$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft File: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft (raw, json) Hash identifier: GWTM4WWVs7en2prn3ME2pqsH3Z1IF0RKAG2fKVOtkrU= Subject key identifier: D7:6C:A5:E1:A3:A6:E3:1E:76:5E:F1:0B:34:A7:E5:46:41:0E:AC:F7 Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Certificate serial: 5FF0D5245882C638C951319C377F01B82DAE7F2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft Manifest number: FF Signing time: Mon 09 Nov 2026 09:01:57 +0000 Manifest this update: Mon 09 Nov 2026 08:56:57 +0000 Manifest next update: Tue 10 Nov 2026 10:36:57 +0000 Files and hashes: 1: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl (hash: fg1lxxLeDgH/IME7p/hRwJUwWUo4ZFGE2Z1mU11YjOI=) 2: AS38755.roa (hash: rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=) 3: AS135457.roa (hash: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=) 4: AS137346.roa (hash: NZ6wUFk5XR7PD9+fJ1hvHsTgRiRIMRLn5KDTlukuqTs=) 5: AS38496.roa (hash: yYz1sIG6N2Kn9PvkhdiFovkBZr7zFMKsgWeqKN8ae+8=) 6: AS38768.roa (hash: cYG0UjFfYvF8rnbWyEC/rqKPjOD6XMnko8jMH8VBKzc=) 7: AS138885.roa (hash: MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=) 8: AS46024.roa (hash: ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=) 9: AS140421.roa (hash: NubwM9MWXF/shtYPHNCf93qRquIZw5eXxpOBi0ubSeY=) 10: AS24520.roa (hash: RlHOKG3iuobVB1DAMGAm+asFdd1ASONRpQ1lrWJUUMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f0:d5:24:58:82:c6:38:c9:51:31:9c:37:7f:01:b8:2d:ae:7f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Validity Not Before: Nov 9 08:56:57 2026 GMT Not After : Nov 10 10:36:57 2026 GMT Subject: CN=D76CA5E1A3A6E31E765EF10B34A7E546410EACF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:e0:3e:5d:1e:f4:a9:c6:4a:e5:51:a5:6c: 88:4f:40:54:78:d5:3e:e1:27:86:ac:7e:f2:2c:30: f1:a3:48:17:65:b2:d4:ab:9f:a9:a2:bc:a3:d0:44: f0:dd:23:92:77:e7:a9:02:af:c3:e8:01:1a:9c:57: 5b:a4:1a:71:af:8c:f4:54:75:c0:6e:68:9d:88:33: 9a:9a:75:60:16:26:22:ac:a7:23:79:be:26:89:a6: 94:89:b4:6f:4d:90:ba:12:2a:aa:24:b1:5a:45:c7: 90:5a:05:8d:65:67:40:34:2b:e7:76:9f:d8:c5:b4: 5f:71:d9:08:de:2d:61:1a:a1:7b:10:08:89:32:b8: b9:ad:d2:56:f8:49:51:74:56:7e:53:56:a9:ed:ed: 24:71:07:d9:29:80:d5:57:18:27:7f:32:69:b8:52: 9e:34:b2:11:70:c0:61:72:59:39:cb:2f:ad:ac:29: bd:0e:d5:5a:38:29:bb:4a:8b:dc:a1:2d:92:2e:d6: 8a:ec:2d:f6:76:c6:56:f1:c1:c8:55:9e:a7:b3:8a: 74:a8:3d:41:3b:dc:a5:16:b3:9e:92:8b:fa:97:51: 25:d2:87:f1:b2:06:2f:7b:9b:20:d3:8f:7f:ca:c9: 38:09:5b:26:27:3b:ae:c9:34:d9:96:3d:d9:39:ae: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6C:A5:E1:A3:A6:E3:1E:76:5E:F1:0B:34:A7:E5:46:41:0E:AC:F7 X509v3 Authority Key Identifier: keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:73:fc:e9:71:6f:19:c0:0f:da:2e:5c:9c:e5:01:fc:64:9f: 46:d7:43:7e:db:41:d2:ed:62:08:2b:70:b3:fd:f2:c0:8f:93: c2:76:44:aa:93:8f:b8:64:6c:98:fa:9b:77:5a:a9:df:71:4e: 33:28:70:6d:cb:ab:94:3e:a1:b7:49:df:96:1f:27:76:2e:b4: 7a:70:46:b3:ad:53:d7:3e:a6:be:f7:9b:eb:78:b8:56:ec:cc: 43:bf:6a:25:26:c7:41:6b:b3:66:71:64:2c:1f:18:d2:f5:ca: b9:16:c7:9a:52:34:87:4e:f2:cb:10:78:f1:20:ae:db:17:30: 42:6a:0b:8b:89:82:75:fd:a0:8c:f5:79:d9:5e:d1:31:de:5c: 71:a5:a9:29:fb:37:f0:0d:f4:25:3c:8c:34:12:3b:36:f8:50: ac:d7:48:7a:cf:f9:eb:01:85:90:17:80:94:60:97:dc:95:1c: 3f:28:9c:11:91:e3:7f:cc:78:50:07:b7:c5:f3:3b:99:3b:eb: 3b:c8:04:32:60:97:72:7d:bd:5a:1b:5b:8c:be:f5:18:49:cd: 9a:e1:40:fe:25:75:8f:7f:77:03:6e:bb:bd:54:f0:ad:14:15: 31:79:3e:cd:6f:72:5d:e2:d1:d8:12:f6:59:08:60:59:1a:1f: bd:36:dd:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/DVJFiCxjjJUTGcN38BuC2ufywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0 MTREOEQ0OTAeFw0yNjExMDkwODU2NTdaFw0yNjExMTAxMDM2NTdaMDMxMTAvBgNV BAMTKEQ3NkNBNUUxQTNBNkUzMUU3NjVFRjEwQjM0QTdFNTQ2NDEwRUFDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbueA+XR70qcZK5VGlbIhPQFR4 1T7hJ4asfvIsMPGjSBdlstSrn6mivKPQRPDdI5J356kCr8PoARqcV1ukGnGvjPRU dcBuaJ2IM5qadWAWJiKspyN5viaJppSJtG9NkLoSKqoksVpFx5BaBY1lZ0A0K+d2 n9jFtF9x2QjeLWEaoXsQCIkyuLmt0lb4SVF0Vn5TVqnt7SRxB9kpgNVXGCd/Mmm4 Up40shFwwGFyWTnLL62sKb0O1Vo4KbtKi9yhLZIu1orsLfZ2xlbxwchVnqezinSo PUE73KUWs56Si/qXUSXSh/GyBi97myDTj3/KyTgJWyYnO67JNNmWPdk5rk/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12yl4aOm4x52XvELNKflRkEOrPcwHwYDVR0j BBgwFoAUH9E4gU7W7RCnSu3mIOzGy0FNjUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg3MzQ5ZmItNDY1ZS00ZThiLWE5NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0 RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0MTREOEQ0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkQxMzg4MTRFRDZFRDEwQTc0QUVERTYyMEVDQzZDQjQxNEQ4 RDQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2 Q0I0MTREOEQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5z/OlxbxnAD9ouXJzlAfxkn0bXQ37bQdLt YggrcLP98sCPk8J2RKqTj7hkbJj6m3daqd9xTjMocG3Lq5Q+obdJ35YfJ3YutHpw RrOtU9c+pr73m+t4uFbszEO/aiUmx0Frs2ZxZCwfGNL1yrkWx5pSNIdO8ssQePEg rtsXMEJqC4uJgnX9oIz1edle0THeXHGlqSn7N/AN9CU8jDQSOzb4UKzXSHrP+esB hZAXgJRgl9yVHD8onBGR43/MeFAHt8XzO5k76zvIBDJgl3J9vVobW4y+9RhJzZrh QP4ldY9/dwNuu71U8K0UFTF5Ps1vcl3i0dgS9lkIYFkaH7023V8= -----END CERTIFICATE-----Generated at Tue Nov 10 03:54:39 2026 by rpki-client