$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: ByOji9V7xo9kWR0B9kizpNuQNuUEIqjpmLzxyMvBc38= Subject key identifier: 31:28:59:E1:E2:06:FE:CD:C9:8A:75:5C:30:34:1F:E8:EB:87:84:20 Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 1E42321F2B74643C91D7D387EAF7F4D7E81E32E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 16:50:31 +0000 Manifest this update: Sat 14 Nov 2026 16:45:31 +0000 Manifest next update: Sun 15 Nov 2026 20:09:31 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: OuTgQyIR3Khdowb6MjrTkiwg5G0QVWt/XSyCm1eA7yA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:42:32:1f:2b:74:64:3c:91:d7:d3:87:ea:f7:f4:d7:e8:1e:32:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: Nov 14 16:45:31 2026 GMT Not After : Nov 15 20:09:31 2026 GMT Subject: CN=312859E1E206FECDC98A755C30341FE8EB878420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:b4:7c:52:4a:ea:c5:a9:cc:f0:4f:32:2c: 8c:19:2f:4e:98:50:da:77:ba:22:72:35:b3:a4:88: 39:c4:fd:07:8d:b6:c4:df:37:66:30:27:63:ce:24: 32:d5:0a:60:4a:38:98:dc:ba:ec:15:41:04:ea:5a: 63:1b:2f:cc:1d:8b:7b:fa:65:4e:97:0b:1f:80:d0: ad:18:5d:53:c4:70:ac:d5:f1:40:24:e6:89:d3:7e: 5f:a0:10:95:e0:20:fd:03:5e:c7:9b:cd:18:64:59: 1a:f5:65:f3:3a:10:80:8f:d3:eb:0e:37:1e:7c:57: 87:52:25:a5:fa:bf:38:d1:82:7c:c4:1f:04:79:ee: b0:59:4f:f6:0e:63:30:d5:72:71:1d:08:04:af:9a: ae:68:ff:72:6b:85:d4:5f:31:af:8c:18:b3:61:1d: 13:3c:ce:b3:3b:0e:ef:fb:5e:a9:5b:57:07:1a:3b: 93:70:e0:fa:7a:e4:aa:9f:81:bb:f4:43:67:13:b5: 08:8b:6d:f3:19:a7:a8:67:de:53:14:ad:76:eb:de: 02:07:27:50:a3:a8:75:09:19:41:53:1e:0f:9f:76: fc:97:33:94:2b:16:4b:c8:57:15:87:6c:d7:c8:e9: 20:30:75:a4:32:63:06:93:7f:b3:52:20:2e:ca:a1: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:28:59:E1:E2:06:FE:CD:C9:8A:75:5C:30:34:1F:E8:EB:87:84:20 X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:33:28:80:e8:27:d7:da:79:79:c7:de:fa:e1:43:84:4b: 7d:8b:34:85:e4:36:65:b4:70:b1:b6:16:00:39:48:33:53:89: f4:73:4e:b5:7f:a8:81:f0:eb:39:4c:25:94:fa:27:b8:06:f6: be:04:29:17:d4:0c:55:d4:ff:44:d8:36:ae:ae:18:b6:bc:29: e8:3c:5e:ec:af:a6:2a:46:24:07:ef:12:b9:28:9b:f5:70:9d: 6d:72:f7:99:b9:57:43:2b:a5:9b:81:18:c0:e6:04:f6:59:a5: dd:90:e4:36:45:98:18:ed:e4:48:02:f4:5f:e0:f8:41:9f:39: ef:c3:b1:3b:02:9f:cd:fc:e2:31:24:eb:2e:93:d2:ca:55:c2: 9b:16:29:c5:13:d8:98:9c:fc:19:18:b2:64:bb:8a:1b:aa:72: 56:0d:cd:a8:79:da:61:70:93:2e:1b:cd:cf:c7:9e:c6:b7:fa: 16:2a:21:d4:d6:bc:e1:7b:90:e9:65:42:c0:bf:47:b1:b6:2f: 22:41:e5:90:cc:f9:0f:24:ec:8e:2f:cb:10:03:57:f8:03:7a: 6a:6e:8f:6e:90:74:f6:60:c6:b7:74:2e:fb:d9:e9:c5:86:d4: b5:33:9f:ea:9b:81:ed:6d:e7:61:bb:f7:75:2b:ed:83:f2:b2: 30:2e:71:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkIyHyt0ZDyR19OH6vf01+geMuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjExMTQxNjQ1MzFaFw0yNjExMTUyMDA5MzFaMDMxMTAvBgNV BAMTKDMxMjg1OUUxRTIwNkZFQ0RDOThBNzU1QzMwMzQxRkU4RUI4Nzg0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmbR8UkrqxanM8E8yLIwZL06Y UNp3uiJyNbOkiDnE/QeNtsTfN2YwJ2POJDLVCmBKOJjcuuwVQQTqWmMbL8wdi3v6 ZU6XCx+A0K0YXVPEcKzV8UAk5onTfl+gEJXgIP0DXsebzRhkWRr1ZfM6EICP0+sO Nx58V4dSJaX6vzjRgnzEHwR57rBZT/YOYzDVcnEdCASvmq5o/3JrhdRfMa+MGLNh HRM8zrM7Du/7XqlbVwcaO5Nw4Pp65Kqfgbv0Q2cTtQiLbfMZp6hn3lMUrXbr3gIH J1CjqHUJGUFTHg+fdvyXM5QrFkvIVxWHbNfI6SAwdaQyYwaTf7NSIC7KoUg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMShZ4eIG/s3JinVcMDQf6OuHhCAwHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVNMyiA6CfX2nl5x9764UOES32LNIXkNmW0 cLG2FgA5SDNTifRzTrV/qIHw6zlMJZT6J7gG9r4EKRfUDFXU/0TYNq6uGLa8Keg8 XuyvpipGJAfvErkom/VwnW1y95m5V0MrpZuBGMDmBPZZpd2Q5DZFmBjt5EgC9F/g +EGfOe/DsTsCn8384jEk6y6T0spVwpsWKcUT2Jic/BkYsmS7ihuqclYNzah52mFw ky4bzc/Hnsa3+hYqIdTWvOF7kOllQsC/R7G2LyJB5ZDM+Q8k7I4vyxADV/gDempu j26QdPZgxrd0LvvZ6cWG1LUzn+qbge1t52G793Ur7YPysjAucfE= -----END CERTIFICATE-----Generated at Sun Nov 15 01:14:28 2026 by rpki-client