$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: O6PK0swOuFZCg9Wg7UwZM6QAYJkn/7yNkpxt4MBt+tA= Subject key identifier: 2B:D1:59:F0:E5:D9:84:95:2B:DF:BC:41:A9:08:20:1C:D1:92:C3:E0 Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 3DCE46A77247D58D445A05CC51880947A98D5D13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 00:09:27 +0000 Manifest this update: Sun 15 Nov 2026 00:04:27 +0000 Manifest next update: Mon 16 Nov 2026 01:54:27 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) 2: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: 0Xc9AxeZEIAsG3l+83SiCTG6KMN7/1RgvDfcT6D41wg=) 3: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ce:46:a7:72:47:d5:8d:44:5a:05:cc:51:88:09:47:a9:8d:5d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Nov 15 00:04:27 2026 GMT Not After : Nov 16 01:54:27 2026 GMT Subject: CN=2BD159F0E5D984952BDFBC41A908201CD192C3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:9a:54:e4:bb:62:17:67:68:29:ae:25:2f: 77:bc:11:2f:70:c9:d1:71:3d:70:29:34:42:08:ac: 90:8e:75:b3:6c:d6:c8:90:65:8a:33:5e:15:65:e8: 0e:d5:dc:de:db:f6:22:66:25:16:6d:26:e2:06:a7: 05:f4:da:5c:86:79:51:03:8f:46:14:b5:c7:14:8e: 90:88:fd:9d:45:57:6c:d7:93:81:49:58:9e:29:27: c4:46:9b:1b:c5:ea:4b:dd:19:06:a9:05:e2:4c:03: c1:eb:37:b1:c1:8d:46:5c:a7:15:7b:0d:d4:8c:2c: 65:cb:02:b4:0e:bd:19:6c:55:8f:63:85:6e:dd:df: f9:e3:eb:35:7d:e9:b0:5f:86:ee:05:51:08:4f:4b: 19:5f:d5:3f:3b:67:c4:14:5d:af:c9:a8:c5:8f:21: 5a:06:a1:52:71:08:14:10:7b:79:a8:73:54:c0:b8: 7b:be:58:9d:6c:dd:cc:cf:6c:76:ee:3f:5e:fb:2f: 92:82:25:7e:76:8b:82:bc:3c:29:dd:8a:90:50:49: f2:9c:6c:15:b3:d0:ac:52:01:ea:86:36:8b:8f:d3: 67:09:65:71:e3:c1:11:69:7c:af:d7:51:01:90:29: 7e:2a:52:91:83:64:d8:29:c5:ac:61:6d:90:da:0f: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D1:59:F0:E5:D9:84:95:2B:DF:BC:41:A9:08:20:1C:D1:92:C3:E0 X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f2:1d:68:41:2e:53:19:44:aa:55:93:7f:e8:33:f5:e2:c2: c1:9e:32:1d:3b:4b:6b:1a:e5:12:79:21:56:f0:a2:e0:18:9b: c3:de:8e:80:6f:cc:46:0d:7e:7f:d1:58:97:1a:5c:a8:f2:47: b1:38:fc:73:db:64:52:3b:93:22:97:03:a4:52:6e:11:2f:f0: 40:cd:26:8d:3a:c0:f6:31:67:89:8a:98:0a:09:fb:4b:45:6b: c4:da:8e:25:e2:b9:91:8b:56:41:d5:02:09:0e:14:a9:ab:af: 9f:e7:19:16:a0:2d:0f:d3:35:ff:16:20:f1:24:5a:81:8a:d2: e8:9a:94:ae:3a:2f:1b:76:3e:6a:87:f1:03:1d:af:4d:49:57: b1:da:a6:8d:aa:79:69:92:91:cb:8e:ae:ab:f6:d4:d6:31:a3: 3c:6a:5e:5b:d8:ad:b3:16:dd:30:60:1d:a7:74:31:41:5f:6f: 80:3a:e9:16:c3:c5:83:76:e7:bb:0e:44:d3:b9:2e:ac:d6:c0: cf:87:64:64:0f:d4:20:e7:8b:16:07:b7:10:0e:97:36:02:c0: dd:07:d2:43:7e:83:c5:34:55:c5:e9:65:e0:91:d0:3c:c0:65: 26:19:0e:74:61:fe:2d:1f:a2:5d:e8:59:3d:a4:a1:af:f8:e3: d7:2e:d2:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPc5Gp3JH1Y1EWgXMUYgJR6mNXRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjExMTUwMDA0MjdaFw0yNjExMTYwMTU0MjdaMDMxMTAvBgNV BAMTKDJCRDE1OUYwRTVEOTg0OTUyQkRGQkM0MUE5MDgyMDFDRDE5MkMzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8JpU5LtiF2doKa4lL3e8ES9w ydFxPXApNEIIrJCOdbNs1siQZYozXhVl6A7V3N7b9iJmJRZtJuIGpwX02lyGeVED j0YUtccUjpCI/Z1FV2zXk4FJWJ4pJ8RGmxvF6kvdGQapBeJMA8HrN7HBjUZcpxV7 DdSMLGXLArQOvRlsVY9jhW7d3/nj6zV96bBfhu4FUQhPSxlf1T87Z8QUXa/JqMWP IVoGoVJxCBQQe3moc1TAuHu+WJ1s3czPbHbuP177L5KCJX52i4K8PCndipBQSfKc bBWz0KxSAeqGNouP02cJZXHjwRFpfK/XUQGQKX4qUpGDZNgpxaxhbZDaDwHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9FZ8OXZhJUr37xBqQggHNGSw+AwHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3yHWhBLlMZRKpVk3/oM/XiwsGeMh07S2sa 5RJ5IVbwouAYm8PejoBvzEYNfn/RWJcaXKjyR7E4/HPbZFI7kyKXA6RSbhEv8EDN Jo06wPYxZ4mKmAoJ+0tFa8TajiXiuZGLVkHVAgkOFKmrr5/nGRagLQ/TNf8WIPEk WoGK0uialK46Lxt2PmqH8QMdr01JV7Hapo2qeWmSkcuOrqv21NYxozxqXlvYrbMW 3TBgHad0MUFfb4A66RbDxYN257sORNO5LqzWwM+HZGQP1CDnixYHtxAOlzYCwN0H 0kN+g8U0VcXpZeCR0DzAZSYZDnRh/i0fol3oWT2koa/449cu0nM= -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:09 2026 by rpki-client