$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: 2kCIx94trK8A3diTv0t0nvOMtrJ/3eq1n7agyopn9Jg= Subject key identifier: DA:03:B3:9F:F5:EC:6B:49:C0:33:73:6F:C7:A0:53:CE:1E:BE:2D:25 Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 49356C251BCCDCABBA1EEFD788A94D732BF2167A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 05:00:17 +0000 Manifest this update: Sun 15 Nov 2026 04:55:17 +0000 Manifest next update: Mon 16 Nov 2026 05:52:17 +0000 Files and hashes: 1: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) 2: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: kihznQhtJTLUHf+DmIIOPaEyS9sM9IIH5wCElHA7I34=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:35:6c:25:1b:cc:dc:ab:ba:1e:ef:d7:88:a9:4d:73:2b:f2:16:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Nov 15 04:55:17 2026 GMT Not After : Nov 16 05:52:17 2026 GMT Subject: CN=DA03B39FF5EC6B49C033736FC7A053CE1EBE2D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:ca:b5:1d:24:03:ee:0a:f5:dd:52:0f:70: 39:93:40:6e:ad:f7:74:b3:ee:2f:52:2c:d3:fc:c7: 3d:03:77:e4:fa:cd:55:5b:e2:9b:d6:e1:96:89:01: f7:a6:82:a4:66:5e:fc:1a:76:9e:c3:b8:9d:fb:bc: e1:68:ce:f9:e3:f4:39:45:49:b4:ab:7b:a4:84:d9: 3f:24:6f:48:54:67:73:b2:f2:b3:48:00:18:79:0e: 8c:74:b4:1f:ec:29:cf:61:78:62:c1:a7:c3:31:0f: 7a:4c:1b:08:30:54:e3:61:d0:90:a7:44:0f:7f:8e: 07:b6:a9:1a:6c:a3:21:cf:91:1a:cb:7f:cb:4c:85: b4:38:48:c2:67:66:46:c3:e5:e0:68:49:66:8b:03: 44:0c:b3:69:10:b4:af:f6:19:8f:7f:41:af:82:0a: 38:df:82:be:52:db:e2:b8:e0:de:24:b4:99:e9:fc: 22:6d:a7:a3:1a:42:fa:b3:dd:ef:0f:aa:56:1b:43: b7:f3:65:f4:6c:f5:b6:9f:66:ae:92:7b:4f:bb:7f: 91:c3:a9:75:56:ef:47:0c:ea:03:b8:f8:d4:37:32: cc:fb:8f:83:0b:7d:29:d7:a7:ab:af:71:6d:78:14: 1d:02:69:82:be:da:f8:18:8c:be:a6:8d:dc:f3:d1: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:B3:9F:F5:EC:6B:49:C0:33:73:6F:C7:A0:53:CE:1E:BE:2D:25 X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4c:03:fe:df:69:1a:91:45:4e:c1:67:1b:f1:80:c2:d5:c7: 75:c8:bf:d2:d4:fa:36:9b:ed:dc:ca:85:e6:63:78:0f:09:eb: fe:2c:37:12:3a:f8:59:58:c9:8d:04:90:a6:29:94:83:69:9f: 8f:35:0c:30:9a:50:86:26:5c:19:3c:15:e7:17:66:9d:f6:67: 4c:a2:1d:89:e7:9f:7a:92:23:ed:48:0c:72:4e:8c:7a:c5:16: 0e:59:11:e0:2f:e3:95:9c:3e:3e:75:70:2a:11:4b:5a:0c:1e: 69:9f:f4:ea:e3:75:cb:b0:3e:6a:fe:59:10:73:df:b9:d5:e3: 15:bf:b8:83:e9:3b:33:40:e4:5d:ca:52:33:6a:81:df:46:21: f9:cf:83:e1:fb:db:6e:a0:31:05:27:99:aa:a8:af:10:f0:b9: dd:f8:13:15:11:d8:46:1d:b3:b2:7a:be:e6:bf:0e:f3:28:a6: 08:29:3f:ca:0f:2c:83:df:1d:1c:49:92:cd:6e:ef:45:d7:3b: 4e:94:79:3a:6d:02:50:f0:52:b6:ce:7d:0d:75:6c:c1:5b:bf: be:6e:a7:62:d4:3f:48:fc:ba:c6:69:d7:84:6c:ad:5c:98:29: c4:3b:4b:ca:b1:51:a5:cb:de:1d:d9:d6:9d:29:29:ba:ed:1e: 8b:9d:a8:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTVsJRvM3Ku6Hu/XiKlNcyvyFnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjExMTUwNDU1MTdaFw0yNjExMTYwNTUyMTdaMDMxMTAvBgNV BAMTKERBMDNCMzlGRjVFQzZCNDlDMDMzNzM2RkM3QTA1M0NFMUVCRTJEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfMq1HSQD7gr13VIPcDmTQG6t 93Sz7i9SLNP8xz0Dd+T6zVVb4pvW4ZaJAfemgqRmXvwadp7DuJ37vOFozvnj9DlF SbSre6SE2T8kb0hUZ3Oy8rNIABh5Dox0tB/sKc9heGLBp8MxD3pMGwgwVONh0JCn RA9/jge2qRpsoyHPkRrLf8tMhbQ4SMJnZkbD5eBoSWaLA0QMs2kQtK/2GY9/Qa+C Cjjfgr5S2+K44N4ktJnp/CJtp6MaQvqz3e8PqlYbQ7fzZfRs9bafZq6Se0+7f5HD qXVW70cM6gO4+NQ3Msz7j4MLfSnXp6uvcW14FB0CaYK+2vgYjL6mjdzz0dpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gOzn/Xsa0nAM3Nvx6BTzh6+LSUwHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJMA/7faRqRRU7BZxvxgMLVx3XIv9LU+jab 7dzKheZjeA8J6/4sNxI6+FlYyY0EkKYplINpn481DDCaUIYmXBk8FecXZp32Z0yi HYnnn3qSI+1IDHJOjHrFFg5ZEeAv45WcPj51cCoRS1oMHmmf9OrjdcuwPmr+WRBz 37nV4xW/uIPpOzNA5F3KUjNqgd9GIfnPg+H7226gMQUnmaqorxDwud34ExUR2EYd s7J6vua/DvMopggpP8oPLIPfHRxJks1u70XXO06UeTptAlDwUrbOfQ11bMFbv75u p2LUP0j8usZp14RsrVyYKcQ7S8qxUaXL3h3Z1p0pKbrtHoudqBg= -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:54 2026 by rpki-client