$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft File: A4249B719E5F988286AD3B4164C4E77F434FF948.mft (raw, json) Hash identifier: gELkg/uVdV29mqaKu44Pe+cKqfnZC910GPzIp8/7Bc0= Subject key identifier: 22:FC:D3:93:C4:AF:8E:4D:0D:CB:7B:16:3F:14:78:BA:38:32:75:60 Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Certificate serial: 540F6BBD6A8C7C085D44B28B230923B85EEE967F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 19:18:45 +0000 Manifest this update: Sat 14 Nov 2026 19:13:45 +0000 Manifest next update: Sun 15 Nov 2026 19:32:45 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=) 2: A4249B719E5F988286AD3B4164C4E77F434FF948.crl (hash: zOVMsNMTuYaz7DuwVZOZupB0lpGvOwdoOWtdzvlWHj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0f:6b:bd:6a:8c:7c:08:5d:44:b2:8b:23:09:23:b8:5e:ee:96:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948 Validity Not Before: Nov 14 19:13:45 2026 GMT Not After : Nov 15 19:32:45 2026 GMT Subject: CN=22FCD393C4AF8E4D0DCB7B163F1478BA38327560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:2f:c2:a0:81:37:61:b7:fe:61:e1:f0:e5: 7a:5e:5c:f3:5d:c8:fb:6f:f3:f3:97:98:a1:f9:0e: 32:83:a1:70:1d:52:78:32:26:04:37:63:1e:3b:c6: 9e:fa:4c:3c:48:de:7e:bd:96:88:4f:69:22:a0:3c: 03:5e:ea:e5:79:a9:88:6d:a3:84:2d:54:fe:01:47: fd:f5:b8:f7:a3:6c:f9:20:f4:93:25:1a:80:d4:8c: 23:d3:a4:2a:cf:37:e4:bf:41:e3:35:14:08:f2:cd: c7:08:d6:b3:46:ff:42:4e:03:47:21:99:34:4a:d2: 14:d0:01:b9:f7:5c:27:dd:2c:f7:14:63:ce:4d:84: e7:df:bc:46:cd:b5:f8:b5:fe:1d:d5:fa:c8:5f:12: ad:6e:2f:94:9f:63:fb:8a:9e:09:95:22:25:dc:cb: 72:5f:b6:99:62:18:bf:25:3c:87:f8:09:1b:c3:fb: e3:64:5e:61:3c:85:9b:25:41:d1:0f:c9:0d:c2:ef: 5f:54:97:47:64:a1:3e:a5:8e:17:93:0b:73:89:a3: cf:d4:8b:57:74:4e:f1:1d:e6:11:dd:3a:5c:1f:aa: 05:a7:bf:5a:bc:3a:21:1b:d6:ad:35:87:ea:f7:92: 2f:20:70:7d:e9:e4:85:d0:2d:9d:2d:ed:17:2c:38: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:D3:93:C4:AF:8E:4D:0D:CB:7B:16:3F:14:78:BA:38:32:75:60 X509v3 Authority Key Identifier: keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:22:fe:73:dd:e3:33:32:19:51:80:c3:a5:90:7f:db:96:70: 1e:03:e5:06:85:1e:57:6c:57:b6:40:fb:c2:58:14:0d:fe:e9: d5:6b:5f:b4:e4:a2:55:c2:e0:22:69:d8:cb:1e:0e:ea:8a:ac: c9:e8:0d:5f:d7:f7:a3:54:2d:1d:a0:41:52:4e:98:37:fe:7d: 16:1a:56:ed:98:63:a7:60:37:01:8d:f1:a6:c8:e5:fb:42:bb: a7:90:79:e8:72:87:8e:a4:ed:af:35:34:72:87:fa:bb:04:ab: e6:42:10:1c:e5:99:06:fa:fe:82:91:0f:86:bc:71:f5:57:1d: 31:fb:2e:de:1a:b8:41:59:20:c1:06:a0:13:39:1a:92:2d:78: b2:91:87:de:df:74:1a:20:2a:ec:5e:3b:8b:e2:bd:08:dd:b0: 22:43:96:2f:44:6a:da:6a:31:ef:c4:ee:a0:c5:49:5b:cf:07: 33:0a:27:80:50:95:9a:c1:05:d6:c9:27:64:bb:6e:48:76:d1: ec:1c:75:59:55:4a:ee:4f:b1:3f:96:0d:72:60:f1:6f:98:ca: b7:86:fd:39:b6:ae:25:1c:ea:31:e5:80:c8:c0:0b:50:60:5e: 65:f6:63:42:bd:0b:ad:67:d0:8a:46:72:e1:f3:b2:95:87:47: cf:5f:35:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVA9rvWqMfAhdRLKLIwkjuF7uln8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0 MzRGRjk0ODAeFw0yNjExMTQxOTEzNDVaFw0yNjExMTUxOTMyNDVaMDMxMTAvBgNV BAMTKDIyRkNEMzkzQzRBRjhFNEQwRENCN0IxNjNGMTQ3OEJBMzgzMjc1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAC/CoIE3Ybf+YeHw5XpeXPNd yPtv8/OXmKH5DjKDoXAdUngyJgQ3Yx47xp76TDxI3n69lohPaSKgPANe6uV5qYht o4QtVP4BR/31uPejbPkg9JMlGoDUjCPTpCrPN+S/QeM1FAjyzccI1rNG/0JOA0ch mTRK0hTQAbn3XCfdLPcUY85NhOffvEbNtfi1/h3V+shfEq1uL5SfY/uKngmVIiXc y3JftpliGL8lPIf4CRvD++NkXmE8hZslQdEPyQ3C719Ul0dkoT6ljheTC3OJo8/U i1d0TvEd5hHdOlwfqgWnv1q8OiEb1q01h+r3ki8gcH3p5IXQLZ0t7RcsOHgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvzTk8Svjk0Ny3sWPxR4ujgydWAwHwYDVR0j BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5 RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG OTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3 N0Y0MzRGRjk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAi/nPd4zMyGVGAw6WQf9uWcB4D5QaFHlds V7ZA+8JYFA3+6dVrX7TkolXC4CJp2MseDuqKrMnoDV/X96NULR2gQVJOmDf+fRYa Vu2YY6dgNwGN8abI5ftCu6eQeehyh46k7a81NHKH+rsEq+ZCEBzlmQb6/oKRD4a8 cfVXHTH7Lt4auEFZIMEGoBM5GpIteLKRh97fdBogKuxeO4vivQjdsCJDli9Eatpq Me/E7qDFSVvPBzMKJ4BQlZrBBdbJJ2S7bkh20ewcdVlVSu5PsT+WDXJg8W+YyreG /Tm2riUc6jHlgMjAC1BgXmX2Y0K9C61n0IpGcuHzspWHR89fNbk= -----END CERTIFICATE-----Generated at Sun Nov 15 01:15:45 2026 by rpki-client