$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: FTD1eVuLFL14ubr2LfOTiHKxI3zInwm0U9x9eiSg6XA= Subject key identifier: 2F:28:F4:58:6A:0B:83:8B:15:B2:B8:EB:94:AB:32:85:3B:B7:47:3F Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 6CD657F9192994C58D22582FDA1932D1448FB8E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:40:55 +0000 Manifest this update: Mon 02 Nov 2026 06:35:55 +0000 Manifest next update: Tue 03 Nov 2026 08:42:55 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 2: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: 1cD545ZgPn+LSqPCQbcJvXv8D0hYfLOEMlQMqoIRDKw=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d6:57:f9:19:29:94:c5:8d:22:58:2f:da:19:32:d1:44:8f:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Nov 2 06:35:55 2026 GMT Not After : Nov 3 08:42:55 2026 GMT Subject: CN=2F28F4586A0B838B15B2B8EB94AB32853BB7473F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:40:bb:e2:4d:f9:3a:92:e4:ff:fe:13:f1: 70:ea:c4:1c:08:ad:90:88:0d:0c:b2:e2:dd:fa:29: 5e:97:f1:ce:04:f9:47:ac:02:f3:89:57:cc:bf:06: 56:87:46:f5:22:eb:07:ac:00:11:7f:6d:ac:5b:f5: d7:64:3b:3e:33:00:99:5e:72:55:78:5c:1d:b1:5a: aa:ec:9c:4f:2a:14:69:00:c7:9a:3b:c8:a3:c2:d1: ca:45:56:2b:3c:35:2e:cf:d0:2b:68:bb:43:b3:ae: ce:84:c5:78:ed:30:d5:d5:09:b1:40:ab:fc:76:e6: be:2b:24:72:a5:7d:d7:33:ed:6b:c7:5d:9f:5c:3d: c2:2a:05:06:cf:10:ed:49:b1:d1:44:f3:20:9a:c2: 65:56:ac:d9:70:47:a8:49:bd:6b:88:94:29:6f:f0: 16:8c:82:0c:bf:2e:7f:2b:9e:29:21:de:5d:0c:a1: a4:35:65:d1:a1:7c:0b:ae:f6:1c:60:54:8e:1e:64: 42:8f:40:09:c9:49:ca:b9:01:31:75:e1:78:39:8d: 44:68:34:6c:b6:cd:b2:a1:f7:69:d5:36:9f:b4:e9: e3:19:72:4c:14:3c:ae:6c:72:56:83:dc:04:3c:0f: ae:94:f3:9d:15:19:fa:02:db:88:16:17:18:f0:6d: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:28:F4:58:6A:0B:83:8B:15:B2:B8:EB:94:AB:32:85:3B:B7:47:3F X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5a:a0:f1:c0:59:61:6c:74:5b:40:1c:08:de:5f:24:6c:0f: ca:c9:39:f5:67:23:f1:20:ec:e1:eb:79:f6:12:47:8e:ce:be: 86:de:74:70:e1:9c:1c:67:65:ec:77:66:0f:64:30:b9:b7:76: 02:b7:05:80:34:18:66:43:f9:5f:89:c8:43:44:a3:e5:38:d2: f1:ae:4d:8a:e9:e8:cd:07:b5:0d:d2:9a:6d:6e:e3:46:2d:35: d9:38:6a:45:89:b2:5c:77:15:80:d9:0f:62:2d:2d:c3:c9:75: 17:97:d0:2b:14:9a:da:3c:3f:32:e9:c5:8c:2f:63:db:e6:14: d4:19:bb:53:b9:1d:6a:b5:1b:06:8c:af:3c:bd:e3:c3:6c:d7: 67:96:6a:5a:4f:42:5b:90:53:51:fb:35:51:5d:e9:7d:40:dc: 4b:c3:6c:a0:e5:22:36:91:55:46:62:6c:ff:7b:e3:ad:28:d5: a3:99:3c:6c:fd:34:6c:5f:39:73:3f:b4:a7:dd:27:9f:3d:40: fd:ea:a7:25:7c:66:b3:f1:51:e2:57:d4:88:1e:5a:39:79:59: 6c:12:17:58:31:e9:a9:37:b1:d1:aa:e4:aa:94:83:03:24:c1: 66:56:c4:09:1f:aa:b8:9e:84:cf:b2:28:a4:be:d3:b9:13:06: b0:ff:ed:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNZX+RkplMWNIlgv2hky0USPuOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjExMDIwNjM1NTVaFw0yNjExMDMwODQyNTVaMDMxMTAvBgNV BAMTKDJGMjhGNDU4NkEwQjgzOEIxNUIyQjhFQjk0QUIzMjg1M0JCNzQ3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0kC74k35OpLk//4T8XDqxBwI rZCIDQyy4t36KV6X8c4E+UesAvOJV8y/BlaHRvUi6wesABF/baxb9ddkOz4zAJle clV4XB2xWqrsnE8qFGkAx5o7yKPC0cpFVis8NS7P0Ctou0Ozrs6ExXjtMNXVCbFA q/x25r4rJHKlfdcz7WvHXZ9cPcIqBQbPEO1JsdFE8yCawmVWrNlwR6hJvWuIlClv 8BaMggy/Ln8rnikh3l0MoaQ1ZdGhfAuu9hxgVI4eZEKPQAnJScq5ATF14Xg5jURo NGy2zbKh92nVNp+06eMZckwUPK5sclaD3AQ8D66U850VGfoC24gWFxjwbYb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULyj0WGoLg4sVsrjrlKsyhTu3Rz8wHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFaoPHAWWFsdFtAHAjeXyRsD8rJOfVnI/Eg 7OHrefYSR47OvobedHDhnBxnZex3Zg9kMLm3dgK3BYA0GGZD+V+JyENEo+U40vGu TYrp6M0HtQ3Smm1u40YtNdk4akWJslx3FYDZD2ItLcPJdReX0CsUmto8PzLpxYwv Y9vmFNQZu1O5HWq1GwaMrzy948Ns12eWalpPQluQU1H7NVFd6X1A3EvDbKDlIjaR VUZibP97460o1aOZPGz9NGxfOXM/tKfdJ589QP3qpyV8ZrPxUeJX1IgeWjl5WWwS F1gx6ak3sdGq5KqUgwMkwWZWxAkfqriehM+yKKS+07kTBrD/7aY= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:53 2026 by rpki-client