$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: ae8aGdjm1XOzSLisDeGbAfscnlH1oNp6gm0bwXxARyI= Subject key identifier: 90:F6:C4:5E:66:8C:B5:1A:69:84:7F:4E:4F:E0:0C:EA:F2:EC:9D:27 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 1EFD2D2A50FCAB393E34198017B4BAE3C90CF4BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:11:07 +0000 Manifest this update: Sat 14 Nov 2026 17:06:07 +0000 Manifest next update: Sun 15 Nov 2026 20:36:07 +0000 Files and hashes: 1: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 2: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: F93Exksk5NfikNdmpoOlXiiV5XuODEBXBVlBAWFg9V8=) 3: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fd:2d:2a:50:fc:ab:39:3e:34:19:80:17:b4:ba:e3:c9:0c:f4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Nov 14 17:06:07 2026 GMT Not After : Nov 15 20:36:07 2026 GMT Subject: CN=90F6C45E668CB51A69847F4E4FE00CEAF2EC9D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:e1:86:b1:79:e1:1f:84:96:ae:5e:55:46: 34:10:03:df:a4:88:2e:a6:bc:20:99:dc:d8:09:94: 13:d1:6d:26:ea:2c:39:19:c8:7d:82:ba:a4:2c:ef: 6f:28:0e:28:64:d3:df:3b:67:8a:4f:e7:e6:12:c6: 1e:3c:b0:80:24:e2:28:bd:30:ad:9a:4f:84:a5:3f: 61:04:05:85:cd:07:5d:97:c8:7a:80:a2:1f:e9:9f: f0:a5:9b:3f:be:e9:28:b2:bf:ee:a6:8b:f3:e0:c5: ec:ff:21:c9:d5:1d:a6:1f:28:62:1b:a0:b5:af:92: cb:cd:8a:c2:7d:da:1d:48:dc:df:61:9d:63:b8:9c: 59:e8:cf:31:4c:dc:22:41:44:65:89:dc:4a:22:66: f9:64:6d:b3:e3:29:0a:88:22:a9:45:50:5c:cc:e5: 16:c7:10:88:2d:e6:f2:67:89:9d:6a:e4:2a:e3:f6: b3:8e:63:f7:ba:56:c8:07:d8:7e:24:59:f2:dd:76: de:19:e3:5f:84:a4:fa:46:9f:67:f9:92:e8:eb:ce: 21:d0:b5:96:87:7c:ee:bf:46:18:77:cb:bc:0e:b4: 9e:de:69:7d:ca:4c:d1:e1:84:ce:38:2c:c0:0a:32: f5:6a:d3:b2:c7:46:b0:4d:dc:92:13:a2:1b:b8:d1: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F6:C4:5E:66:8C:B5:1A:69:84:7F:4E:4F:E0:0C:EA:F2:EC:9D:27 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9d:1b:bb:4f:54:6a:c9:e8:3f:ac:26:73:24:83:a2:4c:f7: de:64:1e:e5:63:3d:5b:35:28:21:bc:66:14:17:97:c6:72:fa: dd:e5:0f:0b:6a:81:a9:b1:5e:cf:dc:dc:53:e7:6d:e3:24:fb: bd:0a:41:88:23:cf:c2:96:63:be:3f:de:b6:d1:f2:f4:bc:58: 07:cc:24:4f:6d:5c:80:6c:6b:cb:50:bb:7d:51:87:48:1f:c0: 71:5a:27:3d:15:94:9a:c5:5f:d0:d5:36:18:51:ce:b3:55:99: 5a:5c:07:94:93:53:32:06:69:d1:76:0d:a6:55:d6:a9:0e:43: 78:f0:c1:8b:a2:c4:79:34:cd:52:27:41:c4:b5:fe:b2:21:e3: b6:7b:71:10:68:56:4d:a2:24:49:1f:f7:7d:5f:67:90:2d:de: 1b:ec:32:26:00:36:ec:d4:5d:22:4e:d3:1d:2f:36:14:3f:fa: 82:56:b7:1d:a4:b9:72:be:a4:e3:70:ba:c6:ba:61:35:62:d1: cf:f5:00:a9:07:cb:5e:7c:14:b0:aa:fa:c0:77:43:5b:3c:ed: bd:cb:c7:be:1f:02:cd:2b:35:24:86:69:a1:54:42:bc:8e:73: f8:b8:62:c1:a5:db:39:3d:2f:ca:cb:6e:60:68:8e:96:40:f6: cf:88:f3:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHv0tKlD8qzk+NBmAF7S648kM9LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjExMTQxNzA2MDdaFw0yNjExMTUyMDM2MDdaMDMxMTAvBgNV BAMTKDkwRjZDNDVFNjY4Q0I1MUE2OTg0N0Y0RTRGRTAwQ0VBRjJFQzlEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZ+GGsXnhH4SWrl5VRjQQA9+k iC6mvCCZ3NgJlBPRbSbqLDkZyH2CuqQs728oDihk0987Z4pP5+YSxh48sIAk4ii9 MK2aT4SlP2EEBYXNB12XyHqAoh/pn/Clmz++6Siyv+6mi/Pgxez/IcnVHaYfKGIb oLWvksvNisJ92h1I3N9hnWO4nFnozzFM3CJBRGWJ3EoiZvlkbbPjKQqIIqlFUFzM 5RbHEIgt5vJniZ1q5Crj9rOOY/e6VsgH2H4kWfLddt4Z41+EpPpGn2f5kujrziHQ tZaHfO6/Rhh3y7wOtJ7eaX3KTNHhhM44LMAKMvVq07LHRrBN3JITohu40XWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPbEXmaMtRpphH9OT+AM6vLsnScwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2dG7tPVGrJ6D+sJnMkg6JM995kHuVjPVs1 KCG8ZhQXl8Zy+t3lDwtqgamxXs/c3FPnbeMk+70KQYgjz8KWY74/3rbR8vS8WAfM JE9tXIBsa8tQu31Rh0gfwHFaJz0VlJrFX9DVNhhRzrNVmVpcB5STUzIGadF2DaZV 1qkOQ3jwwYuixHk0zVInQcS1/rIh47Z7cRBoVk2iJEkf931fZ5At3hvsMiYANuzU XSJO0x0vNhQ/+oJWtx2kuXK+pONwusa6YTVi0c/1AKkHy158FLCq+sB3Q1s87b3L x74fAs0rNSSGaaFUQryOc/i4YsGl2zk9L8rLbmBojpZA9s+I80o= -----END CERTIFICATE-----Generated at Sun Nov 15 12:12:33 2026 by rpki-client