$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: GXC4NhVrCKV0KoGnZADH6mIrfhdVXjIegmP/sVziFR8= Subject key identifier: 84:8D:55:78:E6:0A:5B:EA:93:15:84:20:6C:C3:DC:E7:95:C2:4F:87 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 4090E10A183AFA3A3E2DBFB1D3150F2AE62B4185 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 11:11:49 +0000 Manifest this update: Mon 02 Nov 2026 11:06:49 +0000 Manifest next update: Tue 03 Nov 2026 11:36:49 +0000 Files and hashes: 1: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) 2: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: TjtBiEyljBJ9drm4zIgcmUTB7f3Y8yzu9sdDzmAoANU=) 3: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:90:e1:0a:18:3a:fa:3a:3e:2d:bf:b1:d3:15:0f:2a:e6:2b:41:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Nov 2 11:06:49 2026 GMT Not After : Nov 3 11:36:49 2026 GMT Subject: CN=848D5578E60A5BEA931584206CC3DCE795C24F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:e4:0d:53:4e:8a:9b:cf:aa:9d:cd:69:cb: b3:90:c1:01:f5:0f:4a:a1:a7:1e:ca:35:87:48:c1: 9f:99:66:76:60:ce:bc:de:cb:20:67:f0:96:ff:ab: 8b:d1:5e:c2:b2:64:e5:01:4b:ac:1e:1f:40:17:9b: 59:3d:84:36:60:80:03:3d:57:47:e4:9d:3a:89:40: 9d:71:c3:47:05:d7:19:43:4a:10:bd:57:2b:f5:5e: 53:c2:cb:8c:ac:12:0b:04:d4:1d:df:b3:f8:0c:28: b6:8a:5c:ec:b0:13:ad:89:3c:32:1d:64:f0:b0:41: 74:0d:0d:63:71:ea:5a:14:03:9b:a4:b1:5e:e1:37: c0:ce:03:60:f7:f2:d3:f5:9d:37:02:fd:af:fc:ea: 4d:56:be:0f:0a:a5:0a:4c:66:e1:80:92:94:76:7e: d9:bf:98:ba:8e:e7:af:36:5c:14:60:8b:b0:8c:d6: a3:0c:c8:42:a1:f3:3a:48:13:78:95:b2:72:11:d9: 6a:00:2d:6e:04:ae:9f:80:bb:2c:b4:2f:7e:42:bc: c7:d1:b1:0f:17:88:27:0b:fd:90:bd:c1:39:4f:cf: c0:e7:fc:cb:f7:9b:d6:68:8e:76:82:37:47:61:75: 5c:bf:6d:c0:e7:c4:8c:af:c3:bd:f1:e1:8c:82:f5: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:55:78:E6:0A:5B:EA:93:15:84:20:6C:C3:DC:E7:95:C2:4F:87 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3f:e7:db:5e:bd:47:53:23:0c:e4:75:a6:95:fc:6c:3f:ca: c2:a8:80:9a:08:8e:96:57:b5:27:ba:31:05:eb:49:2a:92:a8: c9:61:37:17:98:f0:93:97:a7:3c:b5:7c:e4:21:c4:4e:2d:e6: fc:c5:51:85:8c:17:71:b5:8a:3a:bd:0c:cd:74:1d:8a:a4:d4: 27:83:b4:3b:ab:8c:80:b6:d8:69:05:f7:6d:d7:dd:ad:1e:28: bb:0d:17:d0:1f:02:82:5a:71:d5:68:bd:12:b1:f2:ab:74:41: 70:01:ba:60:f1:d8:bc:c5:3a:fa:80:f8:a0:29:98:a7:fb:f9: 73:74:78:16:73:56:47:57:de:87:1d:12:32:ee:bf:06:eb:39: 97:c3:02:d6:76:f8:d5:7b:4b:4c:86:f9:b2:b3:21:45:fc:89: 8f:2a:fd:61:db:f5:45:92:65:71:bf:6e:d9:15:4e:10:1e:af: 39:5a:e6:d9:73:cb:02:71:ed:d6:c0:ed:61:ae:c9:8b:b8:ee: a4:2d:a7:60:7d:97:ba:1e:a4:73:aa:08:2c:56:f4:42:55:66: 19:a3:3d:46:e4:59:95:25:76:bb:f0:3e:7f:d9:5b:54:95:49: 0f:7e:9f:50:e0:d6:1b:33:bd:02:26:5e:81:9e:ec:74:45:e1: d1:a6:d7:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJDhChg6+jo+Lb+x0xUPKuYrQYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjExMDIxMTA2NDlaFw0yNjExMDMxMTM2NDlaMDMxMTAvBgNV BAMTKDg0OEQ1NTc4RTYwQTVCRUE5MzE1ODQyMDZDQzNEQ0U3OTVDMjRGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcB+QNU06Km8+qnc1py7OQwQH1 D0qhpx7KNYdIwZ+ZZnZgzrzeyyBn8Jb/q4vRXsKyZOUBS6weH0AXm1k9hDZggAM9 V0fknTqJQJ1xw0cF1xlDShC9Vyv1XlPCy4ysEgsE1B3fs/gMKLaKXOywE62JPDId ZPCwQXQNDWNx6loUA5uksV7hN8DOA2D38tP1nTcC/a/86k1Wvg8KpQpMZuGAkpR2 ftm/mLqO5682XBRgi7CM1qMMyEKh8zpIE3iVsnIR2WoALW4Erp+Auyy0L35CvMfR sQ8XiCcL/ZC9wTlPz8Dn/Mv3m9ZojnaCN0dhdVy/bcDnxIyvw73x4YyC9TzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhI1VeOYKW+qTFYQgbMPc55XCT4cwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc/59tevUdTIwzkdaaV/Gw/ysKogJoIjpZX tSe6MQXrSSqSqMlhNxeY8JOXpzy1fOQhxE4t5vzFUYWMF3G1ijq9DM10HYqk1CeD tDurjIC22GkF923X3a0eKLsNF9AfAoJacdVovRKx8qt0QXABumDx2LzFOvqA+KAp mKf7+XN0eBZzVkdX3ocdEjLuvwbrOZfDAtZ2+NV7S0yG+bKzIUX8iY8q/WHb9UWS ZXG/btkVThAerzla5tlzywJx7dbA7WGuyYu47qQtp2B9l7oepHOqCCxW9EJVZhmj PUbkWZUldrvwPn/ZW1SVSQ9+n1Dg1hszvQImXoGe7HRF4dGm1yY= -----END CERTIFICATE-----Generated at Mon Nov 2 20:17:53 2026 by rpki-client