$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: QgstL42ncOmog4cAl2T0XXUVac9CrDX4fpv04bz8aEg= Subject key identifier: 6E:17:66:A9:48:74:1C:3C:B1:6D:E5:4F:3B:22:B1:DA:6A:A8:81:2E Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 4C7C08E446AFC91BC96105912F93E81ABC293AA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 18:01:29 +0000 Manifest this update: Sun 15 Nov 2026 17:56:29 +0000 Manifest next update: Mon 16 Nov 2026 21:47:29 +0000 Files and hashes: 1: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) 2: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: gl2BmkQftng/PTC30ZS8f+q3PY32TRkX4sYIcp1YX+U=) 3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) 4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7c:08:e4:46:af:c9:1b:c9:61:05:91:2f:93:e8:1a:bc:29:3a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Nov 15 17:56:29 2026 GMT Not After : Nov 16 21:47:29 2026 GMT Subject: CN=6E1766A948741C3CB16DE54F3B22B1DA6AA8812E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:2e:f8:e3:3d:d3:e2:09:ef:e7:4c:16:d4: df:80:dd:a6:17:c6:5a:75:44:47:55:28:e3:38:17: eb:fd:cb:a9:7d:63:f2:c1:2b:37:18:cf:4e:02:0e: e7:90:93:7f:13:3b:94:c9:c0:fb:f6:a0:20:60:78: 08:68:39:a2:41:d2:59:61:24:10:8a:22:69:cb:90: f1:5f:29:96:67:36:66:3c:27:74:d4:f4:35:e9:43: d0:f7:e0:1b:4b:f0:91:45:4f:9b:0f:13:31:27:65: db:27:0d:74:3d:fa:6f:15:84:bf:ae:53:08:28:a9: 8d:ce:39:ce:c9:00:0f:90:8a:88:09:5e:3a:5a:e3: 4b:9e:b6:1f:84:dd:8c:16:86:e1:8a:76:48:09:8b: fe:3f:ba:71:64:7e:f5:79:17:cc:55:a4:74:81:9c: 77:4b:cb:69:f2:50:4d:eb:8d:4f:05:d4:7a:4e:f3: d9:30:9e:5f:49:c9:b9:bc:dd:14:af:e8:cd:7a:d3: 8a:30:94:5c:b0:56:12:18:c9:44:20:65:99:eb:b8: 7c:3b:18:65:0c:cd:96:b4:6d:49:d3:ce:db:c2:e6: 73:d1:71:e6:f0:7a:70:6f:32:26:b8:79:b8:df:da: a8:24:78:22:30:6f:44:e0:d5:14:7a:e0:6f:6f:ca: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:66:A9:48:74:1C:3C:B1:6D:E5:4F:3B:22:B1:DA:6A:A8:81:2E X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:08:f8:05:33:46:23:1b:96:12:2c:f6:87:d4:d2:69:a0:5e: 17:fb:9e:9f:64:bd:c0:80:40:6b:42:35:33:a2:82:70:df:a8: c8:a4:e5:21:e3:f0:59:1c:11:7b:70:ab:67:95:e5:ee:cc:98: 83:51:06:20:57:83:39:ea:f2:8f:80:ca:2d:65:e4:03:94:e8: 65:b6:6d:e0:6e:40:b3:68:dd:42:06:41:11:74:6d:47:9a:48: a4:c4:da:de:88:bd:8c:01:98:92:de:72:a2:c3:44:5d:22:c4: 36:84:c6:14:01:3e:37:a0:7a:28:03:38:1d:7c:02:ab:8d:cb: 22:22:ec:39:5d:58:95:aa:27:cd:d5:6c:dc:e8:07:1a:81:00: a1:fd:9f:c7:b7:3a:4c:9b:00:ce:23:88:98:a6:47:35:84:2b: b3:a8:6a:26:12:41:33:ba:7c:08:9e:dc:1d:81:98:fb:da:c9: 5d:cf:8a:76:8c:cf:d9:a1:59:8e:d8:a5:c0:6f:b3:91:3d:f4: 8d:cc:dd:e4:19:77:f6:0b:e5:ce:c0:d9:aa:3a:ed:99:6c:74: 58:fa:36:f0:e1:4e:6f:81:9a:1c:bb:94:6c:64:22:97:88:05: ea:72:dc:09:85:10:89:e0:10:a7:57:16:d1:aa:be:a5:a2:98: bf:75:9d:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHwI5EavyRvJYQWRL5PoGrwpOqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjExMTUxNzU2MjlaFw0yNjExMTYyMTQ3MjlaMDMxMTAvBgNV BAMTKDZFMTc2NkE5NDg3NDFDM0NCMTZERTU0RjNCMjJCMURBNkFBODgxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5y744z3T4gnv50wW1N+A3aYX xlp1REdVKOM4F+v9y6l9Y/LBKzcYz04CDueQk38TO5TJwPv2oCBgeAhoOaJB0llh JBCKImnLkPFfKZZnNmY8J3TU9DXpQ9D34BtL8JFFT5sPEzEnZdsnDXQ9+m8VhL+u UwgoqY3OOc7JAA+QiogJXjpa40ueth+E3YwWhuGKdkgJi/4/unFkfvV5F8xVpHSB nHdLy2nyUE3rjU8F1HpO89kwnl9Jybm83RSv6M1604owlFywVhIYyUQgZZnruHw7 GGUMzZa0bUnTztvC5nPRcebwenBvMia4ebjf2qgkeCIwb0Tg1RR64G9vyo0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbhdmqUh0HDyxbeVPOyKx2mqogS4wHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcI+AUzRiMblhIs9ofU0mmgXhf7np9kvcCA QGtCNTOignDfqMik5SHj8FkcEXtwq2eV5e7MmINRBiBXgznq8o+Ayi1l5AOU6GW2 beBuQLNo3UIGQRF0bUeaSKTE2t6IvYwBmJLecqLDRF0ixDaExhQBPjegeigDOB18 AquNyyIi7DldWJWqJ83VbNzoBxqBAKH9n8e3OkybAM4jiJimRzWEK7OoaiYSQTO6 fAie3B2BmPvayV3PinaMz9mhWY7YpcBvs5E99I3M3eQZd/YL5c7A2ao67ZlsdFj6 NvDhTm+Bmhy7lGxkIpeIBepy3AmFEIngEKdXFtGqvqWimL91nb4= -----END CERTIFICATE-----Generated at Sun Nov 15 20:14:21 2026 by rpki-client