$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json) Hash identifier: KugqjqRew9+J6Io+0jNDpu3S/QMOxSVgjc7Bben3MYg= Subject key identifier: C2:C5:D1:FE:0E:23:8D:D5:4F:31:E6:E3:89:43:B9:C2:D1:D4:A6:90 Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 6589995D3D194C9898CF25AF4079260AB82622A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 23:48:57 +0000 Manifest this update: Sat 14 Nov 2026 23:43:57 +0000 Manifest next update: Mon 16 Nov 2026 02:15:57 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32332d3234203d3e20313439373034.roa (hash: iLoKSE1pdd15H1Hz5134mXWItT5DvP5967h6GjP5mKY=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=) 3: 323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa (hash: +7gxgZA4R6XZfqKIvJi9Q/LxoHJw6/TCBpYF4xmvuqk=) 4: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=) 5: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: cvv6W75VEJSy3pNU5FAwsVzYqPJffmWZNRhrhBZBX3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:89:99:5d:3d:19:4c:98:98:cf:25:af:40:79:26:0a:b8:26:22:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: Nov 14 23:43:57 2026 GMT Not After : Nov 16 02:15:57 2026 GMT Subject: CN=C2C5D1FE0E238DD54F31E6E38943B9C2D1D4A690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:2e:d9:51:c7:61:2b:85:ef:96:d1:7c:4d: 52:26:9f:78:19:5a:64:79:7f:81:0e:d2:b3:56:92: 1f:64:87:ae:db:f1:9f:31:53:8a:af:7b:b3:19:c9: 08:d0:7b:b8:20:84:b8:a2:ec:71:87:75:51:58:8c: ea:50:7f:9d:c4:ed:fd:6c:15:f8:af:f1:26:6c:d6: 70:5b:26:59:ee:82:27:2f:24:25:3e:60:03:f9:ec: 1b:13:76:b5:19:36:00:9d:be:77:a2:87:3f:b1:4e: da:9f:5c:05:98:16:5e:59:71:ff:3d:3d:2a:ce:69: 20:83:85:de:ed:ab:b2:b4:2a:19:92:a3:fe:13:34: 0c:36:19:be:ae:b3:eb:9f:0b:09:8a:e8:80:8a:3d: 8c:6d:d3:ad:20:5b:99:c5:21:da:06:9d:7a:46:7e: a6:0f:bf:68:c8:65:44:ac:f5:ab:6d:0b:d5:3a:53: 2f:3b:a4:ad:6a:d4:94:2e:7e:98:4a:84:3e:f1:bf: e4:0d:d5:38:be:34:dd:f0:08:bc:c9:ba:7f:09:28: 96:23:23:1b:05:ea:45:da:9e:2a:de:6c:08:23:52: e2:20:fe:22:3b:65:57:5c:28:67:dd:34:9e:53:47: c8:ff:ca:83:89:41:18:db:df:95:be:64:2e:92:cf: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C5:D1:FE:0E:23:8D:D5:4F:31:E6:E3:89:43:B9:C2:D1:D4:A6:90 X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:49:91:34:93:59:2e:21:a9:04:e3:f6:7a:5a:7b:57:2f:08: d9:24:e2:e7:ac:36:91:f4:6d:e8:dd:13:d8:b7:9f:2a:ec:dd: 5e:2c:77:09:26:f3:a0:e5:37:aa:02:67:41:22:aa:1e:81:8b: 8b:ff:e5:eb:36:a2:9a:16:f1:85:38:fe:77:52:68:4c:72:8b: a4:fb:b0:68:b7:26:da:a0:ee:64:0c:94:5b:89:db:67:8b:04: 04:7c:2f:66:9b:a7:0a:6d:78:f2:95:db:59:80:25:d4:a0:e0: 09:df:9b:c0:7a:2e:03:b3:b2:1c:8b:1f:3c:2a:87:6f:ba:6e: 50:38:e0:e5:ff:f9:2a:97:06:85:af:ad:64:be:e8:27:5a:b6: c6:8d:ee:be:9b:c7:05:83:bb:5b:90:e3:6e:e3:69:66:f5:58: 90:7c:fb:df:ad:c7:90:3b:6b:db:4f:d5:f0:a7:6a:43:d2:b2: ce:7b:c1:55:8a:6e:16:5b:11:b4:df:ea:8b:47:88:dc:89:a5: 64:b9:5f:ce:7f:b8:a7:0a:9f:c4:9f:c2:7c:ec:e2:e1:8d:28: 93:6b:73:08:44:c2:2a:44:86:49:96:8e:5c:ef:ab:6d:d8:b3: c3:5d:6f:07:7c:b3:68:7b:5c:5d:df:21:cc:92:3f:77:38:19: bd:35:bc:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZYmZXT0ZTJiYzyWvQHkmCrgmIqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjExMTQyMzQzNTdaFw0yNjExMTYwMjE1NTdaMDMxMTAvBgNV BAMTKEMyQzVEMUZFMEUyMzhERDU0RjMxRTZFMzg5NDNCOUMyRDFENEE2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWC7ZUcdhK4XvltF8TVImn3gZ WmR5f4EO0rNWkh9kh67b8Z8xU4qve7MZyQjQe7gghLii7HGHdVFYjOpQf53E7f1s Ffiv8SZs1nBbJlnugicvJCU+YAP57BsTdrUZNgCdvneihz+xTtqfXAWYFl5Zcf89 PSrOaSCDhd7tq7K0KhmSo/4TNAw2Gb6us+ufCwmK6ICKPYxt060gW5nFIdoGnXpG fqYPv2jIZUSs9attC9U6Uy87pK1q1JQufphKhD7xv+QN1Ti+NN3wCLzJun8JKJYj IxsF6kXanirebAgjUuIg/iI7ZVdcKGfdNJ5TR8j/yoOJQRjb35W+ZC6SzxG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsXR/g4jjdVPMebjiUO5wtHUppAwHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERG QUYyNzMwMjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItJkTSTWS4hqQTj9npae1cvCNkk4uesNpH0 bejdE9i3nyrs3V4sdwkm86DlN6oCZ0Eiqh6Bi4v/5es2opoW8YU4/ndSaExyi6T7 sGi3Jtqg7mQMlFuJ22eLBAR8L2abpwptePKV21mAJdSg4Anfm8B6LgOzshyLHzwq h2+6blA44OX/+SqXBoWvrWS+6CdatsaN7r6bxwWDu1uQ427jaWb1WJB8+9+tx5A7 a9tP1fCnakPSss57wVWKbhZbEbTf6otHiNyJpWS5X85/uKcKn8Sfwnzs4uGNKJNr cwhEwipEhkmWjlzvq23Ys8Ndbwd8s2h7XF3fIcySP3c4Gb01vKA= -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:07 2026 by rpki-client