$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: AJ2mK2p7ZLE3jEgFC6TfxixpN/onYUbw3fNpZoWkxSM= Subject key identifier: 54:BD:4E:EF:4A:32:FC:2E:00:11:C5:1A:5C:00:E9:26:E0:F2:90:21 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 41DF209D12295D3F2D447255ACCF24CC18B695CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 21:51:42 +0000 Manifest this update: Sat 14 Nov 2026 21:46:42 +0000 Manifest next update: Mon 16 Nov 2026 00:53:42 +0000 Files and hashes: 1: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) 2: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) 3: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: RuhwwOgFrE4IWX/seIL/4GmK8JElXZ8urVxJsNO6nYk=) 4: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:df:20:9d:12:29:5d:3f:2d:44:72:55:ac:cf:24:cc:18:b6:95:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Nov 14 21:46:42 2026 GMT Not After : Nov 16 00:53:42 2026 GMT Subject: CN=54BD4EEF4A32FC2E0011C51A5C00E926E0F29021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:7e:81:9a:a3:51:21:db:ac:b8:47:95:46: 18:14:bc:18:78:25:06:c9:02:49:14:5e:a2:82:75: df:ad:95:8e:38:2d:63:2b:f5:7b:16:16:5a:7f:37: 3c:4d:58:2e:dc:a7:f0:e7:86:9c:b2:b5:8c:b2:33: e5:96:26:95:92:32:e4:64:db:66:a8:89:f4:90:93: 61:ed:32:a5:b5:9f:0e:b8:cf:7a:60:ee:1c:7f:7e: 7e:c6:ce:dc:7b:eb:ea:50:b0:94:41:ca:e7:d0:d4: 23:73:c0:ab:84:5d:04:af:77:6e:f2:30:92:9c:8c: b0:6f:da:9d:41:3d:f9:16:ae:3f:d5:9c:50:4d:1e: ea:a2:38:7f:c5:91:17:56:99:7f:47:9c:4d:ee:bc: 74:3c:31:41:4d:18:a7:fd:e6:b7:7a:78:e6:98:28: e5:1f:82:bc:b3:c4:88:3f:83:ce:66:ef:c7:5a:7e: 9e:7c:cf:80:13:6c:10:7f:df:62:06:d2:a7:8e:a8: d8:56:67:6a:78:b4:44:00:a0:50:43:11:91:d0:1f: 94:f2:61:1f:61:fd:89:87:85:55:a8:a2:22:b6:76: 44:16:ae:98:a1:2e:6f:4e:e7:e9:9e:3d:20:59:28: da:e5:85:55:1b:7f:4a:65:9d:c7:fe:4c:e6:03:b0: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:4E:EF:4A:32:FC:2E:00:11:C5:1A:5C:00:E9:26:E0:F2:90:21 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:3b:49:38:66:2f:80:c6:ba:f4:af:61:23:53:3c:49:bd: 13:ce:b4:ad:31:38:28:91:52:9b:62:11:d9:7b:81:41:d0:ec: ee:51:46:b5:f7:f9:48:f1:e8:22:0b:49:61:f6:51:e2:f4:da: e9:c7:b9:09:dd:c6:4f:78:87:96:e8:1d:cd:91:69:5a:4c:39: 65:69:67:99:cb:a4:b6:e3:e5:0d:60:dc:e8:3c:1a:34:99:6b: f1:56:5e:f9:b7:c5:22:02:4e:e3:e9:4d:84:fb:64:58:89:0a: d9:07:0d:46:62:ca:fc:4a:47:c6:94:0a:cb:99:f2:97:64:9f: 44:47:68:31:e7:f9:b1:f4:18:af:39:56:df:f2:95:5d:1b:27: 48:05:ce:47:e0:72:00:56:96:42:ab:e0:24:2d:01:0e:f2:07: 9b:d7:7c:99:e7:cf:38:3a:39:90:22:3b:72:1c:40:e9:28:68: e6:0a:cb:34:03:c7:1a:92:d8:c7:36:ba:9d:7f:6b:07:6b:be: aa:44:ba:29:47:c2:16:b9:2a:75:3b:c7:41:8d:d1:29:93:14: d0:53:1d:42:e2:46:bc:db:ad:98:02:55:b9:53:ec:ef:b8:0c: 97:4e:f0:24:e3:d8:3e:70:2e:a3:5b:25:9f:df:3b:27:3a:d8: 0d:4f:d1:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQd8gnRIpXT8tRHJVrM8kzBi2lc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjExMTQyMTQ2NDJaFw0yNjExMTYwMDUzNDJaMDMxMTAvBgNV BAMTKDU0QkQ0RUVGNEEzMkZDMkUwMDExQzUxQTVDMDBFOTI2RTBGMjkwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmH6BmqNRIdusuEeVRhgUvBh4 JQbJAkkUXqKCdd+tlY44LWMr9XsWFlp/NzxNWC7cp/DnhpyytYyyM+WWJpWSMuRk 22aoifSQk2HtMqW1nw64z3pg7hx/fn7Gztx76+pQsJRByufQ1CNzwKuEXQSvd27y MJKcjLBv2p1BPfkWrj/VnFBNHuqiOH/FkRdWmX9HnE3uvHQ8MUFNGKf95rd6eOaY KOUfgryzxIg/g85m78dafp58z4ATbBB/32IG0qeOqNhWZ2p4tEQAoFBDEZHQH5Ty YR9h/YmHhVWooiK2dkQWrpihLm9O5+mePSBZKNrlhVUbf0plncf+TOYDsONnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVL1O70oy/C4AEcUaXADpJuDykCEwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfRO0k4Zi+Axrr0r2EjUzxJvRPOtK0xOCiR UptiEdl7gUHQ7O5RRrX3+Ujx6CILSWH2UeL02unHuQndxk94h5boHc2RaVpMOWVp Z5nLpLbj5Q1g3Og8GjSZa/FWXvm3xSICTuPpTYT7ZFiJCtkHDUZiyvxKR8aUCsuZ 8pdkn0RHaDHn+bH0GK85Vt/ylV0bJ0gFzkfgcgBWlkKr4CQtAQ7yB5vXfJnnzzg6 OZAiO3IcQOkoaOYKyzQDxxqS2Mc2up1/awdrvqpEuilHwha5KnU7x0GN0SmTFNBT HULiRrzbrZgCVblT7O+4DJdO8CTj2D5wLqNbJZ/fOyc62A1P0WE= -----END CERTIFICATE-----Generated at Sun Nov 15 16:24:57 2026 by rpki-client