$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft File: B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json) Hash identifier: PFUFgPFSjwQhEgIE125MlUn8b4Qp6vhawNBLiWg7WVM= Subject key identifier: 72:4B:A5:92:A5:A3:2F:6D:D1:4B:A4:83:76:2A:AD:E8:23:5A:A2:7D Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 Certificate issuer: /CN=B677F5476721449C1CB3D8F67673665A0A038595 Certificate serial: 0DC6077362DE729A8DF9A9F27AFB928C667C9068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 17:51:17 +0000 Manifest this update: Sun 15 Nov 2026 17:46:17 +0000 Manifest next update: Mon 16 Nov 2026 20:07:17 +0000 Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=) 2: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: 7eOGCxMdV8jXYmhk8ley+tSOM7wFeCorOBxnZnG0OaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c6:07:73:62:de:72:9a:8d:f9:a9:f2:7a:fb:92:8c:66:7c:90:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595 Validity Not Before: Nov 15 17:46:17 2026 GMT Not After : Nov 16 20:07:17 2026 GMT Subject: CN=724BA592A5A32F6DD14BA483762AADE8235AA27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ce:6d:b9:ef:e1:ae:bf:7a:4c:ff:95:98:ac: c3:a5:6c:34:59:29:77:79:ef:f4:6f:40:9d:46:fe: e3:e2:bf:85:f7:ba:37:16:aa:88:5b:8f:52:4c:e6: 5f:16:2d:0b:2a:ef:57:87:71:05:ee:95:16:bb:5d: 45:8d:06:5c:29:dd:14:3e:46:c1:be:0b:5b:c5:17: 54:6f:ab:43:36:1c:7e:3d:67:a7:89:cf:dd:cc:14: 21:3f:c1:61:9d:4c:88:6f:68:73:4b:48:f0:c0:ef: 42:5f:1b:d0:e0:68:90:10:5d:69:c2:0d:e8:00:e4: a4:e0:26:e6:f5:7c:c4:b9:c6:a0:cf:8b:fd:00:04: 5c:68:14:b5:24:8b:44:13:4b:a2:ab:e4:89:19:78: 6c:8e:3a:17:ac:60:a2:7a:85:b1:ca:e3:95:11:2d: f1:5b:a7:8a:b9:2e:24:65:d1:35:b7:09:51:f7:a8: 7a:f1:cb:45:58:fb:9a:5d:2e:e5:db:e6:6d:15:6b: 60:51:81:1f:47:5a:9e:bc:29:32:2a:45:78:b2:98: ab:46:46:59:3a:08:37:c5:25:b5:b3:50:7d:28:d8: 4f:c1:d7:94:bc:fb:84:a2:e1:00:f2:3e:69:8a:76: 6d:78:96:6b:89:01:a9:a5:a0:74:d4:e3:c1:3a:64: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:A5:92:A5:A3:2F:6D:D1:4B:A4:83:76:2A:AD:E8:23:5A:A2:7D X509v3 Authority Key Identifier: keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6b:2b:54:98:ce:e4:71:87:26:2f:ce:81:7f:03:ba:36:84: 2f:18:e2:fd:59:d0:54:dd:6f:62:7c:cc:78:3b:6e:1b:bf:96: b6:03:72:f0:de:51:a1:e8:9f:7d:22:76:25:16:43:83:a6:ac: 7e:32:21:bb:c0:ad:24:39:2a:7b:1f:36:9c:13:ce:ea:da:41: 70:f5:48:b3:d1:53:4d:c0:63:35:8f:e1:0b:06:0d:4a:3e:9f: cb:7a:ca:70:b2:4c:46:b7:77:1b:ac:66:43:28:ef:ae:c5:52: 5a:41:75:97:d0:63:26:ba:30:f1:38:4b:da:7d:0c:f6:d2:82: 54:03:2c:da:60:99:3f:a0:2f:f8:8a:6f:1c:79:85:e9:2c:fe: da:18:9c:5c:9f:ae:e8:53:45:0d:4f:a4:3f:08:1c:52:37:74: 51:48:c4:de:8e:85:d0:c4:8b:a8:8e:b1:e0:fe:ee:79:3b:88: 60:dc:88:f7:3e:f5:c0:d9:63:46:03:72:06:37:88:86:97:db: 80:43:f9:a1:2d:5d:31:6b:75:45:b3:1c:c9:6f:13:dd:8e:23: 45:ea:46:f6:25:52:5f:d2:4f:ee:b0:5d:51:5f:e3:ee:a5:97: 78:90:71:ec:f7:78:6d:40:d6:87:bb:5f:be:f6:6a:8a:8c:8b: 2f:97:8a:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcYHc2LecpqN+anyevuSjGZ8kGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEw QTAzODU5NTAeFw0yNjExMTUxNzQ2MTdaFw0yNjExMTYyMDA3MTdaMDMxMTAvBgNV BAMTKDcyNEJBNTkyQTVBMzJGNkREMTRCQTQ4Mzc2MkFBREU4MjM1QUEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzm257+Guv3pM/5WYrMOlbDRZ KXd57/RvQJ1G/uPiv4X3ujcWqohbj1JM5l8WLQsq71eHcQXulRa7XUWNBlwp3RQ+ RsG+C1vFF1Rvq0M2HH49Z6eJz93MFCE/wWGdTIhvaHNLSPDA70JfG9DgaJAQXWnC DegA5KTgJub1fMS5xqDPi/0ABFxoFLUki0QTS6Kr5IkZeGyOOhesYKJ6hbHK45UR LfFbp4q5LiRl0TW3CVH3qHrxy0VY+5pdLuXb5m0Va2BRgR9HWp68KTIqRXiymKtG Rlk6CDfFJbWzUH0o2E/B15S8+4Si4QDyPmmKdm14lmuJAamloHTU48E6ZGN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckulkqWjL23RS6SDdiqt6CNaon0wHwYDVR0j BBgwFoAUtnf1R2chRJwcs9j2dnNmWgoDhZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlNmNkNDEtMmU0Yy00Y2MyLTg4MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2 NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEwQTAzODU5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjc3RjU0NzY3MjE0NDlDMUNCM0Q4RjY3NjczNjY1QTBBMDM4 NTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2 NUEwQTAzODU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9rK1SYzuRxhyYvzoF/A7o2hC8Y4v1Z0FTd b2J8zHg7bhu/lrYDcvDeUaHon30idiUWQ4OmrH4yIbvArSQ5KnsfNpwTzuraQXD1 SLPRU03AYzWP4QsGDUo+n8t6ynCyTEa3dxusZkMo767FUlpBdZfQYya6MPE4S9p9 DPbSglQDLNpgmT+gL/iKbxx5heks/toYnFyfruhTRQ1PpD8IHFI3dFFIxN6OhdDE i6iOseD+7nk7iGDciPc+9cDZY0YDcgY3iIaX24BD+aEtXTFrdUWzHMlvE92OI0Xq RvYlUl/ST+6wXVFf4+6ll3iQcez3eG1A1oe7X772aoqMiy+Xilw= -----END CERTIFICATE-----Generated at Sun Nov 15 22:27:13 2026 by rpki-client