$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: 1tvOMXodGH15etV5kfEx+Kue6eRUb7mj6ismdI6fErw= Subject key identifier: 77:67:F2:AB:8A:80:49:5E:81:85:5D:0B:1E:75:7F:8C:4F:6F:3B:4A Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 203F5E1BAEF7A84CBA34CBBAA91E124DBB768BD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 04:24:50 +0000 Manifest this update: Sat 14 Nov 2026 04:19:50 +0000 Manifest next update: Sun 15 Nov 2026 06:32:50 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 3: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: 9wuiuEsZ7kHEPCGSaF6d6yAaxhgD1OI2vephhaFoCi4=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 06:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:5e:1b:ae:f7:a8:4c:ba:34:cb:ba:a9:1e:12:4d:bb:76:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Nov 14 04:19:50 2026 GMT Not After : Nov 15 06:32:50 2026 GMT Subject: CN=7767F2AB8A80495E81855D0B1E757F8C4F6F3B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:cd:f1:fe:d4:3a:f4:e8:d1:9e:7d:c1:2b: 5b:64:a2:ae:fb:6f:9d:24:f6:cc:98:68:48:73:ee: b7:1c:cd:34:ec:68:e2:80:e9:3f:ef:11:43:97:1a: a6:40:f6:14:9a:16:93:be:82:ba:85:92:41:28:73: a0:4c:f8:78:5e:ab:e4:18:ce:11:dd:45:2c:cb:61: 2a:7d:24:a4:dc:84:02:da:3f:e5:89:10:d0:db:f2: fc:1b:a8:5e:29:7d:7a:43:4d:71:87:2e:dd:e4:32: fd:82:1e:ae:d2:23:db:4e:32:a8:01:e6:19:92:7a: d6:58:28:61:c0:03:78:ef:0a:9e:7e:33:5d:3e:37: 52:9f:53:48:03:7c:11:91:42:03:5c:dc:a2:ab:0e: 0b:70:f4:fa:e6:33:cc:15:90:b1:10:42:27:ad:55: a8:ef:09:59:b3:d8:0e:6a:d3:bf:53:1c:4c:ea:27: 57:24:a7:5f:81:25:51:e1:67:37:21:7a:fb:11:6b: ea:68:f3:3b:de:c9:32:f1:31:75:af:55:f2:b1:81: 9b:88:d2:aa:61:fe:da:26:e6:fa:c8:bb:8d:23:5b: 24:a3:e2:c8:9f:f2:4d:d9:01:d9:90:86:dc:ad:d4: fa:3e:1e:e3:3c:73:28:1e:ae:1c:a5:97:1c:57:6e: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:F2:AB:8A:80:49:5E:81:85:5D:0B:1E:75:7F:8C:4F:6F:3B:4A X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f3:1a:56:66:cd:4a:11:99:bf:ba:34:3d:9c:0e:56:e6:e9: cd:7e:a8:63:d1:56:fc:36:a3:97:20:43:14:c3:6b:d9:45:83: 11:82:e5:de:2b:32:4b:53:3d:b7:8d:f3:a4:32:16:b2:8a:82: 4e:2e:d7:8a:c7:76:e4:df:c2:09:6f:cf:45:c3:a6:6d:28:8e: 01:dc:fb:2d:08:d4:b2:d0:3c:13:f8:eb:ec:22:3e:78:17:e6: d3:8f:26:87:94:e7:c1:5e:46:54:1a:f5:7b:78:f5:d1:1b:39: 49:b8:1e:b2:a6:bd:f1:be:83:b1:75:60:2a:24:15:87:d6:be: c3:f2:a7:6a:16:80:57:3c:c5:a4:7e:b7:fa:31:50:f4:23:b7: 94:94:9e:6e:07:cc:88:86:e4:fc:06:f7:ad:a4:0a:8d:28:43: f6:aa:d7:46:cf:ef:32:6c:4f:bb:e9:0f:c2:2a:f8:9e:5b:1c: 28:29:9f:13:b0:85:35:35:ef:e3:ce:42:3f:2d:2e:d6:1b:8c: 13:1e:26:3e:90:be:ff:81:c7:24:f0:42:e0:40:47:95:92:b7: f4:4f:21:e0:78:b6:9d:53:b6:c7:8c:4c:91:a1:ab:36:10:05: 7b:7b:9f:33:fe:59:bb:3c:ab:9f:84:06:67:ae:68:f4:d7:0a: 67:2c:34:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUID9eG673qEy6NMu6qR4STbt2i9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjExMTQwNDE5NTBaFw0yNjExMTUwNjMyNTBaMDMxMTAvBgNV BAMTKDc3NjdGMkFCOEE4MDQ5NUU4MTg1NUQwQjFFNzU3RjhDNEY2RjNCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRM3x/tQ69OjRnn3BK1tkoq77 b50k9syYaEhz7rcczTTsaOKA6T/vEUOXGqZA9hSaFpO+grqFkkEoc6BM+Hheq+QY zhHdRSzLYSp9JKTchALaP+WJENDb8vwbqF4pfXpDTXGHLt3kMv2CHq7SI9tOMqgB 5hmSetZYKGHAA3jvCp5+M10+N1KfU0gDfBGRQgNc3KKrDgtw9PrmM8wVkLEQQiet VajvCVmz2A5q079THEzqJ1ckp1+BJVHhZzchevsRa+po8zveyTLxMXWvVfKxgZuI 0qph/tom5vrIu40jWySj4sif8k3ZAdmQhtyt1Po+HuM8cygerhyllxxXbuJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2fyq4qASV6BhV0LHnV/jE9vO0owHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATzGlZmzUoRmb+6ND2cDlbm6c1+qGPRVvw2 o5cgQxTDa9lFgxGC5d4rMktTPbeN86QyFrKKgk4u14rHduTfwglvz0XDpm0ojgHc +y0I1LLQPBP46+wiPngX5tOPJoeU58FeRlQa9Xt49dEbOUm4HrKmvfG+g7F1YCok FYfWvsPyp2oWgFc8xaR+t/oxUPQjt5SUnm4HzIiG5PwG962kCo0oQ/aq10bP7zJs T7vpD8Iq+J5bHCgpnxOwhTU17+POQj8tLtYbjBMeJj6Qvv+BxyTwQuBAR5WSt/RP IeB4tp1TtseMTJGhqzYQBXt7nzP+Wbs8q5+EBmeuaPTXCmcsNJ8= -----END CERTIFICATE-----Generated at Sun Nov 15 00:39:50 2026 by rpki-client