$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: simjxwn3t6i91FwN1BMyRIoCzRyyxBmoSOjAU3HJQsI= Subject key identifier: 4F:B0:8F:35:59:12:79:85:0C:D7:B5:61:19:CF:5C:B7:06:1B:82:3E Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 347EF4D3C261585B457578CBDAD00686340CCC83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:59:11 +0000 Manifest this update: Sun 15 Nov 2026 07:54:11 +0000 Manifest next update: Mon 16 Nov 2026 08:55:11 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: P2wWeKMafp6o+/2dCj5NiDYKZYZP1s0oR94WDO5wKcI=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7e:f4:d3:c2:61:58:5b:45:75:78:cb:da:d0:06:86:34:0c:cc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Nov 15 07:54:11 2026 GMT Not After : Nov 16 08:55:11 2026 GMT Subject: CN=4FB08F35591279850CD7B56119CF5CB7061B823E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:2a:3f:fa:f3:7e:63:9f:61:1c:13:4a:f5: cd:f6:7f:30:f4:d0:cf:02:02:64:53:e2:a4:38:44: 73:be:14:45:99:90:3f:38:e9:8c:ac:2e:c0:b5:fe: 31:05:01:51:f1:db:2b:63:f9:4e:e4:29:5b:90:b7: 9c:3f:13:60:77:c1:d9:92:c5:a6:59:2a:f7:ee:ac: c3:ff:15:43:a6:e7:bd:51:28:d1:c5:44:c3:8b:5c: d7:75:46:9d:e9:d8:04:8e:04:fa:76:0f:a2:6d:f7: f8:7e:4e:55:8a:2d:90:e3:32:41:1c:0c:81:22:b3: e1:18:55:d2:9a:ff:53:de:c6:20:d2:72:6d:54:b9: 59:14:76:d0:0e:7f:a4:6c:40:e2:2c:4e:17:23:a7: 75:54:84:76:95:c7:90:9f:ff:52:9d:ea:4a:d0:3d: 0a:bd:84:93:b0:e8:87:d6:29:34:bc:24:56:be:53: 4d:b2:06:a4:34:53:31:5c:6c:53:b3:5b:63:f2:51: 56:94:3b:12:7b:b9:60:23:c1:af:a9:9b:ba:75:7e: be:bf:c4:96:20:1c:88:08:e3:9b:d2:86:83:08:e8: 1a:71:c6:90:d4:f0:a7:0a:dc:65:05:76:9a:fe:bd: 35:39:13:57:1d:3b:ac:a4:1e:71:f2:a9:f1:58:f0: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:8F:35:59:12:79:85:0C:D7:B5:61:19:CF:5C:B7:06:1B:82:3E X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:94:de:3b:6e:7e:cc:04:f4:67:af:bc:27:a1:18:79:44:23: 76:a0:88:8a:7a:86:7c:cd:bc:d8:5f:fc:b2:b5:d5:04:54:11: c8:3a:0c:07:9e:d1:6b:40:47:ed:4a:1f:9f:5a:e3:ae:b6:87: d2:8a:ec:c2:2e:4c:c0:39:4c:47:1f:23:b4:01:12:49:17:1f: 7e:dd:fb:15:11:fe:d7:e4:bc:75:36:dd:42:ab:1b:94:17:ae: 35:d1:c9:c5:f7:c3:5a:19:e8:be:49:f9:dc:41:77:68:bb:37: e5:7f:55:1d:79:5e:26:9a:59:08:c5:04:3d:b6:42:31:2f:ac: 32:30:c0:66:cd:fb:e5:48:25:06:1f:73:12:7c:9d:bf:85:6e: 52:52:7f:c9:bc:c0:26:d2:c4:8c:2b:14:4d:fd:ec:1f:ab:cd: 3c:81:5b:38:dd:a3:9e:32:42:d6:2b:a6:2b:f4:9c:dd:3c:1b: cd:b8:5c:74:0b:d5:c2:e5:1e:55:f3:6a:0c:1e:2c:78:05:b2: e7:1c:3a:b4:2b:a3:0c:26:c3:8d:ea:b3:30:62:3a:5c:cf:8e: 60:b8:60:50:e9:97:83:67:8c:f5:3c:be:04:da:1c:38:a6:39: 47:6f:c2:47:d5:02:5b:18:eb:df:4f:02:38:46:21:13:1e:21: 94:da:49:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNH7008JhWFtFdXjL2tAGhjQMzIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjExMTUwNzU0MTFaFw0yNjExMTYwODU1MTFaMDMxMTAvBgNV BAMTKDRGQjA4RjM1NTkxMjc5ODUwQ0Q3QjU2MTE5Q0Y1Q0I3MDYxQjgyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuio/+vN+Y59hHBNK9c32fzD0 0M8CAmRT4qQ4RHO+FEWZkD846YysLsC1/jEFAVHx2ytj+U7kKVuQt5w/E2B3wdmS xaZZKvfurMP/FUOm571RKNHFRMOLXNd1Rp3p2ASOBPp2D6Jt9/h+TlWKLZDjMkEc DIEis+EYVdKa/1PexiDScm1UuVkUdtAOf6RsQOIsThcjp3VUhHaVx5Cf/1Kd6krQ PQq9hJOw6IfWKTS8JFa+U02yBqQ0UzFcbFOzW2PyUVaUOxJ7uWAjwa+pm7p1fr6/ xJYgHIgI45vShoMI6BpxxpDU8KcK3GUFdpr+vTU5E1cdO6ykHnHyqfFY8Gp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7CPNVkSeYUM17VhGc9ctwYbgj4wHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKU3jtufswE9GevvCehGHlEI3agiIp6hnzN vNhf/LK11QRUEcg6DAee0WtAR+1KH59a4662h9KK7MIuTMA5TEcfI7QBEkkXH37d +xUR/tfkvHU23UKrG5QXrjXRycX3w1oZ6L5J+dxBd2i7N+V/VR15XiaaWQjFBD22 QjEvrDIwwGbN++VIJQYfcxJ8nb+FblJSf8m8wCbSxIwrFE397B+rzTyBWzjdo54y QtYrpiv0nN08G824XHQL1cLlHlXzagweLHgFsuccOrQrowwmw43qszBiOlzPjmC4 YFDpl4NnjPU8vgTaHDimOUdvwkfVAlsY699PAjhGIRMeIZTaSSI= -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:25 2026 by rpki-client