$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: pIMXj20k8eN7l9VbYEiEIRravzzaOBLNp4ebX4f6wZU= Subject key identifier: 40:2A:E1:61:C5:C1:E7:1F:5D:3C:DD:8D:0C:08:BF:33:97:36:33:B1 Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 1618824EB8571C9196EC35976C54388D699436A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 18:46:15 +0000 Manifest this update: Mon 02 Nov 2026 18:41:15 +0000 Manifest next update: Tue 03 Nov 2026 20:37:15 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 2: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: OEolZSYKt/NuFew0HNvBxZemsy/eA7bl05g5C4Znij4=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:18:82:4e:b8:57:1c:91:96:ec:35:97:6c:54:38:8d:69:94:36:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Nov 2 18:41:15 2026 GMT Not After : Nov 3 20:37:15 2026 GMT Subject: CN=402AE161C5C1E71F5D3CDD8D0C08BF33973633B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:aa:5d:c8:55:77:a7:e9:fc:ae:42:f3:21: 78:6d:20:cf:6b:0d:36:e3:1a:96:8d:92:17:f6:08: d2:68:59:79:f9:f9:3e:02:ff:97:64:8f:34:e2:fb: e1:0b:5a:ec:7d:57:e0:32:e4:aa:8f:50:38:fa:b4: 12:a2:54:80:00:b0:51:3b:0e:a9:82:7f:f3:e5:db: 11:b5:8b:6b:df:db:a9:03:35:35:2a:36:dd:66:27: f6:d2:c3:1f:8b:5b:b7:99:bb:d0:aa:c7:01:9e:2e: 4d:1f:df:4d:ce:4f:94:69:7d:65:e0:80:bc:97:87: a2:31:bd:18:6f:ea:ad:3a:be:9a:b3:12:72:02:7c: 55:62:e5:48:26:30:39:49:9a:5d:5e:18:1d:6c:1c: 74:2e:ae:65:df:fb:89:dc:86:27:8e:ce:ae:fb:3a: a3:80:46:4d:d0:3b:16:9b:ee:54:62:70:4a:42:89: 56:6c:7c:d1:f5:ee:11:b1:48:92:78:02:5d:01:01: f7:66:a6:7f:de:69:63:a0:57:12:1b:08:17:2d:93: 28:3a:53:39:8f:f4:07:1f:65:c9:52:7c:40:fc:e0: ff:63:40:a3:a4:19:a6:2b:ce:16:fd:0a:aa:05:91: 46:14:c3:94:bf:4c:d5:6d:38:0a:d9:b2:6d:f2:2b: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:E1:61:C5:C1:E7:1F:5D:3C:DD:8D:0C:08:BF:33:97:36:33:B1 X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:83:35:15:bf:19:d1:b6:4e:8f:b9:0e:60:26:36:0c:a6:2f: dd:45:47:7c:49:dd:c0:4b:e3:12:96:fb:b9:23:0a:fe:cd:98: 4b:51:5f:5c:d8:d3:2b:eb:fa:75:8c:d4:f2:1a:ed:db:e2:66: 5f:cd:64:13:2d:f3:b0:16:6d:80:6b:33:a2:c6:a5:d0:ee:2d: f2:b9:8e:81:2a:88:ce:16:e0:d4:00:3f:6c:2e:6b:ee:01:b0: 53:3d:fa:ba:ba:bb:11:40:8f:8d:74:ff:89:eb:83:76:f1:f7: b4:30:20:c2:67:43:d7:d2:d1:b6:cf:e5:81:ed:98:81:40:87: 93:ad:6c:f8:f2:da:e6:53:8a:a6:0a:40:47:fa:c2:99:fa:7b: 62:dc:c4:93:22:87:ef:fd:de:c3:9f:83:66:08:69:16:9d:4e: 45:63:5c:9a:9f:c0:60:e2:aa:47:9b:fb:b4:1e:7e:33:72:44: 07:d3:f5:50:26:cf:a8:c8:97:e0:46:ac:7c:90:00:f6:27:80: 78:d8:dd:62:d6:ab:20:52:79:40:76:8e:f5:50:45:37:d1:09: 4f:40:05:c1:08:3a:65:17:45:9c:78:94:eb:c9:5d:41:21:92: 27:f8:bd:18:43:3a:7d:90:96:0b:c9:5e:7a:b3:58:5e:3e:03: a1:b0:a9:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhiCTrhXHJGW7DWXbFQ4jWmUNqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjExMDIxODQxMTVaFw0yNjExMDMyMDM3MTVaMDMxMTAvBgNV BAMTKDQwMkFFMTYxQzVDMUU3MUY1RDNDREQ4RDBDMDhCRjMzOTczNjMzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUD6pdyFV3p+n8rkLzIXhtIM9r DTbjGpaNkhf2CNJoWXn5+T4C/5dkjzTi++ELWux9V+Ay5KqPUDj6tBKiVIAAsFE7 DqmCf/Pl2xG1i2vf26kDNTUqNt1mJ/bSwx+LW7eZu9CqxwGeLk0f303OT5RpfWXg gLyXh6IxvRhv6q06vpqzEnICfFVi5UgmMDlJml1eGB1sHHQurmXf+4nchieOzq77 OqOARk3QOxab7lRicEpCiVZsfNH17hGxSJJ4Al0BAfdmpn/eaWOgVxIbCBctkyg6 UzmP9AcfZclSfED84P9jQKOkGaYrzhb9CqoFkUYUw5S/TNVtOArZsm3yK/JTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCrhYcXB5x9dPN2NDAi/M5c2M7EwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaDNRW/GdG2To+5DmAmNgymL91FR3xJ3cBL 4xKW+7kjCv7NmEtRX1zY0yvr+nWM1PIa7dviZl/NZBMt87AWbYBrM6LGpdDuLfK5 joEqiM4W4NQAP2wua+4BsFM9+rq6uxFAj410/4nrg3bx97QwIMJnQ9fS0bbP5YHt mIFAh5OtbPjy2uZTiqYKQEf6wpn6e2LcxJMih+/93sOfg2YIaRadTkVjXJqfwGDi qkeb+7QefjNyRAfT9VAmz6jIl+BGrHyQAPYngHjY3WLWqyBSeUB2jvVQRTfRCU9A BcEIOmUXRZx4lOvJXUEhkif4vRhDOn2QlgvJXnqzWF4+A6GwqQU= -----END CERTIFICATE-----Generated at Tue Nov 3 03:54:37 2026 by rpki-client