$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: E7pBjnZP1t1voweWTLEEauuHU2IbT7y7Rg5ZruzYF50= Subject key identifier: 0E:5D:37:69:D7:3F:BC:72:AF:F8:71:45:0B:79:EB:51:D9:25:F8:BF Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 243DD6B97F376886B415A2B87B944FDFDF38DFC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:56:27 +0000 Manifest this update: Sun 15 Nov 2026 09:51:27 +0000 Manifest next update: Mon 16 Nov 2026 10:36:27 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) 2: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: 7nsKryKL1//18kaTJkihSnVVhHmL2yD9ZSu2MShomlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3d:d6:b9:7f:37:68:86:b4:15:a2:b8:7b:94:4f:df:df:38:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Nov 15 09:51:27 2026 GMT Not After : Nov 16 10:36:27 2026 GMT Subject: CN=0E5D3769D73FBC72AFF871450B79EB51D925F8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:0f:0d:5d:0e:47:3b:b8:81:32:d4:cf:c0: 34:75:66:c0:2c:6c:74:73:a3:82:81:72:f2:f6:9a: 84:40:d5:ee:d9:94:11:9e:55:ac:c7:b5:0b:c1:cc: 56:fb:d6:b4:dc:fc:50:79:bc:5e:63:62:00:38:a2: 71:e6:4a:d2:de:07:95:98:4a:a0:a5:b0:55:ed:b6: 2e:14:a5:f3:21:97:ce:01:63:0a:b4:c1:96:dd:78: fc:b5:b4:95:8e:85:a8:99:25:45:c7:be:28:63:a2: 8d:fb:c1:dc:b6:60:14:80:6a:0a:99:7d:1f:c8:8f: bd:b9:c2:72:8e:1c:da:6d:c0:c2:ab:0d:a3:4d:b1: fa:78:48:1a:a7:dc:e0:c8:39:a4:b4:a4:41:b7:89: ad:eb:52:b9:65:0e:f5:92:31:9d:b8:ee:e6:74:ca: 69:96:ca:a7:c4:05:50:e8:d9:a3:4b:dc:8c:d8:48: ec:56:a7:74:64:39:c3:56:64:f7:78:f9:1d:ce:d2: 97:8d:cd:31:5f:0c:26:b7:53:99:c7:ae:47:4b:d4: 6d:b9:64:27:6a:51:bc:31:1d:d3:d2:63:3d:a1:d4: 37:a2:bd:a8:fc:03:80:e6:7b:2b:05:4b:5f:b2:5e: 27:b3:64:26:3a:46:30:08:15:50:07:06:77:61:68: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:37:69:D7:3F:BC:72:AF:F8:71:45:0B:79:EB:51:D9:25:F8:BF X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:72:dc:3c:cb:0c:7b:43:0a:c4:ed:ac:b4:10:18:61:71:b0: 49:2e:36:9c:51:06:93:83:33:43:12:51:cc:df:ad:86:0d:12: 0f:d4:b0:24:06:8c:84:b6:f2:b7:30:0d:26:08:dc:5f:4d:73: 3c:f8:19:50:cd:3f:5c:6d:f1:c8:ee:03:44:47:e3:dc:21:98: 28:86:fe:2a:0f:05:86:d9:b5:2a:79:17:33:31:e3:7e:76:58: 72:48:6e:7f:28:36:9f:69:cf:e3:aa:6f:fe:bf:1e:82:29:34: ac:a0:6f:15:81:66:61:07:39:48:d3:b5:1e:f7:ff:92:b2:22: bd:47:ad:a5:4b:8f:7a:28:09:c9:d6:98:be:33:6e:bb:c6:60: a6:f6:40:86:fb:f5:7c:da:48:ef:30:66:e2:38:bc:52:9f:4a: ac:c0:b2:68:f2:b1:c2:e3:c4:c1:66:29:34:f4:8a:ae:16:50: 21:e7:95:67:7f:6f:6f:25:96:f2:d9:39:92:19:ee:b2:5b:0c: 76:03:e8:35:d7:8c:f2:b6:8e:97:20:7f:85:1e:fa:5f:65:55: db:c5:75:01:c2:a5:87:04:14:13:c1:59:5d:cd:af:1c:35:9f: 9b:23:ce:f7:85:8d:bf:d4:36:71:97:ed:d7:b9:58:55:51:ea: d8:7f:d9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJD3WuX83aIa0FaK4e5RP398438YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjExMTUwOTUxMjdaFw0yNjExMTYxMDM2MjdaMDMxMTAvBgNV BAMTKDBFNUQzNzY5RDczRkJDNzJBRkY4NzE0NTBCNzlFQjUxRDkyNUY4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQw8NXQ5HO7iBMtTPwDR1ZsAs bHRzo4KBcvL2moRA1e7ZlBGeVazHtQvBzFb71rTc/FB5vF5jYgA4onHmStLeB5WY SqClsFXtti4UpfMhl84BYwq0wZbdePy1tJWOhaiZJUXHvihjoo37wdy2YBSAagqZ fR/Ij725wnKOHNptwMKrDaNNsfp4SBqn3ODIOaS0pEG3ia3rUrllDvWSMZ247uZ0 ymmWyqfEBVDo2aNL3IzYSOxWp3RkOcNWZPd4+R3O0peNzTFfDCa3U5nHrkdL1G25 ZCdqUbwxHdPSYz2h1Deivaj8A4DmeysFS1+yXiezZCY6RjAIFVAHBndhaKPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDl03adc/vHKv+HFFC3nrUdkl+L8wHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhy3DzLDHtDCsTtrLQQGGFxsEkuNpxRBpOD M0MSUczfrYYNEg/UsCQGjIS28rcwDSYI3F9Nczz4GVDNP1xt8cjuA0RH49whmCiG /ioPBYbZtSp5FzMx4352WHJIbn8oNp9pz+Oqb/6/HoIpNKygbxWBZmEHOUjTtR73 /5KyIr1HraVLj3ooCcnWmL4zbrvGYKb2QIb79XzaSO8wZuI4vFKfSqzAsmjyscLj xMFmKTT0iq4WUCHnlWd/b28llvLZOZIZ7rJbDHYD6DXXjPK2jpcgf4Ue+l9lVdvF dQHCpYcEFBPBWV3Nrxw1n5sjzveFjb/UNnGX7de5WFVR6th/2TQ= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:52 2026 by rpki-client