$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: DoOfXpnDgkwmdJQm7WDJI/0BQEpYGDtSb1Q0QsEom6Q= Subject key identifier: FC:AA:E8:C4:CF:5D:AC:E9:49:CA:24:18:0D:97:6F:9E:FD:40:8D:AF Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 2C5B693497C4643F31BD6C792467069C9ED8989E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 20:14:52 +0000 Manifest this update: Sat 14 Nov 2026 20:09:52 +0000 Manifest next update: Sun 15 Nov 2026 23:48:52 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 3: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 4: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: yj4UqZyHJUOBau3eAvUEcgKl9oHQk0Uk3TonB87JYxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5b:69:34:97:c4:64:3f:31:bd:6c:79:24:67:06:9c:9e:d8:98:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Nov 14 20:09:52 2026 GMT Not After : Nov 15 23:48:52 2026 GMT Subject: CN=FCAAE8C4CF5DACE949CA24180D976F9EFD408DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:27:e4:1b:af:40:28:24:5d:ba:9c:93:23: 89:98:17:b5:62:81:db:f9:1a:e7:ad:72:9b:16:4a: d4:98:ce:19:a1:83:2a:5e:a8:d9:03:9c:a9:1f:de: 8b:9a:50:cb:4d:47:d8:a2:c2:f6:88:01:61:25:7b: 14:eb:13:f5:6b:17:4a:62:03:d4:48:7d:99:a3:b0: 36:f8:2f:2c:77:9c:96:c2:27:d7:81:81:0a:d7:80: 7d:af:71:5b:43:04:d3:b3:43:52:22:e8:cb:20:4e: 9c:3e:f0:bd:ee:e4:3f:b4:75:43:42:0e:55:d2:7e: 80:f8:45:b5:a6:cc:1f:c8:06:9e:33:46:24:f8:f7: 11:1c:ca:07:0a:e3:83:8f:82:ff:e9:8e:f7:5f:89: 54:1a:a3:9c:ca:81:7f:5b:36:03:26:f4:aa:91:07: 3b:7d:25:3b:ca:8d:5a:d1:a7:2a:15:46:96:a4:5b: 24:9c:c1:fc:e8:96:8d:43:74:83:36:75:c5:04:fc: 63:c8:4c:ab:16:db:5e:0a:4a:09:cb:58:61:17:32: 56:f9:1c:5b:1d:1d:55:78:f0:b8:0f:9c:d8:b5:8a: 98:a4:3b:8a:52:7b:4e:90:8f:09:0c:1a:db:88:24: ac:d7:99:fb:b5:a2:88:5c:4d:84:0f:d4:8c:e1:e9: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:E8:C4:CF:5D:AC:E9:49:CA:24:18:0D:97:6F:9E:FD:40:8D:AF X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b5:20:3c:0c:0d:df:db:c4:69:48:81:02:ae:c6:3f:30:75: 80:f8:fc:41:0e:01:db:c2:5f:76:2d:08:19:24:3a:3b:63:02: f8:8a:9c:5a:3b:d3:7e:a2:a1:5a:12:7d:9d:ef:e1:6f:e4:13: c7:8a:76:82:c2:e4:39:5a:88:a4:ec:23:99:cc:fc:aa:7b:1d: c6:7c:ce:b8:04:a3:14:8f:e0:19:3d:59:15:de:d5:79:60:b0: ac:26:5a:6d:a7:b7:88:f7:67:7d:75:0b:d8:f5:0b:e2:9f:eb: e2:c5:02:74:e2:ca:e9:a5:b3:bd:b0:6f:ec:f5:4a:31:32:43: dd:6c:8b:a9:8a:f6:39:2c:b9:28:f2:22:e3:2d:9c:29:a6:14: 15:0e:ea:9a:b2:3d:d2:3a:da:d2:b2:93:42:b1:b4:a2:14:fd: 93:8d:ae:32:35:5c:4d:e4:d9:db:19:cc:1b:4d:83:9e:4c:ea: 88:c3:0c:e2:67:be:25:14:ba:14:a5:5c:68:3c:4c:19:5b:3f: be:29:c8:9d:82:f7:3a:90:6c:ad:d4:80:a6:48:d7:c8:79:7a: 8e:fe:d8:30:35:1b:a4:af:e9:6a:25:f5:1f:6e:22:87:06:af: 13:49:f4:8c:83:3e:57:8c:f4:35:c8:22:0c:0a:22:3b:d9:47: de:7c:6f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFtpNJfEZD8xvWx5JGcGnJ7YmJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjExMTQyMDA5NTJaFw0yNjExMTUyMzQ4NTJaMDMxMTAvBgNV BAMTKEZDQUFFOEM0Q0Y1REFDRTk0OUNBMjQxODBEOTc2RjlFRkQ0MDhEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pSfkG69AKCRdupyTI4mYF7Vi gdv5GuetcpsWStSYzhmhgypeqNkDnKkf3ouaUMtNR9iiwvaIAWElexTrE/VrF0pi A9RIfZmjsDb4Lyx3nJbCJ9eBgQrXgH2vcVtDBNOzQ1Ii6MsgTpw+8L3u5D+0dUNC DlXSfoD4RbWmzB/IBp4zRiT49xEcygcK44OPgv/pjvdfiVQao5zKgX9bNgMm9KqR Bzt9JTvKjVrRpyoVRpakWyScwfzolo1DdIM2dcUE/GPITKsW214KSgnLWGEXMlb5 HFsdHVV48LgPnNi1ipikO4pSe06QjwkMGtuIJKzXmfu1oohcTYQP1Izh6V77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/KroxM9drOlJyiQYDZdvnv1Aja8wHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC1IDwMDd/bxGlIgQKuxj8wdYD4/EEOAdvC X3YtCBkkOjtjAviKnFo7036ioVoSfZ3v4W/kE8eKdoLC5DlaiKTsI5nM/Kp7HcZ8 zrgEoxSP4Bk9WRXe1XlgsKwmWm2nt4j3Z311C9j1C+Kf6+LFAnTiyumls72wb+z1 SjEyQ91si6mK9jksuSjyIuMtnCmmFBUO6pqyPdI62tKyk0KxtKIU/ZONrjI1XE3k 2dsZzBtNg55M6ojDDOJnviUUuhSlXGg8TBlbP74pyJ2C9zqQbK3UgKZI18h5eo7+ 2DA1G6Sv6Wol9R9uIocGrxNJ9IyDPleM9DXIIgwKIjvZR958b6Y= -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:53 2026 by rpki-client