$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: pHNPCWk1gA66CA9RAKq4lwK0ps/Js/KJPH+hSZjFCKE= Subject key identifier: B2:6A:97:5A:08:9E:81:C7:5E:06:56:A4:2D:20:78:60:8A:F7:97:8B Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 7FA13CF4AF8D74A1A96B90DA5A8D325F34E51CAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: F6 Signing time: Wed 04 Nov 2026 05:40:08 +0000 Manifest this update: Wed 04 Nov 2026 05:35:08 +0000 Manifest next update: Thu 05 Nov 2026 08:18:08 +0000 Files and hashes: 1: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) 2: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: uVXdgms6ueoF2SUuU9BeDWHpikPHjnZNak3nin3I/b8=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a1:3c:f4:af:8d:74:a1:a9:6b:90:da:5a:8d:32:5f:34:e5:1c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Nov 4 05:35:08 2026 GMT Not After : Nov 5 08:18:08 2026 GMT Subject: CN=B26A975A089E81C75E0656A42D2078608AF7978B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:48:b0:f7:e7:c7:c9:9a:6e:5d:74:13:8c: b1:83:55:32:1d:9c:cc:2c:d7:f8:90:70:69:c0:99: 24:07:05:8d:4a:38:0d:3c:ea:63:26:a7:93:12:c6: a2:65:a1:ba:13:4b:d2:8a:22:e0:26:fc:c2:bc:f3: c7:06:1b:92:c7:e3:18:87:f6:27:38:61:b5:6c:89: f9:3b:7e:35:3e:b6:6a:f4:ca:98:43:d2:a2:bc:a6: e7:39:fe:f2:df:56:03:4c:77:32:57:e6:e0:33:93: b4:9a:c6:64:55:d1:a7:07:eb:83:e0:89:25:8f:ee: 80:63:64:af:a9:e6:d1:81:42:95:0c:81:e8:ed:24: 2d:37:be:01:0e:c6:2c:cb:a0:bb:e2:54:e0:a9:2c: 44:b9:d3:d0:e0:93:02:92:cd:46:30:90:65:27:9a: c3:6c:3e:64:bf:78:e6:92:58:06:75:45:3d:54:34: c4:7f:b0:4d:68:54:8f:a8:2c:17:af:48:94:1e:48: df:f8:67:a0:c9:e1:34:e5:b8:a7:96:7f:77:ed:f3: ed:00:f9:5f:60:b9:e5:11:a8:e9:f2:8f:6c:23:6e: e5:5b:07:46:c9:14:ac:9b:b3:01:30:9d:e5:bb:fc: e0:f3:8c:80:8d:70:fa:1c:13:0a:8d:c8:92:cc:2a: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6A:97:5A:08:9E:81:C7:5E:06:56:A4:2D:20:78:60:8A:F7:97:8B X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:96:cb:b6:6d:ff:36:79:05:f4:fe:42:3c:a1:ba:7a:1b:0c: 0f:61:b0:0c:4b:b2:d8:9d:9e:e7:49:20:db:0c:25:c3:3a:17: 57:69:12:d3:71:11:56:ec:ff:70:4f:30:a2:e9:9b:88:08:86: f1:fb:4a:0c:5e:ec:d8:c5:ff:ce:0f:b1:af:07:c7:2e:92:69: e7:d0:06:0f:30:89:30:b7:fa:37:29:e5:b9:cb:e8:e9:c8:f1: 06:1a:e6:a8:3b:a1:6f:a2:45:8d:94:be:15:ac:51:83:54:46: cf:60:8b:9b:c8:76:80:6e:e7:6f:d8:22:be:17:a8:07:2a:66: 33:86:5b:53:8a:46:cc:16:ac:16:0b:31:e2:f5:50:85:3b:ec: 16:d3:65:6e:e4:5b:cc:ec:58:23:5b:40:a7:e8:7a:2e:1c:f7: 89:0e:91:9b:a6:1a:2d:1b:e3:a0:90:ae:b5:42:08:20:6f:f8: 5b:5d:82:69:06:5c:ea:8e:37:76:68:52:de:7a:9a:5e:e7:34: f8:65:46:fa:1c:e6:33:e1:d8:fa:19:43:85:61:9b:dd:23:b6: 69:3a:5d:2c:8b:2f:22:a4:eb:5f:c0:92:d8:8b:1f:b7:ab:1e: 67:3e:11:dc:83:41:20:90:7d:72:c6:2e:f7:5e:8f:25:fc:58: 97:9a:2d:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6E89K+NdKGpa5DaWo0yXzTlHK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjExMDQwNTM1MDhaFw0yNjExMDUwODE4MDhaMDMxMTAvBgNV BAMTKEIyNkE5NzVBMDg5RTgxQzc1RTA2NTZBNDJEMjA3ODYwOEFGNzk3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0p0iw9+fHyZpuXXQTjLGDVTId nMws1/iQcGnAmSQHBY1KOA086mMmp5MSxqJloboTS9KKIuAm/MK888cGG5LH4xiH 9ic4YbVsifk7fjU+tmr0yphD0qK8puc5/vLfVgNMdzJX5uAzk7SaxmRV0acH64Pg iSWP7oBjZK+p5tGBQpUMgejtJC03vgEOxizLoLviVOCpLES509DgkwKSzUYwkGUn msNsPmS/eOaSWAZ1RT1UNMR/sE1oVI+oLBevSJQeSN/4Z6DJ4TTluKeWf3ft8+0A +V9gueURqOnyj2wjbuVbB0bJFKybswEwneW7/ODzjICNcPocEwqNyJLMKkAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmqXWgiegcdeBlakLSB4YIr3l4swHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeWy7Zt/zZ5BfT+QjyhunobDA9hsAxLstid nudJINsMJcM6F1dpEtNxEVbs/3BPMKLpm4gIhvH7Sgxe7NjF/84Psa8Hxy6SaefQ Bg8wiTC3+jcp5bnL6OnI8QYa5qg7oW+iRY2UvhWsUYNURs9gi5vIdoBu52/YIr4X qAcqZjOGW1OKRswWrBYLMeL1UIU77BbTZW7kW8zsWCNbQKfoei4c94kOkZumGi0b 46CQrrVCCCBv+FtdgmkGXOqON3ZoUt56ml7nNPhlRvoc5jPh2PoZQ4Vhm90jtmk6 XSyLLyKk61/AktiLH7erHmc+EdyDQSCQfXLGLvdejyX8WJeaLRA= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:47 2026 by rpki-client