$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: tyS33qSHnGHYaNgSP6FIgHmIBRunKUu89CISLND0O9I= Subject key identifier: B3:94:BD:5B:26:EB:28:0E:D8:1B:6E:BE:5A:E0:C8:31:D1:C8:81:EB Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 6B3EB307F27B5C71612FEC591D8961C9F6D2425E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 14:58:12 +0000 Manifest this update: Sat 14 Nov 2026 14:53:12 +0000 Manifest next update: Sun 15 Nov 2026 18:16:12 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) 2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: IRpVN28UEfk9LqP/4/I2qjPCGjimsFtU3Nx0U3ByJoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:b3:07:f2:7b:5c:71:61:2f:ec:59:1d:89:61:c9:f6:d2:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: Nov 14 14:53:12 2026 GMT Not After : Nov 15 18:16:12 2026 GMT Subject: CN=B394BD5B26EB280ED81B6EBE5AE0C831D1C881EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:4f:77:fe:c3:e5:cd:f6:59:40:db:75:5e: 6f:9f:1a:8c:4b:f0:cf:e9:09:79:19:a5:df:1f:60: 31:63:49:f3:e2:30:ff:71:4d:29:24:c2:21:e1:d4: 08:32:71:30:1b:79:bd:1e:69:25:71:ac:85:ce:26: 05:53:3c:07:69:26:f7:8f:d9:9e:d1:b4:2d:dd:b8: a9:18:ad:70:5f:ce:b3:ff:f0:4e:35:9b:ec:12:a1: e1:66:aa:a9:41:d0:2c:13:2b:71:5a:60:21:66:72: 38:46:8b:ae:72:da:4f:f8:fc:c9:8f:1b:40:09:f2: 4f:63:27:9c:1c:65:c6:5c:af:43:e5:1a:57:5a:fe: 73:c7:32:47:d6:3b:04:7d:43:e4:6f:36:bb:db:51: e0:1c:7c:a4:f6:b3:b6:cc:30:af:e8:35:16:bc:86: a5:a1:bd:af:8a:bb:8a:e1:21:02:b6:4c:4c:42:2c: c0:a6:86:42:c9:7d:22:0d:50:cb:d8:21:1f:1c:c6: b8:2d:e0:7f:57:86:62:ae:ba:41:51:52:30:8e:b3: d1:66:b3:c1:5b:70:a1:0e:0d:eb:91:32:04:8a:df: d4:b5:11:42:1b:38:ac:5a:0e:15:c1:90:22:6c:01: 2b:14:be:1d:aa:63:99:66:99:4b:83:90:ea:bd:67: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:BD:5B:26:EB:28:0E:D8:1B:6E:BE:5A:E0:C8:31:D1:C8:81:EB X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:94:ad:94:63:94:3e:ed:df:5b:eb:42:94:19:64:24:59: e9:ec:5a:ed:32:6a:3b:7b:eb:2e:b8:1e:6b:a7:c2:68:ca:30: ac:0d:7d:2f:21:0f:70:d3:e9:f2:3a:07:a3:8f:f5:83:c1:ba: e6:c2:6d:6f:e2:db:d6:f5:e3:b7:ed:47:32:46:3b:8a:39:8f: 8a:40:c0:40:5b:ea:64:82:7b:2a:4e:ce:e9:67:1e:b2:79:24: 6b:f9:9d:df:86:a7:43:f4:75:72:ab:57:4d:61:ea:47:1a:a2: a1:7a:ff:a2:be:d6:5b:0c:0c:68:13:a1:9e:39:b4:7e:30:07: df:d9:db:ca:71:39:e8:cb:97:6d:88:83:68:d5:b2:bc:83:4f: 0c:7c:fe:d8:98:a9:46:64:13:b8:28:7b:22:f9:74:34:89:f0: d0:e3:49:66:c4:5a:8a:6c:b3:8f:3b:9e:b3:a8:4c:0b:fa:29: 98:0e:2a:24:65:50:60:19:9e:22:2f:89:01:f5:a2:0c:ee:30: 59:57:ca:7d:c6:6a:55:83:57:86:ec:4c:e8:91:ba:47:55:df: 6b:03:eb:8d:fe:9e:bd:d4:91:ec:51:41:fe:2a:11:34:d6:e4: c4:19:07:74:34:9b:ea:3c:c0:e7:4d:2f:f3:b7:7c:14:1e:75: 7c:00:e6:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz6zB/J7XHFhL+xZHYlhyfbSQl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjExMTQxNDUzMTJaFw0yNjExMTUxODE2MTJaMDMxMTAvBgNV BAMTKEIzOTRCRDVCMjZFQjI4MEVEODFCNkVCRTVBRTBDODMxRDFDODgxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7t093/sPlzfZZQNt1Xm+fGoxL 8M/pCXkZpd8fYDFjSfPiMP9xTSkkwiHh1AgycTAbeb0eaSVxrIXOJgVTPAdpJveP 2Z7RtC3duKkYrXBfzrP/8E41m+wSoeFmqqlB0CwTK3FaYCFmcjhGi65y2k/4/MmP G0AJ8k9jJ5wcZcZcr0PlGlda/nPHMkfWOwR9Q+RvNrvbUeAcfKT2s7bMMK/oNRa8 hqWhva+Ku4rhIQK2TExCLMCmhkLJfSINUMvYIR8cxrgt4H9XhmKuukFRUjCOs9Fm s8FbcKEODeuRMgSK39S1EUIbOKxaDhXBkCJsASsUvh2qY5lmmUuDkOq9Z/E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5S9WybrKA7YG26+WuDIMdHIgeswHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDwlK2UY5Q+7d9b60KUGWQkWensWu0yajt7 6y64HmunwmjKMKwNfS8hD3DT6fI6B6OP9YPBuubCbW/i29b147ftRzJGO4o5j4pA wEBb6mSCeypOzulnHrJ5JGv5nd+Gp0P0dXKrV01h6kcaoqF6/6K+1lsMDGgToZ45 tH4wB9/Z28pxOejLl22Ig2jVsryDTwx8/tiYqUZkE7goeyL5dDSJ8NDjSWbEWops s487nrOoTAv6KZgOKiRlUGAZniIviQH1ogzuMFlXyn3GalWDV4bsTOiRukdV32sD 643+nr3UkexRQf4qETTW5MQZB3Q0m+o8wOdNL/O3fBQedXwA5uE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:35:19 2026 by rpki-client