$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: /9fynjd/cT3u6rVetEUYIJhDQsZWrUkAxuO2IqzdTjs= Subject key identifier: 1B:DD:72:1D:19:C4:5A:75:35:BB:81:66:97:FD:9D:A2:C5:9D:4A:36 Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 2E58B0BD9676273D96BFC9AD0B68896BB6BA4341 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 03:11:32 +0000 Manifest this update: Mon 02 Nov 2026 03:06:32 +0000 Manifest next update: Tue 03 Nov 2026 05:08:32 +0000 Files and hashes: 1: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 2: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: WRAZfcgPP9+smyEje5mGtYu1nwsC1VB5B8OMrEK7kmM=) 3: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) 4: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:58:b0:bd:96:76:27:3d:96:bf:c9:ad:0b:68:89:6b:b6:ba:43:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Nov 2 03:06:32 2026 GMT Not After : Nov 3 05:08:32 2026 GMT Subject: CN=1BDD721D19C45A7535BB816697FD9DA2C59D4A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:64:95:c4:b0:0a:93:69:28:1b:93:44:25:18: 45:a1:17:72:c4:94:d0:8b:5d:b8:27:75:68:b3:3d: 8c:fa:b1:03:4d:c4:3e:8d:6a:f9:de:48:1c:d1:17: cf:f4:93:77:dc:89:8b:8c:3e:87:22:72:89:1a:27: e6:df:b0:1d:a4:67:7f:e5:a3:f5:e9:64:66:a7:e6: 0b:3d:b2:d5:0c:4c:6e:38:8c:24:40:c7:2f:de:ad: ec:19:d4:ff:8b:3e:d7:8e:e8:9c:da:60:94:86:9c: 0a:40:d0:00:a2:73:3c:48:83:54:ee:c0:cc:5b:f6: 7a:b7:15:11:ee:ff:41:ce:63:67:18:98:29:9c:9e: 48:5d:15:37:13:d9:45:7e:ee:61:5d:66:fa:31:db: a6:71:0c:59:11:4b:06:99:cc:bb:e1:f4:23:a7:99: bb:e3:c7:02:17:dc:e9:77:ad:af:f2:ce:c3:a7:b2: 51:ae:b1:d8:62:59:ae:5d:f3:26:98:59:ff:16:55: 7e:cd:ae:91:5d:cd:a3:23:5e:e8:7b:22:e6:29:93: a8:79:19:35:0c:24:3f:25:e3:76:61:da:e2:60:34: dd:88:80:dc:95:96:5d:f0:c5:fc:f4:57:da:cf:5e: 17:70:90:4f:27:6c:dc:03:46:e7:79:d5:45:63:97: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:72:1D:19:C4:5A:75:35:BB:81:66:97:FD:9D:A2:C5:9D:4A:36 X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:99:17:44:41:16:49:0f:3a:fd:c6:da:a1:9e:2a:e2:23: 86:9c:94:09:48:68:b3:cf:6b:b9:a1:64:b7:d3:7d:0b:17:d0: 6c:b9:80:25:29:32:91:1b:8a:cc:1f:7c:4b:85:7d:42:e9:2c: 57:78:e6:81:98:5f:ab:db:25:08:ed:25:ff:f3:67:01:59:14: 3b:21:e7:34:47:a1:9a:48:39:21:59:e0:5d:20:03:6d:df:7a: 49:d4:35:05:50:84:ca:27:35:55:20:7b:71:74:7e:15:5e:cb: 19:9b:af:4d:ce:45:d2:45:da:05:46:08:c3:e8:ea:29:1d:83: 76:85:cd:a0:58:ba:ab:32:86:04:c9:90:aa:44:ae:4d:d6:3d: 32:2d:d4:e1:ec:a7:24:a2:d0:ec:c3:9f:22:db:fd:35:a7:c1: e3:87:39:6a:0b:f1:78:05:b1:e3:a8:2b:57:27:f6:13:d9:4c: 36:5f:05:d6:b5:58:0f:3b:af:ca:7a:51:c7:3c:ea:f1:17:d2: ec:04:9f:8a:d4:f5:29:6c:17:f7:49:07:14:74:0e:b1:30:e1: f5:c2:65:a8:35:e9:59:fc:0f:1d:56:58:c8:2b:17:82:7c:60: d9:be:0b:34:2c:be:e2:cd:52:7f:30:ab:31:01:67:28:a8:75: e7:0c:39:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULliwvZZ2Jz2Wv8mtC2iJa7a6Q0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjExMDIwMzA2MzJaFw0yNjExMDMwNTA4MzJaMDMxMTAvBgNV BAMTKDFCREQ3MjFEMTlDNDVBNzUzNUJCODE2Njk3RkQ5REEyQzU5RDRBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZJXEsAqTaSgbk0QlGEWhF3LE lNCLXbgndWizPYz6sQNNxD6NavneSBzRF8/0k3fciYuMPocicokaJ+bfsB2kZ3/l o/XpZGan5gs9stUMTG44jCRAxy/erewZ1P+LPteO6JzaYJSGnApA0ACiczxIg1Tu wMxb9nq3FRHu/0HOY2cYmCmcnkhdFTcT2UV+7mFdZvox26ZxDFkRSwaZzLvh9COn mbvjxwIX3Ol3ra/yzsOnslGusdhiWa5d8yaYWf8WVX7NrpFdzaMjXuh7IuYpk6h5 GTUMJD8l43Zh2uJgNN2IgNyVll3wxfz0V9rPXhdwkE8nbNwDRud51UVjl2blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG91yHRnEWnU1u4Fml/2dosWdSjYwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFShmRdEQRZJDzr9xtqhniriI4aclAlIaLPP a7mhZLfTfQsX0Gy5gCUpMpEbiswffEuFfULpLFd45oGYX6vbJQjtJf/zZwFZFDsh 5zRHoZpIOSFZ4F0gA23feknUNQVQhMonNVUge3F0fhVeyxmbr03ORdJF2gVGCMPo 6ikdg3aFzaBYuqsyhgTJkKpErk3WPTIt1OHspySi0OzDnyLb/TWnweOHOWoL8XgF seOoK1cn9hPZTDZfBda1WA87r8p6Ucc86vEX0uwEn4rU9SlsF/dJBxR0DrEw4fXC Zag16Vn8Dx1WWMgrF4J8YNm+CzQsvuLNUn8wqzEBZyiodecMOWk= -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:46 2026 by rpki-client