$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft File: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft (raw, json) Hash identifier: 0/qRkwx0RyXQ6HD/c3r1UIU/lClJGnqYVdsU+XELKAc= Subject key identifier: 04:0E:B4:C3:AA:8B:7B:C0:49:82:4B:91:6C:9E:B2:DE:7C:66:04:F6 Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Certificate serial: 1C22AE65DE81581F9449EF1C557A43376DBA5212 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:31:26 +0000 Manifest this update: Sat 14 Nov 2026 09:26:26 +0000 Manifest next update: Sun 15 Nov 2026 10:01:26 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: OX/hSObmRCzkD1qVckzfWkKuBPC5Pdod9YDgySPz4C8=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: RnobRsvxkM1MTdlV59E6oBUzJE/tUaI5t4eU9X2Ihxg=) 3: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=) 4: 2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl (hash: uA/+04TneAj8LRKeRC4EFZiZatBPoFvpt5fQeTMX5Vk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:22:ae:65:de:81:58:1f:94:49:ef:1c:55:7a:43:37:6d:ba:52:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2 Validity Not Before: Nov 14 09:26:26 2026 GMT Not After : Nov 15 10:01:26 2026 GMT Subject: CN=040EB4C3AA8B7BC049824B916C9EB2DE7C6604F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:e3:a2:31:75:41:21:bc:54:ca:4b:57:da: 7b:01:dd:a6:de:70:45:27:2c:4b:38:05:4d:78:f3: 86:46:45:4b:de:15:ea:a5:d3:d2:1b:c5:53:3a:c7: b1:2b:85:9d:fc:c2:48:9d:2a:24:2b:29:e0:e1:22: c0:53:4f:51:eb:15:37:17:79:2a:79:84:78:b7:08: d1:ae:bf:95:db:d3:80:a4:02:26:97:b2:13:0a:b8: 16:00:61:62:af:22:6d:39:54:40:89:6d:d0:67:55: bc:4a:5a:5f:08:a7:be:ce:58:cd:61:2c:cc:0c:8f: a3:91:1a:1b:81:7b:3e:69:fb:ad:f8:bf:83:4b:e5: 39:7d:92:f7:1c:d4:ac:c5:cf:49:48:9c:b9:1e:00: da:b1:e3:4d:34:a0:45:63:6f:12:7d:85:99:1e:41: 44:9b:1a:e0:2c:de:30:bc:dd:ec:57:9a:c3:ff:60: f4:d6:35:e5:fb:54:52:80:5c:98:7f:5d:5c:f3:d2: 9e:a8:08:39:98:8e:ca:c8:ac:a0:12:21:e2:da:7b: 51:95:24:4c:25:8c:bf:5f:0c:ea:22:a7:fc:d0:3e: 62:f0:a1:ae:de:f7:5b:03:f7:38:5e:46:ef:1f:de: 79:5c:99:48:68:7b:35:17:95:62:ae:01:66:74:d3: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:B4:C3:AA:8B:7B:C0:49:82:4B:91:6C:9E:B2:DE:7C:66:04:F6 X509v3 Authority Key Identifier: keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:60:d1:f1:97:ae:58:4a:d2:f0:39:58:4b:da:f6:13:b8:6b: 3c:34:84:b2:05:f1:86:f4:b8:a7:7f:98:4a:cf:cb:87:10:18: bc:ea:f5:de:99:bf:5d:64:ec:93:01:94:13:0f:46:d2:b9:02: 6e:5d:3c:2e:6c:ba:a1:3b:93:d1:58:f3:77:dd:4e:52:19:47: 74:9e:d0:32:66:ba:7d:c8:e0:4e:33:25:ca:da:38:4f:e0:d8: 8e:70:4f:dd:ba:42:b4:7f:19:1a:a8:94:8b:fb:97:1b:2a:2f: 55:03:c4:bb:ef:5b:a4:2a:a2:3e:6f:06:28:c1:70:32:47:92: 65:07:ac:10:f5:18:3c:67:f7:3e:31:d4:d7:cb:40:2b:45:6f: 06:cd:2c:bf:7b:97:de:92:1c:44:fd:be:83:48:61:66:8d:e5: e5:42:e3:5a:7a:35:87:f2:38:36:59:15:f0:83:8e:17:5d:e9: 53:c4:cc:52:5c:61:8e:ba:5b:01:5b:50:e4:f8:d3:08:a4:86: 44:78:ac:68:9c:75:76:db:4b:7f:bb:ce:2e:86:3d:08:00:c2: d5:72:3e:3c:c4:30:58:54:fe:50:28:fc:64:27:53:26:44:fb: 14:78:dc:11:0a:34:e7:ed:6e:a9:a7:05:58:80:88:3c:64:e6: 2a:4e:9c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCKuZd6BWB+USe8cVXpDN226UhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFD QkQ5NkFFMjAeFw0yNjExMTQwOTI2MjZaFw0yNjExMTUxMDAxMjZaMDMxMTAvBgNV BAMTKDA0MEVCNEMzQUE4QjdCQzA0OTgyNEI5MTZDOUVCMkRFN0M2NjA0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAuOiMXVBIbxUyktX2nsB3abe cEUnLEs4BU1484ZGRUveFeql09IbxVM6x7ErhZ38wkidKiQrKeDhIsBTT1HrFTcX eSp5hHi3CNGuv5Xb04CkAiaXshMKuBYAYWKvIm05VECJbdBnVbxKWl8Ip77OWM1h LMwMj6ORGhuBez5p+634v4NL5Tl9kvcc1KzFz0lInLkeANqx4000oEVjbxJ9hZke QUSbGuAs3jC83exXmsP/YPTWNeX7VFKAXJh/XVzz0p6oCDmYjsrIrKASIeLae1GV JEwljL9fDOoip/zQPmLwoa7e91sD9zheRu8f3nlcmUhoezUXlWKuAWZ006p9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBA60w6qLe8BJgkuRbJ6y3nxmBPYwHwYDVR0j BBgwFoAULYFHqzKuNP4FmTAcOZukMcvZauIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYTIzZTktODRiZS00YTU0LWJjYTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIz MkFFMzRGRTA1OTkzMDFDMzk5QkE0MzFDQkQ5NkFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRDgxNDdBQjMyQUUzNEZFMDU5OTMwMUMzOTlCQTQzMUNCRDk2 QUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvMkQ4MTQ3QUIzMkFFMzRGRTA1OTkzMDFDMzk5QkE0 MzFDQkQ5NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZg0fGXrlhK0vA5WEva9hO4azw0hLIF8Yb0 uKd/mErPy4cQGLzq9d6Zv11k7JMBlBMPRtK5Am5dPC5suqE7k9FY83fdTlIZR3Se 0DJmun3I4E4zJcraOE/g2I5wT926QrR/GRqolIv7lxsqL1UDxLvvW6Qqoj5vBijB cDJHkmUHrBD1GDxn9z4x1NfLQCtFbwbNLL97l96SHET9voNIYWaN5eVC41p6NYfy ODZZFfCDjhdd6VPEzFJcYY66WwFbUOT40wikhkR4rGicdXbbS3+7zi6GPQgAwtVy PjzEMFhU/lAo/GQnUyZE+xR43BEKNOftbqmnBViAiDxk5ipOnIk= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:31 2026 by rpki-client