$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json) Hash identifier: OySdyPfTJXTCEIMnfgHUxdVDa8K8uT5NkjcJ0nP8xKE= Subject key identifier: 8F:52:0C:AB:F5:33:A4:ED:25:2B:48:76:94:48:51:B7:94:2A:E8:E3 Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 3819FED9A6B15A1CABE6516198F8625E57FC0A80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft Manifest number: 0112 Signing time: Sat 14 Nov 2026 18:22:40 +0000 Manifest this update: Sat 14 Nov 2026 18:17:40 +0000 Manifest next update: Sun 15 Nov 2026 21:40:40 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32342d3234203d3e203535373031.roa (hash: K1J2WLNSxTg8mS0mgqZlEWvUbNOvOM1DvLk7zTONlww=) 2: 3130332e32302e3130382e302f32332d3234203d3e203535373031.roa (hash: SKpQGmQ8KTJwPjZvledKXJiza4tIEHenZdHlrvpagz8=) 3: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: mBZbYgKY0Pfe3lL/8+UWKiwgWJYNeszOAPS7KJo3xnY=) 4: 3130332e32302e3130392e302f32342d3234203d3e203535373031.roa (hash: fB23hx2OypCfMJz7mEyUvJ90iHS2Gyn4cKnxUn+9AXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:19:fe:d9:a6:b1:5a:1c:ab:e6:51:61:98:f8:62:5e:57:fc:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Nov 14 18:17:40 2026 GMT Not After : Nov 15 21:40:40 2026 GMT Subject: CN=8F520CABF533A4ED252B4876944851B7942AE8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:c8:cb:22:cb:50:a6:3f:33:27:2e:a2:71: c3:d5:55:bc:23:d6:eb:4b:e3:fd:e0:c9:c4:eb:15: cf:c2:66:dd:eb:71:76:d8:c9:ca:bb:2a:98:80:9a: f5:ba:21:ac:ff:fa:c6:ff:bf:a2:da:33:67:67:51: 27:11:1c:f8:88:97:68:fc:de:53:49:0f:0a:5c:1a: 70:07:e2:51:2f:95:9c:da:1a:56:50:08:f2:07:95: 5b:b5:ac:b6:36:f2:f4:4f:51:a5:d8:76:78:55:9f: 2f:71:27:8d:9e:ba:a9:07:ee:e9:fa:aa:d7:46:4e: de:56:a9:8e:18:2c:b3:c7:e0:06:96:c5:b2:bc:03: 0d:d7:31:af:86:c8:57:ad:81:8c:ce:45:bb:5e:27: ce:61:25:5d:b9:c9:e5:6f:46:90:13:2a:0f:91:2d: 78:33:d0:8e:89:95:40:64:7b:f4:c6:f2:c4:a5:8b: c5:2c:74:94:65:f8:a8:0e:d7:8f:66:d3:38:a4:34: 1a:49:32:43:b7:be:c3:55:b3:ad:89:ad:bb:29:9d: 35:93:cf:7a:7a:52:98:0f:6e:fe:70:7d:54:4b:23: 56:3c:26:e6:d1:33:ea:c3:fa:96:ff:a1:82:bc:a3: 61:75:42:a8:94:b1:5c:68:2d:70:4b:5a:a6:a7:60: 6f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:0C:AB:F5:33:A4:ED:25:2B:48:76:94:48:51:B7:94:2A:E8:E3 X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ed:d3:d8:0c:c2:ed:17:4f:11:9f:f9:bc:08:2a:aa:c6:4b: 73:84:0b:a1:bf:df:1f:c8:77:dd:0d:a8:c4:c2:5f:29:8d:95: 69:8c:b1:cd:bf:ba:95:cd:25:df:cc:08:40:a0:d5:06:0b:fe: 13:2c:75:0e:5b:bc:90:c6:a9:92:06:ab:3c:a2:30:03:f0:ce: fa:45:d6:8d:bc:97:dd:53:84:b4:3a:3c:17:3d:bb:1e:4c:fd: 52:83:4c:bc:fe:62:d6:7a:1e:06:fd:14:15:35:33:ec:fb:23: 45:7f:43:3b:aa:bc:23:83:c5:93:71:72:65:81:9d:25:7e:89: 26:02:e3:16:6a:5c:be:43:cf:9a:e3:ad:c9:a0:83:58:f2:51: 0c:ee:69:e9:16:7d:4b:cb:85:75:26:a9:45:fc:1e:05:ee:90: 03:b8:50:a9:a0:45:01:63:68:8a:eb:c6:84:9d:c3:da:a0:02: b2:00:96:77:1a:48:7c:83:48:51:cc:49:3a:80:3e:25:2c:15: 06:bb:d6:b5:94:f1:83:fa:0f:af:d5:80:6f:99:fd:7c:84:fb: 89:5f:47:1c:09:ca:42:63:f7:bf:5a:49:c2:a4:0d:21:2c:52: 2b:64:94:7a:ce:d4:79:98:6e:50:4a:a1:1c:31:7c:62:26:c9: 89:73:a4:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBn+2aaxWhyr5lFhmPhiXlf8CoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjExMTQxODE3NDBaFw0yNjExMTUyMTQwNDBaMDMxMTAvBgNV BAMTKDhGNTIwQ0FCRjUzM0E0RUQyNTJCNDg3Njk0NDg1MUI3OTQyQUU4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChd8jLIstQpj8zJy6iccPVVbwj 1utL4/3gycTrFc/CZt3rcXbYycq7KpiAmvW6Iaz/+sb/v6LaM2dnUScRHPiIl2j8 3lNJDwpcGnAH4lEvlZzaGlZQCPIHlVu1rLY28vRPUaXYdnhVny9xJ42euqkH7un6 qtdGTt5WqY4YLLPH4AaWxbK8Aw3XMa+GyFetgYzORbteJ85hJV25yeVvRpATKg+R LXgz0I6JlUBke/TG8sSli8UsdJRl+KgO149m0zikNBpJMkO3vsNVs62JrbspnTWT z3p6UpgPbv5wfVRLI1Y8JubRM+rD+pb/oYK8o2F1QqiUsVxoLXBLWqanYG+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1IMq/UzpO0lK0h2lEhRt5Qq6OMwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcx MjUyMUQ2NEIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLt09gMwu0XTxGf+bwIKqrGS3OEC6G/3x/I d90NqMTCXymNlWmMsc2/upXNJd/MCECg1QYL/hMsdQ5bvJDGqZIGqzyiMAPwzvpF 1o28l91ThLQ6PBc9ux5M/VKDTLz+YtZ6Hgb9FBU1M+z7I0V/QzuqvCODxZNxcmWB nSV+iSYC4xZqXL5Dz5rjrcmgg1jyUQzuaekWfUvLhXUmqUX8HgXukAO4UKmgRQFj aIrrxoSdw9qgArIAlncaSHyDSFHMSTqAPiUsFQa71rWU8YP6D6/VgG+Z/XyE+4lf RxwJykJj979aScKkDSEsUitklHrO1HmYblBKoRwxfGImyYlzpJo= -----END CERTIFICATE-----Generated at Sun Nov 15 13:29:55 2026 by rpki-client