$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: eJAgzRkcamUMDcOAiowOvPu7zEmN+SGiOIfjQ6mIUhY= Subject key identifier: 9E:21:40:15:6E:83:9B:FF:E4:CB:E3:30:71:A8:F8:25:A6:19:11:47 Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 59A264FB7B6ADFBD8AE6B1EC1A45696BF0A039BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 16:19:53 +0000 Manifest this update: Sat 14 Nov 2026 16:14:53 +0000 Manifest next update: Sun 15 Nov 2026 18:40:53 +0000 Files and hashes: 1: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) 2: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: uh7LlC44Y5hMTj/W/JBuq+9wHelot7UCaEye1aSVor0=) 3: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) 4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a2:64:fb:7b:6a:df:bd:8a:e6:b1:ec:1a:45:69:6b:f0:a0:39:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Nov 14 16:14:53 2026 GMT Not After : Nov 15 18:40:53 2026 GMT Subject: CN=9E2140156E839BFFE4CBE33071A8F825A6191147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:ae:9e:55:2e:f7:1d:db:27:db:ed:90:12: c2:34:eb:3c:6e:28:7b:ac:3d:6c:a6:3e:f1:fc:37: 65:0f:5f:f8:31:4e:74:98:f2:8f:7e:66:83:18:6e: c2:ba:b3:12:8f:0b:2a:ea:6f:64:bc:99:89:e4:d9: 52:13:8c:02:5e:d5:cc:45:d0:00:13:57:92:99:6b: 0f:4a:0e:87:00:47:6a:d0:ca:24:5b:c8:59:b1:7b: f5:2d:f7:d1:63:ac:03:db:b4:ea:22:c8:27:84:85: 5f:aa:3b:67:9f:a0:3d:5a:a1:af:8d:8b:c6:88:87: ed:de:cd:6e:71:b5:db:80:e4:09:17:8f:48:20:2a: ca:c8:6d:07:83:0a:bc:81:60:ec:d0:84:fd:a6:d7: 77:aa:c2:15:c1:62:2e:9b:c7:74:ad:87:de:7c:41: 82:a6:39:5b:6a:0b:55:f7:50:56:8f:65:d2:7f:a0: 5f:f2:0f:ea:fa:7d:b1:57:0c:78:d0:14:55:2a:64: d1:3f:1a:64:d9:4b:e1:38:93:03:8d:7e:09:12:77: 02:f7:43:27:f6:56:dd:25:ca:d6:d7:3f:14:bf:98: f7:fa:80:a4:aa:f0:50:99:65:59:6a:6c:2d:3f:3f: cc:2d:e1:21:92:22:cf:8b:31:44:f5:58:ad:98:f7: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:40:15:6E:83:9B:FF:E4:CB:E3:30:71:A8:F8:25:A6:19:11:47 X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:91:89:21:5a:d3:50:8c:49:c1:a8:af:c8:92:fb:f2:a4:ff: 77:99:87:e3:3a:f0:ad:b8:62:6a:d9:0e:75:63:1b:64:a6:46: de:4f:10:a9:b4:e4:5b:5f:1d:05:58:cb:63:ec:89:78:73:60: 1c:9f:6f:7a:c3:fd:c8:0c:d7:d5:d6:fe:40:c3:9e:25:ce:56: 52:d6:b6:7e:e9:ab:be:5a:f8:9b:b3:f2:ae:96:c8:5d:11:96: dd:a7:ff:d0:cd:cb:d5:33:56:28:c8:1f:da:26:20:42:01:98: 72:41:17:ee:d8:9e:35:9b:90:00:c0:31:65:fc:3b:51:bf:55: 54:b1:62:8c:39:1d:30:f6:27:b9:1c:87:fd:c2:e6:19:40:90: 39:dc:a8:28:19:00:15:55:f8:7c:be:d7:7d:6e:b8:d9:1d:0d: dc:c8:0c:5d:32:88:6f:00:58:4c:b5:ae:67:a5:d4:64:4b:e0: a6:67:35:79:f9:bd:8e:c2:26:b6:42:fe:3a:a1:ea:45:9a:c5: 0b:f6:fd:6c:8d:14:a5:f7:bb:61:af:a9:2a:6a:ca:ae:da:9e: 80:68:4c:ba:77:c8:01:b5:c2:dd:f1:07:4e:fb:e0:c2:51:a9: 47:1c:af:8f:45:bd:dd:f4:47:84:0b:49:66:57:a4:53:9a:a7: 55:2d:0e:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaJk+3tq372K5rHsGkVpa/CgOb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjExMTQxNjE0NTNaFw0yNjExMTUxODQwNTNaMDMxMTAvBgNV BAMTKDlFMjE0MDE1NkU4MzlCRkZFNENCRTMzMDcxQThGODI1QTYxOTExNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicq6eVS73Hdsn2+2QEsI06zxu KHusPWymPvH8N2UPX/gxTnSY8o9+ZoMYbsK6sxKPCyrqb2S8mYnk2VITjAJe1cxF 0AATV5KZaw9KDocAR2rQyiRbyFmxe/Ut99FjrAPbtOoiyCeEhV+qO2efoD1aoa+N i8aIh+3ezW5xtduA5AkXj0ggKsrIbQeDCryBYOzQhP2m13eqwhXBYi6bx3Sth958 QYKmOVtqC1X3UFaPZdJ/oF/yD+r6fbFXDHjQFFUqZNE/GmTZS+E4kwONfgkSdwL3 Qyf2Vt0lytbXPxS/mPf6gKSq8FCZZVlqbC0/P8wt4SGSIs+LMUT1WK2Y95KFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniFAFW6Dm//ky+Mwcaj4JaYZEUcwHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCRiSFa01CMScGor8iS+/Kk/3eZh+M68K24 YmrZDnVjG2SmRt5PEKm05FtfHQVYy2PsiXhzYByfb3rD/cgM19XW/kDDniXOVlLW tn7pq75a+Juz8q6WyF0Rlt2n/9DNy9UzVijIH9omIEIBmHJBF+7YnjWbkADAMWX8 O1G/VVSxYow5HTD2J7kch/3C5hlAkDncqCgZABVV+Hy+131uuNkdDdzIDF0yiG8A WEy1rmel1GRL4KZnNXn5vY7CJrZC/jqh6kWaxQv2/WyNFKX3u2GvqSpqyq7anoBo TLp3yAG1wt3xB0774MJRqUccr49Fvd30R4QLSWZXpFOap1UtDqo= -----END CERTIFICATE-----Generated at Sat Nov 14 22:38:13 2026 by rpki-client