$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: VztXJpDdfP38T3b0mMXMBeRb8J775TKbS8XAb8h0Y14= Subject key identifier: 47:23:4D:D7:D5:09:2F:8F:7A:A4:A8:13:FE:23:AA:42:52:9C:92:72 Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 0F6D174137F7129A2A27B72CEDA04F7650A6E49D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 18:58:18 +0000 Manifest this update: Sat 14 Nov 2026 18:53:18 +0000 Manifest next update: Sun 15 Nov 2026 21:25:18 +0000 Files and hashes: 1: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 2: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: dGJytrHa8wBvTZbgZXhWdM+rwVs+A+pHuvzx1qr1kNs=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 5: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6d:17:41:37:f7:12:9a:2a:27:b7:2c:ed:a0:4f:76:50:a6:e4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Nov 14 18:53:18 2026 GMT Not After : Nov 15 21:25:18 2026 GMT Subject: CN=47234DD7D5092F8F7AA4A813FE23AA42529C9272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:64:68:2d:37:10:14:c2:04:5d:0c:6b:54: 36:2a:55:dd:37:bb:7d:75:f0:75:59:93:fc:eb:0b: c1:df:52:d8:ad:3f:74:d1:41:6d:0b:ab:d9:f2:d2: 64:f0:83:ba:26:3c:83:a6:af:ee:e7:5a:a3:a0:51: e4:34:3b:80:c2:9d:de:d8:e9:5a:f1:09:e5:31:04: bb:1b:57:3e:56:e8:b7:8e:06:31:be:56:29:89:7d: 94:c3:04:7e:ff:0c:80:66:ed:de:e8:e4:09:a3:c0: 0e:99:fd:21:49:19:7b:65:7d:ab:8f:76:82:02:01: 09:28:1c:aa:fe:b4:a7:e4:9b:16:45:05:ce:10:95: bf:01:2e:79:4d:e4:ad:92:4c:b2:b2:a3:92:06:34: 52:68:48:83:c4:1e:cb:1f:fb:80:22:0f:8a:78:35: db:90:85:a1:27:98:75:5a:70:62:18:e0:ff:cf:16: b5:54:b1:20:8c:62:b5:59:5d:74:9c:e4:88:a3:53: 45:6f:97:26:bc:63:04:53:05:c3:03:b7:18:80:a2: d6:c2:d7:85:74:88:b9:82:32:2b:2d:39:5c:56:f8: 20:ce:14:b8:f3:26:3b:5a:04:21:bc:b3:c4:32:9e: fc:0a:6a:92:06:ce:1d:5d:a4:04:80:a8:49:ae:df: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:4D:D7:D5:09:2F:8F:7A:A4:A8:13:FE:23:AA:42:52:9C:92:72 X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:26:6a:22:71:1f:fd:4d:b5:ab:ad:35:ca:b8:ea:b4:2d:c6: 7b:e7:1a:f6:fc:e3:39:a7:89:c5:ba:e7:f2:e1:ba:cb:0f:82: 2c:bb:e9:ec:8c:eb:67:17:97:b3:22:71:74:8a:b5:db:59:95: 8b:00:cb:97:fb:b8:35:3c:25:e5:e4:94:17:fe:31:0c:66:bf: f8:56:a9:4b:e9:ec:fa:1d:db:5d:5f:67:af:0d:61:6e:b1:ab: de:77:87:2b:fa:95:0f:b7:e4:90:86:98:4b:f3:d3:f5:86:69: 13:ca:67:d0:55:db:ce:cf:06:cf:a5:8f:54:16:20:cf:7a:81: 84:78:db:82:f8:ff:bb:4d:43:fa:cd:c1:f1:b8:1f:de:d3:d8: 0b:fd:2f:eb:0b:38:fc:72:d9:10:c2:ff:75:db:40:9a:d3:b1: d0:db:b2:17:cf:7b:27:2e:d7:a7:36:69:cc:58:ec:32:f9:71: d4:d9:69:2d:ab:db:80:f2:5d:11:48:70:6e:80:b6:e8:f4:78: 65:4f:50:7a:b1:a3:08:be:5a:bb:f2:72:db:8c:9b:cc:9b:5d: b9:60:c8:32:1b:08:5d:b4:e0:19:88:14:28:a2:7c:51:77:63: 0b:27:58:f3:c2:87:7c:82:a8:e1:f1:47:41:8e:6c:ad:8a:ae: 5c:34:1d:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD20XQTf3EpoqJ7cs7aBPdlCm5J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjExMTQxODUzMThaFw0yNjExMTUyMTI1MThaMDMxMTAvBgNV BAMTKDQ3MjM0REQ3RDUwOTJGOEY3QUE0QTgxM0ZFMjNBQTQyNTI5QzkyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD052RoLTcQFMIEXQxrVDYqVd03 u3118HVZk/zrC8HfUtitP3TRQW0Lq9ny0mTwg7omPIOmr+7nWqOgUeQ0O4DCnd7Y 6VrxCeUxBLsbVz5W6LeOBjG+VimJfZTDBH7/DIBm7d7o5AmjwA6Z/SFJGXtlfauP doICAQkoHKr+tKfkmxZFBc4Qlb8BLnlN5K2STLKyo5IGNFJoSIPEHssf+4AiD4p4 NduQhaEnmHVacGIY4P/PFrVUsSCMYrVZXXSc5IijU0Vvlya8YwRTBcMDtxiAotbC 14V0iLmCMistOVxW+CDOFLjzJjtaBCG8s8QynvwKapIGzh1dpASAqEmu36htAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyNN19UJL496pKgT/iOqQlKcknIwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKImaiJxH/1NtautNcq46rQtxnvnGvb84zmn icW65/LhussPgiy76eyM62cXl7MicXSKtdtZlYsAy5f7uDU8JeXklBf+MQxmv/hW qUvp7Pod211fZ68NYW6xq953hyv6lQ+35JCGmEvz0/WGaRPKZ9BV287PBs+lj1QW IM96gYR424L4/7tNQ/rNwfG4H97T2Av9L+sLOPxy2RDC/3XbQJrTsdDbshfPeycu 16c2acxY7DL5cdTZaS2r24DyXRFIcG6Atuj0eGVPUHqxowi+WrvyctuMm8ybXblg yDIbCF204BmIFCiifFF3YwsnWPPCh3yCqOHxR0GObK2Krlw0HUs= -----END CERTIFICATE-----Generated at Sun Nov 15 11:25:52 2026 by rpki-client