$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: b46tccu+EdBTqHAnp7vWMju9X8CpTezcHxuvKhhvJTQ= Subject key identifier: E0:FB:3C:61:CB:AA:6B:B1:BC:69:F1:2B:19:34:37:37:B6:77:D1:4E Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 53FB4D23949690C191035ABC20F06927DC537907 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:48:07 +0000 Manifest this update: Sat 14 Nov 2026 18:43:07 +0000 Manifest next update: Sun 15 Nov 2026 21:02:07 +0000 Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) 2: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: u5sRue+NcmrR582xqHErJ9zRFPpDwE+sPb58X5v6ZA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fb:4d:23:94:96:90:c1:91:03:5a:bc:20:f0:69:27:dc:53:79:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: Nov 14 18:43:07 2026 GMT Not After : Nov 15 21:02:07 2026 GMT Subject: CN=E0FB3C61CBAA6BB1BC69F12B19343737B677D14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:70:ec:d6:69:3d:51:a5:70:b6:98:d7:bc: 27:ad:7e:73:5c:01:25:7e:02:04:26:3c:ac:6c:1d: 62:5b:dc:d0:e5:94:bb:c8:3d:3a:40:40:90:85:b4: 99:ca:a2:9d:43:82:ca:24:6f:72:22:83:64:7f:bc: fd:03:d8:9a:69:e8:0c:3e:75:75:00:68:4d:08:70: c3:8c:16:94:cc:2a:e6:3d:11:47:f3:79:17:f2:ff: bc:57:bf:e9:71:a8:5b:7f:06:4d:f7:b0:9c:cf:af: 21:71:b8:8c:8d:36:84:66:e0:ae:6a:24:00:74:fb: 89:ec:36:49:79:9d:1b:f6:fb:c5:f0:f3:f9:d5:aa: 58:f4:88:c4:9f:b3:0c:22:a1:fe:a3:9b:b0:be:c7: de:3c:61:77:38:d0:af:00:0b:d0:d6:06:d4:de:e7: a4:fa:9b:59:dc:14:fa:28:1c:14:64:f9:7f:55:bd: d9:fa:f8:71:cc:37:8c:2a:ae:e8:01:5b:1c:8a:38: 7b:4c:58:a4:c7:9b:82:cd:ef:44:a3:ec:22:dd:58: 51:71:0c:ca:92:74:e9:51:2b:3c:98:b0:a7:ea:45: b7:28:c0:04:a8:d6:df:be:aa:a9:35:ee:36:6e:88: b1:af:8a:8c:a2:09:66:01:51:33:c5:c8:1c:37:ed: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FB:3C:61:CB:AA:6B:B1:BC:69:F1:2B:19:34:37:37:B6:77:D1:4E X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:82:12:79:f4:92:57:87:3b:5e:f3:31:4a:c9:1e:4b:b6: 93:9c:86:12:d0:9c:36:d0:35:ae:36:1e:4d:ff:97:c5:d5:91: b4:cf:db:a2:cc:7d:3d:e4:56:24:72:38:44:62:44:aa:61:9b: 75:7f:19:ae:fb:51:25:2b:9a:d3:60:e2:ed:c2:b3:ae:37:8c: d4:9c:5a:f4:a6:fd:02:73:35:c1:74:8d:27:60:26:4d:74:91: 52:e4:73:4e:a3:0b:fa:3e:42:6f:15:32:a8:18:4c:c4:b1:1f: 07:33:54:6f:72:60:24:92:7c:9e:a6:fe:9f:66:b5:62:a8:99: ef:de:43:3f:3c:45:e5:4c:7d:a8:71:3c:df:2e:c4:35:6e:6a: 19:4b:ae:bb:22:59:a2:6a:da:1d:87:80:64:1b:62:87:4b:65: 3a:82:2b:cb:f2:97:f1:82:67:ce:58:4a:1d:9f:9e:98:4c:86: d6:71:8d:49:d5:9f:77:83:2c:38:6a:cf:73:c2:a1:31:b2:39: 36:ba:97:7c:1a:2a:9a:c7:18:37:e7:6c:5b:aa:a7:61:98:6e: a7:56:86:ca:5a:ed:d3:1e:8e:cb:74:d2:1f:8e:7e:41:7a:82: 00:20:25:5d:42:6f:3d:39:e4:54:67:3b:01:70:2f:c3:16:8f: 23:22:37:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/tNI5SWkMGRA1q8IPBpJ9xTeQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjExMTQxODQzMDdaFw0yNjExMTUyMTAyMDdaMDMxMTAvBgNV BAMTKEUwRkIzQzYxQ0JBQTZCQjFCQzY5RjEyQjE5MzQzNzM3QjY3N0QxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4XDs1mk9UaVwtpjXvCetfnNc ASV+AgQmPKxsHWJb3NDllLvIPTpAQJCFtJnKop1Dgsokb3Iig2R/vP0D2Jpp6Aw+ dXUAaE0IcMOMFpTMKuY9EUfzeRfy/7xXv+lxqFt/Bk33sJzPryFxuIyNNoRm4K5q JAB0+4nsNkl5nRv2+8Xw8/nVqlj0iMSfswwiof6jm7C+x948YXc40K8AC9DWBtTe 56T6m1ncFPooHBRk+X9Vvdn6+HHMN4wqrugBWxyKOHtMWKTHm4LN70Sj7CLdWFFx DMqSdOlRKzyYsKfqRbcowASo1t++qqk17jZuiLGvioyiCWYBUTPFyBw37TitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ps8Ycuqa7G8afErGTQ3N7Z30U4wHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkXghJ59JJXhzte8zFKyR5LtpOchhLQnDbQ Na42Hk3/l8XVkbTP26LMfT3kViRyOERiRKphm3V/Ga77USUrmtNg4u3Cs643jNSc WvSm/QJzNcF0jSdgJk10kVLkc06jC/o+Qm8VMqgYTMSxHwczVG9yYCSSfJ6m/p9m tWKome/eQz88ReVMfahxPN8uxDVuahlLrrsiWaJq2h2HgGQbYodLZTqCK8vyl/GC Z85YSh2fnphMhtZxjUnVn3eDLDhqz3PCoTGyOTa6l3waKprHGDfnbFuqp2GYbqdW hspa7dMejst00h+OfkF6ggAgJV1Cbz055FRnOwFwL8MWjyMiN4A= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:25 2026 by rpki-client