04:01:84:6e:76:5b:4e:64:99:3f:4d:6f: c1:56:f4:cb:7f:23:6f:d5:ae:3b:e7:3d:74:22:a4: 8f:b8:2e:4e:9b:c8:d7:22:cf:be:a4:c8:5b:d9:4d: 6c:7e:d5:1d:f1:de:a7:b2:2c:9d:6a:ac:1a:23:42: 04:a1:6d:ff:24:ce:72:55:85:e4:89:04:f8:d5:6c: 42:11:7e:d0:a1:fa:30:27:d9:07:93:57:85:94:38: 95:21:0b:e3:5e:26:de:08:6b:f2:df:26:9b:df:47: 4e:f9:e9:31:8a:8b:4b:00:20:31:b2:e0:13:2f:a6: 5d:34:9f:aa:83:37:21:16:e6:95:76:57:25:ed:3b: 2a:51:19:05:f8:57:e2:1a:e4:a6:6d:e1:b6:45:9a: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:AA:27:6B:A1:9A:45:98:71:60:AF:15:70:39:7E:0D:F3:06:24 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b5:78:f9:e9:e7:ee:a6:b9:55:b9:b9:5a:2f:3c:e4:c5:f6: fc:19:ce:df:10:7e:8a:8f:f0:c6:72:92:53:b0:21:92:cc:38: 1f:32:f5:b3:11:b1:24:d9:c8:11:2c:88:d6:6f:ac:a6:26:a7: 6b:5b:06:ba:b0:8b:32:49:59:78:9b:46:6f:4a:f6:bf:9d:d2: ae:a5:e7:b5:23:1e:83:b6:ad:66:77:1c:27:b0:2d:f9:87:70: 03:b4:c5:47:fe:1f:5d:b3:85:38:bf:db:ca:1d:1c:37:48:cf: f9:7b:c9:d2:ac:6f:d5:dd:a5:d7:f8:15:e6:3f:c0:75:23:ed: 73:01:fa:9c:de:50:6d:3a:67:c3:44:af:da:44:02:2c:84:1a: e7:1a:09:77:81:6a:99:48:3d:ea:d8:f7:8e:92:d9:be:bf:77: aa:38:fd:93:fd:f7:2a:25:40:c6:15:22:26:90:e7:3b:4f:f9: ee:ef:40:ab:e0:9d:31:ee:51:06:12:8e:9a:d6:cb:03:e4:88: 27:94:7a:99:06:f1:c8:39:14:ca:de:9a:eb:b1:44:43:7d:2d: ec:5c:d1:d8:f3:2e:95:27:c8:19:3f:36:78:e6:1c:16:5c:00: 14:3c:f1:05:65:86:89:87:01:35:dc:6a:8b:98:d2:d4:c0:06: 8e:6a:31:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcnEkZ62Kc9SPUck9oh2N/CjLJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjExMDQxNTUzMjVaFw0yNjExMDUxNjQyMjVaMDMxMTAvBgNV BAMTKDlCODFBQTI3NkJBMTlBNDU5ODcxNjBBRjE1NzAzOTdFMERGMzA2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9fo6cKZk5U1urQK7P4krrJpb UXr/3V3e2XKCZHyd77NSzc/8DRoUegfpehJ3P2hAAuPIICqWX0j7gvuFh+ZhhKN1 TQhXwmE+UgyJkkJKShgdO0dHDWW3MgbnvPdtpbcyX4JgcbRxkWndBwQBhG52W05k mT9Nb8FW9Mt/I2/VrjvnPXQipI+4Lk6byNciz76kyFvZTWx+1R3x3qeyLJ1qrBoj QgShbf8kznJVheSJBPjVbEIRftCh+jAn2QeTV4WUOJUhC+NeJt4Ia/LfJpvfR075 6TGKi0sAIDGy4BMvpl00n6qDNyEW5pV2VyXtOypRGQX4V+Ia5KZt4bZFmibLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4GqJ2uhmkWYcWCvFXA5fg3zBiQwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW1ePnp5+6muVW5uVovPOTF9vwZzt8QfoqP 8MZyklOwIZLMOB8y9bMRsSTZyBEsiNZvrKYmp2tbBrqwizJJWXibRm9K9r+d0q6l 57UjHoO2rWZ3HCewLfmHcAO0xUf+H12zhTi/28odHDdIz/l7ydKsb9Xdpdf4FeY/ wHUj7XMB+pzeUG06Z8NEr9pEAiyEGucaCXeBaplIPerY946S2b6/d6o4/ZP99yol QMYVIiaQ5ztP+e7vQKvgnTHuUQYSjprWywPkiCeUepkG8cg5FMremuuxREN9Lexc 0djzLpUnyBk/NnjmHBZcABQ88QVlhomHATXcaouY0tTABo5qMds= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:39 2026 by rpki-client