$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: 0wsLk4VJaRmcKUFGezRtux6ay8mFYHSUIH67td+tqJA= Subject key identifier: D8:AA:98:1A:7A:1B:3E:79:2C:EB:7E:7B:EF:48:1D:2A:DC:61:52:F4 Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 0E8B586A6A1588303900795CD2129EB2A1476156 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: 010A Signing time: Sat 14 Nov 2026 11:44:15 +0000 Manifest this update: Sat 14 Nov 2026 11:39:15 +0000 Manifest next update: Sun 15 Nov 2026 14:32:15 +0000 Files and hashes: 1: 3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa (hash: LpmeCYIxoWBDvzjeANLy6rKl3zTbux6LO0Gm7oz2kiY=) 2: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: mG2oNiyArPforq7vT+iFO0UHcNNY8LCLMsx4b2YSI2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8b:58:6a:6a:15:88:30:39:00:79:5c:d2:12:9e:b2:a1:47:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Nov 14 11:39:15 2026 GMT Not After : Nov 15 14:32:15 2026 GMT Subject: CN=D8AA981A7A1B3E792CEB7E7BEF481D2ADC6152F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:89:b5:64:d3:2b:28:30:47:b0:14:d5:27: cb:52:af:58:d1:76:e9:d7:01:bf:7f:28:78:62:9e: 0f:6f:e2:27:15:de:62:26:5b:49:ed:28:5c:b0:74: 31:2e:8e:e5:fd:8b:56:01:f4:f0:a9:10:98:0c:18: a2:e1:20:da:3b:2b:5e:c7:d0:fb:3c:89:2b:1c:e0: 20:c6:f7:9c:a2:cb:30:10:71:88:ae:ba:32:dc:dd: 22:94:f9:37:b3:ce:58:a1:af:89:68:51:1b:1f:f1: b5:b3:58:93:a2:9e:bd:bc:af:3c:e2:39:f2:34:4a: 72:82:c1:c1:8e:36:0e:a7:32:3c:2b:2b:34:6a:32: 33:d8:4e:4f:42:22:7d:a1:d6:e9:24:0d:f2:1f:f2: 58:1a:0d:09:56:22:cc:be:36:b1:4d:98:c8:11:b7: 92:53:e1:27:a9:0c:5f:5d:ba:c8:de:14:2b:da:1d: f2:45:fa:a0:40:83:78:d9:c8:89:16:6a:39:73:69: df:37:95:47:81:88:ab:db:94:10:1f:d4:98:ef:8f: 04:4b:41:87:50:02:c0:df:56:18:e9:d3:6f:0f:89: a5:88:94:24:32:23:30:0c:eb:34:19:73:02:2f:55: df:8d:0b:6d:6e:f7:de:c0:07:b2:38:6d:c1:c9:8c: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:98:1A:7A:1B:3E:79:2C:EB:7E:7B:EF:48:1D:2A:DC:61:52:F4 X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4e:2a:11:db:1d:38:ad:e9:68:44:48:70:ee:dd:d8:66:15: f4:4d:c5:04:18:0b:86:69:bf:4f:0f:e5:d3:67:b0:66:0b:a6: c9:79:49:cd:3e:bd:a7:16:ff:74:d7:9e:67:69:ec:09:17:5a: cc:f2:63:2d:f3:6d:db:84:c2:93:09:6f:4a:d0:0e:2a:0c:b5: ed:16:92:98:43:5c:59:0a:00:f3:dc:66:19:da:03:86:40:27: 12:9c:91:40:5a:5c:e1:88:14:ab:50:b6:b6:67:31:2a:39:1f: 79:94:2c:4d:5f:53:39:07:bd:51:37:37:ae:5d:d2:f7:6a:bb: 57:da:46:bf:bc:fa:ac:95:f4:83:2a:07:c2:4b:94:c4:5b:ad: 66:c2:c7:0b:bc:a8:2e:fe:51:ef:0f:66:a6:ec:f8:8a:b4:94: 68:bf:79:33:f4:65:05:94:47:78:91:7e:fd:05:39:06:50:53: 98:87:a7:7e:b0:75:55:c8:98:24:8a:4d:e4:00:36:fd:07:7c: 43:d8:2d:70:59:0c:c3:9e:90:6a:42:47:d7:67:f5:e3:ac:06: 19:f0:70:84:63:b2:1e:dd:18:cf:42:4a:27:1d:14:12:e7:30: 34:9a:97:c0:30:cb:d4:76:8e:b0:e0:0c:00:97:f7:1c:92:3b: 93:a3:25:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDotYamoViDA5AHlc0hKesqFHYVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjExMTQxMTM5MTVaFw0yNjExMTUxNDMyMTVaMDMxMTAvBgNV BAMTKEQ4QUE5ODFBN0ExQjNFNzkyQ0VCN0U3QkVGNDgxRDJBREM2MTUyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Y4m1ZNMrKDBHsBTVJ8tSr1jR dunXAb9/KHhing9v4icV3mImW0ntKFywdDEujuX9i1YB9PCpEJgMGKLhINo7K17H 0Ps8iSsc4CDG95yiyzAQcYiuujLc3SKU+Tezzlihr4loURsf8bWzWJOinr28rzzi OfI0SnKCwcGONg6nMjwrKzRqMjPYTk9CIn2h1ukkDfIf8lgaDQlWIsy+NrFNmMgR t5JT4SepDF9dusjeFCvaHfJF+qBAg3jZyIkWajlzad83lUeBiKvblBAf1JjvjwRL QYdQAsDfVhjp028PiaWIlCQyIzAM6zQZcwIvVd+NC21u997AB7I4bcHJjA3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KqYGnobPnks635770gdKtxhUvQwHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExOKhHbHTit6WhESHDu3dhmFfRNxQQYC4Zp v08P5dNnsGYLpsl5Sc0+vacW/3TXnmdp7AkXWszyYy3zbduEwpMJb0rQDioMte0W kphDXFkKAPPcZhnaA4ZAJxKckUBaXOGIFKtQtrZnMSo5H3mULE1fUzkHvVE3N65d 0vdqu1faRr+8+qyV9IMqB8JLlMRbrWbCxwu8qC7+Ue8PZqbs+Iq0lGi/eTP0ZQWU R3iRfv0FOQZQU5iHp36wdVXImCSKTeQANv0HfEPYLXBZDMOekGpCR9dn9eOsBhnw cIRjsh7dGM9CSicdFBLnMDSal8Awy9R2jrDgDACX9xySO5OjJYw= -----END CERTIFICATE-----Generated at Sat Nov 14 22:39:35 2026 by rpki-client