$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: EAcwLtPTvkodfePqiXf9z542aICdapA5URhs2374y2o= Subject key identifier: 83:79:95:CE:E7:AE:9F:76:99:A2:B1:4A:19:CF:69:01:B5:8E:EE:35 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 736A4EE6A8351B20ED7919A7B7BAC6D05D6F0CBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 17:29:40 +0000 Manifest this update: Mon 02 Nov 2026 17:24:40 +0000 Manifest next update: Tue 03 Nov 2026 19:22:40 +0000 Files and hashes: 1: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: 5R+lWdXQGghNHY/c2mH0IpdJO2XH5D2XsliQZvMWdWE=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6a:4e:e6:a8:35:1b:20:ed:79:19:a7:b7:ba:c6:d0:5d:6f:0c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Nov 2 17:24:40 2026 GMT Not After : Nov 3 19:22:40 2026 GMT Subject: CN=837995CEE7AE9F7699A2B14A19CF6901B58EEE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:82:e6:1a:82:eb:ef:70:50:8d:66:4b:e0: 83:b8:ce:8d:db:ed:ec:b3:3e:ba:51:fc:b2:b1:79: 33:5b:b7:92:6b:ed:07:d1:fb:6e:5d:f8:48:cc:2e: fb:4b:97:29:55:7f:96:84:5f:ca:cc:85:be:5e:d0: 1b:77:11:8c:df:66:0a:3f:69:73:17:9a:29:5d:ec: 63:9c:7f:14:5c:70:25:03:74:d7:be:4d:d5:a7:34: e7:13:d0:08:f7:d5:45:2e:41:5a:bc:b0:8f:a4:09: 6c:da:4f:c8:82:3e:c5:4e:73:11:f7:6c:47:76:4a: 0e:32:22:81:b8:da:f2:7a:fd:c8:85:4f:97:ce:5a: 60:9a:7a:85:05:2d:16:2b:26:f3:2b:c4:ed:c2:70: 96:93:18:92:8d:c9:9e:2c:46:8d:99:0f:b6:77:ea: c8:c4:49:29:e8:b9:24:44:cb:0d:dc:2d:c6:8c:22: 2a:f5:c6:13:fd:7f:39:f9:c7:20:62:31:26:70:f9: 68:71:67:d2:6b:8c:03:9f:8f:19:3f:71:b0:1a:dc: f8:0d:0d:8b:a2:67:c8:e5:db:5d:7e:ce:f2:94:3a: 48:9c:30:08:51:b3:15:1c:3e:28:7a:f2:dc:81:d4: 59:49:48:e9:9d:34:36:52:15:93:15:19:e3:29:3f: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:79:95:CE:E7:AE:9F:76:99:A2:B1:4A:19:CF:69:01:B5:8E:EE:35 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a9:32:53:33:d5:a2:a3:34:5d:cc:54:12:1d:b1:43:60:73: 45:c9:65:ab:63:34:cc:0e:83:4c:4f:94:04:01:e0:36:c6:6d: c2:1d:c0:e9:56:b9:54:7e:03:7a:11:1c:d9:f4:83:d0:2b:23: 3c:b5:47:0e:d8:a9:75:d5:55:fb:b4:3a:4c:65:58:9d:09:fe: fa:cb:6d:26:44:ca:0f:f2:9d:24:98:1f:dc:c6:d8:56:a8:72: 58:3b:58:5e:58:c7:4d:f3:c6:c1:72:0b:95:ef:e8:6d:ff:0d: 26:6b:a0:ec:f1:9e:f4:78:10:30:6a:11:e3:ca:7f:c9:c5:3f: 5f:d7:ab:64:02:03:f2:77:5d:60:5c:34:f1:a8:fd:db:6c:61: 71:89:19:77:e5:87:df:06:2f:11:68:d7:70:fd:19:37:04:89: 2f:3e:44:62:d0:49:1b:eb:03:d0:2b:fe:19:10:26:c0:c9:63: 9e:4e:23:2d:36:05:e7:bb:06:b7:20:34:e7:1a:52:27:09:62: 4a:a3:37:2b:70:44:03:3d:cb:db:38:2c:51:e1:b8:39:a9:d0: 1b:1d:6c:85:fe:b3:34:f4:fa:de:7a:fc:c2:4c:e5:6b:4b:2c: a1:c6:12:9a:65:7c:8d:3b:c6:bf:1e:e6:d4:ca:41:ef:03:9a: 71:a6:28:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2pO5qg1GyDteRmnt7rG0F1vDL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjExMDIxNzI0NDBaFw0yNjExMDMxOTIyNDBaMDMxMTAvBgNV BAMTKDgzNzk5NUNFRTdBRTlGNzY5OUEyQjE0QTE5Q0Y2OTAxQjU4RUVFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUILmGoLr73BQjWZL4IO4zo3b 7eyzPrpR/LKxeTNbt5Jr7QfR+25d+EjMLvtLlylVf5aEX8rMhb5e0Bt3EYzfZgo/ aXMXmild7GOcfxRccCUDdNe+TdWnNOcT0Aj31UUuQVq8sI+kCWzaT8iCPsVOcxH3 bEd2Sg4yIoG42vJ6/ciFT5fOWmCaeoUFLRYrJvMrxO3CcJaTGJKNyZ4sRo2ZD7Z3 6sjESSnouSREyw3cLcaMIir1xhP9fzn5xyBiMSZw+WhxZ9JrjAOfjxk/cbAa3PgN DYuiZ8jl211+zvKUOkicMAhRsxUcPih68tyB1FlJSOmdNDZSFZMVGeMpP2/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3mVzueun3aZorFKGc9pAbWO7jUwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKypMlMz1aKjNF3MVBIdsUNgc0XJZatjNMwO g0xPlAQB4DbGbcIdwOlWuVR+A3oRHNn0g9ArIzy1Rw7YqXXVVfu0OkxlWJ0J/vrL bSZEyg/ynSSYH9zG2Faoclg7WF5Yx03zxsFyC5Xv6G3/DSZroOzxnvR4EDBqEePK f8nFP1/Xq2QCA/J3XWBcNPGo/dtsYXGJGXflh98GLxFo13D9GTcEiS8+RGLQSRvr A9Ar/hkQJsDJY55OIy02Bee7BrcgNOcaUicJYkqjNytwRAM9y9s4LFHhuDmp0Bsd bIX+szT0+t56/MJM5WtLLKHGEpplfI07xr8e5tTKQe8DmnGmKH8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:52 2026 by rpki-client