$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: vmqn72gC69ayoCpKl4beA+AcOm+jK8hxlY1faosnCys= Subject key identifier: 15:3A:B3:CA:78:47:10:60:C6:07:71:E4:28:D2:61:85:41:DD:D5:AB Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 164781F05C24E0103DB0532A41A209A153534DD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 06:51:07 +0000 Manifest this update: Mon 02 Nov 2026 06:46:07 +0000 Manifest next update: Tue 03 Nov 2026 09:38:07 +0000 Files and hashes: 1: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: Fh/HNSy1Qo5yi+StZwaIJ/25ofTk71IB8fGCCmraQv0=) 2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:47:81:f0:5c:24:e0:10:3d:b0:53:2a:41:a2:09:a1:53:53:4d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Nov 2 06:46:07 2026 GMT Not After : Nov 3 09:38:07 2026 GMT Subject: CN=153AB3CA78471060C60771E428D2618541DDD5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:10:50:e7:55:a3:46:39:32:62:27:d6:fd:ea: c8:0e:ba:df:50:34:06:6f:e2:38:64:46:cc:87:74: 4d:5e:25:24:89:3b:6a:89:5c:b5:89:61:35:4d:e9: a7:82:35:14:94:aa:eb:43:e6:6b:0e:b6:dd:39:71: c3:6f:98:90:a3:c7:fd:23:73:b2:96:71:e5:95:ec: 3f:8c:73:23:20:b9:69:fb:2a:40:e4:dd:d5:06:40: 30:eb:90:61:4a:57:43:ae:2a:e9:95:77:21:dd:cc: 3e:77:93:e5:76:9b:b7:22:37:5c:26:9f:7e:31:f5: bf:25:64:4a:c0:22:89:33:1f:77:84:a5:b1:1f:91: ff:2a:4c:ee:14:5e:15:6f:ce:68:8e:40:f5:95:83: 30:ee:bb:e7:98:d4:19:07:c7:2d:7e:b9:71:4c:04: a1:41:70:e2:b8:1b:89:96:11:30:a7:32:1f:57:10: 5c:14:da:48:f5:36:bf:45:5a:a9:2a:f8:69:b1:7f: 8b:3e:e4:01:ac:3b:1f:4d:e4:49:62:ef:0f:1c:ff: 6d:4a:ba:09:fe:f4:07:74:a2:79:69:f9:ec:54:c1: 94:d5:1f:3e:94:b4:14:95:28:f7:77:bd:c4:ab:63: b8:49:4c:1b:fb:e0:01:b1:e0:10:28:35:2a:7e:ac: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:B3:CA:78:47:10:60:C6:07:71:E4:28:D2:61:85:41:DD:D5:AB X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d9:1b:b3:bc:91:9b:ac:b9:13:35:5e:ca:fb:78:e1:3f:c8: 41:4b:aa:df:d4:3f:04:dc:e1:6a:78:25:c8:35:45:68:7e:a3: 41:11:a2:44:1b:f5:df:83:32:24:0b:08:86:4b:bb:9b:23:35: a4:7a:55:95:f8:90:96:a6:c0:54:84:42:0e:88:ea:47:e6:3c: 55:30:5d:20:c8:4b:69:c6:ca:ea:0e:18:82:47:24:36:ec:00: 69:72:bf:fd:3b:05:96:88:b5:1a:38:69:8a:15:cf:ad:17:30: 75:91:7e:dd:fb:39:4a:92:23:e9:37:10:38:85:3e:14:51:30: 1b:bb:10:6c:00:e1:79:6a:23:fa:17:fa:06:62:cd:3f:8d:91: 9d:9d:81:93:b7:0d:19:5f:6f:91:33:fc:0b:8e:8c:0f:13:b9: ea:05:a2:15:74:e3:92:d8:da:90:95:d3:2e:0b:68:cf:54:76: c8:7b:61:c6:bf:ec:9c:91:68:81:d7:29:3e:7a:2f:b4:20:bd: f4:ac:6e:f0:7e:4a:f6:aa:4d:8e:20:5b:6a:30:8d:27:0a:f2: c7:cf:25:91:d5:3b:3d:ff:32:ea:6e:6b:0f:f7:35:49:18:35: ee:fb:f4:f9:46:96:4b:c3:75:6b:17:04:a9:16:87:76:94:d2: b0:c0:11:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkeB8Fwk4BA9sFMqQaIJoVNTTdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjExMDIwNjQ2MDdaFw0yNjExMDMwOTM4MDdaMDMxMTAvBgNV BAMTKDE1M0FCM0NBNzg0NzEwNjBDNjA3NzFFNDI4RDI2MTg1NDFEREQ1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEFDnVaNGOTJiJ9b96sgOut9Q NAZv4jhkRsyHdE1eJSSJO2qJXLWJYTVN6aeCNRSUqutD5msOtt05ccNvmJCjx/0j c7KWceWV7D+McyMguWn7KkDk3dUGQDDrkGFKV0OuKumVdyHdzD53k+V2m7ciN1wm n34x9b8lZErAIokzH3eEpbEfkf8qTO4UXhVvzmiOQPWVgzDuu+eY1BkHxy1+uXFM BKFBcOK4G4mWETCnMh9XEFwU2kj1Nr9FWqkq+Gmxf4s+5AGsOx9N5Eli7w8c/21K ugn+9Ad0onlp+exUwZTVHz6UtBSVKPd3vcSrY7hJTBv74AGx4BAoNSp+rNhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFTqzynhHEGDGB3HkKNJhhUHd1aswHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbZG7O8kZusuRM1Xsr7eOE/yEFLqt/UPwTc 4Wp4Jcg1RWh+o0ERokQb9d+DMiQLCIZLu5sjNaR6VZX4kJamwFSEQg6I6kfmPFUw XSDIS2nGyuoOGIJHJDbsAGlyv/07BZaItRo4aYoVz60XMHWRft37OUqSI+k3EDiF PhRRMBu7EGwA4XlqI/oX+gZizT+NkZ2dgZO3DRlfb5Ez/AuOjA8TueoFohV045LY 2pCV0y4LaM9Udsh7Yca/7JyRaIHXKT56L7QgvfSsbvB+SvaqTY4gW2owjScK8sfP JZHVOz3/Mupuaw/3NUkYNe779PlGlkvDdWsXBKkWh3aU0rDAEcs= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:46 2026 by rpki-client