$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json) Hash identifier: yznS4fJnMlfxDBXLPS8bSJfC/4+Mmwa9NupKFc5bhXM= Subject key identifier: F6:8E:07:8C:AC:12:49:7D:51:7A:DC:68:3A:9E:A6:FA:A2:33:B4:05 Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Certificate serial: 68CF2A6D914EFEBE07694F655D1882676E0B6A85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 10:02:04 +0000 Manifest this update: Sat 14 Nov 2026 09:57:04 +0000 Manifest next update: Sun 15 Nov 2026 12:04:04 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=) 4: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: dU9v1le3jHwAcWf+rjXj2PObNqDQAb5ke1Ci2AHPjgI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:cf:2a:6d:91:4e:fe:be:07:69:4f:65:5d:18:82:67:6e:0b:6a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Validity Not Before: Nov 14 09:57:04 2026 GMT Not After : Nov 15 12:04:04 2026 GMT Subject: CN=F68E078CAC12497D517ADC683A9EA6FAA233B405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:14:3d:80:c4:dc:b4:7a:9c:9d:73:c1:ea: 59:55:9a:6a:cb:79:46:99:c3:15:b3:6e:21:fe:e0: 23:8a:5a:e1:1b:aa:38:f0:bd:72:02:20:a3:7f:22: df:51:ee:6f:08:79:85:22:46:0b:4f:d2:45:9b:59: 10:2a:20:b6:b8:69:f6:55:a4:01:ac:8c:0e:16:97: d7:cf:84:ec:5d:b9:48:0d:de:b9:01:e1:08:e1:9e: 2d:af:f8:da:f2:25:6c:e1:8e:74:1b:ef:1c:0a:1a: 5d:84:0e:f6:19:ea:bc:65:12:75:f3:1c:86:88:62: f8:ba:d6:6b:27:79:dc:13:cf:00:cb:e6:dc:95:b0: 6a:fc:d9:9b:e3:59:90:b2:41:79:10:bd:73:ed:d3: d5:ae:0f:f2:36:7a:a3:15:04:2f:9b:17:19:b5:7d: 5f:73:a6:67:c1:16:7b:ca:1b:38:33:dd:87:7a:9b: f0:fc:20:19:68:51:55:51:04:4d:89:6c:74:98:cb: 23:1b:d1:db:84:21:0a:32:67:02:65:a9:45:d7:00: e0:31:41:6f:ce:5e:59:4a:e4:9f:89:e9:0f:3d:1c: be:2c:3f:01:13:fc:b1:ff:fe:4e:a5:24:df:e4:85: 81:e5:e3:e8:4c:01:df:a7:ab:e3:f1:d7:8b:4f:fc: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8E:07:8C:AC:12:49:7D:51:7A:DC:68:3A:9E:A6:FA:A2:33:B4:05 X509v3 Authority Key Identifier: keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:8f:59:1f:58:5a:c7:11:4c:0b:d9:62:d2:c6:81:ae:98: e9:10:f7:40:b6:31:a3:19:9d:31:0b:c9:fc:db:b2:6d:7c:40: 83:a7:48:50:7e:71:e4:47:a2:95:4a:bc:a9:e0:13:d6:85:55: 7a:a1:9f:78:c9:0b:3f:49:64:67:07:f5:8a:dd:71:fc:c8:f9: 59:ad:a7:36:8f:7c:a2:0b:6a:c0:06:c1:a1:77:bb:9a:95:25: ed:d7:45:76:a1:85:ad:34:9e:99:b6:b4:6d:dc:0c:26:64:1e: a4:53:d0:ae:45:55:5a:0c:78:52:ea:68:4a:75:2a:2f:ac:23: e7:38:a2:a6:67:7f:a0:d1:10:c8:fd:77:c5:2f:84:89:d6:7e: 12:c1:64:59:57:7a:86:66:90:fe:cd:87:8d:c8:d9:b9:a8:2b: 1b:f0:0a:44:92:e6:30:e3:5a:6a:7d:bd:88:d0:34:d0:70:6b: dc:62:ec:29:bd:32:ce:92:20:33:a2:8f:6e:78:70:d5:88:df: 68:85:63:46:d6:a3:41:fe:90:36:89:7b:69:17:26:77:69:61: e0:57:24:2e:b4:c0:11:e4:2f:f7:f2:fb:37:f1:28:db:16:56: 9c:12:1e:63:db:04:be:36:4b:2b:37:89:51:1e:2d:c1:f9:f1: b2:80:65:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaM8qbZFO/r4HaU9lXRiCZ24LaoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAzMTFE RjUwOTBCQjAeFw0yNjExMTQwOTU3MDRaFw0yNjExMTUxMjA0MDRaMDMxMTAvBgNV BAMTKEY2OEUwNzhDQUMxMjQ5N0Q1MTdBREM2ODNBOUVBNkZBQTIzM0I0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDexQ9gMTctHqcnXPB6llVmmrL eUaZwxWzbiH+4COKWuEbqjjwvXICIKN/It9R7m8IeYUiRgtP0kWbWRAqILa4afZV pAGsjA4Wl9fPhOxduUgN3rkB4Qjhni2v+NryJWzhjnQb7xwKGl2EDvYZ6rxlEnXz HIaIYvi61msnedwTzwDL5tyVsGr82ZvjWZCyQXkQvXPt09WuD/I2eqMVBC+bFxm1 fV9zpmfBFnvKGzgz3Yd6m/D8IBloUVVRBE2JbHSYyyMb0duEIQoyZwJlqUXXAOAx QW/OXllK5J+J6Q89HL4sPwET/LH//k6lJN/khYHl4+hMAd+nq+Px14tP/CxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9o4HjKwSSX1RetxoOp6m+qIztAUwHwYDVR0j BBgwFoAUCBUf1i+hjJ7C9bnbXUoDEd9QkLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYy RkExOEM5RUMyRjVCOURCNUQ0QTAzMTFERjUwOTBCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wODE1MUZENjJGQTE4QzlFQzJGNUI5REI1RDRBMDMxMURGNTA5 MEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAz MTFERjUwOTBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdnj1kfWFrHEUwL2WLSxoGumOkQ90C2MaMZ nTELyfzbsm18QIOnSFB+ceRHopVKvKngE9aFVXqhn3jJCz9JZGcH9YrdcfzI+Vmt pzaPfKILasAGwaF3u5qVJe3XRXahha00npm2tG3cDCZkHqRT0K5FVVoMeFLqaEp1 Ki+sI+c4oqZnf6DREMj9d8UvhInWfhLBZFlXeoZmkP7Nh43I2bmoKxvwCkSS5jDj Wmp9vYjQNNBwa9xi7Cm9Ms6SIDOij254cNWI32iFY0bWo0H+kDaJe2kXJndpYeBX JC60wBHkL/fy+zfxKNsWVpwSHmPbBL42Sys3iVEeLcH58bKAZbg= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:22 2026 by rpki-client