$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: T+t0awYPlE28lDpNGFJMGScFSVfmvA6aqPL5pckfZ/Y= Subject key identifier: F2:A2:FA:B4:F0:AE:FA:09:7B:9F:3C:09:D9:AB:A1:4C:40:43:25:0D Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 5A891919A259B79E51F10BBABBD243C0A147011B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 05:00:18 +0000 Manifest this update: Sun 15 Nov 2026 04:55:18 +0000 Manifest next update: Mon 16 Nov 2026 05:40:18 +0000 Files and hashes: 1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) 2: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: g8fRTesVkvPkPm0y+n3BrhaOeLYnc1jy1mBzVNZrmqU=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:89:19:19:a2:59:b7:9e:51:f1:0b:ba:bb:d2:43:c0:a1:47:01:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Nov 15 04:55:18 2026 GMT Not After : Nov 16 05:40:18 2026 GMT Subject: CN=F2A2FAB4F0AEFA097B9F3C09D9ABA14C4043250D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:4b:1a:45:a1:65:21:04:2b:01:00:aa:76: 68:9b:33:e7:76:9e:c1:23:10:9e:79:08:44:77:8e: 44:50:20:67:c0:c8:54:23:8d:fa:b8:01:b7:cc:11: 1e:ab:3e:cd:de:b0:4e:7f:e0:89:5f:18:4b:ef:19: a1:d7:85:9d:17:92:7b:02:cd:ce:d0:d0:fe:97:82: 5a:50:44:f2:a3:21:f7:f9:b7:65:67:b0:c1:67:08: b4:bc:d5:e2:c2:8c:36:d0:d9:aa:59:94:43:3b:51: 93:8b:6c:d5:a7:e7:32:56:4d:58:04:ef:72:29:bd: 53:04:96:dd:7f:2d:ce:57:79:c8:b7:2d:f3:d8:31: 0f:7f:6a:bb:fd:a1:b0:80:1f:0c:69:f9:03:7d:73: b2:a7:c1:8d:ee:0f:b8:a4:cf:a5:57:d0:44:45:77: 6c:cd:b3:73:54:aa:76:b4:65:de:53:8d:cb:a6:67: 33:e7:7e:89:ed:5b:ec:8c:48:98:c2:13:11:71:fb: 6e:b6:43:50:16:3e:05:10:02:93:c9:2b:88:50:e5: 54:c7:4e:39:8d:dc:d8:44:18:f4:2a:16:48:87:91: 8f:ea:3f:63:54:6e:b8:2e:e6:78:3c:18:92:55:ac: 92:b7:21:07:8b:31:42:bf:ee:14:93:b3:75:d3:25: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:FA:B4:F0:AE:FA:09:7B:9F:3C:09:D9:AB:A1:4C:40:43:25:0D X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:1b:ef:c1:de:a6:7d:78:bc:6c:36:fa:60:1a:c8:6d:29: 4a:40:49:d5:ae:44:d2:ab:36:86:31:3f:9d:42:bd:24:69:63: a4:4c:1b:e1:5c:2c:b2:b4:4e:72:0d:da:4d:60:7e:f6:87:d7: cb:5e:37:8c:8f:db:e4:59:11:f1:82:62:7d:3d:1b:64:14:d4: 6c:db:37:29:13:70:c8:c0:40:51:c2:ee:77:18:1a:6f:29:5c: 6e:91:2b:96:b8:46:0d:32:f1:03:02:3a:92:2e:0d:3f:52:53: d0:6f:7f:8f:7e:77:6f:a3:31:a6:81:db:1b:47:30:98:c2:9f: 56:2e:1d:ec:b8:b5:53:8d:bd:0a:4e:b9:8c:8e:94:05:07:d6: 0d:fe:0c:eb:a2:b9:5e:45:44:09:87:d5:3a:95:0a:ab:46:11: 05:2d:22:e7:a3:e7:57:f1:c8:aa:1b:9f:e7:a6:00:b7:9c:7e: ac:4e:bf:35:1b:56:17:f3:1d:c4:d2:f8:6f:f2:11:ab:ab:b1: 63:f1:bf:76:6f:f8:2a:50:93:cf:f4:32:a2:51:d4:7b:33:a4: 2d:24:26:dc:72:30:57:71:82:f9:aa:e8:1c:b5:26:6d:2b:16: 29:3f:5a:88:be:b8:de:3f:16:82:c1:78:f1:03:e4:9f:50:d9: 4d:a5:4d:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWokZGaJZt55R8Qu6u9JDwKFHARswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjExMTUwNDU1MThaFw0yNjExMTYwNTQwMThaMDMxMTAvBgNV BAMTKEYyQTJGQUI0RjBBRUZBMDk3QjlGM0MwOUQ5QUJBMTRDNDA0MzI1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPEsaRaFlIQQrAQCqdmibM+d2 nsEjEJ55CER3jkRQIGfAyFQjjfq4AbfMER6rPs3esE5/4IlfGEvvGaHXhZ0XknsC zc7Q0P6XglpQRPKjIff5t2VnsMFnCLS81eLCjDbQ2apZlEM7UZOLbNWn5zJWTVgE 73IpvVMElt1/Lc5Xeci3LfPYMQ9/arv9obCAHwxp+QN9c7KnwY3uD7ikz6VX0ERF d2zNs3NUqna0Zd5TjcumZzPnfontW+yMSJjCExFx+262Q1AWPgUQApPJK4hQ5VTH TjmN3NhEGPQqFkiHkY/qP2NUbrgu5ng8GJJVrJK3IQeLMUK/7hSTs3XTJW1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qL6tPCu+gl7nzwJ2auhTEBDJQ0wHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUXG+/B3qZ9eLxsNvpgGshtKUpASdWuRNKr NoYxP51CvSRpY6RMG+FcLLK0TnIN2k1gfvaH18teN4yP2+RZEfGCYn09G2QU1Gzb NykTcMjAQFHC7ncYGm8pXG6RK5a4Rg0y8QMCOpIuDT9SU9Bvf49+d2+jMaaB2xtH MJjCn1YuHey4tVONvQpOuYyOlAUH1g3+DOuiuV5FRAmH1TqVCqtGEQUtIuej51fx yKobn+emALecfqxOvzUbVhfzHcTS+G/yEaursWPxv3Zv+CpQk8/0MqJR1HszpC0k JtxyMFdxgvmq6By1Jm0rFik/Woi+uN4/FoLBePED5J9Q2U2lTV8= -----END CERTIFICATE-----Generated at Sun Nov 15 15:21:20 2026 by rpki-client