$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: 6kl6nnwVBjl/iqt+QMIOH2u/YBJYaBgdECHAX4mvplA= Subject key identifier: EA:A0:2B:D2:68:9E:07:C6:80:0E:0E:52:B2:75:6A:63:79:DD:AF:E1 Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 46CABF1FAD383C220B7A96C7AB4FA709501860DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 17:36:35 +0000 Manifest this update: Sat 14 Nov 2026 17:31:35 +0000 Manifest next update: Sun 15 Nov 2026 19:16:35 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) 2: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: JgVCsZ9AVH9QQBkFNBBT5f/iE7mXxKOV88sBBcJAbpU=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) 4: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ca:bf:1f:ad:38:3c:22:0b:7a:96:c7:ab:4f:a7:09:50:18:60:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Nov 14 17:31:35 2026 GMT Not After : Nov 15 19:16:35 2026 GMT Subject: CN=EAA02BD2689E07C6800E0E52B2756A6379DDAFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:40:f1:35:cd:bb:77:5c:55:ca:eb:f3:cf: 68:c3:d8:61:80:59:0d:11:b4:a7:d8:f8:fa:37:0d: d9:70:be:6f:2a:c2:f8:09:5a:83:b3:fa:d6:56:3e: 2e:b5:3b:88:eb:8c:91:0a:03:44:c3:76:4c:c0:45: ec:e1:30:31:6e:7e:8b:26:99:1b:ce:db:e6:d4:cf: c6:0f:21:09:54:eb:95:32:da:80:33:4b:bc:42:3f: 39:5e:21:07:05:5a:5b:6d:89:89:d6:25:3c:e8:f7: 83:63:7e:d7:80:22:09:45:e8:18:f3:5e:ea:70:01: 0f:25:d7:35:94:53:ee:78:6b:a1:d0:b8:ed:36:6f: 39:0d:01:f3:e4:5e:0c:aa:1f:25:3e:b6:8d:87:ca: 32:67:33:52:74:a5:aa:52:e0:bc:ff:0e:96:7d:35: 71:c0:b2:f9:27:8f:fb:37:72:c3:03:21:73:01:19: 97:7c:54:f2:17:46:d5:ac:68:88:e3:20:cd:ee:f1: 2a:fa:24:e8:4f:a5:4b:81:4f:ba:5f:72:73:06:08: 68:fb:d7:f8:0e:5c:5f:2a:f3:1e:71:b6:bd:9d:46: 6d:2a:f4:2d:a0:23:bb:ac:bb:c7:a0:9a:42:41:7f: e9:02:52:01:ed:3c:51:8f:5c:25:b3:54:0e:46:3d: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A0:2B:D2:68:9E:07:C6:80:0E:0E:52:B2:75:6A:63:79:DD:AF:E1 X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:70:6a:ae:81:69:5e:f9:f4:a2:eb:d8:90:cb:4a:b9:a4:92: ee:8c:5e:e5:a9:2b:6d:63:cc:f8:09:2a:01:b9:ea:98:6b:37: 9e:60:da:51:b3:49:f5:b4:9d:05:0b:1d:cc:c8:7c:89:e5:cc: 70:99:34:5d:6a:10:cc:f5:09:9b:ce:f5:84:51:90:a0:95:12: 65:57:3c:d1:37:74:ca:96:0a:ae:8c:0c:b2:12:35:ac:af:80: 21:f6:7c:63:14:42:45:70:42:3a:26:ce:44:d2:8c:ba:8a:7b: 09:15:42:ac:0a:b2:9d:ac:ff:12:54:c3:ba:85:2b:05:b4:de: 90:c8:2e:71:d1:b2:8d:8f:72:e5:e6:07:77:9b:6d:bb:6d:14: de:16:da:ee:c6:fc:d6:80:8f:5b:e9:a9:eb:3e:a1:97:ab:a4: 82:66:18:b1:5c:49:b8:84:5c:f9:7d:89:b6:21:1f:32:64:97: 96:94:ff:f8:5d:43:7b:7e:73:c0:ce:ed:81:3c:f3:5a:8e:b6: 16:0c:32:30:1e:3a:f9:76:e3:5f:f0:c5:ca:d7:13:1d:fe:48: d0:ea:76:80:4c:c6:99:7c:d9:38:10:32:36:a8:ca:40:5b:12: 08:ba:77:a5:e3:c0:a7:5f:f3:d0:b1:9a:b6:7c:89:c0:e1:b5: 2c:e6:50:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsq/H604PCILepbHq0+nCVAYYN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjExMTQxNzMxMzVaFw0yNjExMTUxOTE2MzVaMDMxMTAvBgNV BAMTKEVBQTAyQkQyNjg5RTA3QzY4MDBFMEU1MkIyNzU2QTYzNzlEREFGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb10DxNc27d1xVyuvzz2jD2GGA WQ0RtKfY+Po3Ddlwvm8qwvgJWoOz+tZWPi61O4jrjJEKA0TDdkzARezhMDFufosm mRvO2+bUz8YPIQlU65Uy2oAzS7xCPzleIQcFWlttiYnWJTzo94NjfteAIglF6Bjz XupwAQ8l1zWUU+54a6HQuO02bzkNAfPkXgyqHyU+to2HyjJnM1J0papS4Lz/DpZ9 NXHAsvknj/s3csMDIXMBGZd8VPIXRtWsaIjjIM3u8Sr6JOhPpUuBT7pfcnMGCGj7 1/gOXF8q8x5xtr2dRm0q9C2gI7usu8egmkJBf+kCUgHtPFGPXCWzVA5GPc0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6qAr0mieB8aADg5SsnVqY3ndr+EwHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABwaq6BaV759KLr2JDLSrmkku6MXuWpK21j zPgJKgG56phrN55g2lGzSfW0nQULHczIfInlzHCZNF1qEMz1CZvO9YRRkKCVEmVX PNE3dMqWCq6MDLISNayvgCH2fGMUQkVwQjomzkTSjLqKewkVQqwKsp2s/xJUw7qF KwW03pDILnHRso2PcuXmB3ebbbttFN4W2u7G/NaAj1vpqes+oZerpIJmGLFcSbiE XPl9ibYhHzJkl5aU//hdQ3t+c8DO7YE881qOthYMMjAeOvl241/wxcrXEx3+SNDq doBMxpl82TgQMjaoykBbEgi6d6XjwKdf89CxmrZ8icDhtSzmUOU= -----END CERTIFICATE-----Generated at Sun Nov 15 01:07:52 2026 by rpki-client