$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: uq75iheZKYJr1okbvmVIDRBUd7vbQi4zHYpSL47a4qo= Subject key identifier: B5:78:E8:C2:1B:98:95:DF:3B:38:67:08:5A:08:02:4C:BC:BB:0C:64 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 58D2F87DC6566A39BF7A7DD19406ADD1520656AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 19:08:32 +0000 Manifest this update: Sat 14 Nov 2026 19:03:32 +0000 Manifest next update: Sun 15 Nov 2026 19:52:32 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: HOdRV9qijZIMxU7CFmX/Jqx8P3lnQjis3KywGxRo/X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d2:f8:7d:c6:56:6a:39:bf:7a:7d:d1:94:06:ad:d1:52:06:56:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Nov 14 19:03:32 2026 GMT Not After : Nov 15 19:52:32 2026 GMT Subject: CN=B578E8C21B9895DF3B3867085A08024CBCBB0C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:36:d4:67:ab:31:fb:cb:45:42:e5:ca:a5: 00:fd:1f:98:87:72:a7:fd:dc:47:66:f7:5e:d0:09: c4:f6:40:80:a3:1e:f3:fa:8d:e4:1b:7d:04:f8:81: c3:ee:b4:f5:f2:b0:c9:68:91:79:24:49:0a:cc:97: 7b:44:4f:8e:e8:3a:63:92:c3:80:5b:52:95:93:7b: 59:2b:77:7f:c8:6c:eb:d5:75:95:42:b6:c6:15:e1: 3a:70:9c:2c:7b:11:d3:ce:bd:91:92:fe:34:f9:94: a7:b8:c7:33:c3:51:db:37:d3:bc:34:8a:c7:80:ca: 46:3f:43:2d:f1:ec:c5:cd:77:c1:7e:4c:3a:7a:08: 64:21:8d:bd:4e:b7:cb:06:97:d3:78:04:56:76:c6: 61:44:2d:ce:0b:ec:05:45:f2:3d:a0:8a:04:b0:ac: df:c2:c6:4d:dc:f4:2a:ec:82:7c:2b:5c:67:46:a8: 9c:a7:2d:c8:3c:42:48:6d:e9:90:49:93:bc:5b:59: 39:71:79:f7:d1:53:6a:e2:da:58:4f:81:20:81:36: a0:a1:99:09:e2:89:df:2a:2d:17:6f:bb:28:87:1e: 27:da:26:5f:56:d8:fc:89:8e:a6:af:a3:b6:df:09: 07:4a:92:79:ba:aa:45:d2:fb:44:d2:35:79:1a:31: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:E8:C2:1B:98:95:DF:3B:38:67:08:5A:08:02:4C:BC:BB:0C:64 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5b:6e:cf:24:35:89:5f:ae:da:67:1a:26:4d:e5:99:c0:b4: 82:e6:a0:35:5a:1e:75:02:8c:3e:61:77:92:26:1f:a7:ad:85: 46:1c:d5:31:b8:1b:e2:b2:62:e1:4b:27:2b:1e:24:95:62:e6: 8d:47:ed:1a:9a:88:97:5c:0c:d1:1a:4d:ee:d5:83:38:be:81: f5:04:25:85:27:fc:40:f5:e2:ae:6c:43:ff:6f:e0:37:c1:77: a7:67:8a:1f:8c:97:9f:30:90:69:b0:ee:4e:24:ba:f9:4e:4c: 15:12:b4:3f:65:9d:90:8f:d9:09:c4:67:ee:e3:6c:b3:88:f6: b2:24:2d:5e:37:49:ea:42:39:d2:a0:97:9e:85:0c:18:97:72: 48:26:08:2c:6f:d8:89:99:9f:92:50:8e:8c:a9:af:aa:16:5b: 09:26:52:00:45:d2:eb:7c:43:79:97:8e:46:a9:26:f7:eb:2e: c8:32:76:6a:13:08:45:fe:cb:aa:c3:94:3c:d9:4d:b8:c8:1d: 49:d7:01:e9:f5:c4:75:07:5f:1b:b8:5c:ad:d5:c1:f2:13:c2: 97:bd:fc:c6:96:84:05:e4:91:8b:1e:1e:0d:ed:5b:a0:29:d6: 6f:e7:a0:33:c3:16:d7:0d:ab:e6:7c:91:48:70:49:cf:1a:b2: d4:90:88:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNL4fcZWajm/en3RlAat0VIGVq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjExMTQxOTAzMzJaFw0yNjExMTUxOTUyMzJaMDMxMTAvBgNV BAMTKEI1NzhFOEMyMUI5ODk1REYzQjM4NjcwODVBMDgwMjRDQkNCQjBDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoxzbUZ6sx+8tFQuXKpQD9H5iH cqf93Edm917QCcT2QICjHvP6jeQbfQT4gcPutPXysMlokXkkSQrMl3tET47oOmOS w4BbUpWTe1krd3/IbOvVdZVCtsYV4TpwnCx7EdPOvZGS/jT5lKe4xzPDUds307w0 iseAykY/Qy3x7MXNd8F+TDp6CGQhjb1Ot8sGl9N4BFZ2xmFELc4L7AVF8j2gigSw rN/Cxk3c9CrsgnwrXGdGqJynLcg8Qkht6ZBJk7xbWTlxeffRU2ri2lhPgSCBNqCh mQniid8qLRdvuyiHHifaJl9W2PyJjqavo7bfCQdKknm6qkXS+0TSNXkaMYe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXjowhuYld87OGcIWggCTLy7DGQwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINbbs8kNYlfrtpnGiZN5ZnAtILmoDVaHnUC jD5hd5ImH6ethUYc1TG4G+KyYuFLJyseJJVi5o1H7RqaiJdcDNEaTe7Vgzi+gfUE JYUn/ED14q5sQ/9v4DfBd6dnih+Ml58wkGmw7k4kuvlOTBUStD9lnZCP2QnEZ+7j bLOI9rIkLV43SepCOdKgl56FDBiXckgmCCxv2ImZn5JQjoypr6oWWwkmUgBF0ut8 Q3mXjkapJvfrLsgydmoTCEX+y6rDlDzZTbjIHUnXAen1xHUHXxu4XK3VwfITwpe9 /MaWhAXkkYseHg3tW6Ap1m/noDPDFtcNq+Z8kUhwSc8astSQiL8= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:20 2026 by rpki-client