$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: wHVops26z3G5s2iCOxqqwv8ZA75/+qY/e5pMPQGE/jI= Subject key identifier: 04:3D:49:D3:05:9D:C2:8C:8F:9B:93:2A:66:1E:DC:D1:60:4D:6F:1A Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 2662073C00C1360D195406D73E0D2A9DA7DB59DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 17:36:40 +0000 Manifest this update: Sat 14 Nov 2026 17:31:40 +0000 Manifest next update: Sun 15 Nov 2026 19:40:40 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: 6PyT7xLU8MJDllm7H2M29TMClYBIFOvqkA93ehVHkKY=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:62:07:3c:00:c1:36:0d:19:54:06:d7:3e:0d:2a:9d:a7:db:59:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Nov 14 17:31:40 2026 GMT Not After : Nov 15 19:40:40 2026 GMT Subject: CN=043D49D3059DC28C8F9B932A661EDCD1604D6F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:51:b9:76:61:b7:2e:25:c0:fa:8b:9e:41: f4:60:74:67:30:2c:9b:32:8e:fd:44:6f:83:a2:b2: 01:ba:aa:ab:71:f2:64:96:82:05:dd:aa:12:1c:84: 95:8a:a5:f1:b7:df:9e:be:26:d1:c5:9b:f8:07:6f: 2f:97:4b:91:8b:72:72:51:9c:9d:c6:d4:aa:5c:4f: 87:f1:2e:0d:10:af:13:a5:87:c5:a3:c6:5c:8e:c4: e5:47:34:8e:42:5e:6d:89:09:cd:92:f3:94:d3:41: 3f:ca:4d:89:5f:d6:44:93:e5:68:30:75:94:a7:cb: 03:51:d1:20:80:db:30:5b:57:3b:0e:81:be:1f:af: 60:83:16:be:ab:54:60:5c:37:44:b1:2a:c6:72:62: 93:48:12:88:48:ff:cc:9a:fc:bf:e2:0a:ae:3f:39: 9e:c7:e8:87:aa:e8:35:01:39:38:31:33:79:d5:57: 3c:4c:ea:ba:af:d6:7e:a6:f7:15:48:e7:a3:86:7f: af:02:f7:07:fe:8d:84:1b:52:eb:62:bd:3d:df:d7: 79:c6:c2:72:d8:4c:77:c2:14:54:a7:e6:39:f8:b1: fd:e0:df:8e:a4:59:67:24:cc:3a:a8:b1:fc:21:56: d9:cc:36:39:ac:0f:29:cc:88:e1:4d:ce:3b:23:02: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:49:D3:05:9D:C2:8C:8F:9B:93:2A:66:1E:DC:D1:60:4D:6F:1A X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:09:ed:69:9c:2c:15:c7:a9:45:78:fa:3e:f0:f1:11:ff: 32:48:58:5b:9d:8f:91:42:2a:fd:1b:9c:2c:8f:49:b0:e4:16: 30:e3:02:85:e2:f2:84:dd:5f:5e:2a:1a:73:64:78:fa:6a:de: 9b:1f:4b:55:e5:de:a4:5c:54:11:a1:42:8b:69:2a:4d:21:d7: d9:0c:de:c8:19:f2:ed:d5:8e:04:a5:2d:e1:7f:ef:39:b4:5b: 07:1c:cf:e0:9a:19:3c:af:92:67:1b:35:3d:e3:b2:83:e1:f8: ef:71:60:93:82:a2:99:8e:ef:f0:12:d8:ba:3a:fd:95:13:1a: 05:8b:92:a2:ad:31:2d:15:88:45:68:80:a4:0b:f4:77:27:1a: c6:ce:a0:4e:e9:cb:62:8f:8b:13:d2:d6:14:9c:1d:d3:37:9c: a0:6a:27:4f:4d:7a:35:f9:8b:00:83:cf:23:fc:4a:5b:4b:75: 5b:7e:43:4d:de:d5:db:56:67:c6:0b:d2:7a:0f:0b:64:32:99: 73:6e:17:08:64:28:cf:fe:54:82:e7:8c:5e:2c:d3:1f:dd:ef: 4c:68:d4:4e:67:dc:7f:a7:14:42:f3:39:2d:ba:54:7f:ee:0b: 4e:71:71:ca:52:c8:c7:32:bb:b1:bf:b7:70:9e:f3:d9:ea:51: 36:45:a8:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmIHPADBNg0ZVAbXPg0qnafbWd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjExMTQxNzMxNDBaFw0yNjExMTUxOTQwNDBaMDMxMTAvBgNV BAMTKDA0M0Q0OUQzMDU5REMyOEM4RjlCOTMyQTY2MUVEQ0QxNjA0RDZGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CVG5dmG3LiXA+oueQfRgdGcw LJsyjv1Eb4OisgG6qqtx8mSWggXdqhIchJWKpfG3356+JtHFm/gHby+XS5GLcnJR nJ3G1KpcT4fxLg0QrxOlh8WjxlyOxOVHNI5CXm2JCc2S85TTQT/KTYlf1kST5Wgw dZSnywNR0SCA2zBbVzsOgb4fr2CDFr6rVGBcN0SxKsZyYpNIEohI/8ya/L/iCq4/ OZ7H6Ieq6DUBOTgxM3nVVzxM6rqv1n6m9xVI56OGf68C9wf+jYQbUutivT3f13nG wnLYTHfCFFSn5jn4sf3g346kWWckzDqosfwhVtnMNjmsDynMiOFNzjsjAlrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBD1J0wWdwoyPm5MqZh7c0WBNbxowHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITjCe1pnCwVx6lFePo+8PER/zJIWFudj5FC Kv0bnCyPSbDkFjDjAoXi8oTdX14qGnNkePpq3psfS1Xl3qRcVBGhQotpKk0h19kM 3sgZ8u3VjgSlLeF/7zm0Wwccz+CaGTyvkmcbNT3jsoPh+O9xYJOCopmO7/AS2Lo6 /ZUTGgWLkqKtMS0ViEVogKQL9HcnGsbOoE7py2KPixPS1hScHdM3nKBqJ09NejX5 iwCDzyP8SltLdVt+Q03e1dtWZ8YL0noPC2QymXNuFwhkKM/+VILnjF4s0x/d70xo 1E5n3H+nFELzOS26VH/uC05xccpSyMcyu7G/t3Ce89nqUTZFqLY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:53 2026 by rpki-client