$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: 1/AucLDht2KJQhSKOie41pvm1Pt50Mts7w4LeIOpQgE= Subject key identifier: 11:14:FA:00:1A:2A:F8:D4:BC:42:22:3C:12:CF:56:22:0D:D9:53:31 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 627ADD0593C7D6936B65113E15E45AACC59E92EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 19:03:27 +0000 Manifest this update: Sat 14 Nov 2026 18:58:27 +0000 Manifest next update: Sun 15 Nov 2026 21:25:27 +0000 Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) 2: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: iVh4ZKlnadMUzF07A/NcNYYmquT1E6sdWpB6JSldkNE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7a:dd:05:93:c7:d6:93:6b:65:11:3e:15:e4:5a:ac:c5:9e:92:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Nov 14 18:58:27 2026 GMT Not After : Nov 15 21:25:27 2026 GMT Subject: CN=1114FA001A2AF8D4BC42223C12CF56220DD95331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:d7:43:00:b5:83:f6:56:eb:56:1a:73:58: 7a:a4:00:0e:a1:b9:76:3f:3b:6c:ee:9a:23:8b:4b: 20:42:1e:51:d4:03:d6:ac:23:b4:9b:13:61:a8:6d: 70:fe:7d:4e:42:32:6a:44:da:4f:3a:af:ae:48:96: d6:b9:e6:69:73:63:c2:96:08:fc:3e:75:0a:4b:7f: 71:b4:19:1d:76:ce:1a:29:76:e9:5f:8f:33:f0:9a: b7:57:f1:0e:5e:bd:9c:8f:34:30:75:97:05:83:3c: 27:ba:11:65:a4:43:90:16:1b:21:e2:22:e7:23:bd: b4:8b:76:36:8e:dd:94:c3:d9:16:5d:49:1b:6a:b3: e1:d9:45:c9:b6:5d:3c:54:6c:7e:00:b4:10:51:7d: 3f:41:11:74:fa:35:2c:61:c7:83:28:81:9b:42:59: fe:5d:9c:9d:f7:da:c1:d6:8d:94:b8:64:f4:2a:e1: b1:a2:47:5f:38:fd:2f:7d:e9:1d:db:e1:15:b6:d6: a6:59:ff:12:42:f6:6b:36:2f:c4:d9:ea:f9:fb:42: d8:83:2f:b5:b6:3e:a3:76:d4:70:b9:c0:cc:a6:bb: 21:4f:e5:07:9b:04:bd:ed:4c:cc:b4:43:75:81:a3: d1:09:66:12:db:4d:48:b6:62:4e:6c:2b:5d:ea:c6: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:14:FA:00:1A:2A:F8:D4:BC:42:22:3C:12:CF:56:22:0D:D9:53:31 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:3c:3a:da:54:66:3d:cf:ad:ab:de:31:19:e3:75:c0:7c: fa:52:44:40:9b:dd:26:55:86:ed:eb:01:be:79:dd:9b:84:45: 00:4d:96:d7:b8:2e:34:62:dc:e7:f2:a4:73:1d:de:73:42:23: b1:f3:6f:b8:d6:82:d0:49:c9:a0:ec:50:fe:ee:48:dd:7b:0f: cc:37:9f:40:57:1d:ae:ed:3c:4c:93:2f:da:56:c5:e5:64:3b: f0:1a:da:86:09:93:03:04:52:d9:aa:7e:4e:45:bd:93:76:88: dd:bd:1a:49:b4:c1:60:d8:b2:3a:0e:d6:a4:94:66:50:2f:c6: 82:ac:cd:7a:e5:0a:25:f5:35:1d:12:e0:dc:b3:7b:8f:ab:5f: 3c:93:86:ff:c2:eb:b1:be:6a:cc:45:a0:76:a6:4e:87:aa:ef: 3b:20:31:fb:5f:05:92:27:e1:b5:bb:6f:15:e8:b1:f5:66:e9: 0f:06:92:7c:e8:cb:87:17:e0:15:8e:a8:1e:9a:41:b4:d9:d3: 69:6a:a6:5d:1b:11:53:8c:cf:61:96:ba:2c:93:d4:e6:f9:ec: 8a:dc:b7:91:72:85:1e:59:9a:12:20:b7:44:71:a2:6d:f6:31: 70:3d:af:5b:02:f9:94:87:55:5c:39:df:42:4f:26:53:7d:28: f4:c7:32:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnrdBZPH1pNrZRE+FeRarMWeku8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjExMTQxODU4MjdaFw0yNjExMTUyMTI1MjdaMDMxMTAvBgNV BAMTKDExMTRGQTAwMUEyQUY4RDRCQzQyMjIzQzEyQ0Y1NjIyMEREOTUzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tddDALWD9lbrVhpzWHqkAA6h uXY/O2zumiOLSyBCHlHUA9asI7SbE2GobXD+fU5CMmpE2k86r65Ilta55mlzY8KW CPw+dQpLf3G0GR12zhopdulfjzPwmrdX8Q5evZyPNDB1lwWDPCe6EWWkQ5AWGyHi IucjvbSLdjaO3ZTD2RZdSRtqs+HZRcm2XTxUbH4AtBBRfT9BEXT6NSxhx4MogZtC Wf5dnJ332sHWjZS4ZPQq4bGiR184/S996R3b4RW21qZZ/xJC9ms2L8TZ6vn7QtiD L7W2PqN21HC5wMymuyFP5QebBL3tTMy0Q3WBo9EJZhLbTUi2Yk5sK13qxhqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUERT6ABoq+NS8QiI8Es9WIg3ZUzEwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6wPDraVGY9z62r3jEZ43XAfPpSRECb3SZV hu3rAb553ZuERQBNlte4LjRi3OfypHMd3nNCI7Hzb7jWgtBJyaDsUP7uSN17D8w3 n0BXHa7tPEyTL9pWxeVkO/Aa2oYJkwMEUtmqfk5FvZN2iN29Gkm0wWDYsjoO1qSU ZlAvxoKszXrlCiX1NR0S4Nyze4+rXzyThv/C67G+asxFoHamToeq7zsgMftfBZIn 4bW7bxXosfVm6Q8Gknzoy4cX4BWOqB6aQbTZ02lqpl0bEVOMz2GWuiyT1Ob57Irc t5FyhR5ZmhIgt0Rxom32MXA9r1sC+ZSHVVw530JPJlN9KPTHMpA= -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:41 2026 by rpki-client