$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: jCmrHPSlXoZJL3MQCuPr/ielS4oFJwFCarYsyq9OckU= Subject key identifier: 9E:17:B1:D0:B8:A6:47:D1:9E:43:74:21:26:46:3B:98:E9:EE:29:6D Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 6010D26CAA5F203340DEB7799CAC35A9C8F90E53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: EA Signing time: Sun 25 Oct 2026 06:34:33 +0000 Manifest this update: Sun 25 Oct 2026 06:29:33 +0000 Manifest next update: Mon 26 Oct 2026 06:57:33 +0000 Files and hashes: 1: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: DAjPg00b4xGeTq5pYbgHcvmXb/TUOqc97RUoYN9tQi0=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:10:d2:6c:aa:5f:20:33:40:de:b7:79:9c:ac:35:a9:c8:f9:0e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: Oct 25 06:29:33 2026 GMT Not After : Oct 26 06:57:33 2026 GMT Subject: CN=9E17B1D0B8A647D19E43742126463B98E9EE296D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:6f:fb:ba:26:22:bd:ef:5a:a9:18:ee:c5: cc:c0:d9:04:b5:5f:8b:3f:4c:69:0f:72:50:3b:bd: 87:20:11:6d:3b:8a:97:6f:03:4b:2a:1f:7f:9b:88: 06:52:43:66:96:55:a3:59:79:7d:ff:78:66:5e:ab: 03:be:b0:37:1a:df:63:3f:66:60:42:f0:e3:9d:30: b1:10:dc:f2:7f:d9:a2:d2:e6:31:43:ee:79:08:46: a2:6b:95:c8:d0:87:6c:aa:8e:4d:98:c1:f8:5f:77: 0a:3a:cd:e8:76:40:84:e7:7c:59:32:5a:8c:66:3f: cf:11:ee:d0:a2:b5:c4:d8:48:89:7a:b9:4f:26:1c: af:2b:1b:e3:d0:e2:68:c6:55:6e:43:2b:49:79:8a: e1:c3:52:43:65:13:a1:de:de:93:0f:b0:e4:7a:39: 07:17:c5:79:24:31:d6:c2:24:1a:da:cc:9d:a3:39: c2:85:78:39:52:83:0a:64:d1:f5:d4:30:3c:de:a4: db:65:48:d3:91:23:b2:cb:e1:47:2c:db:ce:29:07: 61:62:39:8b:83:70:30:a5:85:7e:72:09:0f:fe:00: 71:db:f0:f6:5e:a9:31:69:f3:d3:be:9f:65:1b:56: bb:74:cb:6d:ca:fd:c3:21:3b:7d:ac:31:60:e8:c0: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:17:B1:D0:B8:A6:47:D1:9E:43:74:21:26:46:3B:98:E9:EE:29:6D X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:76:ac:8c:24:e4:f8:93:4b:6c:b7:19:d1:30:0a:e9:50:9a: 1a:03:0e:eb:df:9f:38:ae:22:36:5d:90:a1:97:e3:42:fd:95: a2:bb:b7:f0:50:ec:d4:15:71:43:7a:17:1f:8f:79:5c:86:35: 94:2e:f7:06:52:3e:a9:05:89:48:9b:9a:ae:1a:7e:8c:9a:29: ff:26:b4:7b:ac:8c:2c:44:33:a1:ec:8f:80:10:0e:ad:45:68: 5a:42:63:53:3a:7e:79:9d:3c:66:32:f6:71:99:fe:99:d1:c7: 5d:0f:e2:4b:58:b6:11:92:01:84:1e:ea:0b:93:e6:66:f9:09: e9:82:32:e7:35:a7:8c:03:87:d2:9b:8d:f3:97:1b:51:b8:46: df:a6:47:cc:71:d7:de:82:93:48:2e:a9:5f:0d:75:1a:f8:3c: eb:d8:0a:c5:e1:ec:2e:26:c4:d4:ba:1d:b4:0f:4a:1c:8b:3e: 12:91:2d:1e:8c:d5:b0:b4:82:28:e6:43:9d:fb:66:fb:d7:f7: 9d:f3:3e:53:ae:63:ee:3b:62:b7:8e:8d:f3:07:07:56:45:9b: 11:35:fe:e1:c4:6d:98:96:78:a2:d4:c5:70:9f:3f:9a:20:2b: 7c:87:5e:b9:84:7d:ea:c4:b1:6f:dd:5e:91:d4:a6:f4:dd:63: 2b:cf:31:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBDSbKpfIDNA3rd5nKw1qcj5DlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjEwMjUwNjI5MzNaFw0yNjEwMjYwNjU3MzNaMDMxMTAvBgNV BAMTKDlFMTdCMUQwQjhBNjQ3RDE5RTQzNzQyMTI2NDYzQjk4RTlFRTI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvm/7uiYive9aqRjuxczA2QS1 X4s/TGkPclA7vYcgEW07ipdvA0sqH3+biAZSQ2aWVaNZeX3/eGZeqwO+sDca32M/ ZmBC8OOdMLEQ3PJ/2aLS5jFD7nkIRqJrlcjQh2yqjk2Ywfhfdwo6zeh2QITnfFky WoxmP88R7tCitcTYSIl6uU8mHK8rG+PQ4mjGVW5DK0l5iuHDUkNlE6He3pMPsOR6 OQcXxXkkMdbCJBrazJ2jOcKFeDlSgwpk0fXUMDzepNtlSNORI7LL4Ucs284pB2Fi OYuDcDClhX5yCQ/+AHHb8PZeqTFp89O+n2UbVrt0y23K/cMhO32sMWDowMVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnhex0LimR9GeQ3QhJkY7mOnuKW0wHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN92rIwk5PiTS2y3GdEwCulQmhoDDuvfnziu IjZdkKGX40L9laK7t/BQ7NQVcUN6Fx+PeVyGNZQu9wZSPqkFiUibmq4afoyaKf8m tHusjCxEM6Hsj4AQDq1FaFpCY1M6fnmdPGYy9nGZ/pnRx10P4ktYthGSAYQe6guT 5mb5CemCMuc1p4wDh9KbjfOXG1G4Rt+mR8xx196Ck0guqV8NdRr4POvYCsXh7C4m xNS6HbQPShyLPhKRLR6M1bC0gijmQ537ZvvX953zPlOuY+47YreOjfMHB1ZFmxE1 /uHEbZiWeKLUxXCfP5ogK3yHXrmEferEsW/dXpHUpvTdYyvPMWA= -----END CERTIFICATE-----Generated at Sun Oct 25 14:28:38 2026 by rpki-client