$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft File: 54026028AD87AC49BD097621095F68B69F4EF6DB.mft (raw, json) Hash identifier: XtWoX9lr8/NvbS/E7b0Yv8cTBFNnK+XnLbgWP11fUgo= Subject key identifier: 2B:CA:85:01:F2:D5:FF:68:28:99:25:CB:6E:96:5E:93:5C:C5:A3:62 Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB Certificate issuer: /CN=54026028AD87AC49BD097621095F68B69F4EF6DB Certificate serial: 074375280B2BF71FBD703C066A5F4D86B29DA753 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 00:34:57 +0000 Manifest this update: Sun 15 Nov 2026 00:29:57 +0000 Manifest next update: Mon 16 Nov 2026 03:35:57 +0000 Files and hashes: 1: 54026028AD87AC49BD097621095F68B69F4EF6DB.crl (hash: sCPMT1oIqzSQURaBXQ43bV80NO1+VTSZ7DSd71319s0=) 2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:43:75:28:0b:2b:f7:1f:bd:70:3c:06:6a:5f:4d:86:b2:9d:a7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB Validity Not Before: Nov 15 00:29:57 2026 GMT Not After : Nov 16 03:35:57 2026 GMT Subject: CN=2BCA8501F2D5FF68289925CB6E965E935CC5A362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:50:6e:76:99:8c:25:09:fc:6e:a7:9c:3f: 72:da:77:6e:74:85:98:12:be:2a:a7:77:1b:1e:1d: 4f:7a:ff:ef:d6:c6:ad:26:71:78:db:20:a7:b8:e7: e1:6e:ee:82:21:40:5e:44:51:86:58:0a:a0:27:75: ee:b0:da:e9:b5:05:b0:c7:a5:59:36:6b:12:07:55: cc:fa:83:d5:87:61:45:c0:f0:c9:cb:23:76:80:fa: 8e:43:75:f0:ba:d3:78:d3:75:1c:f8:29:d1:d6:b5: b0:13:c4:fd:46:93:81:45:01:db:58:c3:25:9e:69: 91:0d:02:2f:c6:a9:1f:88:eb:06:c0:72:75:10:fc: 9f:19:bf:b9:af:15:2c:b2:a1:a8:33:f9:1d:07:ae: f2:98:dd:88:37:80:6c:14:b9:19:93:25:fe:0f:b7: 8f:ee:49:72:c9:e2:17:26:fb:d3:0d:85:d6:d6:58: a6:5c:ef:e9:1c:a7:f6:cb:b4:4f:1c:39:07:9a:5f: 71:f1:92:77:5d:58:73:89:2a:c5:5b:25:6e:a5:cc: 6b:64:be:ed:74:6d:70:e3:a1:63:ca:b3:3f:4d:71: 34:dd:80:aa:5b:29:11:bc:a2:51:7a:ac:d2:51:53: f8:e7:2c:78:ac:21:10:fd:a5:d7:80:5c:03:fc:6e: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CA:85:01:F2:D5:FF:68:28:99:25:CB:6E:96:5E:93:5C:C5:A3:62 X509v3 Authority Key Identifier: keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8f:76:37:11:69:0c:98:78:d1:4c:ca:08:75:84:91:1c:cb: 85:23:8b:8c:de:7e:a4:de:9d:56:43:40:6b:7c:86:54:80:55: c6:b1:d6:01:91:66:a6:50:24:00:30:60:cd:a8:71:fe:d9:5d: 99:bb:d3:a5:f9:71:9a:7c:d1:a7:13:d9:eb:6d:ca:a4:0a:29: 1e:e5:fe:00:2f:88:ec:c3:2e:14:12:18:1b:cb:a9:e2:f3:01: 6a:aa:42:f5:04:d5:d9:66:6f:04:20:0b:fd:bc:4a:b0:aa:f6: bb:3d:26:91:1e:73:b9:a0:22:11:92:52:16:c8:a2:a6:b5:54: f5:1b:27:b1:df:ea:0d:48:87:e5:00:86:c1:5d:46:34:cf:a5: 19:79:35:14:41:4f:d4:39:cd:0c:0c:d0:e2:73:1d:1c:29:6d: ed:4c:b8:1b:29:e9:05:1d:5f:8f:9c:d7:2b:9a:4b:8c:0f:85: f4:9a:3e:59:cb:17:6f:9f:dd:e4:e1:69:4c:20:c8:2c:d0:7d: c4:7c:0c:4c:9a:06:0d:02:19:5d:87:6d:da:88:cb:70:c0:0d: e2:e4:8e:05:1b:e0:ad:5f:c2:18:2a:31:a5:ac:a5:ed:8a:b7: 2e:1d:89:04:3b:9d:35:78:bf:d0:5f:d9:9d:d6:1d:49:1d:ad: b6:f0:03:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0N1KAsr9x+9cDwGal9NhrKdp1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwMjYwMjhBRDg3QUM0OUJEMDk3NjIxMDk1RjY4QjY5 RjRFRjZEQjAeFw0yNjExMTUwMDI5NTdaFw0yNjExMTYwMzM1NTdaMDMxMTAvBgNV BAMTKDJCQ0E4NTAxRjJENUZGNjgyODk5MjVDQjZFOTY1RTkzNUNDNUEzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiF1BudpmMJQn8bqecP3Lad250 hZgSviqndxseHU96/+/Wxq0mcXjbIKe45+Fu7oIhQF5EUYZYCqAnde6w2um1BbDH pVk2axIHVcz6g9WHYUXA8MnLI3aA+o5DdfC603jTdRz4KdHWtbATxP1Gk4FFAdtY wyWeaZENAi/GqR+I6wbAcnUQ/J8Zv7mvFSyyoagz+R0HrvKY3Yg3gGwUuRmTJf4P t4/uSXLJ4hcm+9MNhdbWWKZc7+kcp/bLtE8cOQeaX3HxknddWHOJKsVbJW6lzGtk vu10bXDjoWPKsz9NcTTdgKpbKRG8olF6rNJRU/jnLHisIRD9pdeAXAP8brjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK8qFAfLV/2gomSXLbpZek1zFo2IwHwYDVR0j BBgwFoAUVAJgKK2HrEm9CXYhCV9otp9O9tswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzAvNTQwMjYwMjhB RDg3QUM0OUJEMDk3NjIxMDk1RjY4QjY5RjRFRjZEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NDAyNjAyOEFEODdBQzQ5QkQwOTc2MjEwOTVGNjhCNjlGNEVG NkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzAvNTQwMjYwMjhBRDg3QUM0OUJEMDk3NjIxMDk1RjY4 QjY5RjRFRjZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiPdjcRaQyYeNFMygh1hJEcy4Uji4zefqTe nVZDQGt8hlSAVcax1gGRZqZQJAAwYM2ocf7ZXZm706X5cZp80acT2ettyqQKKR7l /gAviOzDLhQSGBvLqeLzAWqqQvUE1dlmbwQgC/28SrCq9rs9JpEec7mgIhGSUhbI oqa1VPUbJ7Hf6g1Ih+UAhsFdRjTPpRl5NRRBT9Q5zQwM0OJzHRwpbe1MuBsp6QUd X4+c1yuaS4wPhfSaPlnLF2+f3eThaUwgyCzQfcR8DEyaBg0CGV2HbdqIy3DADeLk jgUb4K1fwhgqMaWspe2Kty4diQQ7nTV4v9Bf2Z3WHUkdrbbwA6M= -----END CERTIFICATE-----Generated at Sun Nov 15 18:49:47 2026 by rpki-client