$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: NqqHOaLep02cEZeXTHvr8BImOLrbBkoG9Wv/YldvWoU= Subject key identifier: AC:F5:29:E4:8A:BA:E9:8C:00:A5:6F:2C:67:36:D0:9F:5A:81:0D:6A Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 1D9E6CF451ED97E652D5A9BA942F9F891780EB2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 07:43:54 +0000 Manifest this update: Sun 15 Nov 2026 07:38:54 +0000 Manifest next update: Mon 16 Nov 2026 10:45:54 +0000 Files and hashes: 1: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: pu5MjKLbgS4/k3dtM6HmBWeAvxc7iOla11+Bx+r+eX8=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9e:6c:f4:51:ed:97:e6:52:d5:a9:ba:94:2f:9f:89:17:80:eb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Nov 15 07:38:54 2026 GMT Not After : Nov 16 10:45:54 2026 GMT Subject: CN=ACF529E48ABAE98C00A56F2C6736D09F5A810D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:d5:cc:67:36:cd:56:0e:a5:ae:11:1c:5c: e4:c5:d8:d1:0b:15:68:b5:2d:25:07:15:96:88:a8: ef:31:79:ed:ce:78:8b:7f:85:6f:cb:d4:2c:4b:20: 85:d0:50:98:71:f0:6d:5e:85:e0:19:3b:ad:4a:76: 6e:0a:4a:b8:ad:eb:8b:d2:99:6c:24:aa:2f:4d:4e: 83:a8:eb:94:91:3a:73:21:81:17:a2:a2:91:aa:d5: a4:73:02:98:0f:4d:7a:96:4b:7f:74:35:07:25:d9: 96:79:74:df:06:63:05:cb:fc:4a:0f:53:1e:ae:4a: 4d:4a:8f:32:33:10:47:2f:8d:ec:90:cc:22:4c:1a: 48:3a:89:9b:10:42:9d:eb:61:39:14:e0:2d:2d:ab: 74:da:c7:28:c8:a3:b7:9a:d6:de:f9:6d:70:78:42: 1c:c3:95:52:7f:83:a6:cf:8f:bd:1e:2a:34:5e:4b: 0e:81:80:0f:32:fe:27:18:8f:e3:3c:2b:ca:77:43: 2e:be:3a:25:45:6f:3f:b9:c0:5f:d4:2b:08:86:e1: 9e:0c:95:57:ff:0c:9f:4d:27:a2:f3:2c:85:70:b4: 5d:df:3f:fc:48:e3:18:aa:8d:59:cc:31:82:d4:82: 81:34:9a:d7:2b:63:81:be:c8:87:52:0a:33:88:b2: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:29:E4:8A:BA:E9:8C:00:A5:6F:2C:67:36:D0:9F:5A:81:0D:6A X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:40:2f:96:09:70:c4:a8:af:b5:4a:79:62:82:72:5b:d2:ef: 1f:64:8f:12:07:4c:a8:2c:93:d6:be:6c:3d:e8:c4:66:25:7a: ef:7b:95:09:31:58:a0:e1:79:c8:97:2e:07:bc:17:50:e2:32: 65:7c:f4:14:aa:ca:98:d0:1b:3d:fb:a1:59:86:4b:04:aa:56: 6d:2e:b2:80:41:43:eb:46:ec:79:a9:ee:49:5c:e7:0d:49:fd: 9b:22:c6:9e:26:57:b0:b3:78:3e:b1:0b:63:dc:a7:0f:77:d2: c8:ec:5b:1a:61:97:72:1e:a8:f9:19:9d:e2:24:ae:8f:09:38: 08:9e:f9:0e:80:6e:d1:81:77:aa:1c:58:56:4e:aa:ef:8c:71: 39:87:70:33:5c:34:f7:f3:f6:b1:ac:65:4f:22:c1:3a:7f:5d: 85:28:7c:17:8a:71:c2:f1:0f:52:2f:76:31:15:54:a7:d7:e6: 5b:5b:5c:55:97:a6:b9:10:47:77:87:13:ef:ee:23:54:06:10: a6:f0:d0:a2:ba:35:bb:93:2b:8d:74:60:8c:b8:04:0d:8f:07: 0c:ed:31:9b:8b:af:25:80:b9:b8:f9:78:14:61:2c:4b:7c:84: 57:aa:d6:a3:91:13:3c:e8:4d:b8:28:e0:4e:0d:f8:6d:aa:60: 48:52:74:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZ5s9FHtl+ZS1am6lC+fiReA6yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjExMTUwNzM4NTRaFw0yNjExMTYxMDQ1NTRaMDMxMTAvBgNV BAMTKEFDRjUyOUU0OEFCQUU5OEMwMEE1NkYyQzY3MzZEMDlGNUE4MTBENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdN9XMZzbNVg6lrhEcXOTF2NEL FWi1LSUHFZaIqO8xee3OeIt/hW/L1CxLIIXQUJhx8G1eheAZO61Kdm4KSrit64vS mWwkqi9NToOo65SROnMhgReiopGq1aRzApgPTXqWS390NQcl2ZZ5dN8GYwXL/EoP Ux6uSk1KjzIzEEcvjeyQzCJMGkg6iZsQQp3rYTkU4C0tq3TaxyjIo7ea1t75bXB4 QhzDlVJ/g6bPj70eKjReSw6BgA8y/icYj+M8K8p3Qy6+OiVFbz+5wF/UKwiG4Z4M lVf/DJ9NJ6LzLIVwtF3fP/xI4xiqjVnMMYLUgoE0mtcrY4G+yIdSCjOIshyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPUp5Iq66YwApW8sZzbQn1qBDWowHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxAL5YJcMSor7VKeWKCclvS7x9kjxIHTKgs k9a+bD3oxGYleu97lQkxWKDheciXLge8F1DiMmV89BSqypjQGz37oVmGSwSqVm0u soBBQ+tG7Hmp7klc5w1J/Zsixp4mV7CzeD6xC2Pcpw930sjsWxphl3IeqPkZneIk ro8JOAie+Q6AbtGBd6ocWFZOqu+McTmHcDNcNPfz9rGsZU8iwTp/XYUofBeKccLx D1IvdjEVVKfX5ltbXFWXprkQR3eHE+/uI1QGEKbw0KK6NbuTK410YIy4BA2PBwzt MZuLryWAubj5eBRhLEt8hFeq1qOREzzoTbgo4E4N+G2qYEhSdPA= -----END CERTIFICATE-----Generated at Sun Nov 15 12:42:32 2026 by rpki-client