$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json) Hash identifier: yrqbNqleJGzxPgnpPHsRQUxl/Dzni2onuYTUUrz56pM= Subject key identifier: 00:08:BC:40:44:57:8C:E3:B1:43:85:FE:CD:96:39:2C:79:4A:33:AA Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E Certificate serial: 4309F6FCD1CB6D55C0BBC1D15BD9C2E787E05A26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 22:56:35 +0000 Manifest this update: Tue 03 Nov 2026 22:51:35 +0000 Manifest next update: Wed 04 Nov 2026 23:19:35 +0000 Files and hashes: 1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=) 2: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: AqxiihsWNTSVqAqye90Vpqf630zwBzqdaOKOEG5hOg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:09:f6:fc:d1:cb:6d:55:c0:bb:c1:d1:5b:d9:c2:e7:87:e0:5a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E Validity Not Before: Nov 3 22:51:35 2026 GMT Not After : Nov 4 23:19:35 2026 GMT Subject: CN=0008BC4044578CE3B14385FECD96392C794A33AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:59:e5:8f:72:87:e6:13:c3:d2:e8:fd:29: d2:65:93:3e:6a:e9:88:8f:91:67:93:19:1c:43:d2: 28:53:3f:a9:c5:c1:d8:15:f2:c0:11:3d:d2:75:13: b3:53:df:48:64:e5:b8:d8:3c:87:3b:00:d7:65:33: a1:e9:7f:cb:05:71:27:f9:cb:b9:d5:e9:c9:33:ee: a9:ee:f1:d6:eb:eb:c2:6f:96:71:28:08:9c:e0:71: 20:77:31:06:bc:85:bb:4c:8c:47:18:b2:64:1b:3b: 5b:fa:b5:3d:39:70:93:c8:a5:5b:3a:bc:41:ef:7e: 76:75:b4:21:79:af:26:d8:36:92:65:91:24:40:12: dd:a1:d7:18:2d:a1:07:db:f3:db:96:8d:d2:58:c7: 2b:0f:b7:ca:ae:a2:c1:be:ee:fc:bc:43:a5:bb:8e: 01:b2:e5:de:3d:cd:75:e1:7b:3c:e2:8b:3f:6d:28: 33:c1:73:5e:a8:b8:44:9c:e8:6e:ba:f2:a2:53:6c: 76:a0:12:d9:26:94:1c:bb:70:da:52:1c:b3:f1:14: a3:8d:72:21:f1:b4:4f:f3:ae:05:75:e7:51:56:22: 03:a1:94:25:13:49:ea:68:30:d8:12:d4:cf:66:d4: 22:b7:ee:2c:3f:bb:30:66:d9:20:4b:31:f5:59:3b: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:BC:40:44:57:8C:E3:B1:43:85:FE:CD:96:39:2C:79:4A:33:AA X509v3 Authority Key Identifier: keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:a1:a3:32:d6:12:7a:11:0a:8c:57:77:94:d8:70:f7:29: 89:e7:c6:a5:a0:21:5a:24:ca:3b:bb:03:49:e2:09:a9:e7:fe: f1:52:22:ca:0b:db:61:20:ed:dc:72:72:c2:bb:f7:45:ec:59: f7:26:97:24:ad:19:82:66:71:4a:fb:da:a8:15:7c:3e:0a:a4: b0:43:7b:2e:54:a3:dc:5c:e8:5c:08:0f:d0:43:a3:ef:5b:95: cb:5e:28:1b:8c:fb:39:75:42:99:9c:24:80:f8:ec:ad:64:fe: 10:18:15:72:cc:a1:2d:a9:7b:70:b2:7a:bd:0c:10:82:a0:15: 42:48:ff:63:e8:88:2f:10:ba:2a:f7:b1:be:d0:4a:91:4e:21: 62:2b:29:f2:52:46:92:b3:d6:34:42:b0:c9:df:bf:62:4c:5f: fc:e3:58:d9:b9:8d:fb:c2:83:be:9d:43:0a:5f:9c:bf:0d:37: 29:a2:5a:ae:05:fb:1e:60:d6:ab:ba:85:2a:84:67:11:5d:f4: e1:28:b2:ee:25:67:82:8f:47:77:93:cd:55:a2:bc:f9:61:ad: f3:f2:c8:18:12:d0:88:11:d2:46:c3:43:2f:44:d2:6c:e2:99: 93:36:68:64:4e:f2:de:ea:cd:37:59:01:ca:18:be:cf:56:6c: 67:90:cb:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwn2/NHLbVXAu8HRW9nC54fgWiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZE NDUwREU4RTAeFw0yNjExMDMyMjUxMzVaFw0yNjExMDQyMzE5MzVaMDMxMTAvBgNV BAMTKDAwMDhCQzQwNDQ1NzhDRTNCMTQzODVGRUNEOTYzOTJDNzk0QTMzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWVnlj3KH5hPD0uj9KdJlkz5q 6YiPkWeTGRxD0ihTP6nFwdgV8sARPdJ1E7NT30hk5bjYPIc7ANdlM6Hpf8sFcSf5 y7nV6ckz7qnu8dbr68JvlnEoCJzgcSB3MQa8hbtMjEcYsmQbO1v6tT05cJPIpVs6 vEHvfnZ1tCF5rybYNpJlkSRAEt2h1xgtoQfb89uWjdJYxysPt8quosG+7vy8Q6W7 jgGy5d49zXXhezziiz9tKDPBc16ouESc6G668qJTbHagEtkmlBy7cNpSHLPxFKON ciHxtE/zrgV151FWIgOhlCUTSepoMNgS1M9m1CK37iw/uzBm2SBLMfVZOyStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAAi8QERXjOOxQ4X+zZY5LHlKM6owHwYDVR0j BBgwFoAUHU4htbBv6aBGQ6cCxyuWFtRQ3o4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVC MDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZENDUwREU4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDRFMjFCNUIwNkZFOUEwNDY0M0E3MDJDNzJCOTYxNkQ0NTBE RThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2 MTZENDUwREU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+2oaMy1hJ6EQqMV3eU2HD3KYnnxqWgIVok yju7A0niCann/vFSIsoL22Eg7dxycsK790XsWfcmlyStGYJmcUr72qgVfD4KpLBD ey5Uo9xc6FwID9BDo+9blcteKBuM+zl1QpmcJID47K1k/hAYFXLMoS2pe3Cyer0M EIKgFUJI/2PoiC8Quir3sb7QSpFOIWIrKfJSRpKz1jRCsMnfv2JMX/zjWNm5jfvC g76dQwpfnL8NNymiWq4F+x5g1qu6hSqEZxFd9OEosu4lZ4KPR3eTzVWivPlhrfPy yBgS0IgR0kbDQy9E0mzimZM2aGRO8t7qzTdZAcoYvs9WbGeQy2A= -----END CERTIFICATE-----Generated at Wed Nov 4 15:32:28 2026 by rpki-client