$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: 4AeCcW/nwHtMYn/bhMH+kQpK9GVb57Y9lr/9GDfANXQ= Subject key identifier: C9:B8:CF:DF:77:0F:FC:82:96:51:36:93:7F:40:84:EF:AE:26:1D:F0 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 182044D5A058C78F072F18BBA5BDE2C36CE614 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 13:41:30 +0000 Manifest this update: Sat 14 Nov 2026 13:36:30 +0000 Manifest next update: Sun 15 Nov 2026 13:58:30 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 3: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: bvArvhHwCpPxjAX65RGPghBG0CZunv7WOMx9nKaUGJo=) 4: 3136302e32322e33302e302f32332d3234203d3e20313532373938.roa (hash: 5geaouq6+Qf2eu9Pjf+6NhWZUD+cTmugFGBGDHGyjBs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:20:44:d5:a0:58:c7:8f:07:2f:18:bb:a5:bd:e2:c3:6c:e6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Nov 14 13:36:30 2026 GMT Not After : Nov 15 13:58:30 2026 GMT Subject: CN=C9B8CFDF770FFC82965136937F4084EFAE261DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:c9:d4:69:64:c1:22:91:bc:08:18:17:d4: f8:4b:b9:64:f3:9a:68:df:ca:47:4f:04:5c:39:a7: e2:f3:7a:6b:11:3c:a6:0a:04:e1:3e:83:b4:77:9b: ec:7d:b3:88:bf:43:80:f6:2c:56:39:49:9f:fc:75: 01:29:91:b4:bf:94:52:aa:6e:7a:6b:94:f5:9b:d0: c6:62:1c:74:a4:25:d8:04:e9:2a:3c:c7:58:3c:b4: 57:c2:32:68:1a:89:33:40:5f:55:17:fb:fc:95:42: 72:4f:50:bd:71:de:92:be:10:4a:ef:99:46:8f:06: ce:c7:d7:89:d3:28:7f:fd:56:b8:93:e7:fc:36:00: 5a:27:b9:6d:75:19:a7:66:08:96:71:36:08:a9:e9: 1c:f7:e5:c0:d2:d8:48:95:47:e1:7d:9c:dd:3a:11: bb:5a:cc:6f:10:5c:b2:9f:d7:80:d5:f8:22:67:c3: 32:56:c4:5c:74:d8:cc:97:8b:9f:e8:86:84:4a:1d: 8a:b0:8b:ae:32:b5:9b:18:90:a3:80:6d:7a:12:e1: 2d:1e:8f:67:45:cb:e7:04:34:0d:09:7f:29:92:63: cf:c9:74:61:6b:4c:64:3a:4c:21:47:06:72:a4:10: 32:ab:5a:50:50:20:a6:1e:d1:d3:02:17:b2:74:35: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B8:CF:DF:77:0F:FC:82:96:51:36:93:7F:40:84:EF:AE:26:1D:F0 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:1e:c8:a8:30:eb:bd:28:89:2f:80:70:f0:8a:ae:26:4b: fc:f0:98:49:b6:07:4c:a4:09:98:d9:cd:56:12:01:e8:75:2e: f2:01:f5:a8:4a:7e:c6:49:47:ef:e2:df:1f:39:53:78:95:0d: 13:98:05:1b:4f:fd:17:bb:53:a6:e7:cb:a4:0b:1e:02:09:b7: fe:5f:e6:04:ca:e1:0b:4e:50:6b:46:db:f9:b4:4c:a9:5e:72: 97:30:2f:34:c1:da:0a:ff:ab:f2:16:2c:0e:c2:30:d9:e7:2b: 48:8d:fa:ef:44:b1:ea:64:de:1e:26:62:0c:a8:3a:cb:a2:39: 15:e2:de:da:5a:64:75:07:8e:36:ff:fc:21:0f:6e:ff:59:5f: 46:fe:0c:15:98:85:4e:cf:33:40:ce:e6:7b:7c:ed:9f:fe:7b: 61:a2:1b:6e:ac:a7:47:b6:c0:e3:07:eb:1c:ac:87:c9:93:43: 0c:b6:86:a6:87:fb:c7:a4:bb:3a:5a:74:f9:7b:d9:45:fb:21: 05:a7:a4:19:bf:e3:7c:31:fc:f0:a2:41:d1:93:79:a2:cd:47: be:4e:90:54:ea:fc:f3:f6:da:16:25:87:23:58:e3:f2:a9:07: fa:c3:8b:1f:24:e1:6a:58:98:27:4d:e2:a9:c0:34:1d:2f:7e: c6:68:14:7a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITGCBE1aBYx48HLxi7pb3iw2zmFDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5 M0VBRjNFMB4XDTI2MTExNDEzMzYzMFoXDTI2MTExNTEzNTgzMFowMzExMC8GA1UE AxMoQzlCOENGREY3NzBGRkM4Mjk2NTEzNjkzN0Y0MDg0RUZBRTI2MURGMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQBydRpZMEikbwIGBfU+Eu5ZPOa aN/KR08EXDmn4vN6axE8pgoE4T6DtHeb7H2ziL9DgPYsVjlJn/x1ASmRtL+UUqpu emuU9ZvQxmIcdKQl2ATpKjzHWDy0V8IyaBqJM0BfVRf7/JVCck9QvXHekr4QSu+Z Ro8GzsfXidMof/1WuJPn/DYAWie5bXUZp2YIlnE2CKnpHPflwNLYSJVH4X2c3ToR u1rMbxBcsp/XgNX4ImfDMlbEXHTYzJeLn+iGhEodirCLrjK1mxiQo4BtehLhLR6P Z0XL5wQ0DQl/KZJjz8l0YWtMZDpMIUcGcqQQMqtaUFAgph7R0wIXsnQ15X8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTJuM/fdw/8gpZRNpN/QITvriYd8DAfBgNVHSME GDAWgBQbp0jb3jeMT38s5qgeXUD4eT6vPjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8xQkE3NDhEQkRF Mzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VBRjNFLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8wLzFCQTc0OERCREUzNzhDNEY3RjJDRTZBODFFNUQ0MEY4NzkzRUFG M0UuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNWVmYzQxMy0yNzA5LTQ4M2UtYTMx NC1jNWQwNjYzZGY5MzIvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBG ODc5M0VBRjNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEARQkeyKgw670oiS+AcPCKriZL/PCYSbYHTKQJ mNnNVhIB6HUu8gH1qEp+xklH7+LfHzlTeJUNE5gFG0/9F7tTpufLpAseAgm3/l/m BMrhC05Qa0bb+bRMqV5ylzAvNMHaCv+r8hYsDsIw2ecrSI3670Sx6mTeHiZiDKg6 y6I5FeLe2lpkdQeONv/8IQ9u/1lfRv4MFZiFTs8zQM7me3ztn/57YaIbbqynR7bA 4wfrHKyHyZNDDLaGpof7x6S7Olp0+XvZRfshBaekGb/jfDH88KJB0ZN5os1Hvk6Q VOr88/baFiWHI1jj8qkH+sOLHyThaliYJ03iqcA0HS9+xmgUeg== -----END CERTIFICATE-----Generated at Sat Nov 14 23:49:33 2026 by rpki-client