$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: k3SkVSb/lEiaEATg+UG32bkaF4ImcHERY+oYepp195w= Subject key identifier: 98:E9:17:7E:84:8F:9F:66:0A:52:3E:53:F5:70:36:82:4A:4F:D4:93 Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 44B2478F0AFB0972B695327EA066FD52F3662F9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 22:37:27 +0000 Manifest this update: Sat 14 Nov 2026 22:32:27 +0000 Manifest next update: Mon 16 Nov 2026 01:19:27 +0000 Files and hashes: 1: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 2: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: XvIV8YzunoXwHWd76Tda2lHkq7UWwdTfZ6xHNKIYPZQ=) 3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b2:47:8f:0a:fb:09:72:b6:95:32:7e:a0:66:fd:52:f3:66:2f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: Nov 14 22:32:27 2026 GMT Not After : Nov 16 01:19:27 2026 GMT Subject: CN=98E9177E848F9F660A523E53F57036824A4FD493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:b3:85:06:3c:96:1b:e9:8d:ca:91:40:12: 43:9b:85:cb:a9:5b:59:94:9d:59:d0:fb:45:09:a5: 12:6d:57:6a:32:ec:bd:dc:93:94:b1:96:49:09:0a: 81:2c:a1:a8:86:85:65:f6:af:5c:96:71:a2:6f:00: 1b:3e:20:e5:11:b6:7a:7d:de:5f:09:18:25:d5:e9: 53:27:b6:64:d6:17:0a:4f:42:ec:c6:05:a1:d6:31: d8:8d:d0:6b:cb:0d:42:b5:fb:7e:ec:2b:39:88:f9: 5a:23:cd:cd:39:df:c3:e0:db:2d:76:1b:84:af:41: d3:69:80:ce:bb:b6:6b:df:ce:ca:4f:2d:b9:ce:ea: 47:27:04:0f:30:6f:0c:a8:86:eb:45:df:7a:c4:65: 2b:8d:04:a6:20:b8:88:d3:c9:8e:85:6b:06:b1:90: 12:41:85:4d:3c:7c:83:3c:88:3c:ad:74:63:f3:4f: 72:84:0d:e4:0c:58:c1:4b:b0:5a:33:a2:25:fb:0f: 26:3d:ba:00:2a:6b:ab:7d:2e:b0:58:73:ef:3d:03: 28:b7:3e:71:f4:be:11:cd:74:fe:1d:1f:08:4d:1e: f8:c0:5c:d4:45:f7:f0:c5:6c:33:3a:44:d9:8d:1c: 88:23:43:84:2e:bb:6f:ac:c1:3d:aa:38:98:e8:d7: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:17:7E:84:8F:9F:66:0A:52:3E:53:F5:70:36:82:4A:4F:D4:93 X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:3b:ee:3d:22:c7:20:43:09:05:d2:96:b7:21:79:52:d9: 97:b1:9c:ef:07:48:cb:c4:d2:c4:f4:a3:da:bc:db:bc:8d:55: 71:95:82:73:f8:52:50:0a:d6:19:f7:b5:ff:9f:6b:54:2a:3e: 40:78:d0:4a:e8:e3:32:b0:c8:4c:6a:98:63:e7:b4:02:74:b5: a5:d3:81:02:63:7c:42:fd:50:96:6c:84:55:4b:27:7c:0f:0f: 13:2c:b2:88:44:40:a6:af:7c:dc:9b:6e:ef:9a:4b:a4:64:7a: 5a:51:92:b3:17:03:eb:d9:8e:9c:02:e2:43:a5:6f:37:b8:00: 8f:94:52:75:99:ec:31:45:8e:18:70:51:c1:69:71:84:95:fe: 5b:40:f1:6b:25:67:8a:05:f6:33:7b:67:00:38:eb:ee:d1:55: a6:79:9b:df:5a:92:bc:24:9d:d4:ad:40:3d:69:35:8d:0e:d4: d9:ca:5d:3f:55:5e:56:30:fc:8f:09:bd:52:58:80:fd:cc:61: 8a:82:2b:d5:2e:5d:b4:bd:35:35:e8:8b:be:73:e2:0e:b4:77: fd:3a:1b:b9:47:5b:65:04:3d:53:33:66:87:46:8e:2c:25:e4: ec:00:ca:25:b4:a6:f8:b8:f9:40:e3:56:45:04:ba:42:1f:b0: a8:e8:eb:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLJHjwr7CXK2lTJ+oGb9UvNmL5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjExMTQyMjMyMjdaFw0yNjExMTYwMTE5MjdaMDMxMTAvBgNV BAMTKDk4RTkxNzdFODQ4RjlGNjYwQTUyM0U1M0Y1NzAzNjgyNEE0RkQ0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQbOFBjyWG+mNypFAEkObhcup W1mUnVnQ+0UJpRJtV2oy7L3ck5SxlkkJCoEsoaiGhWX2r1yWcaJvABs+IOURtnp9 3l8JGCXV6VMntmTWFwpPQuzGBaHWMdiN0GvLDUK1+37sKzmI+Vojzc0538Pg2y12 G4SvQdNpgM67tmvfzspPLbnO6kcnBA8wbwyohutF33rEZSuNBKYguIjTyY6Fawax kBJBhU08fIM8iDytdGPzT3KEDeQMWMFLsFozoiX7DyY9ugAqa6t9LrBYc+89Ayi3 PnH0vhHNdP4dHwhNHvjAXNRF9/DFbDM6RNmNHIgjQ4Quu2+swT2qOJjo1xP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOkXfoSPn2YKUj5T9XA2gkpP1JMwHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNKO+49IscgQwkF0pa3IXlS2ZexnO8HSMvE 0sT0o9q827yNVXGVgnP4UlAK1hn3tf+fa1QqPkB40Ero4zKwyExqmGPntAJ0taXT gQJjfEL9UJZshFVLJ3wPDxMssohEQKavfNybbu+aS6RkelpRkrMXA+vZjpwC4kOl bze4AI+UUnWZ7DFFjhhwUcFpcYSV/ltA8WslZ4oF9jN7ZwA46+7RVaZ5m99akrwk ndStQD1pNY0O1NnKXT9VXlYw/I8JvVJYgP3MYYqCK9UuXbS9NTXoi75z4g60d/06 G7lHW2UEPVMzZodGjiwl5OwAyiW0pvi4+UDjVkUEukIfsKjo6wU= -----END CERTIFICATE-----Generated at Sun Nov 15 16:12:56 2026 by rpki-client