$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: QBcMxs7REYRc8mIgS5a9a2Qmob8YY0NRRB3BdFuWZpI= Subject key identifier: 56:CF:5A:96:BD:C6:27:B7:05:EB:65:D6:E8:03:27:0D:7B:45:A3:19 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: BB1DE3C9EF07E25705BE91AF163C875409435F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 11:54:25 +0000 Manifest this update: Sat 14 Nov 2026 11:49:25 +0000 Manifest next update: Sun 15 Nov 2026 12:10:25 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: hE/zaJ43D3BzP2omSzqN4JOb0lBqeiW3LqSZc71KvEg=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bb:1d:e3:c9:ef:07:e2:57:05:be:91:af:16:3c:87:54:09:43:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Nov 14 11:49:25 2026 GMT Not After : Nov 15 12:10:25 2026 GMT Subject: CN=56CF5A96BDC627B705EB65D6E803270D7B45A319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:21:60:ea:dc:db:c7:89:9c:58:89:0b:f1: b3:fe:fd:da:d6:bf:07:a8:6d:62:65:a4:52:c0:fd: 72:63:61:ea:72:67:ed:c3:bd:2a:ee:0e:d6:7e:8e: 43:e3:25:64:7d:30:7a:40:77:a1:9c:41:02:0e:cd: ba:15:e9:e9:c4:08:db:e1:e0:8d:ea:f9:95:82:34: 9d:d1:04:73:9e:60:3f:5e:81:cd:d0:f0:27:d1:6d: 68:ef:5f:5f:a0:4e:ef:31:7c:53:61:0a:3a:6b:9c: 5d:98:f1:8e:f9:36:d3:05:f1:fe:d4:cb:4e:bb:25: 8c:13:84:0b:86:87:87:b1:62:4b:e2:dd:ec:62:7c: 92:66:b6:31:3d:95:f7:cd:cb:99:26:ba:49:30:9c: 40:f5:89:5c:9d:64:df:af:f1:bb:ec:51:ad:c4:4b: 6f:4e:ee:30:d3:59:56:e6:92:c8:0f:6a:f4:31:50: 82:eb:d6:71:24:10:8e:e9:5d:70:3f:5b:ce:f9:d4: 4c:b4:31:c8:6d:f8:cb:19:17:84:c7:e5:64:ff:a1: e3:b3:26:64:12:d9:4d:54:11:b0:de:08:ef:96:c8: 17:ce:72:01:50:60:ef:8f:da:4f:f4:e5:96:9c:e3: 3f:0e:ed:6d:eb:c9:e0:61:8e:66:fe:48:b9:b9:11: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CF:5A:96:BD:C6:27:B7:05:EB:65:D6:E8:03:27:0D:7B:45:A3:19 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f9:ae:b0:04:07:b1:85:1b:21:90:9d:9a:80:3c:43:7e:9d:49: 88:0e:fb:9a:0e:2e:b3:4e:83:e7:fb:2c:01:e9:c2:26:1d:d3: 5a:a0:5e:b0:86:4b:ca:b0:1e:58:e4:3c:b6:6a:87:12:c5:b9: b2:bc:27:cd:02:46:a4:db:a7:fb:92:61:3b:59:cf:f9:4f:a5: aa:d2:f9:19:b2:bb:b4:20:4d:82:4b:88:ef:1a:29:e5:5e:9a: 78:e6:a3:b9:1c:c6:31:50:14:11:b4:b0:03:ed:16:c2:0d:9f: 8f:82:28:89:c1:9c:91:41:26:b4:c5:6f:b0:ff:c9:f1:49:87: d2:5f:f7:32:06:c6:e3:80:8a:06:6a:94:6d:00:38:95:3e:21: 99:cb:85:bb:41:20:39:01:84:07:84:41:79:47:00:5e:94:37: cd:80:0c:19:b7:ba:d2:08:10:eb:2f:30:07:4f:a8:2d:83:b2: cf:21:2f:62:28:5b:28:f3:09:da:88:9b:e8:a0:d3:e8:5b:b5: d8:1d:d1:bc:98:78:52:3e:ca:dc:f9:92:19:40:f9:cf:1e:a3: e1:b7:19:ba:d8:67:bc:38:45:f9:36:ae:a1:d0:93:0f:7b:0d: e1:c1:ac:e9:95:9f:db:b9:3c:b9:0f:9b:18:86:b7:76:eb:00: 1e:c8:0c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALsd48nvB+JXBb6RrxY8h1QJQ18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjExMTQxMTQ5MjVaFw0yNjExMTUxMjEwMjVaMDMxMTAvBgNV BAMTKDU2Q0Y1QTk2QkRDNjI3QjcwNUVCNjVENkU4MDMyNzBEN0I0NUEzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7yFg6tzbx4mcWIkL8bP+/drW vweobWJlpFLA/XJjYepyZ+3DvSruDtZ+jkPjJWR9MHpAd6GcQQIOzboV6enECNvh 4I3q+ZWCNJ3RBHOeYD9egc3Q8CfRbWjvX1+gTu8xfFNhCjprnF2Y8Y75NtMF8f7U y067JYwThAuGh4exYkvi3exifJJmtjE9lffNy5kmukkwnED1iVydZN+v8bvsUa3E S29O7jDTWVbmksgPavQxUILr1nEkEI7pXXA/W8751Ey0Mcht+MsZF4TH5WT/oeOz JmQS2U1UEbDeCO+WyBfOcgFQYO+P2k/05Zac4z8O7W3ryeBhjmb+SLm5EWSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVs9alr3GJ7cF62XW6AMnDXtFoxkwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPmusAQHsYUbIZCdmoA8Q36dSYgO+5oOLrNO g+f7LAHpwiYd01qgXrCGS8qwHljkPLZqhxLFubK8J80CRqTbp/uSYTtZz/lPparS +Rmyu7QgTYJLiO8aKeVemnjmo7kcxjFQFBG0sAPtFsINn4+CKInBnJFBJrTFb7D/ yfFJh9Jf9zIGxuOAigZqlG0AOJU+IZnLhbtBIDkBhAeEQXlHAF6UN82ADBm3utII EOsvMAdPqC2Dss8hL2IoWyjzCdqIm+ig0+hbtdgd0byYeFI+ytz5khlA+c8eo+G3 GbrYZ7w4Rfk2rqHQkw97DeHBrOmVn9u5PLkPmxiGt3brAB7IDCk= -----END CERTIFICATE-----Generated at Sat Nov 14 22:21:54 2026 by rpki-client