$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: 00O/40G/lbcgRdLpRaRZoc63OJQm3SJIERsFrQF8QNU= Subject key identifier: 40:1E:C2:18:14:60:D0:34:B6:D1:F4:B0:A8:05:B4:DD:FD:21:D3:E2 Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 21D104D994C1051E6EBD2084570E0A48F1DB76A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 22:57:55 +0000 Manifest this update: Sat 14 Nov 2026 22:52:55 +0000 Manifest next update: Sun 15 Nov 2026 23:20:55 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: CjGHUJsYJEydBlAQTaDI1MeGrGAGY4EZrPuBZ95DCu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d1:04:d9:94:c1:05:1e:6e:bd:20:84:57:0e:0a:48:f1:db:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Nov 14 22:52:55 2026 GMT Not After : Nov 15 23:20:55 2026 GMT Subject: CN=401EC2181460D034B6D1F4B0A805B4DDFD21D3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:be:a3:b3:54:73:55:e5:ad:71:c2:5f:5c: 62:74:7e:3f:bf:b2:ae:d4:21:88:fd:ef:ae:d7:01: 77:ab:f2:7e:f7:67:b1:31:d7:71:ca:d6:ff:49:bf: e1:86:a6:2a:f2:e2:6d:3d:4c:d4:a1:7f:f6:2b:ca: 43:c3:80:89:0a:89:be:26:56:eb:c5:fb:73:75:02: c6:9d:45:88:48:0e:d4:8b:f0:11:c7:5f:e1:2a:ca: 37:0d:30:e4:fb:20:07:bf:15:73:cf:46:b5:1f:a2: cb:23:80:be:53:93:be:57:d7:e2:79:ce:3b:15:24: 4a:0a:ad:14:d8:d5:77:02:3a:49:98:ce:59:14:11: 90:1f:64:15:b1:ee:55:4e:f2:14:e2:62:8e:1d:15: 46:b5:74:42:92:e4:1e:95:44:77:fe:d0:fa:fa:14: 5b:27:31:10:f6:a5:6d:56:9f:ee:12:e9:35:dc:8a: f1:66:cd:ca:0f:83:66:d6:4f:05:73:b1:e4:5f:af: 0a:fd:b4:47:67:bf:ba:26:2b:c8:53:c5:c3:f0:f9: d8:66:04:d2:98:d8:c9:8c:78:21:84:2e:2e:82:20: e8:64:92:e9:de:f0:44:1b:2b:77:9c:ce:97:a7:13: 55:38:ab:23:fc:ee:ea:cf:ff:da:04:70:e9:7f:71: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1E:C2:18:14:60:D0:34:B6:D1:F4:B0:A8:05:B4:DD:FD:21:D3:E2 X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:34:31:18:dc:dd:84:7c:a0:a7:1d:f0:8e:0b:e5:aa:40:cb: df:28:dc:16:f3:17:2e:3d:0a:2d:91:60:be:6d:96:1b:14:cc: 53:b9:e8:8e:02:26:f3:83:7a:3f:c8:a2:1a:2a:34:32:15:e3: 0e:fe:38:bc:f0:a8:21:7d:74:a2:8e:6a:4a:93:c3:a7:7f:c8: 40:c8:0a:f3:87:6d:68:1d:42:38:7a:5d:53:df:93:50:3c:9c: 17:f2:50:8b:5b:43:8f:96:8c:c3:3c:b8:a8:47:82:ca:e1:4d: ac:0b:12:10:45:49:52:4e:7d:d4:bb:c7:63:14:c3:29:3a:5f: b0:ee:f9:b7:23:d5:e5:1e:6a:af:52:30:14:77:4c:bf:e2:dd: e4:0b:11:6d:3f:c4:3a:78:8a:96:7b:d9:b5:cc:a3:89:e0:0b: 78:61:50:fc:9c:37:0c:e3:ef:03:8e:8f:04:5d:be:d1:4d:40: 6e:9a:2a:6a:ec:20:ad:7d:dd:a6:e3:29:e5:78:bf:80:9f:68: 2b:f4:0a:c5:78:19:c6:6f:b5:5b:ad:54:90:41:df:2a:24:85: 3d:9a:6e:5e:60:a6:81:07:0a:85:0a:0e:56:4d:6f:10:93:f4: 09:2b:2d:d6:06:ba:f0:f9:64:ce:29:9b:df:d5:3d:23:dc:19: b7:ee:c5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdEE2ZTBBR5uvSCEVw4KSPHbdqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjExMTQyMjUyNTVaFw0yNjExMTUyMzIwNTVaMDMxMTAvBgNV BAMTKDQwMUVDMjE4MTQ2MEQwMzRCNkQxRjRCMEE4MDVCNERERkQyMUQzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXL6js1RzVeWtccJfXGJ0fj+/ sq7UIYj9767XAXer8n73Z7Ex13HK1v9Jv+GGpiry4m09TNShf/YrykPDgIkKib4m VuvF+3N1AsadRYhIDtSL8BHHX+EqyjcNMOT7IAe/FXPPRrUfossjgL5Tk75X1+J5 zjsVJEoKrRTY1XcCOkmYzlkUEZAfZBWx7lVO8hTiYo4dFUa1dEKS5B6VRHf+0Pr6 FFsnMRD2pW1Wn+4S6TXcivFmzcoPg2bWTwVzseRfrwr9tEdnv7omK8hTxcPw+dhm BNKY2MmMeCGELi6CIOhkkune8EQbK3eczpenE1U4qyP87urP/9oEcOl/cXc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQB7CGBRg0DS20fSwqAW03f0h0+IwHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY0MRjc3YR8oKcd8I4L5apAy98o3BbzFy49 Ci2RYL5tlhsUzFO56I4CJvODej/IohoqNDIV4w7+OLzwqCF9dKKOakqTw6d/yEDI CvOHbWgdQjh6XVPfk1A8nBfyUItbQ4+WjMM8uKhHgsrhTawLEhBFSVJOfdS7x2MU wyk6X7Du+bcj1eUeaq9SMBR3TL/i3eQLEW0/xDp4ipZ72bXMo4ngC3hhUPycNwzj 7wOOjwRdvtFNQG6aKmrsIK193abjKeV4v4CfaCv0CsV4GcZvtVutVJBB3yokhT2a bl5gpoEHCoUKDlZNbxCT9AkrLdYGuvD5ZM4pm9/VPSPcGbfuxSE= -----END CERTIFICATE-----Generated at Sun Nov 15 08:35:45 2026 by rpki-client