$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json) Hash identifier: UfKV9HfMf7qHv1+xsxP2cZinFjr8SqVZXm6mRzRB7g0= Subject key identifier: E9:B0:D6:5A:B3:3C:09:F8:A7:C3:50:82:C2:EE:FF:21:A4:35:99:52 Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804 Certificate serial: 1E912688EA1B33392CE5F0651ABAE0C886ECD0F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 03:13:22 +0000 Manifest this update: Sat 14 Nov 2026 03:08:22 +0000 Manifest next update: Sun 15 Nov 2026 05:12:22 +0000 Files and hashes: 1: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: KHBJ2sdDoAJmI2pvcJEcPJe51F8OcN6Vf6gKrdEdhNQ=) 2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=) 3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 05:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:91:26:88:ea:1b:33:39:2c:e5:f0:65:1a:ba:e0:c8:86:ec:d0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804 Validity Not Before: Nov 14 03:08:22 2026 GMT Not After : Nov 15 05:12:22 2026 GMT Subject: CN=E9B0D65AB33C09F8A7C35082C2EEFF21A4359952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:3a:90:f3:2b:1f:a4:f0:96:11:34:2c:9c: eb:23:09:30:0e:f1:2e:41:8a:12:05:72:27:4a:8f: 4b:9b:a6:39:f6:a3:d6:19:51:c2:e7:56:26:02:8a: 07:b8:bc:67:40:c0:d7:2e:bb:bb:3a:f8:3e:e9:55: db:1e:51:3b:1f:2f:8c:70:fb:98:1e:7a:37:a6:bd: 9f:33:7e:ed:c7:ff:61:85:ea:23:4c:81:63:c7:35: cd:85:c2:a5:55:b4:ac:e9:85:58:ab:0d:43:bd:0f: 44:34:d0:73:da:b5:77:37:52:f5:a2:5c:49:c3:87: 6b:73:20:ac:a7:f7:69:cb:91:4f:b1:69:c1:a2:1c: a4:1e:78:d7:03:45:61:37:7b:42:d5:2d:b6:7d:25: ce:d5:11:39:ca:08:2b:3c:90:53:3b:b7:46:c1:d1: 16:79:2c:38:e9:07:dc:88:96:97:f3:0a:57:bd:9e: 94:38:8d:ce:93:01:d0:6c:fc:73:35:9b:c5:3c:71: 47:4d:3b:c1:ef:7c:1d:df:a1:74:7a:85:97:2e:a2: cc:d2:20:cf:85:66:f9:6c:99:c4:2e:d3:e6:fe:56: 87:64:0c:f1:92:f2:86:be:e3:02:f8:f7:5c:bf:68: c1:c9:eb:40:5d:20:3a:64:4c:ff:6b:b7:b1:b6:1f: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:D6:5A:B3:3C:09:F8:A7:C3:50:82:C2:EE:FF:21:A4:35:99:52 X509v3 Authority Key Identifier: keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4b:75:56:53:70:f0:fb:0e:89:be:ad:c9:86:24:7f:90:b1: 4f:02:ba:21:32:c3:7e:09:6a:30:e8:bd:c0:b5:ee:a9:d0:91: bb:4b:5c:13:a7:01:b0:5a:69:ff:ee:a0:2e:8b:f1:4d:6a:2c: b0:06:1b:f7:8c:50:2e:21:d5:a8:e5:4b:e8:8c:5e:e7:76:b9: af:08:84:1f:34:75:67:c6:70:d3:ee:a0:ab:72:b1:14:7b:f2: a2:0c:c0:64:f1:7a:37:f0:cd:76:2d:fa:4b:7a:91:5b:9a:f0: 4a:d9:0e:62:f5:19:4a:2e:1c:2a:95:57:f3:27:45:31:7c:87: 51:8c:e4:73:71:ed:2f:37:7f:93:2b:e7:83:69:a2:05:21:b5: 79:d7:8e:b3:25:19:22:7c:32:9f:9d:45:f4:b8:f7:43:80:2f: 1d:85:5a:cd:df:cc:8c:be:cb:5d:1f:f7:04:94:e0:30:98:a0: 26:c7:17:9c:96:02:09:ac:8f:37:a4:41:30:c7:71:81:ed:06: 0d:2a:bc:ca:cb:22:c4:f3:2b:c7:63:6d:da:df:88:a8:3e:13: c2:49:df:b8:9d:04:d1:b1:ea:19:fd:f8:92:fe:a5:68:1a:7d: a2:dd:c2:bd:a2:d3:d3:98:54:d6:e2:9c:67:bc:00:51:5f:7e: b8:dc:8a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpEmiOobMzks5fBlGrrgyIbs0PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZD OUY0ODgwNDAeFw0yNjExMTQwMzA4MjJaFw0yNjExMTUwNTEyMjJaMDMxMTAvBgNV BAMTKEU5QjBENjVBQjMzQzA5RjhBN0MzNTA4MkMyRUVGRjIxQTQzNTk5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6TqQ8ysfpPCWETQsnOsjCTAO 8S5BihIFcidKj0ubpjn2o9YZUcLnViYCige4vGdAwNcuu7s6+D7pVdseUTsfL4xw +5geejemvZ8zfu3H/2GF6iNMgWPHNc2FwqVVtKzphVirDUO9D0Q00HPatXc3UvWi XEnDh2tzIKyn92nLkU+xacGiHKQeeNcDRWE3e0LVLbZ9Jc7VETnKCCs8kFM7t0bB 0RZ5LDjpB9yIlpfzCle9npQ4jc6TAdBs/HM1m8U8cUdNO8HvfB3foXR6hZcuoszS IM+FZvlsmcQu0+b+VodkDPGS8oa+4wL491y/aMHJ60BdIDpkTP9rt7G2H8V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bDWWrM8Cfinw1CCwu7/IaQ1mVIwHwYDVR0j BBgwFoAU12lFLBV0nEVwKauB4Gt9Nsn0iAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhjYzFjN2UtZGE3NC00YjExLWI2N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMx NTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZDOUY0ODgwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzY5NDUyQzE1NzQ5QzQ1NzAyOUFCODFFMDZCN0QzNkM5RjQ4 ODA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdE MzZDOUY0ODgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9LdVZTcPD7Dom+rcmGJH+QsU8CuiEyw34J ajDovcC17qnQkbtLXBOnAbBaaf/uoC6L8U1qLLAGG/eMUC4h1ajlS+iMXud2ua8I hB80dWfGcNPuoKtysRR78qIMwGTxejfwzXYt+kt6kVua8ErZDmL1GUouHCqVV/Mn RTF8h1GM5HNx7S83f5Mr54NpogUhtXnXjrMlGSJ8Mp+dRfS490OALx2FWs3fzIy+ y10f9wSU4DCYoCbHF5yWAgmsjzekQTDHcYHtBg0qvMrLIsTzK8djbdrfiKg+E8JJ 37idBNGx6hn9+JL+pWgafaLdwr2i09OYVNbinGe8AFFffrjcivE= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:38 2026 by rpki-client