$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft File: 0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft (raw, json) Hash identifier: cvsSRKW67Z8oZqZLjINKSfLqD7aSuNkuADU6jRoQvBk= Subject key identifier: AE:E8:36:2E:F8:72:AE:FF:B8:E7:D8:0C:13:1A:26:7A:2F:3A:FB:E0 Authority key identifier: 0D:BD:00:6C:7D:ED:00:F7:D7:A4:FF:59:9C:57:D7:B6:07:FE:7A:00 Certificate issuer: /CN=0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00 Certificate serial: 7E03FE50769C8BC89CA9A484A881E25A33DE98F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft Manifest number: 10 Signing time: Sat 14 Nov 2026 21:05:54 +0000 Manifest this update: Sat 14 Nov 2026 21:00:54 +0000 Manifest next update: Sun 15 Nov 2026 22:03:54 +0000 Files and hashes: 1: 0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.crl (hash: 7srns9RnZS92oAjryZ5sLSRtQCpXeSudkiliYEjrktI=) 2: 3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa (hash: KqlBW8pJBz/gHV5AqqPwrkKuYM7lpKrdhCzqyFH/31o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.crl rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:03:fe:50:76:9c:8b:c8:9c:a9:a4:84:a8:81:e2:5a:33:de:98:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00 Validity Not Before: Nov 14 21:00:54 2026 GMT Not After : Nov 15 22:03:54 2026 GMT Subject: CN=AEE8362EF872AEFFB8E7D80C131A267A2F3AFBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:ff:f6:40:75:da:34:7d:0a:b5:71:83:7f: 68:2b:46:66:da:2b:8f:c8:60:7a:0a:b2:9b:0d:59: c0:52:8b:5c:ce:ac:e7:81:e8:c2:71:5e:95:78:10: 45:6e:ea:a9:71:b4:8d:8a:cc:7a:af:b5:d4:39:75: c3:c1:c4:d6:5c:c1:bc:d5:3f:97:a2:39:4c:99:c9: cd:40:6c:3e:c2:52:17:70:90:5e:f8:d7:01:ed:ec: c6:2c:ae:ac:16:c4:70:a8:79:b9:4f:ab:50:8f:60: 12:ed:20:d9:dd:a9:9c:26:44:28:b2:b8:10:4f:88: 87:a5:16:07:10:e1:15:15:bc:58:ce:fc:a7:99:93: 5f:83:0a:ef:eb:b6:6a:dd:7f:34:d7:42:5e:b6:bf: c2:f4:a1:d1:63:33:d4:c9:6f:91:0e:84:4c:34:a2: 33:7d:1e:fd:53:7c:1b:1f:57:0f:1d:f6:3b:9f:32: 33:0f:8f:c1:40:c6:c2:df:df:80:2e:ff:da:5a:8a: a7:37:e3:d9:6a:ec:29:53:ab:08:d2:13:68:f5:e5: 24:b0:b3:ae:23:94:2b:e2:13:ff:61:20:4e:2d:5d: 45:fa:69:0f:e6:e4:40:e3:32:ac:c9:dd:e4:5f:5e: 07:01:2e:a4:b3:11:4d:2d:ab:06:09:d1:8e:4b:cb: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E8:36:2E:F8:72:AE:FF:B8:E7:D8:0C:13:1A:26:7A:2F:3A:FB:E0 X509v3 Authority Key Identifier: keyid:0D:BD:00:6C:7D:ED:00:F7:D7:A4:FF:59:9C:57:D7:B6:07:FE:7A:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18d45855-661e-4603-9217-dba609484ba2/1/0DBD006C7DED00F7D7A4FF599C57D7B607FE7A00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:05:42:62:21:2f:64:79:06:1a:65:6d:cb:a3:6d:43:9e:ec: 3b:a2:8b:7d:43:e5:2d:64:7c:09:14:72:0a:42:6a:a3:41:6c: 0a:a2:ca:3a:b3:dd:47:19:69:25:34:29:d4:8b:e6:44:eb:f3: 4e:0d:6f:ca:8f:4d:3c:64:ec:b0:1c:d6:5d:65:5c:9e:30:68: c6:9f:f6:dc:df:65:cd:a0:4d:6c:d6:99:80:c4:14:d5:57:30: c6:76:1f:ed:2b:7a:70:cb:98:6e:d4:3d:87:53:22:90:07:e5: 98:c5:2a:dd:59:b1:19:ba:c7:2e:a2:c4:13:4d:e0:dc:af:0f: 84:9d:a5:71:41:fd:56:86:b7:77:af:d4:5d:15:65:20:6a:e7: d0:ce:af:8e:ac:93:ce:3c:fc:ba:84:9a:4a:be:e2:fd:da:65: f7:a8:5c:b5:c0:f3:9b:9f:db:f0:da:1b:ea:ed:a6:20:7e:ed: 1d:e0:2e:b1:75:4b:de:2f:4a:17:94:f5:c3:7d:9c:cd:f9:ab: e1:13:c0:25:af:c1:0c:d5:2b:5b:f6:61:ec:3d:66:e0:4d:d2: 57:43:3b:de:96:78:38:dc:b2:71:28:87:c8:d0:8b:6b:55:4d: 78:91:b6:8c:43:c7:ee:2d:aa:d9:5d:9c:82:50:84:57:9f:98: 96:57:17:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgP+UHaci8icqaSEqIHiWjPemPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCRDAwNkM3REVEMDBGN0Q3QTRGRjU5OUM1N0Q3QjYw N0ZFN0EwMDAeFw0yNjExMTQyMTAwNTRaFw0yNjExMTUyMjAzNTRaMDMxMTAvBgNV BAMTKEFFRTgzNjJFRjg3MkFFRkZCOEU3RDgwQzEzMUEyNjdBMkYzQUZCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E//2QHXaNH0KtXGDf2grRmba K4/IYHoKspsNWcBSi1zOrOeB6MJxXpV4EEVu6qlxtI2KzHqvtdQ5dcPBxNZcwbzV P5eiOUyZyc1AbD7CUhdwkF741wHt7MYsrqwWxHCoeblPq1CPYBLtINndqZwmRCiy uBBPiIelFgcQ4RUVvFjO/KeZk1+DCu/rtmrdfzTXQl62v8L0odFjM9TJb5EOhEw0 ojN9Hv1TfBsfVw8d9jufMjMPj8FAxsLf34Au/9paiqc349lq7ClTqwjSE2j15SSw s64jlCviE/9hIE4tXUX6aQ/m5EDjMqzJ3eRfXgcBLqSzEU0tqwYJ0Y5LywJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrug2Lvhyrv+459gMExomei86++AwHwYDVR0j BBgwFoAUDb0AbH3tAPfXpP9ZnFfXtgf+egAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThkNDU4NTUtNjYxZS00NjAzLTkyMTctZGJhNjA5NDg0YmEyLzEvMERCRDAwNkM3 REVEMDBGN0Q3QTRGRjU5OUM1N0Q3QjYwN0ZFN0EwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8wREJEMDA2QzdERUQwMEY3RDdBNEZGNTk5QzU3RDdCNjA3RkU3 QTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThkNDU4NTUtNjYxZS00NjAzLTky MTctZGJhNjA5NDg0YmEyLzEvMERCRDAwNkM3REVEMDBGN0Q3QTRGRjU5OUM1N0Q3 QjYwN0ZFN0EwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQFQmIhL2R5BhplbcujbUOe7Duii31D5S1k fAkUcgpCaqNBbAqiyjqz3UcZaSU0KdSL5kTr804Nb8qPTTxk7LAc1l1lXJ4waMaf 9tzfZc2gTWzWmYDEFNVXMMZ2H+0renDLmG7UPYdTIpAH5ZjFKt1ZsRm6xy6ixBNN 4NyvD4SdpXFB/VaGt3ev1F0VZSBq59DOr46sk848/LqEmkq+4v3aZfeoXLXA85uf 2/DaG+rtpiB+7R3gLrF1S94vSheU9cN9nM35q+ETwCWvwQzVK1v2Yew9ZuBN0ldD O96WeDjcsnEoh8jQi2tVTXiRtoxDx+4tqtldnIJQhFefmJZXF3c= -----END CERTIFICATE-----Generated at Sun Nov 15 15:36:04 2026 by rpki-client