$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: oOcALPMxqXI63K55goUi3Caw/4JhmVVipitRc6SWjQE= Subject key identifier: DD:43:24:56:F7:B7:CA:73:AD:BF:AA:DD:5D:C7:DA:0F:68:FB:89:D9 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 0C0B720F68944DAC0930DB588804B85E54A4CFBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 08:29:49 +0000 Manifest this update: Sun 15 Nov 2026 08:24:49 +0000 Manifest next update: Mon 16 Nov 2026 12:13:49 +0000 Files and hashes: 1: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: WGfnJeNEtCBFsz8IdlQB9WJoOu1bOpiitYQEdSQL6AQ=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0b:72:0f:68:94:4d:ac:09:30:db:58:88:04:b8:5e:54:a4:cf:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Nov 15 08:24:49 2026 GMT Not After : Nov 16 12:13:49 2026 GMT Subject: CN=DD432456F7B7CA73ADBFAADD5DC7DA0F68FB89D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:f6:78:95:26:01:bf:bc:e1:d2:c5:d4:42: 57:db:a1:86:f6:a9:3a:ab:9a:b4:cc:ca:4a:8b:84: 38:92:a8:fe:fb:82:5d:8a:e6:4e:19:3a:8e:86:d1: e4:51:18:88:26:67:00:e5:7f:de:4b:7e:10:1f:06: a4:56:f8:8d:78:45:6e:83:25:10:4a:50:ff:d1:cf: 0b:21:e8:ee:7c:55:8f:56:30:23:ce:a1:4c:ec:cc: a3:f2:92:22:4b:54:53:67:aa:f0:a7:de:da:96:20: fc:51:d5:d8:66:b0:ba:2f:e7:d9:38:5d:3e:e8:a6: cf:c4:ea:ab:cd:9f:ce:11:1b:b8:45:4d:85:ad:4f: e7:67:c1:a8:69:92:33:b3:c7:7d:95:b8:e9:9b:f2: fc:46:a2:db:41:7b:0e:21:58:14:54:73:86:66:1e: bb:df:4d:1d:bc:bd:e7:9c:39:98:43:fa:51:74:20: 6a:fc:1a:71:86:3f:aa:4e:8f:b5:23:d2:25:10:98: 0b:67:9a:8c:a6:5a:be:e6:a3:eb:64:24:7b:51:d1: a7:84:82:18:b0:dc:7f:78:48:ce:75:87:90:d3:1e: a9:32:3f:10:d5:ac:3e:7c:4a:ab:ec:0e:48:b7:e9: 30:da:d5:39:67:2d:a0:46:3e:2a:f8:80:67:ee:d7: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:24:56:F7:B7:CA:73:AD:BF:AA:DD:5D:C7:DA:0F:68:FB:89:D9 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:92:85:06:8d:66:03:58:7e:4c:db:2d:20:6f:77:9f:98:24: ba:99:28:39:0d:1f:35:a4:86:45:3f:98:0d:a2:dd:c0:e5:fe: 48:52:f9:f8:f6:9c:24:bb:0f:06:f0:73:a5:05:15:a8:d4:84: cc:b7:17:07:39:32:8d:79:31:88:0c:a0:ed:82:fd:92:09:ae: 47:fc:9d:70:cc:9a:cc:4f:68:fd:34:db:87:1a:34:2a:a5:c5: 9a:7c:62:af:e3:fc:a0:2c:0a:18:49:db:67:e5:fb:d7:36:29: 94:fe:6c:4e:2f:f3:3b:90:d5:61:ad:bd:b8:64:e4:18:73:3a: 03:c7:c5:34:bb:1d:22:37:e6:fc:9a:3b:2f:27:5f:0f:56:91: 99:ae:fd:83:6c:b1:cc:62:1e:b7:9a:02:88:8b:41:c9:c1:45: c3:b1:4c:cd:75:75:19:09:09:37:14:53:fe:1d:90:96:5a:60: 5e:40:6e:7c:d7:69:80:98:54:93:68:30:2e:22:26:62:77:4d: f7:33:75:f7:ff:3d:ea:33:32:d6:3d:f6:f8:c4:45:f6:77:5a: cc:11:c0:b6:66:a8:91:c8:62:09:a2:c6:78:6e:30:96:7f:23: b6:4d:5f:a6:93:68:c6:8d:7f:e3:04:2e:e1:b1:c8:5b:60:dc: 2f:47:a4:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAtyD2iUTawJMNtYiAS4XlSkz74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjExMTUwODI0NDlaFw0yNjExMTYxMjEzNDlaMDMxMTAvBgNV BAMTKERENDMyNDU2RjdCN0NBNzNBREJGQUFERDVEQzdEQTBGNjhGQjg5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3/Z4lSYBv7zh0sXUQlfboYb2 qTqrmrTMykqLhDiSqP77gl2K5k4ZOo6G0eRRGIgmZwDlf95LfhAfBqRW+I14RW6D JRBKUP/Rzwsh6O58VY9WMCPOoUzszKPykiJLVFNnqvCn3tqWIPxR1dhmsLov59k4 XT7ops/E6qvNn84RG7hFTYWtT+dnwahpkjOzx32VuOmb8vxGottBew4hWBRUc4Zm HrvfTR28veecOZhD+lF0IGr8GnGGP6pOj7Uj0iUQmAtnmoymWr7mo+tkJHtR0aeE ghiw3H94SM51h5DTHqkyPxDVrD58SqvsDki36TDa1TlnLaBGPir4gGfu178RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UMkVve3ynOtv6rdXcfaD2j7idkwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOShQaNZgNYfkzbLSBvd5+YJLqZKDkNHzWk hkU/mA2i3cDl/khS+fj2nCS7Dwbwc6UFFajUhMy3Fwc5Mo15MYgMoO2C/ZIJrkf8 nXDMmsxPaP0024caNCqlxZp8Yq/j/KAsChhJ22fl+9c2KZT+bE4v8zuQ1WGtvbhk 5BhzOgPHxTS7HSI35vyaOy8nXw9WkZmu/YNsscxiHreaAoiLQcnBRcOxTM11dRkJ CTcUU/4dkJZaYF5AbnzXaYCYVJNoMC4iJmJ3Tfczdff/PeozMtY99vjERfZ3WswR wLZmqJHIYgmixnhuMJZ/I7ZNX6aTaMaNf+MELuGxyFtg3C9HpB8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:56:14 2026 by rpki-client