$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: l+fdp9avEFi+1xGN6vYab0YiPPMs3h4PMZmo3BBofmU= Subject key identifier: 87:48:DB:AC:71:52:C8:50:B4:74:FE:12:5A:B3:29:89:C5:CE:B1:D3 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 2A1F23642E65C14725099369CF22A2AF0AF7CE45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 01:15:44 +0000 Manifest this update: Sun 15 Nov 2026 01:10:44 +0000 Manifest next update: Mon 16 Nov 2026 02:27:44 +0000 Files and hashes: 1: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: TQbYvjZy/M1tdCpfrw7+INiYYYh/XTLpEH704Q3d87A=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1f:23:64:2e:65:c1:47:25:09:93:69:cf:22:a2:af:0a:f7:ce:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Nov 15 01:10:44 2026 GMT Not After : Nov 16 02:27:44 2026 GMT Subject: CN=8748DBAC7152C850B474FE125AB32989C5CEB1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:45:26:e5:d1:86:58:4c:48:51:21:e8:68: 64:87:71:37:52:20:29:6b:3b:2c:04:14:6b:06:da: b0:a5:32:c8:d4:8a:29:f5:14:80:9d:25:e8:ee:8a: da:bc:5d:69:83:9f:c9:fc:f9:75:d8:9b:9d:3c:1a: 70:10:67:9a:8d:bd:24:1b:fc:80:53:9a:03:c8:d3: 13:cc:2d:dc:ce:c4:4e:09:78:e2:8c:f8:ac:f3:4a: bb:b9:01:e2:08:0d:f6:7f:df:88:2c:4a:6e:6b:e7: 4a:45:ee:f5:b3:91:57:91:c4:64:e3:5f:25:8d:a7: 41:94:07:d5:eb:1d:29:00:2f:bf:40:da:8d:c5:d2: fe:c8:a5:05:e9:b3:69:f4:e8:44:f1:69:40:e0:47: 07:73:68:91:e4:a4:16:77:fc:cd:af:8a:0a:02:88: 2b:43:f1:d1:aa:71:06:6c:fb:18:8a:c0:6d:a6:bd: 5d:0b:ad:f3:1b:9c:12:3d:aa:97:17:11:28:d7:fe: 0a:6e:7a:84:64:00:12:98:9c:63:60:78:1e:ef:a2: e8:27:1a:d0:33:7e:a1:0c:fb:e5:8f:e2:60:3e:0c: 04:54:0f:c8:fe:f9:d7:bd:dd:6d:08:b6:02:59:36: 4b:67:1a:11:be:a3:af:84:d1:0f:a9:38:20:3c:e1: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:DB:AC:71:52:C8:50:B4:74:FE:12:5A:B3:29:89:C5:CE:B1:D3 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ca:21:b3:32:85:fb:47:48:cc:40:81:16:a7:9e:b7:cf:a1: 5a:b1:25:42:b7:8c:af:fb:89:c8:f7:41:07:8f:40:91:b3:a6: 43:66:8e:fd:94:d6:82:d4:92:e1:ec:db:c4:d1:ad:8d:c7:80: 85:c6:bb:da:be:1c:cf:25:f9:42:ea:bf:71:ce:9a:d5:6c:e5: b9:36:a2:10:4a:16:b9:cc:a1:d2:83:54:1b:f5:e4:22:52:d8: b4:76:d5:65:54:99:b9:8c:ad:d9:fe:03:2f:0f:cd:1d:c0:03: 9a:28:81:ed:3b:92:84:a6:71:c2:6c:26:e1:60:fd:49:15:8a: f8:01:c4:4a:68:95:d6:2c:02:94:78:bf:2c:ca:2d:32:3c:b3: 0f:ea:7e:68:1d:5e:f8:8b:4d:10:8a:5c:b0:b1:77:59:df:c0: bc:27:73:45:e7:d5:03:26:9a:df:f0:f8:4d:2b:94:fc:9d:8e: 36:30:5e:df:46:a5:b1:23:25:18:8b:ad:27:27:fb:12:b1:6e: a9:13:e7:77:b4:c9:fc:54:3d:56:46:7e:d1:20:89:c2:f4:f7: 77:75:96:d8:78:6a:86:dc:a7:7b:d4:dc:cb:eb:f2:38:c0:b8: 75:a3:08:1e:f2:ab:2b:8f:be:ce:b9:b4:94:a4:eb:e9:d0:06: 89:98:15:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKh8jZC5lwUclCZNpzyKirwr3zkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjExMTUwMTEwNDRaFw0yNjExMTYwMjI3NDRaMDMxMTAvBgNV BAMTKDg3NDhEQkFDNzE1MkM4NTBCNDc0RkUxMjVBQjMyOTg5QzVDRUIxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOUUm5dGGWExIUSHoaGSHcTdS IClrOywEFGsG2rClMsjUiin1FICdJejuitq8XWmDn8n8+XXYm508GnAQZ5qNvSQb /IBTmgPI0xPMLdzOxE4JeOKM+KzzSru5AeIIDfZ/34gsSm5r50pF7vWzkVeRxGTj XyWNp0GUB9XrHSkAL79A2o3F0v7IpQXps2n06ETxaUDgRwdzaJHkpBZ3/M2vigoC iCtD8dGqcQZs+xiKwG2mvV0LrfMbnBI9qpcXESjX/gpueoRkABKYnGNgeB7vougn GtAzfqEM++WP4mA+DARUD8j++de93W0ItgJZNktnGhG+o6+E0Q+pOCA84a2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh0jbrHFSyFC0dP4SWrMpicXOsdMwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/KIbMyhftHSMxAgRannrfPoVqxJUK3jK/7 icj3QQePQJGzpkNmjv2U1oLUkuHs28TRrY3HgIXGu9q+HM8l+ULqv3HOmtVs5bk2 ohBKFrnModKDVBv15CJS2LR21WVUmbmMrdn+Ay8PzR3AA5ooge07koSmccJsJuFg /UkVivgBxEpoldYsApR4vyzKLTI8sw/qfmgdXviLTRCKXLCxd1nfwLwnc0Xn1QMm mt/w+E0rlPydjjYwXt9GpbEjJRiLrScn+xKxbqkT53e0yfxUPVZGftEgicL093d1 lth4aobcp3vU3Mvr8jjAuHWjCB7yqyuPvs65tJSk6+nQBomYFds= -----END CERTIFICATE-----Generated at Sun Nov 15 09:58:36 2026 by rpki-client