$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json) Hash identifier: FLiIJjQ/TTnfvcbwgD8ikdO74hii8AD9qjXQecKJNy8= Subject key identifier: F0:66:18:72:7C:25:8D:4A:A7:F7:E5:33:E0:72:C5:0D:C8:B5:D1:33 Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Certificate serial: 25621376BE95ACBC7CAD673E478207E1527AEA33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft Manifest number: FF Signing time: Mon 09 Nov 2026 03:19:28 +0000 Manifest this update: Mon 09 Nov 2026 03:14:28 +0000 Manifest next update: Tue 10 Nov 2026 06:22:28 +0000 Files and hashes: 1: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=) 2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=) 3: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: 6ipzFWz13pFJF3pUtRSrFy8NqpyhtzAXIM0UJlZoVNg=) 4: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 06:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:13:76:be:95:ac:bc:7c:ad:67:3e:47:82:07:e1:52:7a:ea:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A Validity Not Before: Nov 9 03:14:28 2026 GMT Not After : Nov 10 06:22:28 2026 GMT Subject: CN=F06618727C258D4AA7F7E533E072C50DC8B5D133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:04:79:0d:e7:57:c1:64:80:f9:7a:1e:c8: 37:29:5e:66:68:ec:be:58:3b:57:2f:ee:41:6d:30: d0:62:c8:fe:5e:82:1c:8a:7d:d2:79:40:2f:c0:34: db:38:a4:1d:9a:3f:94:67:f1:15:b7:d1:94:a8:c6: 5b:a7:05:d3:f3:ee:71:c1:00:2c:d4:42:f7:74:f4: b6:82:e3:8f:df:ed:1b:d9:3e:3d:a7:e5:67:19:8d: f1:8f:03:d9:bc:55:1c:23:90:a6:c0:4b:a0:23:fd: 27:41:4c:15:76:90:f2:09:f8:58:e4:0d:8a:42:cf: 87:68:54:05:3d:7d:ce:29:1a:e2:21:ea:36:c6:04: 20:67:67:14:fe:fb:10:db:53:d2:50:b6:2f:7f:07: c9:fe:df:7f:cb:d6:f5:6d:32:55:c4:89:66:e1:60: b6:77:01:6a:e0:87:02:58:64:94:c2:8d:2e:b7:a3: 50:0d:77:c2:4f:1b:97:c6:7f:22:f0:26:04:87:bc: d6:03:a1:05:69:df:fe:be:4e:74:67:fa:29:31:c0: e1:ef:36:af:27:a5:77:aa:3e:79:07:2a:02:5e:f1: 83:99:be:c7:6e:30:7c:76:8b:3a:0a:77:84:a8:77: 1b:05:2a:4b:e5:07:b1:de:2c:50:13:e5:5f:13:e3: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:18:72:7C:25:8D:4A:A7:F7:E5:33:E0:72:C5:0D:C8:B5:D1:33 X509v3 Authority Key Identifier: keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:25:75:4c:6f:c6:51:30:ba:54:d9:1f:4b:ea:3f:db:e2:23: 0c:10:93:8f:05:81:a0:f0:4c:75:5f:67:19:02:6f:86:95:7a: 00:40:09:69:c4:ef:0e:5d:c2:32:60:ba:84:fd:99:22:a5:35: 0a:51:58:a2:5f:2c:3f:9d:01:26:7d:30:a5:ab:6b:84:99:8a: 00:f5:3f:80:26:e4:1d:dc:1b:96:cd:03:44:88:66:a2:3e:80: 1a:f1:6c:41:be:6e:ce:21:7f:af:4b:e4:28:a7:f9:ba:2c:bf: 55:a1:c5:72:b2:1c:d5:ff:4b:35:9d:10:a2:da:e5:68:9c:c5: 61:37:71:a9:1b:26:76:37:c8:df:2b:50:6f:9e:f1:fc:ba:73: 02:58:18:c7:b4:0e:09:01:1a:7c:39:f6:50:07:b9:c8:41:4f: 99:8f:ab:ae:a0:68:f1:e5:8c:db:5f:02:a1:13:7a:a5:5a:66: ec:f2:59:65:f2:27:0d:ed:32:e2:d3:c0:e9:09:5b:9c:96:21: 58:b6:3f:2e:fa:c2:02:7c:f1:ce:fa:51:21:67:a8:6a:ce:4d: 5b:f7:81:00:07:b3:e8:4f:aa:d0:88:13:ec:03:22:a2:5e:0f: d8:96:6e:9f:66:30:cd:d7:89:03:f1:0c:8a:bb:69:c5:d6:68: 3b:da:d0:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWITdr6VrLx8rWc+R4IH4VJ66jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMy RjJENjE1QTAeFw0yNjExMDkwMzE0MjhaFw0yNjExMTAwNjIyMjhaMDMxMTAvBgNV BAMTKEYwNjYxODcyN0MyNThENEFBN0Y3RTUzM0UwNzJDNTBEQzhCNUQxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdQR5DedXwWSA+XoeyDcpXmZo 7L5YO1cv7kFtMNBiyP5eghyKfdJ5QC/ANNs4pB2aP5Rn8RW30ZSoxlunBdPz7nHB ACzUQvd09LaC44/f7RvZPj2n5WcZjfGPA9m8VRwjkKbAS6Aj/SdBTBV2kPIJ+Fjk DYpCz4doVAU9fc4pGuIh6jbGBCBnZxT++xDbU9JQti9/B8n+33/L1vVtMlXEiWbh YLZ3AWrghwJYZJTCjS63o1ANd8JPG5fGfyLwJgSHvNYDoQVp3/6+TnRn+ikxwOHv Nq8npXeqPnkHKgJe8YOZvsduMHx2izoKd4SodxsFKkvlB7HeLFAT5V8T4wEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GYYcnwljUqn9+Uz4HLFDci10TMwHwYDVR0j BBgwFoAUJqyEev7xutoXMqiiJJuu7C8tYVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdhZmQ1N2EtZTZkZS00YTVmLWI1YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FG RUYxQkFEQTE3MzJBOEEyMjQ5QkFFRUMyRjJENjE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNkFDODQ3QUZFRjFCQURBMTczMkE4QTIyNDlCQUVFQzJGMkQ2 MTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvMjZBQzg0N0FGRUYxQkFEQTE3MzJBOEEyMjQ5QkFF RUMyRjJENjE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsldUxvxlEwulTZH0vqP9viIwwQk48FgaDw THVfZxkCb4aVegBACWnE7w5dwjJguoT9mSKlNQpRWKJfLD+dASZ9MKWra4SZigD1 P4Am5B3cG5bNA0SIZqI+gBrxbEG+bs4hf69L5Cin+bosv1WhxXKyHNX/SzWdEKLa 5WicxWE3cakbJnY3yN8rUG+e8fy6cwJYGMe0DgkBGnw59lAHuchBT5mPq66gaPHl jNtfAqETeqVaZuzyWWXyJw3tMuLTwOkJW5yWIVi2Py76wgJ88c76USFnqGrOTVv3 gQAHs+hPqtCIE+wDIqJeD9iWbp9mMM3XiQPxDIq7acXWaDva0ME= -----END CERTIFICATE-----Generated at Mon Nov 9 17:30:20 2026 by rpki-client