$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: KhtnLuhFG9U/9yiub7+jpIpeXzaN2U6Go/0BFdyk1hM= Subject key identifier: 13:A7:52:12:53:10:1B:1D:39:05:02:16:39:E1:3A:E9:8B:D8:6E:6A Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 52B49ED90322E6B1F261BB849A73BE3AF2B42152 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 01D8 Signing time: Sat 14 Nov 2026 05:31:04 +0000 Manifest this update: Sat 14 Nov 2026 05:26:04 +0000 Manifest next update: Sun 15 Nov 2026 08:05:04 +0000 Files and hashes: 1: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: vhoco/8HEw3vCV7YPDEsXZepnHRez7xTDJS+c/a+uQE=) 2: AS139994.roa (hash: Ke6vWoE71lm7OKWr4VXlPwgKhBgmjc7wRZeLBU0RBHs=) 3: AS24203.roa (hash: QMNcFanXPPxVWcF+4Rql4rxsQFnnfy4h14su1Z09VOk=) 4: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b4:9e:d9:03:22:e6:b1:f2:61:bb:84:9a:73:be:3a:f2:b4:21:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Nov 14 05:26:04 2026 GMT Not After : Nov 15 08:05:04 2026 GMT Subject: CN=13A7521253101B1D3905021639E13AE98BD86E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:9c:e1:ae:99:aa:86:3b:84:26:dc:d3:28: 11:0d:e7:90:13:9f:4f:ba:97:cc:46:6e:1d:a8:4d: e9:58:0d:4c:45:b1:13:d7:07:da:32:a1:8b:56:ee: 2e:0b:d1:14:87:8d:db:28:36:cb:f2:a2:ae:cf:85: 43:8f:60:be:c7:e6:7c:ca:42:55:5a:81:e9:bd:f3: 82:4d:67:2e:7f:c9:3c:ed:30:0e:5a:e7:fe:ff:1d: b0:b4:86:eb:04:9d:08:0d:7c:4e:49:e5:eb:32:9e: b2:31:a1:5c:70:66:2e:47:89:24:23:50:bb:64:dc: 7b:51:58:99:bf:ac:76:f9:9f:96:a0:45:5e:90:2f: ff:9b:6e:c1:c2:2f:d3:1a:eb:f7:0a:78:39:0c:b9: aa:3e:79:91:35:ec:22:94:a3:a1:03:18:5d:ec:bb: fa:f1:f7:37:48:a8:0d:42:a3:91:b5:15:18:e9:12: 40:31:7e:4d:e1:6a:3a:dd:6a:b9:7f:64:e4:3d:a2: f0:8b:65:4d:3c:60:1a:40:b7:d0:57:3d:a5:8c:7a: 7a:00:5d:0b:0c:77:66:b6:02:18:4a:a2:96:88:a0: 3d:d6:99:5c:4b:2e:8e:44:af:85:03:ee:66:bc:b3: 57:b9:06:57:97:cb:d6:c3:8d:fa:4d:3a:20:2d:a8: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A7:52:12:53:10:1B:1D:39:05:02:16:39:E1:3A:E9:8B:D8:6E:6A X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e8:9c:6c:38:a1:74:3b:7e:ae:84:b3:96:93:79:83:f6:ab: 4c:ed:fe:97:fb:ab:8a:1b:4a:49:0d:07:33:43:b4:c6:2b:dc: 2b:b9:6a:db:3d:f7:d1:17:22:38:2e:d9:fe:44:b1:f5:d9:eb: f3:9a:85:9a:41:38:39:6f:d8:19:5d:f3:5c:2a:13:ec:65:88: 0d:cb:2c:ac:d8:5e:de:64:74:76:74:11:4f:a1:46:d9:7a:80: 41:cc:a9:69:f8:76:c5:7c:f1:38:db:60:0a:31:b4:58:cc:e3: d8:02:87:a0:15:66:73:32:a7:2c:e7:f2:ac:85:72:c2:15:77: b1:10:0f:50:3d:5b:f7:ff:45:b3:ca:90:05:db:65:ee:af:5d: cf:ee:3c:af:20:f7:da:7d:c7:ae:5c:b5:ed:ad:3e:e6:cd:14: 79:81:4b:82:e8:b8:7f:bd:16:bf:2d:55:91:c9:8c:e5:15:fd: fc:7f:06:19:d1:bc:7a:22:64:b5:48:66:32:db:f2:38:03:10: ae:c7:b3:d8:ba:cd:9e:5a:9f:61:6d:99:a8:90:6f:5d:3c:7f: d7:e1:bb:d9:ff:45:2b:1a:87:36:e6:82:26:b5:a3:50:d4:76: 86:d0:4d:b3:d0:09:ba:8a:40:b7:bb:31:22:09:70:ca:33:39: 4d:a2:df:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrSe2QMi5rHyYbuEmnO+OvK0IVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjExMTQwNTI2MDRaFw0yNjExMTUwODA1MDRaMDMxMTAvBgNV BAMTKDEzQTc1MjEyNTMxMDFCMUQzOTA1MDIxNjM5RTEzQUU5OEJEODZFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJJzhrpmqhjuEJtzTKBEN55AT n0+6l8xGbh2oTelYDUxFsRPXB9oyoYtW7i4L0RSHjdsoNsvyoq7PhUOPYL7H5nzK QlVagem984JNZy5/yTztMA5a5/7/HbC0husEnQgNfE5J5esynrIxoVxwZi5HiSQj ULtk3HtRWJm/rHb5n5agRV6QL/+bbsHCL9Ma6/cKeDkMuao+eZE17CKUo6EDGF3s u/rx9zdIqA1Co5G1FRjpEkAxfk3hajrdarl/ZOQ9ovCLZU08YBpAt9BXPaWMenoA XQsMd2a2AhhKopaIoD3WmVxLLo5Er4UD7ma8s1e5BleXy9bDjfpNOiAtqJXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6dSElMQGx05BQIWOeE66YvYbmowHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPonGw4oXQ7fq6Es5aTeYP2q0zt/pf7q4ob SkkNBzNDtMYr3Cu5ats999EXIjgu2f5EsfXZ6/OahZpBODlv2Bld81wqE+xliA3L LKzYXt5kdHZ0EU+hRtl6gEHMqWn4dsV88TjbYAoxtFjM49gCh6AVZnMypyzn8qyF csIVd7EQD1A9W/f/RbPKkAXbZe6vXc/uPK8g99p9x65cte2tPubNFHmBS4LouH+9 Fr8tVZHJjOUV/fx/BhnRvHoiZLVIZjLb8jgDEK7Hs9i6zZ5an2FtmaiQb108f9fh u9n/RSsahzbmgia1o1DUdobQTbPQCbqKQLe7MSIJcMozOU2i35o= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:46 2026 by rpki-client