$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: 11yha/VIbPnNFsGvPGMmJrw57WWNwC/udNfrEyiqY7I= Subject key identifier: 18:7D:FA:26:83:E2:EB:A4:8F:C5:7D:3A:03:4C:D6:7B:3F:A9:FB:81 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 571945CBC066416388EB523AE878677E9E1CC27C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 10:12:22 +0000 Manifest this update: Sat 14 Nov 2026 10:07:22 +0000 Manifest next update: Sun 15 Nov 2026 12:13:22 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) 2: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: WTsbeNQFs3l6Xs6vQw5vcH3XTLnRpaIVJe9kRvs2pNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:19:45:cb:c0:66:41:63:88:eb:52:3a:e8:78:67:7e:9e:1c:c2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Nov 14 10:07:22 2026 GMT Not After : Nov 15 12:13:22 2026 GMT Subject: CN=187DFA2683E2EBA48FC57D3A034CD67B3FA9FB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:e7:b2:71:d7:cf:48:50:97:8c:0f:98:e8: 75:6c:10:f9:ac:4b:41:9f:a8:84:ab:c4:bb:1b:72: 29:47:54:c8:58:31:5c:9d:cb:d0:61:6e:b8:09:ae: e4:2a:77:4c:01:cc:5a:e7:ca:ef:56:5b:b1:65:5b: 58:af:19:d7:2a:19:5e:ab:f4:e5:62:6e:a1:34:69: b7:b4:23:ac:0e:34:4f:d5:fe:19:01:4a:51:fb:84: a3:de:30:f4:d9:79:ec:ed:01:b5:09:f8:fa:d9:c6: 22:93:99:63:ea:d8:32:27:5a:f0:ea:23:5d:5f:27: da:eb:39:d9:b6:0e:10:10:2b:41:64:55:36:c2:52: d9:c3:b7:ac:b6:94:9e:72:ec:8e:c1:19:2d:a4:63: 98:95:19:a6:04:a3:05:95:61:e0:b5:f0:c3:c1:f4: e6:9b:43:bf:8c:f0:88:03:65:5f:9b:92:53:68:1c: 7f:b6:cb:41:e9:60:0c:37:7f:e6:47:27:74:24:52: 3f:1f:8c:ff:4c:03:3a:7d:4e:61:c0:b6:8a:73:da: da:ab:39:0d:39:30:9c:82:e4:e5:11:e4:ad:4f:9c: cd:12:2f:e8:83:ac:3f:06:5e:f8:94:9b:05:31:a9: d6:cd:85:d0:f7:ba:c9:da:fe:60:71:28:a9:07:17: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:FA:26:83:E2:EB:A4:8F:C5:7D:3A:03:4C:D6:7B:3F:A9:FB:81 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c5:4c:97:5e:7a:7f:41:6b:0b:89:4d:25:ac:dd:50:3c:62: cd:ca:d4:2c:f4:cd:7f:d8:d3:57:9f:e2:de:1a:b7:e4:3a:ea: 24:31:4a:86:8f:07:ec:f6:10:2a:c9:d1:5e:f2:23:ae:70:4c: 37:9f:32:14:91:33:e2:19:0a:de:87:87:34:cf:9b:d3:3f:02: 57:8b:bb:14:f9:0a:a1:78:35:e6:e2:85:32:00:4a:3b:eb:ab: 2f:0a:ce:9b:de:4d:f2:cc:3a:85:cd:90:a2:4a:e6:69:4f:b5: dc:84:96:52:7d:c2:c4:e0:66:b4:a8:cd:ad:73:45:53:ea:fa: 6a:91:72:c4:6b:8c:ff:c1:c2:2f:6c:7c:d0:35:d7:8a:6f:57: a8:f9:61:32:29:ef:0d:a8:b5:60:05:94:92:c2:1c:92:88:65: 09:e3:a6:8f:fd:96:30:20:79:b1:e1:a4:3b:cc:32:5c:0a:b5: 0c:0e:0e:f9:0c:61:76:d8:1b:7c:b7:b9:e0:c4:f7:04:6d:f8: b1:14:69:ff:f0:52:1d:35:71:62:e1:15:6e:98:f3:37:54:85: 6d:a4:3f:81:0d:c8:05:20:dc:e4:11:d1:4f:c2:ec:f9:1d:80: 18:66:9a:60:35:2b:ed:e9:71:cd:a3:ab:78:b5:65:42:a4:b1: 06:13:bb:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxlFy8BmQWOI61I66Hhnfp4cwnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjExMTQxMDA3MjJaFw0yNjExMTUxMjEzMjJaMDMxMTAvBgNV BAMTKDE4N0RGQTI2ODNFMkVCQTQ4RkM1N0QzQTAzNENENjdCM0ZBOUZCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxueycdfPSFCXjA+Y6HVsEPms S0GfqISrxLsbcilHVMhYMVydy9BhbrgJruQqd0wBzFrnyu9WW7FlW1ivGdcqGV6r 9OVibqE0abe0I6wONE/V/hkBSlH7hKPeMPTZeeztAbUJ+PrZxiKTmWPq2DInWvDq I11fJ9rrOdm2DhAQK0FkVTbCUtnDt6y2lJ5y7I7BGS2kY5iVGaYEowWVYeC18MPB 9OabQ7+M8IgDZV+bklNoHH+2y0HpYAw3f+ZHJ3QkUj8fjP9MAzp9TmHAtopz2tqr OQ05MJyC5OUR5K1PnM0SL+iDrD8GXviUmwUxqdbNhdD3usna/mBxKKkHF0U5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGH36JoPi66SPxX06A0zWez+p+4EwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfFTJdeen9BawuJTSWs3VA8Ys3K1Cz0zX/Y 01ef4t4at+Q66iQxSoaPB+z2ECrJ0V7yI65wTDefMhSRM+IZCt6HhzTPm9M/AleL uxT5CqF4NebihTIASjvrqy8KzpveTfLMOoXNkKJK5mlPtdyEllJ9wsTgZrSoza1z RVPq+mqRcsRrjP/Bwi9sfNA114pvV6j5YTIp7w2otWAFlJLCHJKIZQnjpo/9ljAg ebHhpDvMMlwKtQwODvkMYXbYG3y3ueDE9wRt+LEUaf/wUh01cWLhFW6Y8zdUhW2k P4ENyAUg3OQR0U/C7PkdgBhmmmA1K+3pcc2jq3i1ZUKksQYTuw0= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:33 2026 by rpki-client