$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: O27ceI+A6QrNmnUZQsze752/4zET/veEH7XZmSnHKJU= Subject key identifier: 86:07:0E:9C:93:25:70:90:17:5E:54:77:62:C5:1A:46:15:FF:EF:71 Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 4F5FF0415660645B8E8F1C06D5FD9D4CB0538953 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 05:53:13 +0000 Manifest this update: Tue 10 Nov 2026 05:48:13 +0000 Manifest next update: Wed 11 Nov 2026 07:21:13 +0000 Files and hashes: 1: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 2: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: cciRw2W/MZThA9Y4vx58uFTHRnmjTyaH2HyOsMJSH08=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 4: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5f:f0:41:56:60:64:5b:8e:8f:1c:06:d5:fd:9d:4c:b0:53:89:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Nov 10 05:48:13 2026 GMT Not After : Nov 11 07:21:13 2026 GMT Subject: CN=86070E9C93257090175E547762C51A4615FFEF71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:38:16:6e:0b:b0:de:d7:1d:9b:4c:a7:25: 5f:98:85:be:93:6a:fc:a4:b1:2e:1b:b0:4a:d8:84: eb:3c:5e:38:2d:d4:73:00:dc:a7:2c:de:46:f2:22: 29:9b:d1:a1:f2:84:c4:32:88:31:ea:e2:a2:88:68: 06:81:6c:81:b5:68:50:1b:72:4a:5b:f1:26:f6:1a: 6d:a2:f7:22:34:61:d9:cc:e0:14:a2:d5:8c:72:71: eb:c6:ff:d8:47:01:59:07:9d:83:75:29:a4:88:17: 02:94:14:b1:99:c1:89:05:80:bd:59:15:a2:77:23: 30:6d:a5:13:a1:2b:3c:4f:9d:0b:7c:8f:31:26:e0: c4:78:37:72:df:be:79:dc:2f:a1:da:17:c2:1a:8a: 60:6c:d0:76:91:91:4f:ad:5b:4b:e4:d2:4a:c3:bd: 9f:41:40:f3:5b:b2:f1:e5:d9:c7:80:94:70:2a:ed: dd:4b:10:71:79:dd:85:b3:23:cc:dd:5e:68:c1:fd: 9a:fd:ee:09:49:20:59:97:51:d4:ea:8d:8c:55:6a: f3:55:17:8e:2b:10:c0:ef:ce:57:88:9a:0b:ca:c0: b1:19:52:eb:2e:3d:8c:36:54:e2:9b:f4:09:0a:9e: af:73:2b:fa:3e:8d:40:50:2b:4a:fe:4e:ab:40:9a: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:0E:9C:93:25:70:90:17:5E:54:77:62:C5:1A:46:15:FF:EF:71 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:85:70:97:bf:69:5b:e7:ff:2b:47:9a:a5:bc:f8:a6:14:6b: 4f:cf:49:46:00:ca:c9:46:79:b4:05:ef:91:62:4b:58:16:77: d1:89:42:bc:38:1e:7a:b7:65:ad:a0:08:b7:db:d7:ae:45:68: 5f:24:1a:0d:83:ac:3e:5d:be:30:78:45:4a:f7:79:e5:cd:5e: 38:bb:d7:0e:48:a7:c4:f1:3e:9a:70:68:76:a7:a9:db:a3:40: 77:65:a5:6e:35:fb:45:b8:2f:f0:c6:21:83:8b:fd:ac:a6:04: 0a:5a:0a:db:c1:79:6c:5f:3f:52:2a:e8:01:00:95:6c:4b:54: f9:0d:dd:c5:09:11:eb:2b:6d:7e:1d:2f:6d:a8:c4:9f:2d:7a: 13:07:99:5c:fc:a8:fa:68:a0:fb:14:7b:5e:a6:66:f5:cc:81: a0:de:94:ce:10:1c:a0:fd:62:4a:e3:65:5c:3c:7b:dd:44:69: f1:76:42:62:ef:f8:9b:df:a8:96:8b:e0:3c:dc:59:3b:f2:ad: 8c:cb:e3:8d:58:e5:5c:f5:5c:e4:19:73:df:67:24:28:60:f2: dd:35:94:2f:3f:72:d7:db:e3:8b:5d:a3:32:6f:93:7c:da:9c: 66:7a:e2:fe:5d:44:29:c1:d0:df:7c:99:20:e4:ea:59:d8:8e: 38:c2:2d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1/wQVZgZFuOjxwG1f2dTLBTiVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjExMTAwNTQ4MTNaFw0yNjExMTEwNzIxMTNaMDMxMTAvBgNV BAMTKDg2MDcwRTlDOTMyNTcwOTAxNzVFNTQ3NzYyQzUxQTQ2MTVGRkVGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxDgWbguw3tcdm0ynJV+Yhb6T avyksS4bsErYhOs8Xjgt1HMA3Kcs3kbyIimb0aHyhMQyiDHq4qKIaAaBbIG1aFAb ckpb8Sb2Gm2i9yI0YdnM4BSi1YxycevG/9hHAVkHnYN1KaSIFwKUFLGZwYkFgL1Z FaJ3IzBtpROhKzxPnQt8jzEm4MR4N3LfvnncL6HaF8IaimBs0HaRkU+tW0vk0krD vZ9BQPNbsvHl2ceAlHAq7d1LEHF53YWzI8zdXmjB/Zr97glJIFmXUdTqjYxVavNV F44rEMDvzleImgvKwLEZUusuPYw2VOKb9AkKnq9zK/o+jUBQK0r+TqtAmuT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgcOnJMlcJAXXlR3YsUaRhX/73EwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSFcJe/aVvn/ytHmqW8+KYUa0/PSUYAyslG ebQF75FiS1gWd9GJQrw4Hnq3Za2gCLfb165FaF8kGg2DrD5dvjB4RUr3eeXNXji7 1w5Ip8TxPppwaHanqdujQHdlpW41+0W4L/DGIYOL/aymBApaCtvBeWxfP1Iq6AEA lWxLVPkN3cUJEesrbX4dL22oxJ8tehMHmVz8qPpooPsUe16mZvXMgaDelM4QHKD9 YkrjZVw8e91EafF2QmLv+JvfqJaL4DzcWTvyrYzL441Y5Vz1XOQZc99nJChg8t01 lC8/ctfb44tdozJvk3zanGZ64v5dRCnB0N98mSDk6lnYjjjCLcY= -----END CERTIFICATE-----Generated at Tue Nov 10 19:58:13 2026 by rpki-client