$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: 7cIQ+CYi548MyG+/MzepqpcHgTfZAVRvcC0JBXhL+Ss= Subject key identifier: 8B:52:6E:5D:47:1E:12:42:C2:1A:C6:B8:4B:D1:0C:3F:30:78:4E:53 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 518C6D1DDF2D01F96855984F1BAD468868A44CE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 00:33:43 +0000 Manifest this update: Wed 04 Nov 2026 00:28:43 +0000 Manifest next update: Thu 05 Nov 2026 02:32:43 +0000 Files and hashes: 1: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: AoJxFChPuQiRf2K2HtTG0VpOkbmv5HqWM6u119Lb61w=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) 3: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 4: 3136302e32322e33302e302f32332d3234203d3e20313532373938.roa (hash: 5geaouq6+Qf2eu9Pjf+6NhWZUD+cTmugFGBGDHGyjBs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8c:6d:1d:df:2d:01:f9:68:55:98:4f:1b:ad:46:88:68:a4:4c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Nov 4 00:28:43 2026 GMT Not After : Nov 5 02:32:43 2026 GMT Subject: CN=8B526E5D471E1242C21AC6B84BD10C3F30784E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:01:67:df:14:8b:a7:89:92:22:be:cd:20: e8:44:3f:de:37:80:01:52:1e:41:4b:ab:dc:df:ad: 60:01:86:99:a7:1c:18:94:a5:89:5b:77:4a:d6:d7: d2:e5:78:33:86:18:3d:e0:20:85:3e:21:bc:30:9f: 25:ba:f3:66:d9:a0:c4:9a:de:ae:3a:cc:d1:fa:93: d2:0e:7f:da:fe:06:99:9a:f5:bc:27:63:fd:30:5a: a2:e6:53:57:a7:40:4e:1e:d2:b0:aa:8a:3b:bc:6e: 19:c9:f1:3e:07:dd:f6:db:4b:e5:ff:fc:1d:38:70: 25:8d:73:23:70:0e:a9:d0:02:86:23:9a:9e:37:23: 13:29:a9:9b:ad:09:02:be:49:06:6f:98:1e:e4:f5: ff:2f:e9:93:58:04:9e:e1:4a:13:00:90:57:73:ec: 22:b6:6e:11:73:66:42:53:32:ea:5f:da:7f:c3:f4: f4:eb:f3:35:a1:ba:72:8d:e0:bf:5a:aa:c2:4f:63: 6a:f8:1c:32:b0:09:6b:7a:ff:30:33:5e:1f:8b:4a: 2e:34:a3:ed:3b:9b:b1:f7:c1:a4:74:2d:32:7e:df: a3:64:37:d8:cc:7e:da:20:26:22:57:1e:bc:75:03: 76:70:7d:50:38:48:96:77:7a:64:80:56:c7:c5:b7: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:6E:5D:47:1E:12:42:C2:1A:C6:B8:4B:D1:0C:3F:30:78:4E:53 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:27:8f:22:4d:04:84:a1:3b:bf:cf:11:f8:10:1b:56:ce:64: 2d:05:76:5f:0f:e0:e4:58:08:f0:ca:10:1b:ff:18:bf:4e:13: 4f:e0:ac:3d:02:90:af:4b:40:d6:87:21:a0:21:e9:fe:5b:7f: d6:d1:66:a5:6d:1d:66:34:a9:eb:79:e4:c3:fb:54:c5:3a:69: 0d:6c:6f:ed:57:fa:ed:6d:7a:cd:a7:38:49:cb:11:35:ed:e3: 9c:2a:25:12:d3:ee:bc:16:de:70:a4:1e:14:61:f9:a8:93:a9: e6:f6:d4:28:f2:4f:94:67:77:34:ec:6d:8f:88:cf:61:f9:5d: 05:5c:b9:a0:89:99:9b:05:1e:c3:5f:08:69:1c:db:fc:c6:da: ba:7b:7c:1f:7c:37:0c:9a:f6:c5:74:6b:e8:47:7b:6d:fb:e9: 22:26:f1:58:5e:0d:04:8e:91:59:02:45:f7:95:fd:1e:0e:ca: 31:a5:6e:01:e1:b4:6c:13:68:c9:d3:a0:7f:6e:64:3c:12:3c: 53:f1:dd:e3:8a:66:51:06:53:73:d6:d8:ee:28:27:f8:3f:98: f5:89:5d:40:ab:1f:d9:31:5c:91:80:65:0d:f2:8a:8f:76:32: 56:a0:7e:f0:4b:34:f1:20:5f:fb:d9:1f:55:cb:a6:ab:be:07: 66:e2:50:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYxtHd8tAfloVZhPG61GiGikTOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjExMDQwMDI4NDNaFw0yNjExMDUwMjMyNDNaMDMxMTAvBgNV BAMTKDhCNTI2RTVENDcxRTEyNDJDMjFBQzZCODRCRDEwQzNGMzA3ODRFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+AFn3xSLp4mSIr7NIOhEP943 gAFSHkFLq9zfrWABhpmnHBiUpYlbd0rW19LleDOGGD3gIIU+IbwwnyW682bZoMSa 3q46zNH6k9IOf9r+Bpma9bwnY/0wWqLmU1enQE4e0rCqiju8bhnJ8T4H3fbbS+X/ /B04cCWNcyNwDqnQAoYjmp43IxMpqZutCQK+SQZvmB7k9f8v6ZNYBJ7hShMAkFdz 7CK2bhFzZkJTMupf2n/D9PTr8zWhunKN4L9aqsJPY2r4HDKwCWt6/zAzXh+LSi40 o+07m7H3waR0LTJ+36NkN9jMftogJiJXHrx1A3ZwfVA4SJZ3emSAVsfFt6snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1JuXUceEkLCGsa4S9EMPzB4TlMwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMnjyJNBIShO7/PEfgQG1bOZC0Fdl8P4ORY CPDKEBv/GL9OE0/grD0CkK9LQNaHIaAh6f5bf9bRZqVtHWY0qet55MP7VMU6aQ1s b+1X+u1tes2nOEnLETXt45wqJRLT7rwW3nCkHhRh+aiTqeb21CjyT5RndzTsbY+I z2H5XQVcuaCJmZsFHsNfCGkc2/zG2rp7fB98Nwya9sV0a+hHe2376SIm8VheDQSO kVkCRfeV/R4OyjGlbgHhtGwTaMnToH9uZDwSPFPx3eOKZlEGU3PW2O4oJ/g/mPWJ XUCrH9kxXJGAZQ3yio92MlagfvBLNPEgX/vZH1XLpqu+B2biUOE= -----END CERTIFICATE-----Generated at Wed Nov 4 02:51:25 2026 by rpki-client