$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: HIYWZYHdTpsUhKbOAdqmuTP6kjPlQ0jaN7DYGOUMNko= Subject key identifier: 06:C9:89:28:12:C3:37:24:EB:7F:1E:48:3D:12:2F:A9:F4:83:D2:8E Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 1EE61A49BF95F1CB9238F26685CAEA9084905DFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 07:07:14 +0000 Manifest this update: Wed 04 Nov 2026 07:02:14 +0000 Manifest next update: Thu 05 Nov 2026 09:47:14 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) 2: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: oisO6fD12Jss5D6adRgF9BMnZLWt5hhJE9EVMiJKjkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e6:1a:49:bf:95:f1:cb:92:38:f2:66:85:ca:ea:90:84:90:5d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Nov 4 07:02:14 2026 GMT Not After : Nov 5 09:47:14 2026 GMT Subject: CN=06C9892812C33724EB7F1E483D122FA9F483D28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:43:d1:30:2e:a2:ba:e5:7d:2d:f9:f3:0e: 77:b1:c9:e6:3c:f7:d7:2d:2a:52:8e:98:fc:e6:8a: 46:f3:ff:8d:42:b6:78:f7:5f:8d:e6:0d:d9:80:ea: c0:a5:0e:41:f5:2d:99:bc:cd:53:64:c9:0d:36:db: 69:e6:06:7f:21:a8:3a:5f:ab:4d:9a:82:a3:1f:76: 2a:63:b4:c2:c6:ab:43:89:2c:c8:39:43:c3:df:6c: 7f:fb:6a:3d:c0:b4:9c:76:5d:d9:3d:c0:21:ca:de: 09:4b:55:4d:69:00:1d:61:bc:ea:a7:5d:47:99:95: 2c:9e:e8:ac:d7:1d:56:33:a2:52:5c:b0:13:56:de: ea:09:1d:91:e2:9d:ba:d7:79:67:65:d2:b0:e4:b1: be:bb:07:10:16:1c:a1:27:4f:67:ff:76:ad:08:cb: c8:95:ff:ea:61:60:52:c8:86:bc:87:b2:1b:06:94: d4:9e:8f:f7:bc:26:9d:27:aa:08:c9:19:fd:74:c2: 67:28:9b:de:e0:e7:23:1a:c0:85:0e:6c:8a:09:6d: a6:88:5e:97:ff:d4:11:eb:78:7e:50:02:2a:0a:fa: fd:dd:33:b2:c8:2a:1c:c9:e2:6c:c7:3d:70:ce:23: 4a:d6:07:69:a1:5b:bc:c5:a2:aa:8f:c1:19:98:85: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C9:89:28:12:C3:37:24:EB:7F:1E:48:3D:12:2F:A9:F4:83:D2:8E X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7a:58:e2:8e:3b:50:56:18:9e:ba:e8:46:39:96:e3:67:69: 27:35:d8:34:84:e1:ef:17:ae:22:27:01:5a:6d:60:71:f4:14: 25:fd:b9:00:44:eb:45:98:83:c3:f5:62:e1:84:99:cf:71:ed: 89:52:af:0d:6a:18:52:a4:14:71:7f:1d:d8:21:dd:fa:f8:aa: f1:81:0c:06:0e:b4:77:36:23:9b:d9:0d:68:92:f0:da:51:e8: 04:ce:21:fb:ef:01:75:9e:28:b1:94:1b:d9:1e:c0:78:a5:fc: 00:ba:09:93:df:95:b3:a5:86:1c:95:99:39:9c:be:2c:79:f8: 0a:4f:ed:1f:91:52:1f:39:3f:0d:d8:8e:96:f8:cf:37:e0:af: 83:01:88:b0:9c:ff:00:ce:ce:c2:64:5d:2c:32:dc:fc:32:ef: ce:61:81:99:4c:be:67:67:38:b6:5c:bf:c0:4c:74:ee:ef:01: 90:98:07:81:81:9e:92:95:66:df:ad:5e:1f:e3:24:fd:7a:2f: 41:d5:98:a4:c8:42:03:18:cf:d8:7f:d3:6f:bf:48:37:fa:bb: db:61:f6:28:4d:f0:44:ba:d6:7b:64:91:df:8a:71:ca:dc:29: 3e:3f:b9:fd:0b:df:e7:f7:8e:70:6d:57:a5:ab:14:de:5c:9e: b6:12:e0:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuYaSb+V8cuSOPJmhcrqkISQXf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjExMDQwNzAyMTRaFw0yNjExMDUwOTQ3MTRaMDMxMTAvBgNV BAMTKDA2Qzk4OTI4MTJDMzM3MjRFQjdGMUU0ODNEMTIyRkE5RjQ4M0QyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpUPRMC6iuuV9LfnzDnexyeY8 99ctKlKOmPzmikbz/41Ctnj3X43mDdmA6sClDkH1LZm8zVNkyQ0222nmBn8hqDpf q02agqMfdipjtMLGq0OJLMg5Q8PfbH/7aj3AtJx2Xdk9wCHK3glLVU1pAB1hvOqn XUeZlSye6KzXHVYzolJcsBNW3uoJHZHinbrXeWdl0rDksb67BxAWHKEnT2f/dq0I y8iV/+phYFLIhryHshsGlNSej/e8Jp0nqgjJGf10wmcom97g5yMawIUObIoJbaaI Xpf/1BHreH5QAioK+v3dM7LIKhzJ4mzHPXDOI0rWB2mhW7zFoqqPwRmYhVwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsmJKBLDNyTrfx5IPRIvqfSD0o4wHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd6WOKOO1BWGJ666EY5luNnaSc12DSE4e8X riInAVptYHH0FCX9uQBE60WYg8P1YuGEmc9x7YlSrw1qGFKkFHF/Hdgh3fr4qvGB DAYOtHc2I5vZDWiS8NpR6ATOIfvvAXWeKLGUG9kewHil/AC6CZPflbOlhhyVmTmc vix5+ApP7R+RUh85Pw3Yjpb4zzfgr4MBiLCc/wDOzsJkXSwy3Pwy785hgZlMvmdn OLZcv8BMdO7vAZCYB4GBnpKVZt+tXh/jJP16L0HVmKTIQgMYz9h/02+/SDf6u9th 9ihN8ES61ntkkd+KccrcKT4/uf0L3+f3jnBtV6WrFN5cnrYS4FQ= -----END CERTIFICATE-----Generated at Wed Nov 4 12:13:51 2026 by rpki-client