$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: JNxTxiSHl6vh2kG8/WvIjqm2hM2BQDJJYVoL7AcJBgo= Subject key identifier: 06:8C:61:E9:DE:7C:1C:8D:A1:5D:F4:5B:81:E5:2B:D5:38:7F:8A:E1 Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 1A730329BE6AF362414263E6C4C8E1FF939DF2AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:17:30 +0000 Manifest this update: Sat 14 Nov 2026 18:12:30 +0000 Manifest next update: Sun 15 Nov 2026 21:57:30 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) 2: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: 0W547liFIFJ7UwOU+i6Fv4W6im+BqmdecKlZDFDTaUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:73:03:29:be:6a:f3:62:41:42:63:e6:c4:c8:e1:ff:93:9d:f2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Nov 14 18:12:30 2026 GMT Not After : Nov 15 21:57:30 2026 GMT Subject: CN=068C61E9DE7C1C8DA15DF45B81E52BD5387F8AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:5b:c0:a0:aa:9d:44:fa:0c:16:2f:0f:df: 66:c8:59:60:f3:63:5c:cc:47:8e:8b:80:c7:2e:c8: 20:4f:69:d6:b3:e8:2c:7d:ab:e4:d4:f9:23:4c:ff: 2d:f4:66:d3:91:be:a5:c4:b9:f0:cf:95:8b:29:86: ba:ef:84:7d:d7:cb:bc:07:7e:f9:00:3b:b7:37:d6: 8c:47:d2:c7:b5:09:72:07:40:d4:94:0e:0e:f3:bc: 72:1c:b2:83:6d:05:13:30:8a:d9:56:e6:6d:62:f2: f4:09:67:b7:6e:47:21:5f:1c:ad:be:95:8a:2b:a5: ec:d5:b4:77:b7:8e:4e:fd:13:c7:6f:73:e3:72:81: 46:57:9b:c1:fd:cb:98:ff:8d:22:b4:3f:e5:4a:ac: 85:18:79:29:55:e1:44:68:56:7a:46:ad:ce:a4:f0: 6c:c9:a8:f3:dc:d4:af:0f:c8:0b:e8:13:d0:86:94: b7:ae:9a:a2:21:6f:16:64:fd:3c:f3:08:fd:12:cf: 4a:d1:87:05:f6:79:a2:19:f5:01:e1:28:0b:06:30: 49:f4:d8:74:10:28:9f:52:55:dd:41:d8:ee:a8:d2: 13:d3:e0:c0:1a:bf:37:73:f1:6a:3c:f7:fc:57:14: 2c:96:d7:c2:98:ea:37:82:70:33:6c:4b:e0:4a:82: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:61:E9:DE:7C:1C:8D:A1:5D:F4:5B:81:E5:2B:D5:38:7F:8A:E1 X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:74:22:34:2e:ce:4d:16:fe:f6:f2:1c:d7:6a:c4:95:bf:6e: b1:5d:30:4c:c7:11:1f:54:9d:ff:fb:f8:83:d3:cb:ec:6c:e1: fa:74:10:ce:df:ab:e8:96:1a:43:7c:fd:51:91:e1:a6:79:ac: 07:8f:81:2d:be:ec:64:e9:46:5e:35:65:62:e6:6d:94:f2:d4: 56:b2:9f:0f:d1:61:96:c5:5d:52:98:da:8c:44:c5:3a:e0:36: de:1a:12:62:3e:c6:30:04:de:8c:39:4d:05:15:23:7f:33:36: 20:36:ee:2a:87:76:7a:cc:3c:e7:5c:2a:f9:06:57:35:b4:0f: a4:4a:cc:73:9e:95:7d:67:ed:bd:67:9d:50:3d:54:72:03:3e: 0f:6d:f0:d4:7e:e2:5a:60:4f:84:13:64:51:c2:79:58:9f:e4: 83:96:95:5c:a6:2c:b1:5a:e5:7f:aa:7c:f1:1c:af:4e:79:7a: 03:d8:2f:8d:11:fc:42:92:44:47:d4:d4:37:c5:2c:e4:da:68: 20:af:3e:8b:6a:a5:1b:36:7a:cd:ee:30:71:87:d9:49:b7:b9: 6c:24:9e:ac:d9:07:2f:8a:4a:aa:24:f6:95:ac:b2:02:31:e0: af:f0:bc:ae:dc:22:a7:c7:e4:0d:13:e1:17:e0:e3:63:e1:48: 84:a8:e8:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnMDKb5q82JBQmPmxMjh/5Od8q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjExMTQxODEyMzBaFw0yNjExMTUyMTU3MzBaMDMxMTAvBgNV BAMTKDA2OEM2MUU5REU3QzFDOERBMTVERjQ1QjgxRTUyQkQ1Mzg3RjhBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRlvAoKqdRPoMFi8P32bIWWDz Y1zMR46LgMcuyCBPadaz6Cx9q+TU+SNM/y30ZtORvqXEufDPlYsphrrvhH3Xy7wH fvkAO7c31oxH0se1CXIHQNSUDg7zvHIcsoNtBRMwitlW5m1i8vQJZ7duRyFfHK2+ lYorpezVtHe3jk79E8dvc+NygUZXm8H9y5j/jSK0P+VKrIUYeSlV4URoVnpGrc6k 8GzJqPPc1K8PyAvoE9CGlLeumqIhbxZk/TzzCP0Sz0rRhwX2eaIZ9QHhKAsGMEn0 2HQQKJ9SVd1B2O6o0hPT4MAavzdz8Wo89/xXFCyW18KY6jeCcDNsS+BKglV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBoxh6d58HI2hXfRbgeUr1Th/iuEwHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN0IjQuzk0W/vbyHNdqxJW/brFdMEzHER9U nf/7+IPTy+xs4fp0EM7fq+iWGkN8/VGR4aZ5rAePgS2+7GTpRl41ZWLmbZTy1Fay nw/RYZbFXVKY2oxExTrgNt4aEmI+xjAE3ow5TQUVI38zNiA27iqHdnrMPOdcKvkG VzW0D6RKzHOelX1n7b1nnVA9VHIDPg9t8NR+4lpgT4QTZFHCeVif5IOWlVymLLFa 5X+qfPEcr055egPYL40R/EKSREfU1DfFLOTaaCCvPotqpRs2es3uMHGH2Um3uWwk nqzZBy+KSqok9pWssgIx4K/wvK7cIqfH5A0T4Rfg42PhSISo6Ng= -----END CERTIFICATE-----Generated at Sun Nov 15 10:36:23 2026 by rpki-client