$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: Km2rcemzhJih3CnsbSmLESaw6jOOSd/KzFs3Qu/wBIQ= Subject key identifier: D7:10:67:0D:5F:2B:08:BC:6C:04:59:8B:1A:BA:6A:EE:8B:E8:01:09 Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 02A7D5B29A8377675B5D4DA9573FCD475FD14B02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 20:09:47 +0000 Manifest this update: Sat 14 Nov 2026 20:04:47 +0000 Manifest next update: Sun 15 Nov 2026 21:27:47 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 2: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 3: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: q/Yw1Ee/AAsvU5teTAUbZdCWgAr3gib1SBSeuV92eqA=) 4: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a7:d5:b2:9a:83:77:67:5b:5d:4d:a9:57:3f:cd:47:5f:d1:4b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Nov 14 20:04:47 2026 GMT Not After : Nov 15 21:27:47 2026 GMT Subject: CN=D710670D5F2B08BC6C04598B1ABA6AEE8BE80109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:88:73:07:b3:48:af:54:a3:71:35:6c:9a: 82:48:14:20:0f:b4:ba:fc:0d:ab:77:3d:06:2b:53: f3:0f:2a:12:a1:cf:6f:99:b2:e5:db:f1:d4:e8:ee: 4c:d3:4c:7d:ad:a0:8c:fb:5c:3f:02:80:93:6e:14: 48:a5:0f:05:61:05:4a:6f:1e:43:7f:ea:13:bc:a0: 8a:68:c3:35:d5:9c:0c:1c:8b:43:dd:51:d9:91:e8: ed:1f:a1:0a:fd:c5:43:77:0b:66:1c:3e:d8:33:27: 78:36:1f:20:42:8f:87:44:f9:34:d1:97:42:f6:f4: dd:eb:00:6c:dc:e7:32:0c:9b:04:ba:3e:56:bb:65: 62:b4:ee:b4:a2:8d:79:64:a3:b6:75:59:5f:78:12: 8e:19:13:c5:e7:78:23:af:a0:97:69:8d:34:03:6f: 01:42:48:37:e6:ad:ee:7c:2e:8c:8d:a9:30:02:94: 29:43:10:09:cb:d4:68:83:f3:65:2f:ba:de:44:f7: 04:78:6e:03:66:1b:59:ee:e6:40:4f:fb:e4:4c:50: 31:b8:6f:4d:19:b9:22:d6:03:a3:d7:44:8c:5f:f0: c1:18:53:03:dc:a1:7e:83:e9:b1:e8:73:46:e0:89: aa:59:6a:88:68:b3:41:90:4c:7b:49:c1:61:86:2c: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:67:0D:5F:2B:08:BC:6C:04:59:8B:1A:BA:6A:EE:8B:E8:01:09 X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9a:d2:0f:00:52:84:48:9f:1d:39:ae:1a:07:e7:79:f1:04: 79:84:b5:fc:26:4c:1c:a7:1c:2a:13:64:a6:f1:09:6f:b7:80: b7:f5:4a:39:06:70:53:2b:2c:fb:68:27:28:40:73:85:30:cb: 7e:c5:68:d0:56:d1:15:ed:9e:18:86:8f:b0:d0:f5:08:d2:62: b3:67:1e:26:01:5f:70:0e:90:e3:19:57:97:16:3e:dd:c6:05: b9:7a:20:03:c7:f4:6e:25:f0:39:11:1a:96:86:11:7f:d7:8e: 12:e3:33:41:c6:58:c7:61:c0:f5:12:e7:c3:db:71:ef:a0:66: 89:95:fe:35:64:c9:f9:7b:4a:c4:40:93:66:c2:0f:05:8f:c8: c7:39:f4:c1:71:19:78:70:74:30:87:cd:58:be:ca:a8:15:be: ee:19:3e:d2:8b:21:2e:ae:f6:30:14:00:a9:87:79:d0:63:23: ce:d4:43:73:5a:54:9c:a6:0a:96:01:e6:4b:4f:a4:b9:23:22: 55:ea:f4:10:1f:a7:49:2a:30:f1:55:97:64:5e:d5:93:0e:73: 7d:ed:d1:b1:47:0b:ad:37:34:ea:96:f1:6b:a0:63:48:6f:e3: cf:ad:48:09:bc:5b:84:89:c2:c6:36:b4:ba:9c:20:38:61:da: 48:9a:00:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqfVspqDd2dbXU2pVz/NR1/RSwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjExMTQyMDA0NDdaFw0yNjExMTUyMTI3NDdaMDMxMTAvBgNV BAMTKEQ3MTA2NzBENUYyQjA4QkM2QzA0NTk4QjFBQkE2QUVFOEJFODAxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbIhzB7NIr1SjcTVsmoJIFCAP tLr8Dat3PQYrU/MPKhKhz2+ZsuXb8dTo7kzTTH2toIz7XD8CgJNuFEilDwVhBUpv HkN/6hO8oIpowzXVnAwci0PdUdmR6O0foQr9xUN3C2YcPtgzJ3g2HyBCj4dE+TTR l0L29N3rAGzc5zIMmwS6Pla7ZWK07rSijXlko7Z1WV94Eo4ZE8XneCOvoJdpjTQD bwFCSDfmre58LoyNqTAClClDEAnL1GiD82Uvut5E9wR4bgNmG1nu5kBP++RMUDG4 b00ZuSLWA6PXRIxf8MEYUwPcoX6D6bHoc0bgiapZaohos0GQTHtJwWGGLBlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xBnDV8rCLxsBFmLGrpq7ovoAQkwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqa0g8AUoRInx05rhoH53nxBHmEtfwmTByn HCoTZKbxCW+3gLf1SjkGcFMrLPtoJyhAc4Uwy37FaNBW0RXtnhiGj7DQ9QjSYrNn HiYBX3AOkOMZV5cWPt3GBbl6IAPH9G4l8DkRGpaGEX/XjhLjM0HGWMdhwPUS58Pb ce+gZomV/jVkyfl7SsRAk2bCDwWPyMc59MFxGXhwdDCHzVi+yqgVvu4ZPtKLIS6u 9jAUAKmHedBjI87UQ3NaVJymCpYB5ktPpLkjIlXq9BAfp0kqMPFVl2Re1ZMOc33t 0bFHC603NOqW8WugY0hv48+tSAm8W4SJwsY2tLqcIDhh2kiaABw= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:24 2026 by rpki-client