$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: nGvUbW7kSUUE6V1jE98u0M4D5FV4h0hBsJOaJc1H3Bo= Subject key identifier: A4:5D:D0:1C:92:AC:8D:88:60:B5:25:61:37:29:0D:FD:97:E4:7E:03 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 6B51B2A4FE0E6CC1ADA04C26E40F041847B9099D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 10:46:13 +0000 Manifest this update: Mon 02 Nov 2026 10:41:13 +0000 Manifest next update: Tue 03 Nov 2026 12:31:13 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) 3: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: iuZd7VwZ4/bgVwQ1eDDF70p1z0MvXNvHPiM3F0P9b0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:51:b2:a4:fe:0e:6c:c1:ad:a0:4c:26:e4:0f:04:18:47:b9:09:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Nov 2 10:41:13 2026 GMT Not After : Nov 3 12:31:13 2026 GMT Subject: CN=A45DD01C92AC8D8860B5256137290DFD97E47E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:51:21:9d:32:02:8a:c1:f6:08:e6:03:ea: 9b:c1:38:21:7c:ff:01:df:c2:ca:19:05:e3:66:eb: cb:61:06:80:0f:12:a7:ec:04:06:f8:5a:b8:70:c8: 19:ad:9d:e9:13:e3:af:8b:62:5c:e1:15:95:70:34: e7:dc:ab:43:4c:7b:1c:1b:07:92:7a:12:60:44:41: 80:73:7d:4c:26:9e:ad:d3:cf:20:32:17:75:e5:8d: ad:50:2e:d8:5b:07:c6:2b:c3:48:26:4d:2a:a6:e4: 77:2b:87:50:ba:43:a2:d2:86:28:71:26:b4:dc:f9: d9:53:48:a4:a6:18:ba:90:15:51:47:03:17:09:6b: 8f:61:95:06:58:ec:02:7b:1b:8b:07:e3:99:2b:04: c2:e4:8d:fa:f3:76:2c:53:48:11:12:25:e4:09:76: 26:f2:29:bf:b5:ef:a3:c3:61:18:01:72:70:3d:41: ae:93:9f:40:4f:26:70:56:77:59:ec:5c:5d:01:e2: c5:07:f0:65:fe:3a:71:e7:54:8d:58:c3:dc:27:d0: 9d:e9:49:4c:f1:e1:10:4a:5d:e8:4b:d1:df:54:18: 12:0a:78:e1:59:b0:31:d8:1d:a4:a7:17:db:0a:c6: d1:17:43:81:b7:4f:e2:f1:04:fc:6e:62:59:7b:2b: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5D:D0:1C:92:AC:8D:88:60:B5:25:61:37:29:0D:FD:97:E4:7E:03 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5b:56:87:6b:46:cc:80:4f:03:38:5f:74:4b:7b:15:14:14: 66:9a:40:73:91:08:f4:9a:90:5e:3b:95:e1:a8:6c:83:df:47: 37:a2:d6:8e:33:21:32:3b:c8:b4:a8:78:ff:be:3a:2f:e7:d3: 0c:2d:ac:c3:c1:53:4b:7a:de:5d:ca:64:5d:d2:0e:8a:b2:f5: f4:d4:d5:e2:83:25:15:44:a2:66:f3:c1:59:3a:c2:b9:d4:3f: 64:b4:f5:65:8c:dd:05:79:52:a0:30:1a:c8:60:ce:d4:c5:38: 12:e0:36:76:6f:0d:75:52:34:1f:20:bc:ca:0c:21:6f:0b:c4: 3f:b6:fb:b5:36:9d:5e:1e:09:bb:c8:7c:83:2d:20:e2:c7:3b: 85:1d:00:36:db:12:5f:f1:76:fd:54:fd:89:65:cf:f4:e1:a6: 1c:56:a6:65:12:73:da:1c:f4:d4:1b:8b:4c:28:d6:4f:5f:0e: b5:01:ab:48:c6:d0:5e:72:64:b7:13:58:3c:4c:9a:2e:33:9a: 95:49:a3:bf:fc:ea:a4:df:f5:ee:68:62:bc:d8:68:ba:71:e9: 2d:0a:ba:76:2b:eb:35:d6:ce:cf:3e:6c:00:9b:09:c8:d1:d9: 2a:80:4f:ff:a2:f1:22:8d:61:5d:ec:88:f7:39:79:b4:22:3f: bc:d3:a5:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1GypP4ObMGtoEwm5A8EGEe5CZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjExMDIxMDQxMTNaFw0yNjExMDMxMjMxMTNaMDMxMTAvBgNV BAMTKEE0NUREMDFDOTJBQzhEODg2MEI1MjU2MTM3MjkwREZEOTdFNDdFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF21EhnTICisH2COYD6pvBOCF8 /wHfwsoZBeNm68thBoAPEqfsBAb4WrhwyBmtnekT46+LYlzhFZVwNOfcq0NMexwb B5J6EmBEQYBzfUwmnq3TzyAyF3Xlja1QLthbB8Yrw0gmTSqm5Hcrh1C6Q6LShihx JrTc+dlTSKSmGLqQFVFHAxcJa49hlQZY7AJ7G4sH45krBMLkjfrzdixTSBESJeQJ dibyKb+176PDYRgBcnA9Qa6Tn0BPJnBWd1nsXF0B4sUH8GX+OnHnVI1Yw9wn0J3p SUzx4RBKXehL0d9UGBIKeOFZsDHYHaSnF9sKxtEXQ4G3T+LxBPxuYll7KwGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpF3QHJKsjYhgtSVhNykN/ZfkfgMwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9bVodrRsyATwM4X3RLexUUFGaaQHORCPSa kF47leGobIPfRzei1o4zITI7yLSoeP++Oi/n0wwtrMPBU0t63l3KZF3SDoqy9fTU 1eKDJRVEombzwVk6wrnUP2S09WWM3QV5UqAwGshgztTFOBLgNnZvDXVSNB8gvMoM IW8LxD+2+7U2nV4eCbvIfIMtIOLHO4UdADbbEl/xdv1U/Yllz/ThphxWpmUSc9oc 9NQbi0wo1k9fDrUBq0jG0F5yZLcTWDxMmi4zmpVJo7/86qTf9e5oYrzYaLpx6S0K unYr6zXWzs8+bACbCcjR2SqAT/+i8SKNYV3siPc5ebQiP7zTpS0= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:20 2026 by rpki-client