$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: /gckkMJD9xM04UHl4vQ4X4uTaSm1ZSVQnQ2r5Ic7qBk= Subject key identifier: A1:CC:4A:E1:91:E3:8E:86:0A:3E:54:F0:5A:8D:87:5F:A0:14:65:81 Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 3CA0B7A42C626215730AEFB285E71AD1BEE25DE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 21:31:23 +0000 Manifest this update: Sat 14 Nov 2026 21:26:23 +0000 Manifest next update: Sun 15 Nov 2026 23:01:23 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) 2: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: NLY01PBbLjTSWRRLc62tke7Qph16sMr3MtaPiScStcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a0:b7:a4:2c:62:62:15:73:0a:ef:b2:85:e7:1a:d1:be:e2:5d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Nov 14 21:26:23 2026 GMT Not After : Nov 15 23:01:23 2026 GMT Subject: CN=A1CC4AE191E38E860A3E54F05A8D875FA0146581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:60:5c:dd:88:84:a6:f7:30:81:6a:53:b8: 77:27:a8:10:ec:67:b1:f0:c3:e4:fc:0d:72:93:ea: df:74:c7:ad:e8:38:9e:fe:f5:90:ed:f4:c8:bf:30: e8:4d:69:11:63:12:33:a3:73:fb:a8:58:5a:1c:75: 17:96:9e:97:eb:88:a4:eb:ce:52:3d:6a:10:30:18: d5:26:b7:fc:b4:2a:7d:0d:f8:ea:7f:02:c8:74:eb: 0b:36:0c:ba:a2:b1:3a:9c:28:d6:36:59:b5:fa:ec: 06:86:c6:64:45:3e:c1:16:11:2e:ec:10:e7:f3:4a: ef:e8:bf:44:29:13:51:cb:03:3a:68:4d:88:f1:a5: da:bc:80:65:25:a8:dc:f0:3c:bc:65:92:e9:69:bd: ff:44:b5:aa:cb:6a:14:01:bc:fe:c1:72:67:81:f5: b0:53:e2:db:0b:13:ea:c3:ee:6c:84:e4:08:37:83: b3:f5:4a:4d:4f:23:3c:f9:7a:f8:16:93:d6:6b:69: a7:8c:67:40:06:53:0a:4c:46:c4:36:eb:8c:0d:c8: 91:64:ae:49:e1:fe:e9:28:1a:1c:ff:2b:53:b3:d9: de:26:bc:91:20:6a:0b:ec:3b:67:60:ba:d8:47:ba: 31:bd:55:e0:26:a6:46:78:48:4e:c9:70:07:99:07: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CC:4A:E1:91:E3:8E:86:0A:3E:54:F0:5A:8D:87:5F:A0:14:65:81 X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e7:1e:ff:ff:d8:23:5d:1e:48:43:ca:1d:bc:f0:34:89:f8: e6:bf:3c:02:2a:fa:6e:0b:b4:ca:fd:ae:a1:c4:dc:0c:96:fc: df:20:1e:de:10:2f:2d:55:ac:cf:23:28:1c:a9:01:c0:34:f1: b9:1d:f2:64:42:1b:21:ca:cb:11:e8:6a:04:bf:d8:95:8d:be: 80:b2:ec:52:6c:95:22:a8:78:86:11:36:69:fc:e3:b2:9f:db: 14:49:33:cb:06:65:5f:05:9d:c5:a6:e5:82:2e:42:c0:0e:83: 85:48:2f:d7:83:9d:30:99:cb:b9:be:c7:55:6c:14:95:1c:db: 01:13:89:fa:06:21:f0:90:b0:4c:e8:02:17:a1:5d:e7:63:cc: 4a:77:20:c2:34:b6:23:60:66:14:48:f3:dd:fb:57:54:0a:42: 2f:d3:c0:26:e3:61:c1:ed:0e:52:11:06:5e:0e:7d:04:70:74: 91:b8:00:c7:9e:a0:f5:df:34:38:dd:1a:ac:92:fe:d4:2e:fc: da:09:82:80:4f:e4:05:c4:a2:c4:73:21:42:ff:b9:67:62:a2: e4:28:00:f7:c1:e2:98:af:64:e4:41:2c:de:cb:90:c8:35:2a: bb:74:0b:8f:09:21:39:88:eb:55:6e:33:55:ac:0f:0b:99:7d: 79:b7:bd:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKC3pCxiYhVzCu+yheca0b7iXeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjExMTQyMTI2MjNaFw0yNjExMTUyMzAxMjNaMDMxMTAvBgNV BAMTKEExQ0M0QUUxOTFFMzhFODYwQTNFNTRGMDVBOEQ4NzVGQTAxNDY1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1F2Bc3YiEpvcwgWpTuHcnqBDs Z7Hww+T8DXKT6t90x63oOJ7+9ZDt9Mi/MOhNaRFjEjOjc/uoWFocdReWnpfriKTr zlI9ahAwGNUmt/y0Kn0N+Op/Ash06ws2DLqisTqcKNY2WbX67AaGxmRFPsEWES7s EOfzSu/ov0QpE1HLAzpoTYjxpdq8gGUlqNzwPLxlkulpvf9EtarLahQBvP7BcmeB 9bBT4tsLE+rD7myE5Ag3g7P1Sk1PIzz5evgWk9ZraaeMZ0AGUwpMRsQ264wNyJFk rknh/ukoGhz/K1Oz2d4mvJEgagvsO2dguthHujG9VeAmpkZ4SE7JcAeZB7PjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocxK4ZHjjoYKPlTwWo2HX6AUZYEwHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfnHv//2CNdHkhDyh288DSJ+Oa/PAIq+m4L tMr9rqHE3AyW/N8gHt4QLy1VrM8jKBypAcA08bkd8mRCGyHKyxHoagS/2JWNvoCy 7FJslSKoeIYRNmn847Kf2xRJM8sGZV8FncWm5YIuQsAOg4VIL9eDnTCZy7m+x1Vs FJUc2wETifoGIfCQsEzoAhehXedjzEp3IMI0tiNgZhRI8937V1QKQi/TwCbjYcHt DlIRBl4OfQRwdJG4AMeeoPXfNDjdGqyS/tQu/NoJgoBP5AXEosRzIUL/uWdiouQo APfB4pivZORBLN7LkMg1Krt0C48JITmI61VuM1WsDwuZfXm3vXg= -----END CERTIFICATE-----Generated at Sun Nov 15 16:58:56 2026 by rpki-client