$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: 80iSCOXhrlzWKy7a5+Hn1qgB+ZC+Wg73D+VqbG3sRzw= Subject key identifier: A2:3E:DF:89:36:53:61:FA:38:1A:39:DB:CF:AD:3F:FF:CE:D8:F4:46 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 5423AC1803905BCD996BD0760BA3D13D32BB34C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 017A Signing time: Tue 10 Nov 2026 09:42:41 +0000 Manifest this update: Tue 10 Nov 2026 09:37:41 +0000 Manifest next update: Wed 11 Nov 2026 12:12:41 +0000 Files and hashes: 1: AS139994.roa (hash: Ke6vWoE71lm7OKWr4VXlPwgKhBgmjc7wRZeLBU0RBHs=) 2: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: G+xGmwaZRCOPk02EH0JtajzB13KivijfXTgwdmX9l0g=) 3: AS24203.roa (hash: OLYjEEtx1NC6XM9orIyDiYg9hjWtlADVWaIGv/W5pOo=) 4: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 11:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:23:ac:18:03:90:5b:cd:99:6b:d0:76:0b:a3:d1:3d:32:bb:34:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Nov 10 09:37:41 2026 GMT Not After : Nov 11 12:12:41 2026 GMT Subject: CN=A23EDF89365361FA381A39DBCFAD3FFFCED8F446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:5b:b5:25:80:d3:40:3c:fd:7f:f2:5b:55: e7:bd:ab:a2:7f:15:00:1c:61:2b:79:9b:3a:cc:44: a7:ef:91:1b:44:93:a1:96:90:13:67:39:c4:1b:88: 10:f2:f4:d1:93:63:8b:8b:44:66:16:5e:b7:57:02: 93:2c:ae:42:f1:5a:8b:12:a1:e1:6e:2c:4d:f7:86: 63:07:d4:46:46:1f:03:51:09:45:f7:81:6b:96:0a: 26:4c:c9:eb:3b:99:47:4d:16:8d:7f:ac:81:73:38: 53:a6:81:de:a9:d9:f4:4f:d3:f4:b4:6e:06:03:a4: 27:75:4a:cb:2c:13:56:0d:0d:6e:68:ef:1f:61:b5: 78:c1:c9:a3:3b:f0:13:31:de:f8:80:a0:1a:75:4c: 66:8a:4d:e4:46:4b:8c:24:47:31:15:57:b1:6c:17: e8:95:ce:07:4c:1a:e2:76:0f:4c:29:ab:a1:74:45: 0d:a0:eb:24:d4:8f:62:67:f4:d2:f8:51:84:6d:53: 8a:e0:d5:2f:ad:be:42:3a:1e:95:cb:bd:fd:01:76: b3:3c:1e:e0:2a:81:08:9c:a6:c5:0a:75:a0:63:16: 66:bd:7e:3d:14:a6:d9:cf:4c:88:a7:92:75:d1:0f: a7:46:ff:90:6e:e1:c8:da:f2:6d:27:65:3d:14:15: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:DF:89:36:53:61:FA:38:1A:39:DB:CF:AD:3F:FF:CE:D8:F4:46 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:57:9e:cb:8c:42:dd:e1:c9:95:f1:50:f4:29:3c:61:95:40: 57:92:cd:b5:56:6b:06:57:17:67:90:4e:6d:f1:3c:ec:1f:4d: 71:4c:f8:0e:b1:a9:da:1d:5d:1a:8b:14:3c:df:00:e8:2f:f1: 28:f6:03:55:92:45:73:72:c4:f5:59:71:01:20:f6:21:d7:45: 72:fa:f2:2d:67:f7:9d:f0:2d:39:0e:bf:9b:ec:81:31:b3:be: 8c:3a:ff:64:f4:b7:7d:6c:02:25:80:86:19:3c:d0:7c:ee:66: 65:ba:f4:0d:00:37:e0:2f:63:b7:a1:c8:13:6b:fa:1e:ac:03: 22:66:31:57:62:84:34:44:35:c4:d6:c4:b5:01:f0:52:c6:96: e4:b5:e2:c8:75:86:81:0a:f0:2b:c9:38:3f:7f:ff:f5:c0:4c: d6:de:bb:29:53:fe:9c:58:69:d1:9c:8f:2d:bf:03:e8:5d:2d: b6:79:50:5c:10:1d:30:34:eb:0a:24:a2:bd:9e:e7:f2:c1:32: 0d:1a:b5:78:da:4d:b2:71:ae:52:b9:88:65:a6:fa:a3:ab:8c: 68:5c:f8:96:25:bd:ba:17:42:e0:cd:c2:50:53:b7:75:40:70: 31:07:9f:f5:7d:8c:20:0b:91:60:90:bf:37:86:0c:83:d7:2a: 04:4c:12:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCOsGAOQW82Za9B2C6PRPTK7NMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjExMTAwOTM3NDFaFw0yNjExMTExMjEyNDFaMDMxMTAvBgNV BAMTKEEyM0VERjg5MzY1MzYxRkEzODFBMzlEQkNGQUQzRkZGQ0VEOEY0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3Vu1JYDTQDz9f/JbVee9q6J/ FQAcYSt5mzrMRKfvkRtEk6GWkBNnOcQbiBDy9NGTY4uLRGYWXrdXApMsrkLxWosS oeFuLE33hmMH1EZGHwNRCUX3gWuWCiZMyes7mUdNFo1/rIFzOFOmgd6p2fRP0/S0 bgYDpCd1SsssE1YNDW5o7x9htXjByaM78BMx3viAoBp1TGaKTeRGS4wkRzEVV7Fs F+iVzgdMGuJ2D0wpq6F0RQ2g6yTUj2Jn9NL4UYRtU4rg1S+tvkI6HpXLvf0BdrM8 HuAqgQicpsUKdaBjFma9fj0UptnPTIinknXRD6dG/5Bu4cja8m0nZT0UFTAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoj7fiTZTYfo4Gjnbz60//87Y9EYwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9XnsuMQt3hyZXxUPQpPGGVQFeSzbVWawZX F2eQTm3xPOwfTXFM+A6xqdodXRqLFDzfAOgv8Sj2A1WSRXNyxPVZcQEg9iHXRXL6 8i1n953wLTkOv5vsgTGzvow6/2T0t31sAiWAhhk80HzuZmW69A0AN+AvY7ehyBNr +h6sAyJmMVdihDRENcTWxLUB8FLGluS14sh1hoEK8CvJOD9///XATNbeuylT/pxY adGcjy2/A+hdLbZ5UFwQHTA06wokor2e5/LBMg0atXjaTbJxrlK5iGWm+qOrjGhc +JYlvboXQuDNwlBTt3VAcDEHn/V9jCALkWCQvzeGDIPXKgRMEuI= -----END CERTIFICATE-----Generated at Tue Nov 10 13:15:32 2026 by rpki-client