$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft File: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json) Hash identifier: jVwtvxmVF5pDfwdyISGsVmTB+70CEdy6HwuWzev8BLo= Subject key identifier: 34:C7:20:CE:FE:4E:9A:DF:88:2F:DF:7C:32:BF:25:80:02:7D:16:91 Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Certificate serial: 47F6042E064D3DE5490EF331BAFCDB9A9B12C68C Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft Manifest number: 0209 Signing time: Sat 14 Nov 2026 14:51:37 +0000 Manifest this update: Sat 14 Nov 2026 14:46:37 +0000 Manifest next update: Sun 15 Nov 2026 16:23:37 +0000 Files and hashes: 1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: Wf/Le5swyUwJ8NOeks0TkCjraf4hUezpGq05ep96x7w=) 2: 3135342e382e39362e302f32302d3234203d3e203137393935.roa (hash: oaM8GwV5AZdsBHjYgC9SesH19GpKHhG046RTE+xVIHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f6:04:2e:06:4d:3d:e5:49:0e:f3:31:ba:fc:db:9a:9b:12:c6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Validity Not Before: Nov 14 14:46:37 2026 GMT Not After : Nov 15 16:23:37 2026 GMT Subject: CN=34C720CEFE4E9ADF882FDF7C32BF2580027D1691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:62:e7:ec:40:04:73:d7:5d:8c:2d:14:f7: 16:96:99:34:e9:e4:7a:92:dd:90:79:1d:5d:b5:b0: eb:13:2d:f5:60:bd:b3:f5:49:d5:c0:8f:2e:7b:ad: ab:0c:25:38:68:77:60:d8:e6:a4:dc:cc:35:78:34: 2f:1f:49:43:f7:2a:95:d1:7e:82:92:97:60:9d:12: cb:66:f4:8d:a4:40:39:77:41:40:59:13:02:85:0b: f0:21:9b:c1:13:cc:5b:ab:ed:27:cd:29:a4:fd:ca: 1e:5d:45:99:5a:fc:1d:60:ed:b5:ab:ee:73:96:31: 0b:a6:61:ef:0f:cc:fa:6e:cf:1e:fd:c5:5f:a9:ec: 6f:34:64:fc:36:79:25:cb:16:2a:50:4a:5e:e2:ac: 8a:24:bc:ef:1d:85:66:8a:0d:3c:8f:a5:95:68:1f: b6:5e:2d:3b:49:7d:06:51:f8:7b:6a:ba:4d:81:82: 45:17:4c:4a:f9:16:fb:ab:be:74:6f:87:3f:58:69: 2a:22:22:2b:3c:59:b7:0c:9d:ef:bb:83:45:eb:ae: 8f:f1:29:0a:12:7c:70:87:7a:5e:b2:69:9a:08:e9: 16:84:62:9a:00:b5:a1:61:7d:9b:f3:e3:e3:01:e5: a5:c0:d6:b3:10:68:e0:6a:15:af:73:6d:d0:9b:ec: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:20:CE:FE:4E:9A:DF:88:2F:DF:7C:32:BF:25:80:02:7D:16:91 X509v3 Authority Key Identifier: keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e0:b4:ba:22:da:e2:64:34:f1:87:c8:18:6d:3d:5d:ec:25: 7b:36:5b:2f:26:43:90:d1:ef:88:89:06:a4:7b:42:8e:ec:d3: b6:4a:59:4c:5b:c4:48:fa:76:1b:e0:fb:85:4a:4d:a0:d0:d7: 62:05:58:fa:bf:95:2c:af:0d:b6:16:c6:b7:ea:da:4d:bd:74: 60:c1:cb:8a:72:65:cc:ce:4c:94:1f:35:f4:97:46:f3:dc:9e: d5:af:60:62:f6:2a:f2:ae:3d:8c:7a:cc:7d:38:ca:db:a0:ff: 55:d3:56:72:10:66:22:31:0a:e5:06:9e:1c:66:b2:25:97:26: d4:1e:d3:b3:2a:1f:0b:9b:31:48:23:86:22:47:df:28:5b:ab: a1:b4:63:f8:b5:97:83:7a:5d:94:2e:4b:01:d3:57:8c:84:48: 87:22:7e:2d:29:ed:a0:9d:59:6f:18:53:67:92:eb:5f:0b:62: 75:4f:cb:4f:15:c7:68:e3:08:84:bd:27:38:85:36:89:db:b9: de:21:16:af:b2:dc:32:41:ff:d5:04:e6:97:49:8d:0f:09:be: 50:36:53:ee:83:7a:ef:76:5e:95:84:2c:d0:c8:11:4d:13:f3: 54:b8:95:34:5f:a4:06:c0:f2:94:51:aa:98:5f:b4:0c:be:04: 38:6c:f8:29 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUR/YELgZNPeVJDvMxuvzbmpsSxowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjQyMDRCQTk1 ODJENUExM0ZEMjBGOUVEMDE3NEFGMkQ1MTc0N0U3MB4XDTI2MTExNDE0NDYzN1oX DTI2MTExNTE2MjMzN1owMzExMC8GA1UEAxMoMzRDNzIwQ0VGRTRFOUFERjg4MkZE RjdDMzJCRjI1ODAwMjdEMTY5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/uYufsQARz112MLRT3FpaZNOnkepLdkHkdXbWw6xMt9WC9s/VJ1cCPLnut qwwlOGh3YNjmpNzMNXg0Lx9JQ/cqldF+gpKXYJ0Sy2b0jaRAOXdBQFkTAoUL8CGb wRPMW6vtJ80ppP3KHl1FmVr8HWDttavuc5YxC6Zh7w/M+m7PHv3FX6nsbzRk/DZ5 JcsWKlBKXuKsiiS87x2FZooNPI+llWgftl4tO0l9BlH4e2q6TYGCRRdMSvkW+6u+ dG+HP1hpKiIiKzxZtwyd77uDReuuj/EpChJ8cId6XrJpmgjpFoRimgC1oWF9m/Pj 4wHlpcDWsxBo4GoVr3Nt0JvsKIsCAwEAAaOCAgUwggIBMB0GA1UdDgQWBBQ0xyDO /k6a34gv33wyvyWAAn0WkTAfBgNVHSMEGDAWgBQSQgS6lYLVoT/SD57QF0ry1RdH 5zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzQvMTI0MjA0QkE5NTgyRDVBMTNG RDIwRjlFRDAxNzRBRjJENTE3NDdFNy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2 MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvRWtJRXVwV0MxYUVfMGctZTBCZEs4 dFVYUi1jLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy80LzEyNDIwNEJBOTU4MkQ1 QTEzRkQyMEY5RUQwMTc0QUYyRDUxNzQ3RTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4LS6ItriZDTx h8gYbT1d7CV7NlsvJkOQ0e+IiQake0KO7NO2SllMW8RI+nYb4PuFSk2g0NdiBVj6 v5Usrw22Fsa36tpNvXRgwcuKcmXMzkyUHzX0l0bz3J7Vr2Bi9iryrj2Mesx9OMrb oP9V01ZyEGYiMQrlBp4cZrIllybUHtOzKh8LmzFII4YiR98oW6uhtGP4tZeDel2U LksB01eMhEiHIn4tKe2gnVlvGFNnkutfC2J1T8tPFcdo4wiEvSc4hTaJ27neIRav stwyQf/VBOaXSY0PCb5QNlPug3rvdl6VhCzQyBFNE/NUuJU0X6QGwPKUUaqYX7QM vgQ4bPgp -----END CERTIFICATE-----Generated at Sun Nov 15 07:51:43 2026 by rpki-client