$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft File: CDA698011D10F436E3BBC31664239B3150C53C19.mft (raw, json) Hash identifier: DI/5VdVGm7GXjiWhotYtu+KAWCbqMGn/ojskLaBG9XU= Subject key identifier: 47:A3:04:01:71:98:97:8E:23:10:45:CD:39:D5:83:52:7D:F1:C2:B2 Authority key identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 Certificate issuer: /CN=CDA698011D10F436E3BBC31664239B3150C53C19 Certificate serial: 4623D7D6BAE41C066433EED1725DAF78B897A323 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft Manifest number: 22 Signing time: Sat 14 Nov 2026 10:27:39 +0000 Manifest this update: Sat 14 Nov 2026 10:22:39 +0000 Manifest next update: Sun 15 Nov 2026 14:04:39 +0000 Files and hashes: 1: 3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa (hash: ZVz1K3VmS9pSvR4B6qvtVOc38rvIm8D4hBzA2h5rzlI=) 2: CDA698011D10F436E3BBC31664239B3150C53C19.crl (hash: kTkY2GJDpBu7x6lozEsuO1jgPuoZ1k1QpLzxn+J1wgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:23:d7:d6:ba:e4:1c:06:64:33:ee:d1:72:5d:af:78:b8:97:a3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA698011D10F436E3BBC31664239B3150C53C19 Validity Not Before: Nov 14 10:22:39 2026 GMT Not After : Nov 15 14:04:39 2026 GMT Subject: CN=47A304017198978E231045CD39D583527DF1C2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:ad:c2:6b:a7:93:39:ed:a9:d6:8b:1c:c2: d5:5a:9c:b3:a0:54:ad:5f:b2:41:22:c4:82:e4:10: d6:09:6f:27:95:9c:19:69:fb:0a:58:06:3b:0e:28: 34:39:1b:37:65:1e:98:d6:a3:9d:6a:34:2b:c9:0b: e1:c3:84:e7:8f:f9:46:c7:21:75:dd:82:71:93:43: f8:7a:89:e1:e3:66:f4:87:a7:8f:1e:6e:c1:5d:e8: 84:a0:d0:b8:c2:c0:4e:fe:ad:f8:22:f3:64:d9:da: 03:2f:a5:07:40:ad:01:03:8d:1d:c7:40:cb:9a:4a: 31:ef:4b:d0:f7:e3:e9:9c:58:c7:b4:a1:e4:df:29: f8:be:39:95:58:93:ee:8a:58:c3:91:fe:8a:b1:82: 69:40:91:97:7e:28:fb:2b:39:85:3d:2e:f8:23:bf: 10:03:f4:f6:c8:96:6f:07:27:d2:3d:7d:b9:93:9e: c0:ea:f2:ec:3c:1f:ad:bc:9b:65:9d:81:8c:b7:fd: b7:f5:01:da:27:b3:84:79:d5:31:a4:ac:d6:37:56: c1:fb:3f:74:84:e8:78:ac:24:e1:4d:d2:11:a4:dd: 3c:de:f1:1d:e6:43:c5:0d:62:ca:ee:dc:77:f2:87: 8b:12:19:15:95:b0:4e:30:41:ac:6b:1d:81:dd:61: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:04:01:71:98:97:8E:23:10:45:CD:39:D5:83:52:7D:F1:C2:B2 X509v3 Authority Key Identifier: keyid:CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:59:8f:9c:76:ef:c4:e8:cb:3e:f2:78:34:69:83:2c:43:84: 5b:08:2f:b0:b0:14:2e:dc:16:fa:4c:39:ae:d1:4a:f3:d9:32: 73:c9:f4:c0:4f:cf:33:a1:94:4b:6f:ec:8c:f0:d1:41:be:95: c0:27:13:42:fe:a5:14:6e:d6:41:cc:55:d3:7c:85:d9:1f:e3: cb:87:77:a7:ff:07:f9:7d:a6:e3:d5:4b:1a:b8:f6:da:80:d6: bf:59:d5:9c:1c:0b:d3:12:fd:41:7f:c3:b3:1d:9d:f7:5c:37: a9:47:28:49:1d:0b:80:ad:80:3b:a8:64:00:9d:3a:0d:04:57: 44:53:bc:5d:32:a3:0d:98:e6:94:26:30:9e:08:56:13:d1:22: ae:20:34:cd:2e:65:9b:f1:57:20:fa:40:36:79:b6:03:a1:eb: f1:04:7c:25:fa:fd:72:f6:79:db:fe:66:67:05:39:c1:b5:ab: 65:98:88:81:30:53:f3:db:fa:ea:80:64:e1:ba:77:82:2e:e9: 0f:05:d9:24:1c:76:4f:16:74:4f:d5:15:7e:99:ff:7d:b9:fa: 8f:ff:15:79:70:7c:18:b7:68:1c:a1:41:de:db:eb:bb:18:bb: 8e:97:8e:a5:37:64:9b:34:24:0a:a7:81:db:2a:33:e2:88:9d: 00:f5:c1:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiPX1rrkHAZkM+7Rcl2veLiXoyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1 MEM1M0MxOTAeFw0yNjExMTQxMDIyMzlaFw0yNjExMTUxNDA0MzlaMDMxMTAvBgNV BAMTKDQ3QTMwNDAxNzE5ODk3OEUyMzEwNDVDRDM5RDU4MzUyN0RGMUMyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt963Ca6eTOe2p1oscwtVanLOg VK1fskEixILkENYJbyeVnBlp+wpYBjsOKDQ5GzdlHpjWo51qNCvJC+HDhOeP+UbH IXXdgnGTQ/h6ieHjZvSHp48ebsFd6ISg0LjCwE7+rfgi82TZ2gMvpQdArQEDjR3H QMuaSjHvS9D34+mcWMe0oeTfKfi+OZVYk+6KWMOR/oqxgmlAkZd+KPsrOYU9Lvgj vxAD9PbIlm8HJ9I9fbmTnsDq8uw8H628m2WdgYy3/bf1Adons4R51TGkrNY3VsH7 P3SE6HisJOFN0hGk3Tze8R3mQ8UNYsru3Hfyh4sSGRWVsE4wQaxrHYHdYdqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6MEAXGYl44jEEXNOdWDUn3xwrIwHwYDVR0j BBgwFoAUzaaYAR0Q9Dbju8MWZCObMVDFPBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIwMWI4OTUtNTNjNi00YTIxLWEyYzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDEx RDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1MEM1M0MxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DREE2OTgwMTFEMTBGNDM2RTNCQkMzMTY2NDIzOUIzMTUwQzUz QzE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIwMWI4OTUtNTNjNi00YTIxLWEy YzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlC MzE1MEM1M0MxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhZj5x278Toyz7yeDRpgyxDhFsIL7CwFC7c FvpMOa7RSvPZMnPJ9MBPzzOhlEtv7Izw0UG+lcAnE0L+pRRu1kHMVdN8hdkf48uH d6f/B/l9puPVSxq49tqA1r9Z1ZwcC9MS/UF/w7MdnfdcN6lHKEkdC4CtgDuoZACd Og0EV0RTvF0yow2Y5pQmMJ4IVhPRIq4gNM0uZZvxVyD6QDZ5tgOh6/EEfCX6/XL2 edv+ZmcFOcG1q2WYiIEwU/Pb+uqAZOG6d4Iu6Q8F2SQcdk8WdE/VFX6Z/325+o// FXlwfBi3aByhQd7b67sYu46XjqU3ZJs0JAqngdsqM+KInQD1wfU= -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:18 2026 by rpki-client