$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: Yy78Im/u5yTxCSKq2nu85t2OrWaFbgw88zrYf2/oiPc= Subject key identifier: 06:DE:85:C0:4F:73:D4:65:AC:89:A2:81:79:A3:56:B4:56:C8:12:92 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 492E2210B4BDA05E2DD128A84409F0A57BE66216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 13:05:50 +0000 Manifest this update: Sat 14 Nov 2026 13:00:50 +0000 Manifest next update: Sun 15 Nov 2026 16:53:50 +0000 Files and hashes: 1: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 2: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 3: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: /OedNfEmHZ+l4oTDvO5JFbi5lq2iPLalk32ieLmwv3c=) 4: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2e:22:10:b4:bd:a0:5e:2d:d1:28:a8:44:09:f0:a5:7b:e6:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Nov 14 13:00:50 2026 GMT Not After : Nov 15 16:53:50 2026 GMT Subject: CN=06DE85C04F73D465AC89A28179A356B456C81292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:5d:99:58:f4:78:b3:9b:58:1b:71:62:af: 40:ec:4e:9d:93:65:b7:1f:0b:13:5d:48:7f:04:0f: 9b:eb:f4:ca:ea:d7:29:ff:04:0e:c1:a7:e5:58:02: 58:ce:e4:f0:94:9f:8d:6e:35:6a:a3:a8:a9:fb:3e: 50:29:88:ca:c5:8c:96:04:b9:6a:c4:e7:88:06:1e: 98:89:63:c4:3b:e2:3a:15:a0:09:3d:0a:b7:20:e3: 13:6f:66:fc:e6:84:22:78:77:2c:4d:ad:0f:98:8d: e0:5d:e7:d8:11:28:40:e8:ea:33:86:a3:1b:78:5c: 6f:8c:7f:a7:39:32:f3:ba:1c:14:5f:52:a0:f9:dc: e6:6e:55:5b:6b:25:ed:dc:42:76:c7:45:3c:f3:92: aa:f0:0b:29:bf:96:78:61:70:99:15:10:51:50:2c: 34:b1:65:ff:a7:a6:bc:7d:74:40:5e:23:3f:41:7d: e1:55:7a:7c:8b:51:ca:ad:3e:9f:0d:b5:91:46:f4: d3:b6:ad:b5:c7:c1:e7:c4:c6:df:bb:3f:ba:c4:0c: be:6d:62:38:ab:2d:97:7d:18:4a:34:85:74:aa:26: ca:41:34:05:2f:c4:86:64:76:02:11:64:45:f5:00: 35:1d:72:37:fa:4b:10:ce:aa:c8:ee:3d:5c:fb:4f: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DE:85:C0:4F:73:D4:65:AC:89:A2:81:79:A3:56:B4:56:C8:12:92 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:28:77:6e:cd:05:0c:cd:cc:5a:4d:b0:49:26:62:41:86:0e: a1:1c:6b:c2:98:43:15:83:84:bf:1a:5c:8e:5b:d1:45:ea:6b: e4:6e:f2:f4:48:3c:5e:88:be:50:f8:23:8f:4c:1f:51:c1:ec: 98:ba:9e:04:f8:c1:2f:b2:ab:e0:b1:df:51:22:fb:5a:c8:10: 45:61:12:0d:95:ed:b7:84:00:a9:04:14:a9:46:57:f6:aa:e5: d3:f1:a4:6e:fa:2d:c6:01:1b:96:ee:41:ee:47:ff:51:f4:07: 01:66:8e:6e:2d:16:7e:27:c1:8c:6d:bc:cb:27:97:11:1d:ab: 51:e2:7a:bd:e0:90:ea:ff:fc:72:2e:6e:7a:3d:2b:fa:1c:b2: bb:76:6d:0b:b7:9a:7b:9b:14:44:7e:dd:ab:57:2e:63:ba:f1: 06:87:25:8c:7e:4d:b4:74:e5:c9:3f:40:c6:d1:66:85:8e:5c: b6:bf:2f:0d:8a:b2:d5:67:27:19:29:33:fc:a4:2a:50:10:55: 0b:06:c4:84:30:a7:e7:2b:33:3e:d3:dc:be:e2:4c:42:7c:ab: 55:d3:fe:00:82:23:1b:29:aa:9c:d3:45:eb:02:21:ec:55:c2: eb:8c:79:13:ee:a6:85:37:2e:0c:f5:6d:d7:7c:00:80:80:41: 2f:70:6c:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSS4iELS9oF4t0SioRAnwpXvmYhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjExMTQxMzAwNTBaFw0yNjExMTUxNjUzNTBaMDMxMTAvBgNV BAMTKDA2REU4NUMwNEY3M0Q0NjVBQzg5QTI4MTc5QTM1NkI0NTZDODEyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfl2ZWPR4s5tYG3Fir0DsTp2T ZbcfCxNdSH8ED5vr9Mrq1yn/BA7Bp+VYAljO5PCUn41uNWqjqKn7PlApiMrFjJYE uWrE54gGHpiJY8Q74joVoAk9Crcg4xNvZvzmhCJ4dyxNrQ+YjeBd59gRKEDo6jOG oxt4XG+Mf6c5MvO6HBRfUqD53OZuVVtrJe3cQnbHRTzzkqrwCym/lnhhcJkVEFFQ LDSxZf+nprx9dEBeIz9BfeFVenyLUcqtPp8NtZFG9NO2rbXHwefExt+7P7rEDL5t YjirLZd9GEo0hXSqJspBNAUvxIZkdgIRZEX1ADUdcjf6SxDOqsjuPVz7T9IVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBt6FwE9z1GWsiaKBeaNWtFbIEpIwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIood27NBQzNzFpNsEkmYkGGDqEca8KYQxWD hL8aXI5b0UXqa+Ru8vRIPF6IvlD4I49MH1HB7Ji6ngT4wS+yq+Cx31Ei+1rIEEVh Eg2V7beEAKkEFKlGV/aq5dPxpG76LcYBG5buQe5H/1H0BwFmjm4tFn4nwYxtvMsn lxEdq1Hier3gkOr//HIubno9K/ocsrt2bQu3mnubFER+3atXLmO68QaHJYx+TbR0 5ck/QMbRZoWOXLa/Lw2KstVnJxkpM/ykKlAQVQsGxIQwp+crMz7T3L7iTEJ8q1XT /gCCIxspqpzTResCIexVwuuMeRPupoU3Lgz1bdd8AICAQS9wbJw= -----END CERTIFICATE-----Generated at Sun Nov 15 10:57:18 2026 by rpki-client