$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: NIgrx86+68WUXvT8u9FUOBtJ+e6RHcLD31PymmK7qt0= Subject key identifier: 97:B8:D7:09:37:CA:99:47:4B:0E:6F:45:55:DB:94:2B:7B:60:0B:C4 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 4AC2A6EFF4B66164FD68D189090E9978474C6387 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 15:54:22 +0000 Manifest this update: Sat 14 Nov 2026 15:49:22 +0000 Manifest next update: Sun 15 Nov 2026 16:52:22 +0000 Files and hashes: 1: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 2: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: MTMNTaRT9eYEgOdD+Ggx5XknSjxHkmWDbP+WA6PSHxs=) 3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) 4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c2:a6:ef:f4:b6:61:64:fd:68:d1:89:09:0e:99:78:47:4c:63:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Nov 14 15:49:22 2026 GMT Not After : Nov 15 16:52:22 2026 GMT Subject: CN=97B8D70937CA99474B0E6F4555DB942B7B600BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:bd:62:6e:a0:64:b1:8a:c5:01:93:da:5d: f3:df:27:0c:e0:10:f1:3c:ad:96:ed:28:f5:3d:52: 25:aa:dd:57:93:ab:3e:f0:07:6b:ed:cc:58:7b:86: 72:58:ed:72:d1:06:e3:a1:05:c4:75:47:29:68:61: ed:98:d0:10:3d:db:d8:0e:1d:cc:aa:f3:c6:e2:98: 09:27:9d:88:cf:26:1b:79:f5:5b:ee:a4:f1:ea:a8: c9:b1:63:ac:ad:27:61:ca:12:80:40:b8:09:d3:28: df:5b:0e:20:47:77:28:91:c8:f8:f1:6e:e4:f5:66: d4:4c:51:14:eb:ac:d3:a0:72:b2:f4:f2:e8:b6:8b: 97:7b:56:37:a8:2d:43:8c:5c:1d:d4:b3:e3:50:28: 56:29:29:e0:60:7c:b5:d4:d7:5e:a6:34:58:47:5b: 27:dc:e7:12:04:c1:19:bc:4e:29:09:d1:db:e8:7c: c0:4a:19:ba:ed:d6:75:cb:4d:7c:99:94:4a:df:30: 0c:95:67:8e:80:98:64:a9:99:62:c7:d9:51:93:ed: a6:11:47:e9:ee:d3:ca:ef:56:c0:38:d7:a2:d2:b8: e6:38:b1:da:df:4b:ac:c0:ad:bb:09:85:4b:61:a9: 4d:42:34:b4:6c:b1:dd:1f:cd:21:6b:d7:95:bb:82: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B8:D7:09:37:CA:99:47:4B:0E:6F:45:55:DB:94:2B:7B:60:0B:C4 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:75:19:d9:55:7f:37:21:77:1a:74:55:d2:3a:58:cb:7a:1f: 9b:1b:3e:7e:85:0d:81:9f:9b:60:34:33:f2:77:df:6a:4c:fe: 8e:81:87:11:24:fe:e7:49:c4:c0:c3:65:c1:3d:f7:b1:c5:6a: 95:33:c2:82:2d:60:a7:6a:16:ee:db:f0:de:fd:61:11:5d:5f: 78:ab:f0:e0:e9:f5:38:f7:8b:ce:de:9c:b9:68:c6:22:e3:3b: 1c:f1:73:ca:b5:02:1f:d0:03:91:bd:25:58:8b:27:64:0a:02: 7a:9c:ca:85:51:b4:fe:70:70:d1:a5:00:d6:ad:49:56:d5:b5: 83:14:6e:57:c9:16:6f:aa:cd:31:b4:ec:31:ec:ba:0c:5f:cb: ee:8a:05:0c:f2:8f:e1:43:5a:ce:dd:77:91:f4:e9:7f:12:f7: b2:6f:4b:e2:4b:6c:c8:7c:5f:94:3d:9d:5b:77:67:86:9b:1d: 66:ed:bb:25:75:db:f6:a5:98:3a:c7:e7:21:83:99:75:c2:29: 14:b3:a8:62:37:b1:ca:96:d0:68:5b:af:0b:46:c1:5d:0f:af: f4:76:67:0c:73:c8:bc:dd:ae:9d:b9:74:9f:1e:bc:70:dc:d7: 96:89:c7:d1:50:03:8c:5d:d4:bf:b1:ea:09:83:69:4c:45:45: 09:2b:1b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsKm7/S2YWT9aNGJCQ6ZeEdMY4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjExMTQxNTQ5MjJaFw0yNjExMTUxNjUyMjJaMDMxMTAvBgNV BAMTKDk3QjhENzA5MzdDQTk5NDc0QjBFNkY0NTU1REI5NDJCN0I2MDBCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z71ibqBksYrFAZPaXfPfJwzg EPE8rZbtKPU9UiWq3VeTqz7wB2vtzFh7hnJY7XLRBuOhBcR1RyloYe2Y0BA929gO Hcyq88bimAknnYjPJht59VvupPHqqMmxY6ytJ2HKEoBAuAnTKN9bDiBHdyiRyPjx buT1ZtRMURTrrNOgcrL08ui2i5d7VjeoLUOMXB3Us+NQKFYpKeBgfLXU116mNFhH Wyfc5xIEwRm8TikJ0dvofMBKGbrt1nXLTXyZlErfMAyVZ46AmGSpmWLH2VGT7aYR R+nu08rvVsA416LSuOY4sdrfS6zArbsJhUthqU1CNLRssd0fzSFr15W7gr9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7jXCTfKmUdLDm9FVduUK3tgC8QwHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV1GdlVfzchdxp0VdI6WMt6H5sbPn6FDYGf m2A0M/J332pM/o6BhxEk/udJxMDDZcE997HFapUzwoItYKdqFu7b8N79YRFdX3ir 8ODp9Tj3i87enLloxiLjOxzxc8q1Ah/QA5G9JViLJ2QKAnqcyoVRtP5wcNGlANat SVbVtYMUblfJFm+qzTG07DHsugxfy+6KBQzyj+FDWs7dd5H06X8S97JvS+JLbMh8 X5Q9nVt3Z4abHWbtuyV12/almDrH5yGDmXXCKRSzqGI3scqW0GhbrwtGwV0Pr/R2 ZwxzyLzdrp25dJ8evHDc15aJx9FQA4xd1L+x6gmDaUxFRQkrGxw= -----END CERTIFICATE-----Generated at Sun Nov 15 11:26:13 2026 by rpki-client