$ rpki-client -vvvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: NBBOC441rXVtWBD0Ms9qJJFzz+u1WKZKlbmzBSgkTcI= Subject key identifier: 88:59:22:35:32:53:E8:2E:29:16:DB:FC:2C:15:66:2E:AD:15:AC:CC Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 212F21D626A1B49DB882599BDA569C62DD34B892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 13:19:48 +0000 Manifest this update: Wed 04 Nov 2026 13:14:48 +0000 Manifest next update: Thu 05 Nov 2026 17:02:48 +0000 Files and hashes: 1: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: d0lfcNYGqZHOUuBy4sduwsCjE4ygM+lpX9rdKDKlCtQ=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 3: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) 4: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2f:21:d6:26:a1:b4:9d:b8:82:59:9b:da:56:9c:62:dd:34:b8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: Nov 4 13:14:48 2026 GMT Not After : Nov 5 17:02:48 2026 GMT Subject: CN=885922353253E82E2916DBFC2C15662EAD15ACCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:58:3f:63:71:f6:da:e6:92:a3:c0:bc:74: 93:3f:a9:02:73:85:5f:34:c8:6a:d7:6a:b8:91:85: 73:c2:36:2e:d2:5d:d5:ec:a5:b2:9a:7d:36:f3:84: c9:1f:3e:0c:95:ad:90:8d:55:4e:d7:a7:9b:28:16: 2a:69:46:c4:45:31:85:5b:95:12:14:1c:d4:0c:65: ae:3c:17:c5:42:07:ef:ad:d9:14:c1:84:8b:c9:80: 01:41:c3:6c:be:14:10:54:4d:31:1b:1c:0f:4d:36: 2e:c9:21:4f:50:73:9b:c9:cd:d0:82:61:dd:d2:c6: d5:d5:cb:85:f9:0d:7a:ca:d4:f0:5e:9b:2e:14:5e: 1c:f6:c5:ac:b5:a6:eb:f3:e6:66:bd:c5:97:37:64: ea:c0:5e:ee:1f:9b:e6:03:39:84:ec:4d:b7:0c:f7: 38:b5:76:e9:c5:c5:77:fb:82:57:77:ee:e6:81:96: fc:0f:ba:06:40:9c:8e:f4:a6:55:78:f8:c5:3a:e7: 28:bf:95:39:1b:ad:27:fc:5b:09:ac:3f:ff:3c:8c: 63:ee:eb:e3:1f:fa:ae:98:75:ae:56:58:01:6b:45: d3:44:a6:0d:c7:24:5f:63:15:c3:16:9f:79:c9:10: c1:8d:91:e5:a2:1a:da:df:ae:64:2a:01:49:7b:92: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:59:22:35:32:53:E8:2E:29:16:DB:FC:2C:15:66:2E:AD:15:AC:CC X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:79:19:99:cf:74:d7:42:12:6b:b4:f1:a7:20:2c:2c:50:37: 8f:29:d2:0d:83:48:c9:57:aa:99:36:c5:b2:fb:71:bb:3a:80: 57:37:98:b4:e8:92:e1:58:51:49:1d:b5:23:bf:98:f6:00:3f: ec:fa:12:36:77:82:e6:89:df:28:08:a3:cf:cb:df:c0:a1:1e: 37:41:79:a2:04:c1:37:ab:54:87:35:73:7d:25:7f:3e:e7:4a: 99:0d:fb:0e:69:2e:e3:77:46:1b:6f:2f:56:c8:27:0a:d9:5d: 77:7e:9f:e6:75:ef:f5:1d:2e:8d:15:39:51:9a:8a:4d:c8:a1: 50:af:d4:c2:28:4b:00:c4:e2:38:53:fb:00:a0:de:a2:b5:25: aa:1b:01:cb:45:c3:15:41:99:94:ad:22:a7:14:cb:6a:28:d0: c1:93:d1:e2:4f:03:2d:62:ff:10:ce:e6:63:fb:36:98:c3:44: bd:65:54:8c:07:6d:1a:a7:ec:2b:f5:53:51:f2:0f:fc:2e:77: 32:94:22:ad:2b:47:25:cb:40:7d:c6:2d:80:a9:c2:68:e9:7f: 6b:54:8d:c2:f3:60:f4:2c:26:39:11:21:54:60:f4:94:17:65: 81:d3:e7:d4:13:57:06:3f:06:99:bf:2d:4a:6b:37:b3:6e:dd: 1b:06:fb:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIS8h1iahtJ24glmb2lacYt00uJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjExMDQxMzE0NDhaFw0yNjExMDUxNzAyNDhaMDMxMTAvBgNV BAMTKDg4NTkyMjM1MzI1M0U4MkUyOTE2REJGQzJDMTU2NjJFQUQxNUFDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4Vg/Y3H22uaSo8C8dJM/qQJz hV80yGrXariRhXPCNi7SXdXspbKafTbzhMkfPgyVrZCNVU7Xp5soFippRsRFMYVb lRIUHNQMZa48F8VCB++t2RTBhIvJgAFBw2y+FBBUTTEbHA9NNi7JIU9Qc5vJzdCC Yd3SxtXVy4X5DXrK1PBemy4UXhz2xay1puvz5ma9xZc3ZOrAXu4fm+YDOYTsTbcM 9zi1dunFxXf7gld37uaBlvwPugZAnI70plV4+MU65yi/lTkbrSf8WwmsP/88jGPu 6+Mf+q6Yda5WWAFrRdNEpg3HJF9jFcMWn3nJEMGNkeWiGtrfrmQqAUl7kmn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiFkiNTJT6C4pFtv8LBVmLq0VrMwwHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF95GZnPdNdCEmu08acgLCxQN48p0g2DSMlX qpk2xbL7cbs6gFc3mLTokuFYUUkdtSO/mPYAP+z6EjZ3guaJ3ygIo8/L38ChHjdB eaIEwTerVIc1c30lfz7nSpkN+w5pLuN3RhtvL1bIJwrZXXd+n+Z17/UdLo0VOVGa ik3IoVCv1MIoSwDE4jhT+wCg3qK1JaobActFwxVBmZStIqcUy2oo0MGT0eJPAy1i /xDO5mP7NpjDRL1lVIwHbRqn7Cv1U1HyD/wudzKUIq0rRyXLQH3GLYCpwmjpf2tU jcLzYPQsJjkRIVRg9JQXZYHT59QTVwY/Bpm/LUprN7Nu3RsG+68= -----END CERTIFICATE-----Generated at Wed Nov 4 20:24:02 2026 by rpki-client