$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: EIDygmYB51vMrulxi1htglArBmMU5302tFbko30GATE= Subject key identifier: 02:BE:98:57:C3:EF:5E:34:95:63:40:30:14:72:4E:26:20:73:86:C2 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 5235E73E38F9436173B2729D3EB6C60C992A9FAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:36:29 +0000 Manifest this update: Sat 14 Nov 2026 09:31:29 +0000 Manifest next update: Sun 15 Nov 2026 12:02:29 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 3: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: iDA6vxOu6X5HxWlkNNRx4FY3mEDwSEufQohYOFvOSOg=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:35:e7:3e:38:f9:43:61:73:b2:72:9d:3e:b6:c6:0c:99:2a:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Nov 14 09:31:29 2026 GMT Not After : Nov 15 12:02:29 2026 GMT Subject: CN=02BE9857C3EF5E349563403014724E26207386C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:2e:c8:2e:71:e4:34:d6:e0:38:6f:a5:de: 1e:3c:43:47:e9:4f:90:3e:79:8f:36:a9:26:e5:50: 10:8f:4c:3c:bf:5c:ea:b6:3d:d1:21:0d:91:8c:a4: 81:ee:f4:c5:4b:c9:ac:9a:0e:fa:0a:54:96:5d:44: 90:d9:e4:8a:f6:36:9e:de:8b:35:b8:2d:5b:aa:74: b4:97:a3:33:f4:a9:f4:8c:f6:80:2d:a2:b8:2c:12: 55:88:11:2c:ad:c2:ff:09:ea:f6:95:c8:b2:57:19: a6:16:f2:97:d7:4e:0c:24:53:9c:d7:56:35:64:83: ce:6c:62:4d:61:24:39:8f:a3:90:e5:73:b2:9d:64: 02:19:45:62:39:79:5e:92:a3:d6:04:a4:97:a7:16: 3c:db:38:99:3c:2e:f5:39:02:7f:de:a5:a0:bd:9d: f9:28:33:45:a8:e8:0d:0e:3c:25:2f:a3:05:4f:26: a4:02:5c:d6:c8:8e:46:48:b4:34:71:bd:00:77:32: 64:26:5f:2f:b7:64:bd:d4:d8:cd:79:cb:58:e2:c5: e4:63:2b:82:25:2b:4a:56:24:0b:b3:1f:17:02:09: bc:73:d0:ca:71:e1:7c:b7:83:ad:e8:72:9b:52:c8: 40:aa:9f:f8:6d:9b:ac:fd:a4:bb:8e:b9:c7:fc:6d: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BE:98:57:C3:EF:5E:34:95:63:40:30:14:72:4E:26:20:73:86:C2 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:75:47:a1:16:28:18:41:4b:4b:51:35:14:e4:d4:8b:7a:71: 4f:3d:e4:70:3e:1b:d5:0e:15:cf:18:d9:54:54:c8:fb:ba:7a: 5b:ba:cf:56:dd:c4:36:63:d5:35:37:d5:cf:b5:78:bc:14:46: 8e:d3:31:8c:74:b0:b9:3b:51:04:41:ab:78:76:97:84:42:60: 1c:f1:06:42:e9:9e:b2:c3:20:ef:6f:9d:00:60:3c:b8:88:45: 0d:90:bd:35:10:ef:54:87:15:74:1a:6f:58:fc:b0:da:f0:ca: 3f:d0:8c:33:f6:4f:0c:3c:d9:2a:f2:c1:ba:ae:f9:8e:f7:c2: 97:6e:e7:46:07:56:ca:5e:8f:86:1a:52:ba:6a:5f:96:5b:7c: 0e:d8:68:31:9e:3c:7b:7b:4d:95:f0:41:da:ff:6c:34:48:cc: f4:87:e1:36:6a:13:88:ca:2f:61:4b:b2:41:3f:22:86:90:6b: 91:c8:45:7a:11:59:55:87:d6:0d:fa:eb:d1:f3:aa:7f:d9:ca: 2a:7e:0e:89:bc:1c:fb:85:0a:a2:19:a7:d2:cf:c9:f4:da:89: 0b:c3:4d:8e:06:b8:1d:ce:13:6d:6b:2e:ae:ac:8e:26:b8:e7: 14:9a:e9:c7:98:18:ad:55:8d:7d:d9:12:f5:53:05:02:6e:9e: 04:3f:23:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjXnPjj5Q2FzsnKdPrbGDJkqn6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjExMTQwOTMxMjlaFw0yNjExMTUxMjAyMjlaMDMxMTAvBgNV BAMTKDAyQkU5ODU3QzNFRjVFMzQ5NTYzNDAzMDE0NzI0RTI2MjA3Mzg2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHC7ILnHkNNbgOG+l3h48Q0fp T5A+eY82qSblUBCPTDy/XOq2PdEhDZGMpIHu9MVLyayaDvoKVJZdRJDZ5Ir2Np7e izW4LVuqdLSXozP0qfSM9oAtorgsElWIESytwv8J6vaVyLJXGaYW8pfXTgwkU5zX VjVkg85sYk1hJDmPo5Dlc7KdZAIZRWI5eV6So9YEpJenFjzbOJk8LvU5An/epaC9 nfkoM0Wo6A0OPCUvowVPJqQCXNbIjkZItDRxvQB3MmQmXy+3ZL3U2M15y1jixeRj K4IlK0pWJAuzHxcCCbxz0Mpx4Xy3g63ocptSyECqn/htm6z9pLuOucf8bW5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAr6YV8PvXjSVY0AwFHJOJiBzhsIwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd1R6EWKBhBS0tRNRTk1It6cU895HA+G9UO Fc8Y2VRUyPu6elu6z1bdxDZj1TU31c+1eLwURo7TMYx0sLk7UQRBq3h2l4RCYBzx BkLpnrLDIO9vnQBgPLiIRQ2QvTUQ71SHFXQab1j8sNrwyj/QjDP2Tww82Srywbqu +Y73wpdu50YHVspej4YaUrpqX5ZbfA7YaDGePHt7TZXwQdr/bDRIzPSH4TZqE4jK L2FLskE/IoaQa5HIRXoRWVWH1g3669Hzqn/Zyip+Dom8HPuFCqIZp9LPyfTaiQvD TY4GuB3OE21rLq6sjia45xSa6ceYGK1VjX3ZEvVTBQJungQ/I50= -----END CERTIFICATE-----Generated at Sat Nov 14 23:43:12 2026 by rpki-client