$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft (raw, json) Hash identifier: UJnso1qScC+cg/8T4Plz/d0aLdAKY1tM69CxE3e296M= Subject key identifier: 32:80:F1:BE:BE:DA:ED:BC:4C:1C:0D:EA:89:1E:B3:5F:31:75:9F:DA Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Certificate issuer: /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Certificate serial: 5B568B375770E128BE9EA1F86AD50556307F663C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 10:10:26 +0000 Manifest this update: Mon 02 Nov 2026 10:05:26 +0000 Manifest next update: Tue 03 Nov 2026 10:39:26 +0000 Files and hashes: 1: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl (hash: E8qjzhyhyahb+QzTPRw+5vd4wmq+l9/LTh/jwCgM61I=) 2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:56:8b:37:57:70:e1:28:be:9e:a1:f8:6a:d5:05:56:30:7f:66:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Validity Not Before: Nov 2 10:05:26 2026 GMT Not After : Nov 3 10:39:26 2026 GMT Subject: CN=3280F1BEBEDAEDBC4C1C0DEA891EB35F31759FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:48:9f:0c:d7:38:a6:39:f1:82:d7:aa:06: 00:85:70:13:61:de:7e:e3:4c:f8:0e:cf:83:47:ef: 7b:ac:46:33:88:5e:d2:31:ec:07:f4:2b:1f:ce:2f: b8:00:4e:ae:14:c9:48:ad:16:cb:97:91:e1:ac:56: c4:46:2c:dc:b7:1a:ec:d9:2e:7a:f4:a8:e3:f1:5e: b7:51:74:93:50:a8:30:7d:b4:cb:4c:e9:7f:41:12: 24:9f:11:45:27:19:6b:fa:4a:9a:70:4a:45:54:65: 1a:ca:e5:9b:90:f6:b9:81:a4:b0:fa:cc:cd:4f:a0: af:d3:b6:7f:c8:d4:d2:89:da:13:7f:96:9e:b9:69: 84:92:b3:de:ca:c9:da:ce:a6:65:35:7b:85:29:be: 30:ca:57:cd:0f:64:b1:c6:74:1f:14:53:a4:9b:d7: 71:83:d6:97:c1:26:95:40:f4:a2:d5:86:e8:1f:c7: 26:a3:eb:65:0a:b8:c8:b3:57:02:87:a9:89:26:7d: 7a:33:0d:8e:1f:fc:ce:fa:35:7a:66:3d:ce:36:39: 6a:58:5e:3e:35:87:36:b3:f0:b4:1b:27:18:d6:5b: 11:0b:6e:c1:ae:a7:73:84:d4:42:5c:8f:93:02:40: fa:eb:07:24:cc:a4:6c:fe:bd:67:d8:09:24:fd:34: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:80:F1:BE:BE:DA:ED:BC:4C:1C:0D:EA:89:1E:B3:5F:31:75:9F:DA X509v3 Authority Key Identifier: keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e5:45:ae:6c:6a:b2:41:4b:db:6d:12:b1:53:3e:34:07:04: 43:d6:d3:5b:dc:dd:7f:3f:a8:aa:76:f4:24:56:74:f2:02:af: 97:d2:8e:ff:3c:96:f3:cd:f8:22:7b:37:cc:35:af:7d:16:73: 7d:b2:87:22:e2:3d:2e:e3:d7:2c:38:78:da:ec:a6:d5:07:55: e6:85:96:c9:7c:b0:ae:c3:98:8b:75:8a:31:be:59:d3:12:5d: b2:d9:1f:95:21:0b:4d:b0:19:7c:0a:19:33:53:21:ab:40:1a: 76:f7:a2:ee:78:05:9f:28:9b:48:7a:ea:e2:08:80:e9:0e:4d: 38:c8:8b:66:17:bb:14:dc:58:af:48:a9:9c:b2:90:5b:00:26: b2:6c:80:47:fe:b0:20:c4:60:79:64:59:ef:83:42:58:55:5b: 90:9b:94:77:d9:db:6b:0b:a1:b1:ec:61:f1:81:51:76:30:19: 36:bf:7b:e1:4a:87:7c:03:2e:fc:45:4e:72:30:df:bf:96:db: b8:b8:91:7d:f1:7c:07:3c:10:03:86:15:a4:87:93:91:a9:12: 2b:3b:fd:74:1a:3c:17:c8:4b:7e:5b:88:c8:2f:68:1b:3c:8f: e4:31:f3:fd:43:d3:ad:ee:fd:a7:d7:af:5a:7e:d2:c9:5e:a2: 10:32:6d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1aLN1dw4Si+nqH4atUFVjB/ZjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZENjA3 MDBBRjYxRjAeFw0yNjExMDIxMDA1MjZaFw0yNjExMDMxMDM5MjZaMDMxMTAvBgNV BAMTKDMyODBGMUJFQkVEQUVEQkM0QzFDMERFQTg5MUVCMzVGMzE3NTlGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAUifDNc4pjnxgteqBgCFcBNh 3n7jTPgOz4NH73usRjOIXtIx7Af0Kx/OL7gATq4UyUitFsuXkeGsVsRGLNy3GuzZ Lnr0qOPxXrdRdJNQqDB9tMtM6X9BEiSfEUUnGWv6SppwSkVUZRrK5ZuQ9rmBpLD6 zM1PoK/Ttn/I1NKJ2hN/lp65aYSSs97KydrOpmU1e4UpvjDKV80PZLHGdB8UU6Sb 13GD1pfBJpVA9KLVhugfxyaj62UKuMizVwKHqYkmfXozDY4f/M76NXpmPc42OWpY Xj41hzaz8LQbJxjWWxELbsGup3OE1EJcj5MCQPrrByTMpGz+vWfYCST9NGL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoDxvr7a7bxMHA3qiR6zXzF1n9owHwYDVR0j BBgwFoAUGguw3cUKSCJZWucY32RtYHAK9h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjMDljOWUtZmU4YS00OTg5LWI1YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERD NTBBNDgyMjU5NUFFNzE4REY2NDZENjA3MDBBRjYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTBCQjBEREM1MEE0ODIyNTk1QUU3MThERjY0NkQ2MDcwMEFG NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZE NjA3MDBBRjYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATlRa5sarJBS9ttErFTPjQHBEPW01vc3X8/ qKp29CRWdPICr5fSjv88lvPN+CJ7N8w1r30Wc32yhyLiPS7j1yw4eNrsptUHVeaF lsl8sK7DmIt1ijG+WdMSXbLZH5UhC02wGXwKGTNTIatAGnb3ou54BZ8om0h66uII gOkOTTjIi2YXuxTcWK9IqZyykFsAJrJsgEf+sCDEYHlkWe+DQlhVW5CblHfZ22sL obHsYfGBUXYwGTa/e+FKh3wDLvxFTnIw37+W27i4kX3xfAc8EAOGFaSHk5GpEis7 /XQaPBfIS35biMgvaBs8j+Qx8/1D063u/afXr1p+0sleohAybR4= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:52 2026 by rpki-client