$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: yZvrVx5SnpVwgGsBLfFWZ7HbQ8F2OP7RanrbZbfvG4g= Subject key identifier: 86:EE:62:01:6F:5D:A3:1E:CE:CE:34:58:36:66:98:B8:9C:D2:FB:B5 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 0C5DC05014C6A69FF41C0E4FC49B351BE836AC98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 07:33:45 +0000 Manifest this update: Sat 14 Nov 2026 07:28:45 +0000 Manifest next update: Sun 15 Nov 2026 10:00:45 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: 6dBTtqGcbgiTupUWNW5cjkb8eItsPCBnCCE7GN4TOfs=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5d:c0:50:14:c6:a6:9f:f4:1c:0e:4f:c4:9b:35:1b:e8:36:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Nov 14 07:28:45 2026 GMT Not After : Nov 15 10:00:45 2026 GMT Subject: CN=86EE62016F5DA31ECECE3458366698B89CD2FBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:4e:23:a0:1f:d1:5a:f4:b1:ef:09:e1:b3: 46:db:61:73:a5:a7:0c:84:60:f2:7f:af:bd:c7:12: cd:b3:65:15:ec:42:76:7d:b7:4b:8f:91:2b:39:b9: 4e:37:fd:82:9f:4a:17:85:a0:4c:cc:96:36:0c:59: 23:43:de:95:28:1c:f2:bb:4c:35:f4:eb:06:a5:b7: 31:34:bd:57:33:10:27:29:01:95:e0:d2:61:a8:28: a3:59:4c:1a:ba:33:72:87:12:b2:22:0c:1c:c9:aa: ed:b9:ca:33:02:1f:e1:ac:04:2d:55:84:ef:86:d5: fd:37:3d:e6:d4:4f:67:6a:ce:af:83:42:3a:2a:0a: 35:9e:b8:7f:b8:be:ad:24:dd:5a:a2:3a:6f:a6:3c: ca:23:b9:2f:98:2c:3b:67:0b:3a:6f:41:6c:6f:f2: 07:4f:7f:4a:8b:ef:34:b1:dc:50:55:56:2b:03:a5: 47:ed:63:00:6e:f1:80:17:ba:05:9a:d6:05:86:8d: a4:5d:be:ce:64:59:2c:c0:65:0e:aa:f5:b9:8d:ec: 76:08:d1:e1:6c:0f:9b:3c:26:b5:ad:e8:67:77:c2: 7a:8b:36:b0:49:fd:3f:68:6a:df:da:90:70:e0:96: 6f:58:ef:23:94:84:4c:2e:12:6e:2e:e4:88:c8:80: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:62:01:6F:5D:A3:1E:CE:CE:34:58:36:66:98:B8:9C:D2:FB:B5 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:87:09:a5:c2:c9:8c:a9:a2:c1:36:ff:66:14:3a:ab:32:02: fa:35:15:a1:d5:e7:be:3e:ef:0d:81:ec:95:eb:ed:6a:79:12: 0d:de:c9:64:c1:61:f4:6c:48:ad:3d:2b:76:39:94:55:83:bc: b2:4a:0b:02:f7:02:fb:d4:1d:98:d5:8d:87:8f:2f:6e:4c:3b: aa:29:a8:06:df:69:af:ab:dc:8b:be:bf:b4:99:bd:d4:82:a9: e3:77:27:3e:d1:bb:95:bf:00:bc:cd:ef:fe:3e:5b:fc:6c:7d: ca:60:b5:17:32:8c:4d:3f:93:02:c3:15:b6:4f:c2:aa:93:17: 4a:b9:2a:b7:2d:1e:5f:77:c2:6c:3f:33:48:46:18:39:2d:65: 93:ab:29:d4:fd:4b:55:e6:f2:18:34:b0:bb:eb:be:a5:67:0a: 5c:f5:cf:fd:2e:2c:4e:98:4c:b1:b2:72:68:f4:94:bc:fb:38: 48:5d:06:08:47:f8:99:02:09:b8:7d:11:66:db:88:8f:aa:18: 32:2f:b6:fc:a7:2c:90:0a:74:e7:e1:9d:8e:c8:63:c7:e6:2d: e8:27:04:6d:cd:5f:77:d7:cf:4b:e9:87:08:ac:92:4e:db:0b: b4:2f:ff:58:e6:0b:5e:8b:ab:2e:70:f1:b9:8f:d2:c4:46:61: 94:8c:5a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDF3AUBTGpp/0HA5PxJs1G+g2rJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjExMTQwNzI4NDVaFw0yNjExMTUxMDAwNDVaMDMxMTAvBgNV BAMTKDg2RUU2MjAxNkY1REEzMUVDRUNFMzQ1ODM2NjY5OEI4OUNEMkZCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Xk4joB/RWvSx7wnhs0bbYXOl pwyEYPJ/r73HEs2zZRXsQnZ9t0uPkSs5uU43/YKfSheFoEzMljYMWSND3pUoHPK7 TDX06waltzE0vVczECcpAZXg0mGoKKNZTBq6M3KHErIiDBzJqu25yjMCH+GsBC1V hO+G1f03PebUT2dqzq+DQjoqCjWeuH+4vq0k3VqiOm+mPMojuS+YLDtnCzpvQWxv 8gdPf0qL7zSx3FBVVisDpUftYwBu8YAXugWa1gWGjaRdvs5kWSzAZQ6q9bmN7HYI 0eFsD5s8JrWt6Gd3wnqLNrBJ/T9oat/akHDglm9Y7yOUhEwuEm4u5IjIgME/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhu5iAW9dox7OzjRYNmaYuJzS+7UwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISHCaXCyYyposE2/2YUOqsyAvo1FaHV574+ 7w2B7JXr7Wp5Eg3eyWTBYfRsSK09K3Y5lFWDvLJKCwL3AvvUHZjVjYePL25MO6op qAbfaa+r3Iu+v7SZvdSCqeN3Jz7Ru5W/ALzN7/4+W/xsfcpgtRcyjE0/kwLDFbZP wqqTF0q5KrctHl93wmw/M0hGGDktZZOrKdT9S1Xm8hg0sLvrvqVnClz1z/0uLE6Y TLGycmj0lLz7OEhdBghH+JkCCbh9EWbbiI+qGDIvtvynLJAKdOfhnY7IY8fmLegn BG3NX3fXz0vphwiskk7bC7Qv/1jmC16Lqy5w8bmP0sRGYZSMWpk= -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:45 2026 by rpki-client