$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: JfrbIw5GrzAOzjIodvsrAcxZMMqGgiMz+a3W/nDKYYA= Subject key identifier: A1:14:6D:06:F9:D8:AA:A4:B5:8C:19:31:5A:0A:2D:5F:B1:F5:7B:EC Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 389174BCFC1BD64030F639BCE1F0F1E88887494C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 22:37:28 +0000 Manifest this update: Sat 14 Nov 2026 22:32:28 +0000 Manifest next update: Sun 15 Nov 2026 23:24:28 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) 2: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: w6sBtrbLDn+sNAsuYICnkZ7BcMRftWhm1enVKHJVPZw=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:91:74:bc:fc:1b:d6:40:30:f6:39:bc:e1:f0:f1:e8:88:87:49:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Nov 14 22:32:28 2026 GMT Not After : Nov 15 23:24:28 2026 GMT Subject: CN=A1146D06F9D8AAA4B58C19315A0A2D5FB1F57BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:cc:b1:a6:3f:7b:25:5f:81:55:c5:37:44: 87:46:44:32:03:10:d4:ee:96:87:21:b7:49:b1:34: 91:62:60:2f:f3:3b:ea:3d:c5:e1:1b:e6:eb:dd:61: f1:80:0b:1b:91:57:61:0d:c6:9b:70:b2:a6:ce:2a: 44:1a:31:88:4c:a0:b1:48:65:ce:42:c2:af:c5:e1: 82:58:7b:15:69:c1:44:f9:dd:ee:5c:dd:23:c9:44: 1d:96:2a:df:db:02:65:26:be:31:a4:23:88:fd:ac: 4a:1b:b6:15:a6:f6:e9:6b:3e:b5:89:5c:9c:22:e3: f5:1f:fb:e3:86:6f:35:ec:a2:93:a1:7d:ca:7e:78: de:4c:9c:6a:24:26:04:e2:f5:e2:f7:a1:bb:77:e7: 76:18:72:4d:12:46:0c:f0:56:30:77:49:1a:ba:72: 1f:a0:13:29:24:cb:d9:f8:13:dc:db:fc:66:ae:05: 4b:9d:a4:a9:5e:94:3b:6e:f8:bb:23:d1:b4:91:6c: 4f:b9:7f:43:e8:5c:b7:c2:9b:eb:80:43:d7:3e:08: 79:9a:45:03:61:c8:e0:61:2b:ac:40:d2:61:1c:1f: 6d:6d:50:9d:d0:88:ef:ef:60:e1:37:9a:1e:31:d9: 4a:df:81:a1:a6:4e:25:86:47:48:ca:b3:93:c6:00: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:14:6D:06:F9:D8:AA:A4:B5:8C:19:31:5A:0A:2D:5F:B1:F5:7B:EC X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d3:09:35:ca:f8:31:a2:35:63:36:3d:79:5b:61:e8:43:e3: 22:8b:bc:03:02:fa:91:fa:77:55:4b:33:57:4f:7d:95:04:4b: de:92:5c:e0:0e:61:c3:3f:3c:ca:61:23:fa:e2:90:f5:8a:a0: 7d:70:ad:3e:6c:9d:99:0f:64:f0:d9:dc:f8:6d:d5:d1:23:45: d1:16:c3:48:11:21:59:4d:fb:c9:9e:9d:19:80:94:55:e2:9c: 4e:bf:06:77:9c:ec:14:31:e2:de:1d:81:f3:0c:a7:19:04:6d: 76:36:e5:7f:09:b4:52:8b:90:dd:e7:86:77:19:e3:30:b7:47: db:d4:dd:68:28:2a:e2:0f:8a:71:8e:95:f4:4b:bf:a6:e0:50: bd:88:f2:62:fa:aa:a2:4e:c6:4c:e9:5e:bb:58:8b:2b:53:2c: a3:3b:69:ee:81:ae:30:ac:5d:9e:dd:25:39:6b:15:e3:55:46: de:86:a0:66:5c:8f:f0:a9:9d:fc:7b:b4:eb:e9:92:68:6e:ed: 53:5c:2e:09:3c:ce:c2:f1:23:37:2f:62:84:88:c7:d5:f3:9d: 1e:64:fe:ba:f6:34:7e:d4:45:eb:7f:c9:39:63:f2:c3:3f:fc: 12:4b:2c:9e:57:ac:df:73:99:17:ac:a9:2c:48:b6:05:46:44: 0b:73:8c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJF0vPwb1kAw9jm84fDx6IiHSUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjExMTQyMjMyMjhaFw0yNjExMTUyMzI0MjhaMDMxMTAvBgNV BAMTKEExMTQ2RDA2RjlEOEFBQTRCNThDMTkzMTVBMEEyRDVGQjFGNTdCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvsyxpj97JV+BVcU3RIdGRDID ENTulocht0mxNJFiYC/zO+o9xeEb5uvdYfGACxuRV2ENxptwsqbOKkQaMYhMoLFI Zc5Cwq/F4YJYexVpwUT53e5c3SPJRB2WKt/bAmUmvjGkI4j9rEobthWm9ulrPrWJ XJwi4/Uf++OGbzXsopOhfcp+eN5MnGokJgTi9eL3obt353YYck0SRgzwVjB3SRq6 ch+gEykky9n4E9zb/GauBUudpKlelDtu+Lsj0bSRbE+5f0PoXLfCm+uAQ9c+CHma RQNhyOBhK6xA0mEcH21tUJ3QiO/vYOE3mh4x2UrfgaGmTiWGR0jKs5PGAIhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRRtBvnYqqS1jBkxWgotX7H1e+wwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjTCTXK+DGiNWM2PXlbYehD4yKLvAMC+pH6 d1VLM1dPfZUES96SXOAOYcM/PMphI/rikPWKoH1wrT5snZkPZPDZ3Pht1dEjRdEW w0gRIVlN+8menRmAlFXinE6/Bnec7BQx4t4dgfMMpxkEbXY25X8JtFKLkN3nhncZ 4zC3R9vU3WgoKuIPinGOlfRLv6bgUL2I8mL6qqJOxkzpXrtYiytTLKM7ae6BrjCs XZ7dJTlrFeNVRt6GoGZcj/Cpnfx7tOvpkmhu7VNcLgk8zsLxIzcvYoSIx9XznR5k /rr2NH7URet/yTlj8sM//BJLLJ5XrN9zmResqSxItgVGRAtzjGI= -----END CERTIFICATE-----Generated at Sun Nov 15 16:38:37 2026 by rpki-client