$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json) Hash identifier: WRSQ31Q3YNakNKns9Ep58M0XP8NU+yVO07b5Irn9vNw= Subject key identifier: AD:3A:F8:A1:E7:F2:4D:42:D9:CA:6B:BD:D9:5B:B7:E1:AF:64:C5:71 Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D Certificate serial: 3A3E77BBB870309114C0BA0A25316D62DBB1E2F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 11:39:10 +0000 Manifest this update: Sat 14 Nov 2026 11:34:10 +0000 Manifest next update: Sun 15 Nov 2026 12:38:10 +0000 Files and hashes: 1: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: tVIkubbdb6ryQgNtx2VV+9KEoicQsnjkMLKl63DIUUo=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3e:77:bb:b8:70:30:91:14:c0:ba:0a:25:31:6d:62:db:b1:e2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D Validity Not Before: Nov 14 11:34:10 2026 GMT Not After : Nov 15 12:38:10 2026 GMT Subject: CN=AD3AF8A1E7F24D42D9CA6BBDD95BB7E1AF64C571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:a5:89:e9:d9:7f:33:0e:b6:fe:10:c2:f6: 4d:92:64:55:a8:bb:5a:51:cd:53:be:74:7e:03:d9: eb:36:7c:b8:1e:10:7d:4e:4c:8e:62:59:f9:85:d9: b1:8c:71:bd:f6:1a:d7:e1:a8:f3:4f:c7:88:89:66: dc:61:14:c6:ca:93:b6:8e:72:99:83:01:b0:96:8a: 0b:d0:29:1f:35:f7:ef:99:a8:0b:f4:82:be:84:b7: a9:92:ce:ea:fa:8d:46:82:c6:78:7d:15:35:30:31: bc:86:fe:44:f8:19:43:ea:c1:7e:23:72:64:13:f8: 7c:8d:0a:a5:db:9d:c1:12:ac:5c:fe:6b:2c:ee:43: 2a:7a:17:37:3d:b4:2f:30:fe:4b:95:c4:db:1b:55: bf:d8:90:fa:3b:6a:66:d8:fa:da:f2:84:8a:55:86: 0c:0e:2d:ae:d7:10:5c:95:cb:b4:17:56:bf:01:cc: d1:83:a0:b1:37:8c:35:a8:e7:b6:9e:a2:e1:00:8d: b0:d9:28:be:c8:bc:f9:42:17:b9:a2:58:d2:9a:34: 03:a5:b1:32:b5:4c:ff:79:dd:11:fb:3e:c1:af:d7: e0:63:e3:3c:03:af:15:98:49:5d:f2:86:cd:2e:31: 00:56:a7:6f:7c:e5:12:89:e3:c5:59:80:b1:ed:a7: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:F8:A1:E7:F2:4D:42:D9:CA:6B:BD:D9:5B:B7:E1:AF:64:C5:71 X509v3 Authority Key Identifier: keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ed:81:e5:e1:a6:2a:75:f2:c1:7f:32:03:f5:4f:e1:6a:37: 1e:02:96:98:38:a4:8a:17:f7:da:63:eb:5f:0e:f9:1e:63:8f: d2:ad:a9:c6:86:07:22:37:e9:62:78:71:44:63:11:da:bc:e2: 71:63:f3:38:bd:d9:38:74:05:f5:4b:79:a5:ad:4d:05:ec:dd: 93:0d:5f:df:2f:f7:e4:11:06:80:1c:6a:6a:40:e9:5b:ab:3c: 93:49:8e:c1:f9:59:93:b6:65:f7:b4:32:08:49:26:6d:18:0e: 79:dc:d7:30:cd:d8:f6:d7:b5:b6:e6:02:8e:ed:4a:9f:5d:12: 7e:8f:7c:8d:15:80:e6:c3:ec:ce:00:ba:3f:67:11:c1:72:35: f7:8a:a2:bc:01:6c:66:06:10:3e:e2:d8:a7:a7:62:38:7c:a5: 2d:76:6a:e2:78:71:f4:18:69:54:24:39:dc:b9:d2:72:1d:d8: 22:b0:9e:8f:a0:95:2b:87:27:98:fa:14:a4:f1:62:0b:7b:9d: bd:3a:f9:07:15:e1:db:81:84:52:10:8f:75:a2:44:05:0a:38: 32:7e:27:2a:5a:ec:29:4e:a3:4a:5a:5d:cf:82:ac:e7:6d:52: b9:87:bf:bb:bc:23:ab:f6:d7:21:f0:17:ff:9a:ac:fe:ae:c7: c6:7f:66:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOj53u7hwMJEUwLoKJTFtYtux4vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz ODVGODk2RDAeFw0yNjExMTQxMTM0MTBaFw0yNjExMTUxMjM4MTBaMDMxMTAvBgNV BAMTKEFEM0FGOEExRTdGMjRENDJEOUNBNkJCREQ5NUJCN0UxQUY2NEM1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUwqWJ6dl/Mw62/hDC9k2SZFWo u1pRzVO+dH4D2es2fLgeEH1OTI5iWfmF2bGMcb32GtfhqPNPx4iJZtxhFMbKk7aO cpmDAbCWigvQKR819++ZqAv0gr6Et6mSzur6jUaCxnh9FTUwMbyG/kT4GUPqwX4j cmQT+HyNCqXbncESrFz+ayzuQyp6Fzc9tC8w/kuVxNsbVb/YkPo7ambY+tryhIpV hgwOLa7XEFyVy7QXVr8BzNGDoLE3jDWo57aeouEAjbDZKL7IvPlCF7miWNKaNAOl sTK1TP953RH7PsGv1+Bj4zwDrxWYSV3yhs0uMQBWp2985RKJ48VZgLHtp2S9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTr4oefyTULZymu92Vu34a9kxXEwHwYDVR0j BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1 NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4 OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4 NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFntgeXhpip18sF/MgP1T+FqNx4Clpg4pIoX 99pj618O+R5jj9KtqcaGByI36WJ4cURjEdq84nFj8zi92Th0BfVLeaWtTQXs3ZMN X98v9+QRBoAcampA6VurPJNJjsH5WZO2Zfe0MghJJm0YDnnc1zDN2PbXtbbmAo7t Sp9dEn6PfI0VgObD7M4Auj9nEcFyNfeKorwBbGYGED7i2KenYjh8pS12auJ4cfQY aVQkOdy50nId2CKwno+glSuHJ5j6FKTxYgt7nb06+QcV4duBhFIQj3WiRAUKODJ+ Jypa7ClOo0paXc+CrOdtUrmHv7u8I6v21yHwF/+arP6ux8Z/ZvY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:22:44 2026 by rpki-client