$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft File: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft (raw, json) Hash identifier: LOdAXrko8pFWzinT31tPtRPCAZO5es04M1rzQPmxoKw= Subject key identifier: B6:36:11:5C:78:36:57:90:EC:82:4F:52:53:B9:84:43:AE:CC:CD:F8 Authority key identifier: DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC Certificate issuer: /CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Certificate serial: 312D17D2503BB47080F0B6E4A8BACE988B09F9B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:39:52 +0000 Manifest this update: Sun 15 Nov 2026 04:34:52 +0000 Manifest next update: Mon 16 Nov 2026 07:58:52 +0000 Files and hashes: 1: DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl (hash: XLbzOHYFchD6szhuOjxQMo/Kcj97RshH3xFRTDwZ5e4=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: a0hNIi6O+sVqt42fhC5LTpjPNLA3CmOlEpxa01bnEUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2d:17:d2:50:3b:b4:70:80:f0:b6:e4:a8:ba:ce:98:8b:09:f9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC846A241571E1FCF5DF539ADEE44F9B16848AC Validity Not Before: Nov 15 04:34:52 2026 GMT Not After : Nov 16 07:58:52 2026 GMT Subject: CN=B636115C78365790EC824F5253B98443AECCCDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:8d:78:39:d7:ba:77:15:0d:c2:81:73:2f: 3d:4e:e8:a0:f0:c6:63:f4:51:06:98:9b:d2:85:c8: 73:65:0f:2d:6e:38:18:7c:b5:dd:4a:9a:03:96:90: 1f:13:1c:2f:06:8e:98:14:86:76:3c:85:5a:f9:40: 57:62:e8:34:e3:c1:75:50:2b:5d:86:bc:cd:e9:83: 30:5e:61:02:eb:56:d5:ee:e4:57:47:0c:76:51:ed: 8f:1b:ee:09:30:ae:33:a3:4c:49:a5:12:93:e4:46: b3:bd:0a:44:5e:bd:87:b9:72:c7:de:8f:40:2a:e4: 3f:e2:6a:04:07:f2:f2:0f:29:94:db:01:57:61:69: 9d:a9:f2:46:f1:56:3d:a2:a4:6a:05:a9:8e:df:de: 59:d9:fa:f2:26:53:54:c0:3a:0a:65:95:0d:f1:ec: 01:3d:ca:b6:04:f7:76:a6:f9:86:b2:89:aa:f8:79: e7:35:ed:a7:9e:60:9f:5e:a6:82:1a:cb:d9:f2:34: d0:38:05:60:11:9d:32:da:d7:e5:ed:57:89:5e:ce: e6:38:4c:b4:68:ed:f0:2e:94:77:ee:69:2f:04:25: bc:ae:55:1a:b4:1c:fc:c3:f6:03:1d:28:8b:ab:5f: 53:c8:75:fe:95:18:40:8e:d4:1b:79:f8:cb:ba:59: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:36:11:5C:78:36:57:90:EC:82:4F:52:53:B9:84:43:AE:CC:CD:F8 X509v3 Authority Key Identifier: keyid:DD:C8:46:A2:41:57:1E:1F:CF:5D:F5:39:AD:EE:44:F9:B1:68:48:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/DDC846A241571E1FCF5DF539ADEE44F9B16848AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:16:5e:24:ed:4e:e9:34:5e:83:42:e1:2e:a5:b5:7c:24:ee: 10:60:13:2c:43:9b:60:fd:d0:e1:3b:e9:2e:34:f0:15:c5:25: 68:c6:09:24:d5:50:c3:9a:4e:16:0f:4e:f9:f2:11:75:fc:de: 44:ff:1d:b4:ac:55:07:5e:fc:c9:2a:91:8c:11:ac:45:f6:bd: 42:60:41:9d:78:b8:f0:26:65:f6:2a:2f:2d:ea:01:1c:9f:a6: 58:76:99:f9:7e:96:3d:02:e2:41:4a:17:2c:26:1e:1b:74:d7: a8:be:1f:16:58:30:13:0b:f3:4c:3d:db:52:5a:7c:c8:db:52: c3:77:ea:5f:44:b0:0d:e5:73:e0:ed:23:d1:dd:c6:c1:d4:0f: 6e:e2:b9:84:27:58:85:03:d9:ce:a9:ba:95:75:af:45:c4:1f: 36:6c:dc:d4:1b:2f:41:87:46:ec:62:68:9d:8e:7f:62:10:a6: 85:ce:ca:25:e3:c5:a9:c8:66:d8:33:da:8d:0a:5d:7e:cc:3a: 17:bc:d6:e9:80:36:4f:6f:41:0e:dd:4c:3d:38:ae:6c:68:c8: 57:cb:01:f3:6a:89:29:30:2e:44:92:b4:f4:e1:e7:b1:50:d9: 29:ec:49:4a:bc:be:1a:bf:b0:d1:cb:6f:63:b5:6b:dd:e3:6c: 3a:85:ac:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMS0X0lA7tHCA8LbkqLrOmIsJ+bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlC MTY4NDhBQzAeFw0yNjExMTUwNDM0NTJaFw0yNjExMTYwNzU4NTJaMDMxMTAvBgNV BAMTKEI2MzYxMTVDNzgzNjU3OTBFQzgyNEY1MjUzQjk4NDQzQUVDQ0NERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcK414Ode6dxUNwoFzLz1O6KDw xmP0UQaYm9KFyHNlDy1uOBh8td1KmgOWkB8THC8GjpgUhnY8hVr5QFdi6DTjwXVQ K12GvM3pgzBeYQLrVtXu5FdHDHZR7Y8b7gkwrjOjTEmlEpPkRrO9CkRevYe5csfe j0Aq5D/iagQH8vIPKZTbAVdhaZ2p8kbxVj2ipGoFqY7f3lnZ+vImU1TAOgpllQ3x 7AE9yrYE93am+Yayiar4eec17aeeYJ9epoIay9nyNNA4BWARnTLa1+XtV4lezuY4 TLRo7fAulHfuaS8EJbyuVRq0HPzD9gMdKIurX1PIdf6VGECO1Bt5+Mu6WR21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtjYRXHg2V5Dsgk9SU7mEQ67MzfgwHwYDVR0j BBgwFoAU3chGokFXHh/PXfU5re5E+bFoSKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYmRkYmYtZDExOS00YzgwLTg4MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0 MTU3MUUxRkNGNURGNTM5QURFRTQ0RjlCMTY4NDhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EREM4NDZBMjQxNTcxRTFGQ0Y1REY1MzlBREVFNDRGOUIxNjg0 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvRERDODQ2QTI0MTU3MUUxRkNGNURGNTM5QURFRTQ0 RjlCMTY4NDhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoWXiTtTuk0XoNC4S6ltXwk7hBgEyxDm2D9 0OE76S408BXFJWjGCSTVUMOaThYPTvnyEXX83kT/HbSsVQde/MkqkYwRrEX2vUJg QZ14uPAmZfYqLy3qARyfplh2mfl+lj0C4kFKFywmHht016i+HxZYMBML80w921Ja fMjbUsN36l9EsA3lc+DtI9HdxsHUD27iuYQnWIUD2c6pupV1r0XEHzZs3NQbL0GH RuxiaJ2Of2IQpoXOyiXjxanIZtgz2o0KXX7MOhe81umANk9vQQ7dTD04rmxoyFfL AfNqiSkwLkSStPTh57FQ2SnsSUq8vhq/sNHLb2O1a93jbDqFrGo= -----END CERTIFICATE-----Generated at Sun Nov 15 11:55:17 2026 by rpki-client