$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json) Hash identifier: jI7GUvzCnv0KIlokTLCcbSXwYr+vX9mMC/tnNChumY4= Subject key identifier: 4E:44:F6:9E:E1:F6:44:B2:3D:AA:B0:15:55:D7:0D:63:18:56:17:6F Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 Certificate issuer: /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Certificate serial: 5E8F4F4B828B38CD4CE60B6B599809F5CF259ED2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 10:05:50 +0000 Manifest this update: Wed 04 Nov 2026 10:00:50 +0000 Manifest next update: Thu 05 Nov 2026 11:09:50 +0000 Files and hashes: 1: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: QOYy8L/tZ527ZrUAcJSp62ClYeSG/ZXVVaKL3yi27U8=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8f:4f:4b:82:8b:38:cd:4c:e6:0b:6b:59:98:09:f5:cf:25:9e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Validity Not Before: Nov 4 10:00:50 2026 GMT Not After : Nov 5 11:09:50 2026 GMT Subject: CN=4E44F69EE1F644B23DAAB01555D70D631856176F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:4c:34:b2:d5:49:07:24:83:c3:c2:89:d0: 45:2f:64:f9:45:a3:75:7d:94:1c:79:57:e4:7e:88: fd:eb:b2:87:34:78:7e:87:7c:3c:6b:3d:ab:b4:22: 98:17:b9:eb:52:58:f7:60:48:c5:08:5b:a2:89:16: 20:5d:b4:5a:7a:a1:91:b1:79:9b:1e:03:ae:17:d1: f0:e0:3e:0e:5a:37:1c:09:49:90:30:ba:d2:a0:03: d8:fe:d6:b2:bc:69:0c:3b:fa:f8:5f:35:79:38:96: 0c:b5:71:6e:10:5c:38:49:a1:a9:ce:66:a8:22:06: 6d:77:43:5c:5d:4e:82:27:94:fd:e5:df:32:c8:a5: ba:3e:c5:21:3d:3e:fa:54:f7:35:ab:b3:b5:0b:83: 4f:0a:ba:7f:67:21:40:12:6d:f5:12:0c:a1:ea:ab: cc:c1:24:6d:1e:e1:aa:b6:90:a9:fe:bb:55:be:da: db:77:b9:4d:86:3a:29:36:e1:f8:5d:41:ec:7d:ae: ec:fc:fe:34:fd:e3:9b:23:9e:99:4a:c3:e6:b2:09: ed:b6:f5:9c:f7:f6:16:46:4b:4e:6b:6e:cd:ac:45: 60:15:6c:ea:a7:e5:87:cd:3a:ef:94:bf:d6:2e:24: 45:c2:cf:2e:f7:27:34:92:b3:92:6a:fe:ec:56:00: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:F6:9E:E1:F6:44:B2:3D:AA:B0:15:55:D7:0D:63:18:56:17:6F X509v3 Authority Key Identifier: keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:75:ad:72:be:f2:cc:99:54:55:c8:ea:89:33:29:ac:f9:91: 06:e8:0e:46:b5:96:95:f1:18:44:7a:74:43:5d:b5:8d:0b:8a: a0:a7:9b:e0:de:47:94:9f:93:38:7e:73:9a:a4:6d:6d:e5:98: e4:de:db:e5:ba:14:e4:4e:a2:9b:b9:1d:5c:74:1a:f0:2d:cd: c0:f4:23:1b:27:b6:a1:d5:a0:23:87:71:a2:5b:c0:16:5b:db: 65:aa:bd:01:6d:f3:dd:eb:0c:4b:70:76:7f:23:28:b5:8e:27: 80:d2:95:b5:b8:c4:c5:5c:e0:9b:19:bc:9e:67:3a:19:05:82: 0e:f3:47:29:a4:37:be:c6:f8:43:b4:03:96:49:66:2b:f2:c3: 14:21:00:69:32:cb:0e:5d:f7:85:a2:c8:75:66:d0:a9:ec:25: 2f:35:07:f4:73:e1:05:01:26:da:65:a4:13:67:bc:47:e5:29: 4d:af:57:42:4b:de:b2:59:2f:21:53:38:16:51:a9:81:ae:72: 21:61:8c:0c:aa:ee:9b:66:7a:9a:b1:af:83:ca:8e:e2:9b:b2: 22:69:73:fb:1b:94:92:c9:3c:bb:09:71:64:63:67:e0:45:6e: 9c:e5:bf:6d:76:15:bb:00:82:f4:e3:81:69:06:1b:3a:f4:cc: 84:4e:7c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXo9PS4KLOM1M5gtrWZgJ9c8lntIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4 RTY5MUZDMTAeFw0yNjExMDQxMDAwNTBaFw0yNjExMDUxMTA5NTBaMDMxMTAvBgNV BAMTKDRFNDRGNjlFRTFGNjQ0QjIzREFBQjAxNTU1RDcwRDYzMTg1NjE3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhD0w0stVJBySDw8KJ0EUvZPlF o3V9lBx5V+R+iP3rsoc0eH6HfDxrPau0IpgXuetSWPdgSMUIW6KJFiBdtFp6oZGx eZseA64X0fDgPg5aNxwJSZAwutKgA9j+1rK8aQw7+vhfNXk4lgy1cW4QXDhJoanO ZqgiBm13Q1xdToInlP3l3zLIpbo+xSE9PvpU9zWrs7ULg08Kun9nIUASbfUSDKHq q8zBJG0e4aq2kKn+u1W+2tt3uU2GOik24fhdQex9ruz8/jT945sjnplKw+ayCe22 9Zz39hZGS05rbs2sRWAVbOqn5YfNOu+Uv9YuJEXCzy73JzSSs5Jq/uxWAF+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkT2nuH2RLI9qrAVVdcNYxhWF28wHwYDVR0j BBgwFoAUHhrBybPmf4OVOVQj2i6ybo5pH8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI3MmU1MjctNzI1Yi00OWUzLTg3NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlC M0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4RTY5MUZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTFBQzFDOUIzRTY3RjgzOTUzOTU0MjNEQTJFQjI2RThFNjkx RkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIy NkU4RTY5MUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV1rXK+8syZVFXI6okzKaz5kQboDka1lpXx GER6dENdtY0LiqCnm+DeR5Sfkzh+c5qkbW3lmOTe2+W6FOROopu5HVx0GvAtzcD0 IxsntqHVoCOHcaJbwBZb22WqvQFt893rDEtwdn8jKLWOJ4DSlbW4xMVc4JsZvJ5n OhkFgg7zRymkN77G+EO0A5ZJZivywxQhAGkyyw5d94WiyHVm0KnsJS81B/Rz4QUB JtplpBNnvEflKU2vV0JL3rJZLyFTOBZRqYGuciFhjAyq7ptmepqxr4PKjuKbsiJp c/sblJLJPLsJcWRjZ+BFbpzlv212FbsAgvTjgWkGGzr0zIROfJo= -----END CERTIFICATE-----Generated at Wed Nov 4 20:39:19 2026 by rpki-client