$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft File: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json) Hash identifier: QmbmQSMWUlki72lsuyrLP+Fl3FUZEx1oOv80Y6OYXOQ= Subject key identifier: D6:7D:A5:8C:A2:C7:A9:4A:63:F3:35:55:7B:86:2D:31:9A:0A:FD:A8 Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Certificate serial: 42A17DBE5D7F844619E8BB8A4D2096378707ED5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 03:26:53 +0000 Manifest this update: Mon 02 Nov 2026 03:21:53 +0000 Manifest next update: Tue 03 Nov 2026 03:43:53 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=) 2: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=) 3: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=) 4: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: B+yQ970rVDTd1pTB5Eqd1fE7wh+vRMjTYqX7743iKlA=) 5: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=) 6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=) 7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:7d:be:5d:7f:84:46:19:e8:bb:8a:4d:20:96:37:87:07:ed:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Validity Not Before: Nov 2 03:21:53 2026 GMT Not After : Nov 3 03:43:53 2026 GMT Subject: CN=D67DA58CA2C7A94A63F335557B862D319A0AFDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:63:90:63:67:14:e0:0c:40:a0:a4:3f:03: f5:a0:63:10:51:62:49:28:82:fa:11:ee:97:ad:e6: 49:fa:91:75:7b:42:0b:3c:a9:ab:6c:d6:a5:a1:82: 1e:bf:fe:a8:ec:30:76:6e:9f:dd:17:58:bf:3f:8e: 38:29:6c:2f:54:16:e6:e7:52:58:4e:63:54:cd:a0: 6c:f4:2d:1d:be:00:d6:6c:06:8b:2d:75:28:a5:da: 3e:32:c6:38:db:f4:f7:3b:25:5f:b0:c5:8c:1a:b6: 2e:99:e5:69:fe:e8:dd:79:45:fe:06:a2:5e:49:c8: 7a:73:a5:1d:a3:d2:bf:c7:c2:0b:1a:ff:de:ad:b2: 79:c7:2c:9a:b0:b6:4b:e3:46:c4:14:c0:43:a5:06: ea:3f:2b:64:a2:9d:14:2c:7e:e9:fa:51:80:4c:e2: 3a:b4:5e:e4:95:77:f2:11:66:76:81:6d:f8:1c:3c: 65:5d:09:99:1e:fc:3b:20:56:1c:b5:11:89:3c:c9: 08:b2:34:02:f7:2b:2d:dd:dd:62:9b:cd:e4:24:23: a1:16:05:b4:e2:6d:3e:37:14:be:6e:94:8c:29:b3: c0:da:c8:a6:f2:8e:66:51:64:39:b3:88:f5:52:0c: 2f:bb:71:2d:58:7e:98:93:f9:d0:05:20:48:d2:32: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:A5:8C:A2:C7:A9:4A:63:F3:35:55:7B:86:2D:31:9A:0A:FD:A8 X509v3 Authority Key Identifier: keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:85:87:73:57:db:91:a8:52:a4:a1:00:47:7f:a3:cd:42:18: f4:04:8a:81:20:b1:e2:c1:5f:3f:88:c4:f7:1b:b8:3e:e8:f8: 6d:52:b9:e1:bc:aa:67:60:6e:a4:da:5e:13:8f:51:d2:10:56: ce:20:e3:1b:2b:07:95:cd:f0:bf:71:bd:f2:d8:48:1c:69:f3: 84:82:3b:f8:63:f1:4c:cf:a7:a0:87:86:87:ac:15:fb:90:b0: c8:58:a2:7e:41:63:1f:32:96:0e:e3:e0:2d:fe:52:0f:8b:81: 5e:50:4b:ab:79:fa:e9:27:da:6d:19:61:25:b8:e6:44:5b:9d: 7a:a4:da:8d:d0:0a:19:cb:92:1e:a1:dc:67:d8:3b:5f:29:7e: 59:3b:74:08:3f:d8:79:04:3a:2a:99:0e:0c:46:e1:62:3c:6b: cc:7f:d2:18:dd:4c:cf:18:d3:55:88:88:0c:7b:10:54:1c:47: 61:df:19:06:bd:ad:76:d0:47:f4:9d:5a:01:76:b6:d1:dd:f6: e7:98:3c:0e:51:83:90:e5:09:d3:6b:69:9b:40:e8:d6:2f:bd: 0e:12:aa:e5:ef:13:a1:aa:85:fa:7b:ee:25:54:89:f9:53:4b: 5a:a9:98:7f:b5:2b:ba:35:f0:ed:3f:4a:91:7d:9c:44:26:17: 4d:e2:58:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqF9vl1/hEYZ6LuKTSCWN4cH7VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFERERG NTA5OTkyQTAeFw0yNjExMDIwMzIxNTNaFw0yNjExMDMwMzQzNTNaMDMxMTAvBgNV BAMTKEQ2N0RBNThDQTJDN0E5NEE2M0YzMzU1NTdCODYyRDMxOUEwQUZEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoGOQY2cU4AxAoKQ/A/WgYxBR YkkogvoR7pet5kn6kXV7Qgs8qats1qWhgh6//qjsMHZun90XWL8/jjgpbC9UFubn UlhOY1TNoGz0LR2+ANZsBostdSil2j4yxjjb9Pc7JV+wxYwati6Z5Wn+6N15Rf4G ol5JyHpzpR2j0r/Hwgsa/96tsnnHLJqwtkvjRsQUwEOlBuo/K2SinRQsfun6UYBM 4jq0XuSVd/IRZnaBbfgcPGVdCZke/DsgVhy1EYk8yQiyNAL3Ky3d3WKbzeQkI6EW BbTibT43FL5ulIwps8DayKbyjmZRZDmziPVSDC+7cS1YfpiT+dAFIEjSMph9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1n2ljKLHqUpj8zVVe4YtMZoK/agwHwYDVR0j BBgwFoAUHxSEmjDJjB8BYg5MXsut3fUJmSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmNjhhYmEtOTUxNS00ZDEyLWFhYzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEz MEM5OEMxRjAxNjIwRTRDNUVDQkFERERGNTA5OTkyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjE0ODQ5QTMwQzk4QzFGMDE2MjBFNEM1RUNCQUREREY1MDk5 OTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFE RERGNTA5OTkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCFh3NX25GoUqShAEd/o81CGPQEioEgseLB Xz+IxPcbuD7o+G1SueG8qmdgbqTaXhOPUdIQVs4g4xsrB5XN8L9xvfLYSBxp84SC O/hj8UzPp6CHhoesFfuQsMhYon5BYx8ylg7j4C3+Ug+LgV5QS6t5+ukn2m0ZYSW4 5kRbnXqk2o3QChnLkh6h3GfYO18pflk7dAg/2HkEOiqZDgxG4WI8a8x/0hjdTM8Y 01WIiAx7EFQcR2HfGQa9rXbQR/SdWgF2ttHd9ueYPA5Rg5DlCdNraZtA6NYvvQ4S quXvE6Gqhfp77iVUiflTS1qpmH+1K7o18O0/SpF9nEQmF03iWKw= -----END CERTIFICATE-----Generated at Mon Nov 2 17:16:05 2026 by rpki-client