$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: 1imO+wfFDoXS8DIZSpDwLo7lBNJ4CeFQcSYHalnyi9A= Subject key identifier: 57:2C:CB:0F:E4:A4:2C:D2:BE:0C:B8:6E:AD:77:22:38:4C:75:6A:2D Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 153451A65A9D6177A9B084E49C34DD26AABBE9F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 03:59:19 +0000 Manifest this update: Sat 14 Nov 2026 03:54:19 +0000 Manifest next update: Sun 15 Nov 2026 07:13:19 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: wmCxANUMUX5kUjBcJ/9yK+UK7AX9bhOEksr4DMtW8VA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:34:51:a6:5a:9d:61:77:a9:b0:84:e4:9c:34:dd:26:aa:bb:e9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Nov 14 03:54:19 2026 GMT Not After : Nov 15 07:13:19 2026 GMT Subject: CN=572CCB0FE4A42CD2BE0CB86EAD7722384C756A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:6e:44:c2:8a:eb:12:4a:58:20:d4:bf:99: 1a:81:b7:9b:d6:d5:7b:4b:4e:b0:4c:4e:5b:6f:4e: 5a:13:87:5e:1d:ab:53:14:ce:b0:6c:31:5b:9e:1d: 0f:78:78:6a:b8:62:2a:a5:c3:39:c3:f4:80:6f:48: 76:af:f3:cf:15:85:fe:74:47:46:b5:8f:fa:90:1a: 3c:99:41:78:da:cf:e5:a0:a8:ed:f5:65:c6:4d:ab: 2a:8e:d4:26:aa:56:ee:88:dc:20:a7:2a:5e:42:4d: f4:cb:6e:0b:09:7c:f3:cc:0d:22:8a:c1:59:72:c2: f7:11:81:3c:b8:94:99:ed:f2:61:32:ec:32:5a:f4: 39:f5:c0:32:92:52:ac:28:fd:59:a3:c1:b2:72:a3: 2f:5d:91:3c:d7:47:b2:98:21:fb:4e:be:a8:50:af: 76:0c:26:f1:eb:82:93:f8:89:f8:56:09:a6:2c:23: c2:aa:77:2a:b6:e6:92:bd:47:fe:6d:b4:5f:10:ee: 3c:f2:93:67:d6:b8:24:5f:40:57:0a:97:69:20:af: 63:0b:08:b9:70:f9:12:4e:d8:fb:82:a9:b4:1c:34: ff:f3:28:66:6e:b0:1b:5b:95:05:04:16:40:cd:e1: 83:3f:f2:8b:cc:10:e0:c4:0a:44:7f:4c:f4:8c:d6: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2C:CB:0F:E4:A4:2C:D2:BE:0C:B8:6E:AD:77:22:38:4C:75:6A:2D X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d1:8f:b4:a8:d2:ff:6d:48:95:5c:cc:bb:66:2e:69:ea:ec: 07:9b:db:69:c7:2f:38:2c:9d:82:a5:03:5f:6b:82:8f:c0:db: b9:de:ad:74:11:b4:68:3d:93:21:30:8c:48:4f:47:2a:c4:d9: 23:47:14:4f:68:b3:43:78:57:11:38:7b:d8:16:06:70:03:55: 70:b4:12:70:ba:71:81:6c:e8:e5:c4:84:31:f6:f7:d3:0f:75: 6f:c5:69:05:33:af:6a:8b:ee:ff:00:5a:31:10:df:2e:91:8c: 9a:a6:0c:73:97:68:63:65:94:cf:6f:66:54:1e:54:1b:1c:58: 04:ae:67:bb:51:57:2b:bf:86:3b:d6:26:97:20:80:6c:29:bd: 61:46:81:14:88:02:43:6e:43:99:6d:32:b2:48:6f:2c:58:e5: 42:43:f7:c7:e3:84:d4:d8:56:73:de:54:bb:e1:ba:d2:c6:d2: 16:15:59:d4:13:cb:33:5b:47:ff:bb:3b:f3:d4:57:11:90:28: 43:22:f2:d6:70:31:af:69:6d:25:18:d2:b7:35:e8:75:3d:b3: 68:bc:35:30:8a:43:9e:4d:bd:0f:27:d4:38:b0:94:3e:a9:eb: 72:e4:97:7a:e3:a5:e9:b7:4d:9b:cb:c6:8f:06:bc:dc:79:ee: 29:05:fa:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTRRplqdYXepsITknDTdJqq76fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjExMTQwMzU0MTlaFw0yNjExMTUwNzEzMTlaMDMxMTAvBgNV BAMTKDU3MkNDQjBGRTRBNDJDRDJCRTBDQjg2RUFENzcyMjM4NEM3NTZBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEm5EworrEkpYINS/mRqBt5vW 1XtLTrBMTltvTloTh14dq1MUzrBsMVueHQ94eGq4YiqlwznD9IBvSHav888Vhf50 R0a1j/qQGjyZQXjaz+WgqO31ZcZNqyqO1CaqVu6I3CCnKl5CTfTLbgsJfPPMDSKK wVlywvcRgTy4lJnt8mEy7DJa9Dn1wDKSUqwo/VmjwbJyoy9dkTzXR7KYIftOvqhQ r3YMJvHrgpP4ifhWCaYsI8Kqdyq25pK9R/5ttF8Q7jzyk2fWuCRfQFcKl2kgr2ML CLlw+RJO2PuCqbQcNP/zKGZusBtblQUEFkDN4YM/8ovMEODECkR/TPSM1rIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVyzLD+SkLNK+DLhurXciOEx1ai0wHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnRj7So0v9tSJVczLtmLmnq7Aeb22nHLzgs nYKlA19rgo/A27nerXQRtGg9kyEwjEhPRyrE2SNHFE9os0N4VxE4e9gWBnADVXC0 EnC6cYFs6OXEhDH299MPdW/FaQUzr2qL7v8AWjEQ3y6RjJqmDHOXaGNllM9vZlQe VBscWASuZ7tRVyu/hjvWJpcggGwpvWFGgRSIAkNuQ5ltMrJIbyxY5UJD98fjhNTY VnPeVLvhutLG0hYVWdQTyzNbR/+7O/PUVxGQKEMi8tZwMa9pbSUY0rc16HU9s2i8 NTCKQ55NvQ8n1DiwlD6p63Lkl3rjpem3TZvLxo8GvNx57ikF+j0= -----END CERTIFICATE-----Generated at Sat Nov 14 22:18:22 2026 by rpki-client