$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json) Hash identifier: MH+BkTkmks/zkG5SaLcq6ClZGvJg1Ze/y0ByJMLSmlA= Subject key identifier: 5E:AF:89:34:0C:2A:19:CD:F4:09:52:59:63:F6:B9:41:E4:DF:C6:45 Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 5888177B602716923A3E08AFABE7534C4D8E8495 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:58:59 +0000 Manifest this update: Sun 15 Nov 2026 03:53:59 +0000 Manifest next update: Mon 16 Nov 2026 07:23:59 +0000 Files and hashes: 1: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: SJt7u5MFORAgh7BIcGDO9EvzVpcTApTAHB3eUbY5U4Q=) 2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:17:7b:60:27:16:92:3a:3e:08:af:ab:e7:53:4c:4d:8e:84:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: Nov 15 03:53:59 2026 GMT Not After : Nov 16 07:23:59 2026 GMT Subject: CN=5EAF89340C2A19CDF409525963F6B941E4DFC645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:6b:c2:2a:ea:da:2a:37:a7:43:f5:6b:97: d7:81:db:f5:d4:c0:0e:ed:fc:b1:8c:53:91:83:af: 74:08:07:f0:4e:8f:30:76:33:7f:4b:96:09:00:b3: cc:10:4d:25:4b:64:f2:93:5b:c8:b0:2c:c8:ea:ba: ce:cd:5a:d5:d1:70:bb:3d:e3:a3:eb:30:f1:ae:67: 3a:a5:8f:9d:6e:25:0b:93:4e:e2:f8:e3:e0:b1:00: 4b:9b:ed:25:10:3f:a9:7e:76:d0:3e:ee:a8:72:e9: 72:bd:72:47:84:2b:42:c9:07:1c:f2:ed:2d:d0:ec: 63:87:34:8e:d3:fd:6e:bd:1d:04:8b:d2:05:2a:ab: 75:57:76:ec:27:ae:42:79:23:8d:0b:9d:72:d6:6b: 2e:91:c6:cd:e6:38:72:8e:5c:21:c5:b6:f1:8d:33: f6:47:42:ad:a1:cf:e5:0d:f0:b3:bd:78:8c:5b:f3: 3d:0e:fc:d8:27:c7:d5:66:09:11:4e:80:cf:41:cd: f7:77:71:af:c6:82:5e:9e:94:6d:49:3b:97:d3:1c: 7c:57:66:62:bc:d4:90:87:7d:18:94:1e:19:0d:ca: 3e:aa:cc:dc:97:a0:00:68:b4:9b:57:82:15:18:ae: 3f:99:6d:fb:c2:64:d8:cc:ee:b1:5b:cf:86:67:d8: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AF:89:34:0C:2A:19:CD:F4:09:52:59:63:F6:B9:41:E4:DF:C6:45 X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0b:8e:99:b2:a3:5f:88:a4:c6:07:4a:13:dc:13:96:57:9b: a1:87:b7:46:d4:47:a2:3b:02:f7:38:65:ff:bc:3c:94:4a:30: 09:27:54:ea:fd:4d:bd:c3:ef:ed:10:32:c2:e6:07:70:0b:76: b3:01:7a:3b:7d:1d:b7:d9:44:9d:e2:5f:f0:2b:62:c7:38:4b: ac:bc:67:b0:f2:24:2a:e4:07:fe:11:9b:d9:ee:47:a4:80:4a: 37:49:cc:7a:a3:80:9b:2e:9c:a2:c0:3f:6c:de:55:8c:f9:9e: e5:bc:0c:e1:7c:c4:10:f3:41:9d:d7:59:49:85:1e:bc:f1:c4: 2c:95:9f:6c:a7:c7:7b:4d:c2:08:e7:64:da:4b:49:88:47:fe: ce:ac:22:61:da:eb:9e:41:94:0e:96:26:b9:32:8e:b9:6f:fd: 34:e0:f0:15:b5:a6:e0:d4:77:64:39:0d:ca:5b:dd:ac:23:f7: a0:ad:5a:8f:e7:f0:76:76:89:54:1c:5b:60:65:43:fa:03:ec: cf:15:1e:98:d0:dc:1b:f6:6a:5d:0d:e0:b7:43:66:1f:37:16: a1:5e:06:b0:a5:ec:51:ea:30:61:85:fa:75:2a:b4:d4:35:80: 24:4b:65:ff:13:56:b1:64:5b:95:f0:d4:2b:62:66:ab:5a:89: 16:20:71:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIgXe2AnFpI6Pgivq+dTTE2OhJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjExMTUwMzUzNTlaFw0yNjExMTYwNzIzNTlaMDMxMTAvBgNV BAMTKDVFQUY4OTM0MEMyQTE5Q0RGNDA5NTI1OTYzRjZCOTQxRTRERkM2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWbWvCKuraKjenQ/Vrl9eB2/XU wA7t/LGMU5GDr3QIB/BOjzB2M39LlgkAs8wQTSVLZPKTW8iwLMjqus7NWtXRcLs9 46PrMPGuZzqlj51uJQuTTuL44+CxAEub7SUQP6l+dtA+7qhy6XK9ckeEK0LJBxzy 7S3Q7GOHNI7T/W69HQSL0gUqq3VXduwnrkJ5I40LnXLWay6Rxs3mOHKOXCHFtvGN M/ZHQq2hz+UN8LO9eIxb8z0O/Ngnx9VmCRFOgM9Bzfd3ca/Ggl6elG1JO5fTHHxX ZmK81JCHfRiUHhkNyj6qzNyXoABotJtXghUYrj+ZbfvCZNjM7rFbz4Zn2P2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXq+JNAwqGc30CVJZY/a5QeTfxkUwHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACALjpmyo1+IpMYHShPcE5ZXm6GHt0bUR6I7 Avc4Zf+8PJRKMAknVOr9Tb3D7+0QMsLmB3ALdrMBejt9HbfZRJ3iX/ArYsc4S6y8 Z7DyJCrkB/4Rm9nuR6SASjdJzHqjgJsunKLAP2zeVYz5nuW8DOF8xBDzQZ3XWUmF HrzxxCyVn2ynx3tNwgjnZNpLSYhH/s6sImHa655BlA6WJrkyjrlv/TTg8BW1puDU d2Q5Dcpb3awj96CtWo/n8HZ2iVQcW2BlQ/oD7M8VHpjQ3Bv2al0N4LdDZh83FqFe BrCl7FHqMGGF+nUqtNQ1gCRLZf8TVrFkW5Xw1CtiZqtaiRYgcc0= -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:27 2026 by rpki-client