$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: Uhc9j3mhUUyqupZUlmnwy9imRY+biRbUJipb07nHGVs= Subject key identifier: E1:AC:00:5E:22:38:D8:7D:41:59:9D:03:D3:96:F4:A0:3F:23:5B:76 Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 056B58C00056565E9F4BECE9C8B51D02E1CF4F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 20:40:22 +0000 Manifest this update: Sat 14 Nov 2026 20:35:22 +0000 Manifest next update: Sun 15 Nov 2026 21:54:22 +0000 Files and hashes: 1: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: x0Kp7A4iFuPqBkEFlLYoLpa4YaAN0ao85BFW4G4bP0I=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6b:58:c0:00:56:56:5e:9f:4b:ec:e9:c8:b5:1d:02:e1:cf:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Nov 14 20:35:22 2026 GMT Not After : Nov 15 21:54:22 2026 GMT Subject: CN=E1AC005E2238D87D41599D03D396F4A03F235B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:f7:2d:27:3d:49:9d:29:15:71:27:90:9a: 44:f4:58:91:89:44:a4:b3:2c:be:58:af:01:1f:07: 5a:d0:ef:cd:e1:5c:54:79:f0:fc:0d:d1:41:98:ac: b8:06:da:00:1e:cf:76:95:8a:bf:61:3d:01:ff:7d: 79:69:b7:88:e7:b4:d6:fc:f6:15:1f:c9:d3:d1:6a: 07:86:53:80:68:f6:79:04:d2:13:45:44:12:4b:78: c9:a5:c7:93:46:38:38:31:41:ff:2a:4f:e0:ea:5e: 0e:d5:e4:ae:ca:59:21:74:02:7d:99:b8:bd:c3:e6: 86:a0:a2:a8:37:67:82:73:29:d5:66:56:38:dd:93: 93:d4:7d:3b:fc:35:5a:25:10:5b:3f:b5:a2:97:3b: b1:eb:98:7b:3c:16:10:fb:ff:30:b0:a0:2c:2e:5c: d0:4a:b6:43:5d:20:ec:25:7a:7b:c6:ef:70:93:81: 08:f3:11:3a:d7:24:bb:ba:67:fd:6a:ca:1a:5e:9c: a5:ca:18:fa:a9:52:04:7b:7c:c7:84:14:b0:77:8a: 89:b8:1e:63:69:67:f7:b1:be:0a:cd:cf:97:33:b2: da:a0:34:18:fe:9d:cb:51:45:09:99:50:f2:92:6f: a4:f3:b5:27:e7:4e:13:3d:95:66:84:d8:7f:bc:46: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AC:00:5E:22:38:D8:7D:41:59:9D:03:D3:96:F4:A0:3F:23:5B:76 X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9b:ab:ec:83:fe:a7:d3:bf:4f:39:da:49:86:6a:e1:dc:26: 00:d7:37:e9:67:94:83:d2:20:28:98:65:37:d6:79:f6:60:14: 10:60:84:90:56:85:59:9b:16:15:c1:12:6e:a8:83:1e:49:21: af:2f:f9:a5:53:62:cf:1f:0d:44:45:de:d3:87:0b:89:20:11: 05:40:f8:17:c9:b2:da:fc:95:23:17:2d:8b:9f:83:16:df:1c: ec:be:e0:3c:82:fe:22:ff:35:71:c8:79:a1:d8:ae:10:f2:f2: b9:39:f2:ac:1e:f7:19:a3:f7:f7:33:70:63:1c:f8:41:52:3d: 74:23:b7:84:88:41:f0:4f:1f:d7:c8:38:60:47:c0:e2:58:39: dc:cb:b5:07:c4:a4:c4:91:26:e8:76:20:94:bc:ea:bc:c5:d4: 52:85:e7:52:84:86:7f:b0:4a:21:ea:c5:2d:41:ae:e6:64:40: 92:4c:d7:31:ef:a8:00:d7:f3:be:75:ac:61:1d:fc:c5:8c:c1: 27:81:2d:be:1d:7e:52:db:9e:22:97:5c:bd:f9:02:12:47:b6: 0a:76:24:5d:d0:93:d9:f9:21:9c:c6:30:e4:02:fb:a0:f3:d3: fd:6c:78:ff:ec:c0:fc:ee:6b:7e:c1:24:f5:20:f7:65:a3:0a: f7:a4:b6:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWtYwABWVl6fS+zpyLUdAuHPT34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjExMTQyMDM1MjJaFw0yNjExMTUyMTU0MjJaMDMxMTAvBgNV BAMTKEUxQUMwMDVFMjIzOEQ4N0Q0MTU5OUQwM0QzOTZGNEEwM0YyMzVCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tPctJz1JnSkVcSeQmkT0WJGJ RKSzLL5YrwEfB1rQ783hXFR58PwN0UGYrLgG2gAez3aVir9hPQH/fXlpt4jntNb8 9hUfydPRageGU4Bo9nkE0hNFRBJLeMmlx5NGODgxQf8qT+DqXg7V5K7KWSF0An2Z uL3D5oagoqg3Z4JzKdVmVjjdk5PUfTv8NVolEFs/taKXO7HrmHs8FhD7/zCwoCwu XNBKtkNdIOwlenvG73CTgQjzETrXJLu6Z/1qyhpenKXKGPqpUgR7fMeEFLB3iom4 HmNpZ/exvgrNz5czstqgNBj+nctRRQmZUPKSb6TztSfnThM9lWaE2H+8Ri2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4awAXiI42H1BWZ0D05b0oD8jW3YwHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqbq+yD/qfTv0852kmGauHcJgDXN+lnlIPS ICiYZTfWefZgFBBghJBWhVmbFhXBEm6ogx5JIa8v+aVTYs8fDURF3tOHC4kgEQVA +BfJstr8lSMXLYufgxbfHOy+4DyC/iL/NXHIeaHYrhDy8rk58qwe9xmj9/czcGMc +EFSPXQjt4SIQfBPH9fIOGBHwOJYOdzLtQfEpMSRJuh2IJS86rzF1FKF51KEhn+w SiHqxS1BruZkQJJM1zHvqADX8751rGEd/MWMwSeBLb4dflLbniKXXL35AhJHtgp2 JF3Qk9n5IZzGMOQC+6Dz0/1seP/swPzua37BJPUg92WjCvektg8= -----END CERTIFICATE-----Generated at Sun Nov 15 06:36:38 2026 by rpki-client