$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: oDWsZKcx1de75+8Yohphw9LGUQvByWvE+aiPqYZE9Jo= Subject key identifier: 62:14:41:C9:5F:CA:B3:A5:E9:B0:00:3F:7D:D6:3B:4B:28:E0:DA:F1 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 0855BE65862F923CAB680484900D01FE80E0A13B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 14:40:41 +0000 Manifest this update: Sun 01 Nov 2026 14:35:41 +0000 Manifest next update: Mon 02 Nov 2026 14:49:41 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: 4SxrPhzaZjbcneRQfmLff8FZ/PmsKJGMaOc1VYogrIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:55:be:65:86:2f:92:3c:ab:68:04:84:90:0d:01:fe:80:e0:a1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Nov 1 14:35:41 2026 GMT Not After : Nov 2 14:49:41 2026 GMT Subject: CN=621441C95FCAB3A5E9B0003F7DD63B4B28E0DAF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:3a:6b:55:5f:25:b3:ec:f1:70:09:d2:3c: 21:82:60:5f:99:8a:50:4d:17:17:fe:1f:cb:fd:38: 94:e2:d7:74:d3:ad:80:c3:cc:c4:e5:dd:9c:95:f5: b4:9d:69:b1:64:37:9e:8d:b8:aa:ef:81:1b:95:cf: d7:de:5b:af:bc:5d:6c:d7:c0:19:54:fd:2e:8a:3a: 0d:0e:52:9a:8b:d4:90:28:62:9e:7a:fa:c8:79:68: 2d:d0:b7:7f:53:f4:d8:d7:67:63:b3:0c:75:ba:16: 45:a0:82:26:5a:ee:13:ad:7c:b4:f9:7e:96:d9:ab: a7:52:59:0f:32:44:6c:d9:4c:71:d5:7a:34:9f:5d: 2f:ba:47:c4:9b:44:87:f2:0f:58:ee:b4:e1:13:af: 86:57:17:63:e1:1f:e8:1b:6b:ab:fc:10:4d:4c:be: 3d:7d:dc:03:fd:2f:9a:ca:45:4f:90:e7:29:fd:ca: 78:6a:bf:01:1b:18:c6:e1:49:76:01:02:46:6c:90: bf:21:fd:01:b0:73:ac:86:c7:c7:b5:7e:9b:e5:58: 8b:71:d4:b2:6c:d4:82:5b:10:bc:fc:ad:6e:94:f8: 4a:b9:6c:47:29:c7:d7:85:e4:f8:eb:27:e0:92:5e: 4e:b0:e2:8b:a5:00:64:3e:68:05:54:e8:95:32:2c: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:14:41:C9:5F:CA:B3:A5:E9:B0:00:3F:7D:D6:3B:4B:28:E0:DA:F1 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:87:0a:b8:a0:6d:7a:0c:fd:89:ae:e2:76:06:56:56:92:da: 8b:4c:fd:bf:7b:ca:b7:93:92:b3:37:28:05:9a:0c:27:4b:db: 27:dd:1d:9b:e6:d9:63:b1:a7:f7:e8:fd:eb:75:18:b1:43:b8: ec:51:3e:3c:4d:e7:02:64:55:5d:69:82:9d:f8:d5:f2:87:99: 70:20:99:c8:c4:6e:ea:c8:75:5b:9a:8e:37:43:59:2a:10:86: bd:41:80:ba:a1:25:f7:4b:36:60:32:30:c2:4b:25:ea:74:27: 80:83:1c:bb:f8:29:c5:25:44:a9:3a:eb:70:3c:0e:b5:d0:99: 15:d7:39:ce:ac:65:7a:1a:0c:24:4c:56:fe:e2:00:e1:ba:45: 37:4d:1c:b8:b0:ae:fb:9b:f8:95:6c:2f:ca:38:3f:ed:58:b1: 48:8a:3b:6d:99:c4:3a:df:bd:d1:ac:80:eb:79:3d:cb:40:5b: 24:a9:62:f2:2f:33:98:ef:92:84:22:f9:7a:86:b7:4b:5c:7f: 20:24:8a:00:c6:e2:d5:a1:9e:4a:4b:a0:43:fc:c4:9a:c5:85: 6e:21:3a:a5:4a:9d:dd:b9:ed:ee:3b:23:c9:1c:3f:32:2e:bf: 94:91:4b:18:48:5c:b3:11:40:3f:48:73:9a:b1:ee:6a:59:06: 58:d6:15:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFW+ZYYvkjyraASEkA0B/oDgoTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjExMDExNDM1NDFaFw0yNjExMDIxNDQ5NDFaMDMxMTAvBgNV BAMTKDYyMTQ0MUM5NUZDQUIzQTVFOUIwMDAzRjdERDYzQjRCMjhFMERBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLTprVV8ls+zxcAnSPCGCYF+Z ilBNFxf+H8v9OJTi13TTrYDDzMTl3ZyV9bSdabFkN56NuKrvgRuVz9feW6+8XWzX wBlU/S6KOg0OUpqL1JAoYp56+sh5aC3Qt39T9NjXZ2OzDHW6FkWggiZa7hOtfLT5 fpbZq6dSWQ8yRGzZTHHVejSfXS+6R8SbRIfyD1jutOETr4ZXF2PhH+gba6v8EE1M vj193AP9L5rKRU+Q5yn9ynhqvwEbGMbhSXYBAkZskL8h/QGwc6yGx8e1fpvlWItx 1LJs1IJbELz8rW6U+Eq5bEcpx9eF5PjrJ+CSXk6w4oulAGQ+aAVU6JUyLMspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhRByV/Ks6XpsAA/fdY7Syjg2vEwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCHCrigbXoM/Ymu4nYGVlaS2otM/b97yreT krM3KAWaDCdL2yfdHZvm2WOxp/fo/et1GLFDuOxRPjxN5wJkVV1pgp341fKHmXAg mcjEburIdVuajjdDWSoQhr1BgLqhJfdLNmAyMMJLJep0J4CDHLv4KcUlRKk663A8 DrXQmRXXOc6sZXoaDCRMVv7iAOG6RTdNHLiwrvub+JVsL8o4P+1YsUiKO22ZxDrf vdGsgOt5PctAWySpYvIvM5jvkoQi+XqGt0tcfyAkigDG4tWhnkpLoEP8xJrFhW4h OqVKnd257e47I8kcPzIuv5SRSxhIXLMRQD9Ic5qx7mpZBljWFQ4= -----END CERTIFICATE-----Generated at Mon Nov 2 07:28:56 2026 by rpki-client