$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.mft (raw, json) Hash identifier: dTQTr1G1eJC91ZYZBm7Q+NfWGgfDj5ShyYoVZcixFII= Subject key identifier: F2:E6:77:C9:61:94:32:17:71:A5:B3:99:8F:69:07:15:CD:C2:9B:F1 Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Certificate serial: 6944061589DB9A925A65BB06DF712F3B61939A8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 18:02:12 +0000 Manifest this update: Sat 14 Nov 2026 17:57:12 +0000 Manifest next update: Sun 15 Nov 2026 20:12:12 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=) 2: 82619591421B67CACDA4E6A0B166011B7E6D1D21.crl (hash: qLw3cIkCnyICOLt2J+9KRelcnvw7W2Id4KMoLF5VZgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:44:06:15:89:db:9a:92:5a:65:bb:06:df:71:2f:3b:61:93:9a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Validity Not Before: Nov 14 17:57:12 2026 GMT Not After : Nov 15 20:12:12 2026 GMT Subject: CN=F2E677C96194321771A5B3998F690715CDC29BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:0b:d9:da:38:5f:9a:b0:18:98:d3:f3:23: 70:47:ed:ca:f1:1f:09:2c:5f:ea:2d:0d:80:ca:28: 19:2a:2f:4f:9b:8b:4a:57:c2:f0:ca:49:23:ab:af: 68:77:25:48:8d:4d:8e:ed:a9:85:02:39:3d:98:f2: f4:c1:3a:62:b1:85:3c:26:6c:0f:2c:36:e1:2c:0a: 77:66:31:8f:77:01:42:33:c7:c7:19:5f:78:dc:51: e2:52:35:0d:6b:93:c1:36:fd:6e:6a:57:91:05:2c: 53:d0:ac:45:32:07:c9:d8:9d:bb:4a:db:a8:77:0a: b4:ca:6f:b8:ec:9c:0c:55:58:d3:18:aa:97:78:f2: 05:e6:5c:bf:ab:6b:35:16:59:99:da:0d:d9:de:ca: 82:7c:e9:9b:2f:4e:91:df:38:79:98:f4:06:9a:d0: cd:1b:6f:29:5d:aa:52:c5:e4:d7:be:09:63:a6:ae: 70:a2:65:d2:a1:b6:16:7a:3f:41:82:90:4c:c2:0b: a7:dd:8c:00:2b:b9:43:eb:09:30:6d:79:6a:df:7e: 7e:11:72:c6:43:63:3a:40:d4:df:dd:ba:9c:85:03: d4:0f:98:9d:69:30:5b:22:f3:36:57:74:33:77:11: 74:42:f7:8c:10:35:99:84:95:9c:b1:81:4f:4a:0d: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:77:C9:61:94:32:17:71:A5:B3:99:8F:69:07:15:CD:C2:9B:F1 X509v3 Authority Key Identifier: keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:00:3d:c1:d1:59:62:e5:f1:14:8f:db:9d:cb:18:7d:aa:71: 9a:fa:73:c4:99:ff:8d:e9:74:c9:a3:f1:6b:a5:07:ce:dd:df: 4d:a9:c8:e0:2e:1a:4e:b1:44:18:0c:1c:f5:64:bd:2e:4b:37: 88:aa:64:d8:78:08:a4:fe:86:2c:43:90:33:c1:49:37:ee:90: 70:4b:f2:22:c9:d0:ea:a5:9d:a5:b2:64:87:df:5f:db:12:d6: 6b:96:ff:ee:39:4f:19:9e:d0:cd:5a:29:07:f6:54:79:0a:5b: 45:95:cf:4d:5a:09:87:d2:db:e2:b6:e9:df:91:f6:35:09:5a: 59:c2:0d:88:e8:c4:b6:f7:22:59:b9:6e:0d:7e:34:4a:0b:10: 9b:3a:e5:45:15:62:88:24:7a:e4:f1:bb:1c:82:91:0a:04:ee: 4e:7f:05:59:d7:40:d5:01:95:1d:14:95:29:65:15:27:ee:e0: 98:60:8a:01:44:25:72:22:6c:59:61:ef:38:2c:ca:36:25:9a: 75:28:9c:d1:59:27:86:65:a8:07:eb:17:5b:a0:db:b9:64:a1: e9:8d:a4:cc:2b:4d:0c:b6:2a:3e:eb:f7:1b:fe:84:60:52:13: 45:fb:5d:01:b3:56:3b:88:a0:4d:a7:00:36:f4:84:cc:33:b8: 79:45:5d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUQGFYnbmpJaZbsG33EvO2GTmowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3 RTZEMUQyMTAeFw0yNjExMTQxNzU3MTJaFw0yNjExMTUyMDEyMTJaMDMxMTAvBgNV BAMTKEYyRTY3N0M5NjE5NDMyMTc3MUE1QjM5OThGNjkwNzE1Q0RDMjlCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDgvZ2jhfmrAYmNPzI3BH7crx HwksX+otDYDKKBkqL0+bi0pXwvDKSSOrr2h3JUiNTY7tqYUCOT2Y8vTBOmKxhTwm bA8sNuEsCndmMY93AUIzx8cZX3jcUeJSNQ1rk8E2/W5qV5EFLFPQrEUyB8nYnbtK 26h3CrTKb7jsnAxVWNMYqpd48gXmXL+razUWWZnaDdneyoJ86ZsvTpHfOHmY9Aaa 0M0bbyldqlLF5Ne+CWOmrnCiZdKhthZ6P0GCkEzCC6fdjAAruUPrCTBteWrffn4R csZDYzpA1N/dupyFA9QPmJ1pMFsi8zZXdDN3EXRC94wQNZmElZyxgU9KDbN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8uZ3yWGUMhdxpbOZj2kHFc3Cm/EwHwYDVR0j BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0 MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx RDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAx MUI3RTZEMUQyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsAPcHRWWLl8RSP253LGH2qcZr6c8SZ/43p dMmj8WulB87d302pyOAuGk6xRBgMHPVkvS5LN4iqZNh4CKT+hixDkDPBSTfukHBL 8iLJ0OqlnaWyZIffX9sS1muW/+45Txme0M1aKQf2VHkKW0WVz01aCYfS2+K26d+R 9jUJWlnCDYjoxLb3Ilm5bg1+NEoLEJs65UUVYogkeuTxuxyCkQoE7k5/BVnXQNUB lR0UlSllFSfu4JhgigFEJXIibFlh7zgsyjYlmnUonNFZJ4ZlqAfrF1ug27lkoemN pMwrTQy2Kj7r9xv+hGBSE0X7XQGzVjuIoE2nADb0hMwzuHlFXRg= -----END CERTIFICATE-----Generated at Sun Nov 15 07:21:54 2026 by rpki-client