$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: M/edGyKrSCwvmraEds9lG8T6Bb3AJRZ4MUFi6zSCbJw= Subject key identifier: 60:B1:4A:17:84:7C:F1:92:29:6F:0D:95:11:B1:73:DF:20:00:11:DB Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: 4716C9F55AB6203C5A4CAB5E4F4A284F40DAE24B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 18:37:50 +0000 Manifest this update: Sat 14 Nov 2026 18:32:50 +0000 Manifest next update: Sun 15 Nov 2026 20:39:50 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) 3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) 4: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) 5: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: aboARTl8e0bR+TG31+L1Z+49uS4/RYEwnELxvdrSL+o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:16:c9:f5:5a:b6:20:3c:5a:4c:ab:5e:4f:4a:28:4f:40:da:e2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Nov 14 18:32:50 2026 GMT Not After : Nov 15 20:39:50 2026 GMT Subject: CN=60B14A17847CF192296F0D9511B173DF200011DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:a4:04:c2:d7:69:3e:6f:2b:7f:5d:7c:30: bb:7a:9e:da:d6:48:7c:7a:14:70:a3:70:f0:e4:7f: 8a:ea:66:f9:ef:b6:3a:0c:d3:fb:c8:20:84:da:b3: 9a:c5:55:a2:3d:6e:43:33:6e:43:d3:2e:b2:f7:14: b7:80:21:1b:30:c6:50:37:3c:c3:29:46:78:08:5f: 90:ae:ad:7d:2c:27:00:e2:e1:36:fc:89:a3:d9:a1: 7e:72:ea:43:61:59:25:6b:df:88:84:55:a7:67:57: 1b:cf:7e:67:c6:89:5a:bc:ca:f2:fd:4f:e9:41:71: 12:2f:5c:eb:e6:ff:5a:41:e0:50:c9:cb:9e:ec:31: d9:95:b4:5c:7e:97:94:ac:d2:d7:a7:3d:ee:e2:1a: bc:f4:7b:17:d4:6a:4a:8f:93:58:87:46:d7:46:f7: 3a:9b:3c:cf:33:7e:2c:2d:8c:ab:68:b6:75:7e:89: 03:67:15:6c:32:be:9d:35:2e:d3:27:d3:59:66:2e: 00:37:75:0a:6c:00:e3:fd:fe:5e:d3:9a:f5:43:14: 84:68:33:bd:30:4b:5b:42:a6:63:a1:91:50:e4:21: d5:f5:f8:36:2e:40:de:f7:5d:f7:d7:c8:6c:b7:8e: b8:f0:94:c4:c2:ab:13:7b:54:d8:90:21:0b:d7:01: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:4A:17:84:7C:F1:92:29:6F:0D:95:11:B1:73:DF:20:00:11:DB X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2e:7f:c6:25:ba:b0:ac:8b:fc:8e:14:4d:40:a6:56:27:26: 61:b2:43:1f:f2:84:f5:36:bd:cf:b6:81:91:af:69:b6:d9:5f: b2:70:fe:cf:d4:ab:ff:02:8f:42:16:70:5d:a0:32:be:59:81: 98:62:d3:69:36:6d:22:3b:0e:26:68:db:23:62:e0:5e:50:7c: e5:64:7b:0f:76:48:19:a6:4a:8e:73:d4:a0:54:ca:fb:fd:67: 1e:a0:b5:8c:70:fb:9c:eb:43:6e:c9:63:94:71:0b:ce:23:d5: 49:fe:de:7b:f4:ff:fd:75:40:c0:59:87:43:80:f6:68:67:6e: da:46:9e:c2:cc:81:d6:53:0b:4b:51:7b:db:20:6f:80:9f:76: af:78:88:18:b4:31:ab:7e:4f:76:7d:5f:82:b4:66:f7:d2:28: eb:56:4f:d9:b2:9a:19:d8:ac:a3:d3:22:17:65:68:ec:52:96: 4e:a4:fe:2f:67:37:a7:34:76:fc:88:ef:12:35:7e:65:20:fc: b0:ae:5b:8b:aa:f9:f7:f5:43:d0:79:89:38:00:d3:b7:7b:e3: b6:8a:30:b3:5e:2b:4e:db:94:cb:26:45:fc:5d:0e:96:4d:f6: d7:62:b8:cb:25:d4:a5:78:e4:69:dc:0e:75:81:3a:1d:cc:3f: 6a:3c:7c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxbJ9Vq2IDxaTKteT0ooT0Da4kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjExMTQxODMyNTBaFw0yNjExMTUyMDM5NTBaMDMxMTAvBgNV BAMTKDYwQjE0QTE3ODQ3Q0YxOTIyOTZGMEQ5NTExQjE3M0RGMjAwMDExREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UKQEwtdpPm8rf118MLt6ntrW SHx6FHCjcPDkf4rqZvnvtjoM0/vIIITas5rFVaI9bkMzbkPTLrL3FLeAIRswxlA3 PMMpRngIX5CurX0sJwDi4Tb8iaPZoX5y6kNhWSVr34iEVadnVxvPfmfGiVq8yvL9 T+lBcRIvXOvm/1pB4FDJy57sMdmVtFx+l5Ss0tenPe7iGrz0exfUakqPk1iHRtdG 9zqbPM8zfiwtjKtotnV+iQNnFWwyvp01LtMn01lmLgA3dQpsAOP9/l7TmvVDFIRo M70wS1tCpmOhkVDkIdX1+DYuQN73XffXyGy3jrjwlMTCqxN7VNiQIQvXATH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYLFKF4R88ZIpbw2VEbFz3yAAEdswHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcuf8YlurCsi/yOFE1AplYnJmGyQx/yhPU2 vc+2gZGvabbZX7Jw/s/Uq/8Cj0IWcF2gMr5ZgZhi02k2bSI7DiZo2yNi4F5QfOVk ew92SBmmSo5z1KBUyvv9Zx6gtYxw+5zrQ27JY5RxC84j1Un+3nv0//11QMBZh0OA 9mhnbtpGnsLMgdZTC0tRe9sgb4Cfdq94iBi0Mat+T3Z9X4K0ZvfSKOtWT9mymhnY rKPTIhdlaOxSlk6k/i9nN6c0dvyI7xI1fmUg/LCuW4uq+ff1Q9B5iTgA07d747aK MLNeK07blMsmRfxdDpZN9tdiuMsl1KV45GncDnWBOh3MP2o8fCM= -----END CERTIFICATE-----Generated at Sat Nov 14 22:38:08 2026 by rpki-client