$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: vqziYM0nSFA28aRFptcCnBXqHDJBpPIr+/SsuSfFKGA= Subject key identifier: B2:B5:EF:92:79:1D:E5:69:E6:F9:72:F8:83:6A:50:B9:89:1C:B5:24 Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: EED2EE36C1925CE9F3C9DA4B62E759603D53FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 01:15:41 +0000 Manifest this update: Sun 15 Nov 2026 01:10:41 +0000 Manifest next update: Mon 16 Nov 2026 03:57:41 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) 2: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: mwlAH5qTnxrEFvphAMX1kr6LcH1ZTHCn6NUdTGLM+io=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ee:d2:ee:36:c1:92:5c:e9:f3:c9:da:4b:62:e7:59:60:3d:53:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Nov 15 01:10:41 2026 GMT Not After : Nov 16 03:57:41 2026 GMT Subject: CN=B2B5EF92791DE569E6F972F8836A50B9891CB524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:61:c3:f6:90:f5:11:b0:d0:69:40:40:16: 8d:7c:4c:e8:5f:fb:a5:99:1e:7a:c1:f7:7f:6c:39: 15:63:b4:af:07:25:0e:83:a9:8d:f0:61:e8:45:e8: 78:37:6b:b6:8f:ea:18:d8:41:ff:87:8b:d9:d7:fc: 7a:7e:6a:5a:0e:1b:39:56:11:62:79:e9:bf:15:bd: 01:6c:9d:82:4f:93:52:a1:db:88:d0:0e:d1:50:b3: bd:39:fd:b7:63:25:51:4a:3f:d4:29:71:53:87:28: 33:69:1d:a9:08:df:54:fe:8c:cf:6c:41:c6:98:24: 0f:e8:bf:fe:01:eb:14:56:41:d7:c0:e0:04:44:8b: e4:08:71:27:f7:88:d7:97:d1:d6:9a:f7:80:f0:99: 54:ee:7c:3e:c5:22:ef:43:fc:c2:80:c8:2c:c9:39: e7:84:d1:07:bc:3f:51:c9:e6:4b:65:c2:1a:54:f0: fa:27:d0:e0:4c:e0:a1:ee:34:2e:04:99:b4:ff:b8: 00:51:68:13:72:fc:b3:8f:93:c7:e1:a8:34:f5:57: d5:be:22:17:12:3b:6d:a9:44:36:f8:93:f6:e0:4d: b4:a4:a2:35:bf:d8:f4:ba:80:33:74:7e:44:85:78: 22:03:af:7f:63:be:db:cb:c6:0e:22:64:ad:44:fb: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:EF:92:79:1D:E5:69:E6:F9:72:F8:83:6A:50:B9:89:1C:B5:24 X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:52:3d:f0:29:6a:1f:4e:9f:11:1f:4a:96:46:52:17:47:b9: 7a:5c:f1:1c:a3:7e:41:df:1b:3d:45:9c:e0:b5:54:4b:2f:47: 1b:a8:9e:36:7f:36:b8:24:51:fd:ae:c0:a8:66:a7:ff:46:3d: bb:81:79:eb:ed:69:93:c7:d9:33:4d:b7:58:7e:e6:ab:b5:38: 1f:cd:c0:95:85:7b:bc:e6:b6:b2:9b:ea:26:13:92:f5:6d:ca: 6b:1e:11:59:7b:1e:64:e8:f0:03:1c:7f:0b:fc:61:39:d9:c1: 45:ad:7b:90:8e:fb:3f:2e:cb:38:fb:0d:85:30:cf:3d:bf:0b: 0b:3c:eb:9e:08:77:94:c9:8e:b2:cc:16:ce:2f:a5:75:a5:6c: cc:e0:33:89:5f:56:d5:c8:57:73:be:31:f7:94:19:ce:6d:b2: a1:0f:34:1a:e6:b5:ca:21:85:7e:ad:80:f4:72:ce:35:d8:60: f2:32:ce:96:f4:9c:ce:61:e8:8f:af:6f:df:11:6e:d9:2e:e4: fe:d4:43:f7:3b:fb:6e:00:2d:35:33:3d:d9:ba:e8:72:fc:30: b2:f9:62:45:ad:ad:65:73:70:16:65:61:2e:9d:de:2f:c2:9c: ab:d0:ff:c1:0f:c3:fb:ef:23:4b:45:76:93:3d:a8:e0:06:3b: 49:6c:27:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAO7S7jbBklzp88naS2LnWWA9U/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjExMTUwMTEwNDFaFw0yNjExMTYwMzU3NDFaMDMxMTAvBgNV BAMTKEIyQjVFRjkyNzkxREU1NjlFNkY5NzJGODgzNkE1MEI5ODkxQ0I1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYV2HD9pD1EbDQaUBAFo18TOhf +6WZHnrB939sORVjtK8HJQ6DqY3wYehF6Hg3a7aP6hjYQf+Hi9nX/Hp+aloOGzlW EWJ56b8VvQFsnYJPk1Kh24jQDtFQs705/bdjJVFKP9QpcVOHKDNpHakI31T+jM9s QcaYJA/ov/4B6xRWQdfA4AREi+QIcSf3iNeX0daa94DwmVTufD7FIu9D/MKAyCzJ OeeE0Qe8P1HJ5ktlwhpU8Pon0OBM4KHuNC4EmbT/uABRaBNy/LOPk8fhqDT1V9W+ IhcSO22pRDb4k/bgTbSkojW/2PS6gDN0fkSFeCIDr39jvtvLxg4iZK1E+4aDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsrXvknkd5Wnm+XL4g2pQuYkctSQwHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChSPfApah9OnxEfSpZGUhdHuXpc8RyjfkHf Gz1FnOC1VEsvRxuonjZ/NrgkUf2uwKhmp/9GPbuBeevtaZPH2TNNt1h+5qu1OB/N wJWFe7zmtrKb6iYTkvVtymseEVl7HmTo8AMcfwv8YTnZwUWte5CO+z8uyzj7DYUw zz2/Cws8654Id5TJjrLMFs4vpXWlbMzgM4lfVtXIV3O+MfeUGc5tsqEPNBrmtcoh hX6tgPRyzjXYYPIyzpb0nM5h6I+vb98Rbtku5P7UQ/c7+24ALTUzPdm66HL8MLL5 YkWtrWVzcBZlYS6d3i/CnKvQ/8EPw/vvI0tFdpM9qOAGO0lsJ9U= -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:33 2026 by rpki-client