$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft (raw, json) Hash identifier: JBbgk8xqtVPSTtTFus3www5umjIQ4N+zXvnrUpolbzs= Subject key identifier: 0D:6E:E7:34:68:DD:7F:FC:34:C7:66:1C:E2:E6:52:5E:24:BC:6B:3B Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Certificate issuer: /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Certificate serial: 61DA2A4404968470123AE7F0234A702035C8166B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 21:26:16 +0000 Manifest this update: Sat 14 Nov 2026 21:21:16 +0000 Manifest next update: Sun 15 Nov 2026 23:33:16 +0000 Files and hashes: 1: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=) 2: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl (hash: 3tjNpMr9FImPpFEvwwlC3R26rGtJKjj+BmKqff3WiHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:da:2a:44:04:96:84:70:12:3a:e7:f0:23:4a:70:20:35:c8:16:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Validity Not Before: Nov 14 21:21:16 2026 GMT Not After : Nov 15 23:33:16 2026 GMT Subject: CN=0D6EE73468DD7FFC34C7661CE2E6525E24BC6B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:f0:ef:03:b7:16:16:f7:cf:ab:61:d5:c9: 89:8e:6a:88:0e:fa:47:a8:fe:e3:64:e7:bf:b8:6a: 98:c3:76:de:df:7b:e4:d0:10:42:35:5b:05:3f:9f: cc:6a:94:32:94:7e:1f:c7:5a:c3:dd:80:6c:d2:ba: 70:0b:19:e6:3c:8f:fe:f4:8a:c4:c3:16:3e:ab:7f: bf:22:39:ea:b8:93:dd:f8:01:b6:54:98:f2:96:a6: 2a:f5:ee:0b:8d:c0:9b:d7:62:43:9c:b0:8b:2a:09: 7c:61:ce:9e:b3:63:57:39:eb:66:13:47:dc:90:f2: 00:75:f0:a0:2f:ef:22:ae:64:59:a9:0c:4c:94:cc: 5b:80:0d:7e:42:0e:ce:d3:b1:ef:04:80:10:0b:51: d3:0d:e4:4b:38:15:cb:d6:f2:e9:d4:ac:ca:14:d5: 95:dc:b2:54:dd:cf:1e:d3:71:9f:29:e9:a0:ba:dc: d5:f5:67:7b:54:02:cc:a7:95:f7:02:08:83:71:7c: f3:d5:d8:53:54:b2:7b:58:64:73:ad:82:1a:ac:9d: e3:4d:6a:f1:49:02:35:03:d1:64:31:0c:48:c6:e2: e4:c3:19:37:a2:1c:02:73:40:c1:28:fc:1f:35:cd: cd:90:33:d5:65:24:aa:63:b0:32:fb:0f:97:bb:e4: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6E:E7:34:68:DD:7F:FC:34:C7:66:1C:E2:E6:52:5E:24:BC:6B:3B X509v3 Authority Key Identifier: keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:65:1e:ba:e1:f0:a0:a5:87:44:bc:2d:4b:97:9f:69:0e:d6: 7b:f6:84:16:9c:02:93:1b:d1:8c:54:cf:9c:e4:8b:7d:00:d3: e4:6c:72:45:87:8d:94:be:f9:5d:d0:5b:27:80:e2:cb:ad:e4: d3:93:f9:41:ce:b6:c8:3b:b1:14:bc:c7:47:8a:0f:09:2a:97: 73:3c:b0:12:38:76:10:95:6a:db:bb:6a:30:9b:82:54:90:c3: 66:83:65:93:76:88:0c:a8:9f:de:01:80:fa:6e:c0:8c:24:15: 56:03:df:38:9e:ca:8f:ea:a6:ef:d6:94:b2:c6:e8:c1:b7:3a: a2:6f:c3:c0:e3:c9:9d:15:d6:7f:f9:16:52:d3:93:10:62:85: 83:04:93:41:92:f8:e3:9f:ed:c2:64:3a:9d:0d:45:4c:66:a6: 85:8f:39:e1:ae:20:fb:19:e5:c8:92:93:d9:40:0c:3c:95:dd: 05:e6:c6:63:9f:20:84:ec:2f:c0:06:4a:3d:ea:f7:22:ad:38: 28:bc:78:17:d5:f1:94:af:5b:25:f7:e8:32:ca:9f:cc:59:62: 24:c7:5a:1f:16:06:ce:ba:95:90:d2:ec:50:f9:9f:e5:c7:80: 7b:1c:56:82:c4:e1:ff:25:c5:a8:0e:2e:f8:53:aa:95:7b:38: 04:a7:48:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdoqRASWhHASOufwI0pwIDXIFmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZENjA3 MDBBRjYxRjAeFw0yNjExMTQyMTIxMTZaFw0yNjExMTUyMzMzMTZaMDMxMTAvBgNV BAMTKDBENkVFNzM0NjhERDdGRkMzNEM3NjYxQ0UyRTY1MjVFMjRCQzZCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGL/DvA7cWFvfPq2HVyYmOaogO +keo/uNk57+4apjDdt7fe+TQEEI1WwU/n8xqlDKUfh/HWsPdgGzSunALGeY8j/70 isTDFj6rf78iOeq4k934AbZUmPKWpir17guNwJvXYkOcsIsqCXxhzp6zY1c562YT R9yQ8gB18KAv7yKuZFmpDEyUzFuADX5CDs7Tse8EgBALUdMN5Es4FcvW8unUrMoU 1ZXcslTdzx7TcZ8p6aC63NX1Z3tUAsynlfcCCINxfPPV2FNUsntYZHOtghqsneNN avFJAjUD0WQxDEjG4uTDGTeiHAJzQMEo/B81zc2QM9VlJKpjsDL7D5e75JeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDW7nNGjdf/w0x2Yc4uZSXiS8azswHwYDVR0j BBgwFoAUGguw3cUKSCJZWucY32RtYHAK9h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjMDljOWUtZmU4YS00OTg5LWI1YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERD NTBBNDgyMjU5NUFFNzE4REY2NDZENjA3MDBBRjYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTBCQjBEREM1MEE0ODIyNTk1QUU3MThERjY0NkQ2MDcwMEFG NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZE NjA3MDBBRjYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJlHrrh8KClh0S8LUuXn2kO1nv2hBacApMb 0YxUz5zki30A0+RsckWHjZS++V3QWyeA4sut5NOT+UHOtsg7sRS8x0eKDwkql3M8 sBI4dhCVatu7ajCbglSQw2aDZZN2iAyon94BgPpuwIwkFVYD3zieyo/qpu/WlLLG 6MG3OqJvw8DjyZ0V1n/5FlLTkxBihYMEk0GS+OOf7cJkOp0NRUxmpoWPOeGuIPsZ 5ciSk9lADDyV3QXmxmOfIITsL8AGSj3q9yKtOCi8eBfV8ZSvWyX36DLKn8xZYiTH Wh8WBs66lZDS7FD5n+XHgHscVoLE4f8lxagOLvhTqpV7OASnSEE= -----END CERTIFICATE-----Generated at Sun Nov 15 00:30:19 2026 by rpki-client