$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: cEUFYvSZix4BDbGQQ6wawNWc+znb7g77nf33Qtb2/9E= Subject key identifier: 4F:1A:5B:3C:84:3F:4B:C6:4F:0A:A2:73:ED:D6:D5:CB:4D:16:BC:61 Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 013D2E6AEE9300A115203EA9F939E30E5BD95AC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 11:23:13 +0000 Manifest this update: Sun 15 Nov 2026 11:18:13 +0000 Manifest next update: Mon 16 Nov 2026 13:30:13 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: Bar7w4WnHf9UygcbIINdzvDwSM9EbPoPF0V91c7oBGQ=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3d:2e:6a:ee:93:00:a1:15:20:3e:a9:f9:39:e3:0e:5b:d9:5a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Nov 15 11:18:13 2026 GMT Not After : Nov 16 13:30:13 2026 GMT Subject: CN=4F1A5B3C843F4BC64F0AA273EDD6D5CB4D16BC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:bf:48:84:74:84:33:33:de:68:bb:34:be: 0d:57:75:9e:7e:b6:42:a4:42:79:72:ef:39:13:2a: 63:d4:d2:eb:25:df:47:96:fd:b2:70:74:42:fa:a0: 02:56:57:f7:e3:67:8d:a6:d0:11:fb:ee:36:82:ea: 84:95:26:95:90:dc:d1:78:ee:5b:6a:8e:6e:8d:a3: db:41:8e:98:1c:08:a7:5e:8d:f3:26:53:e5:00:c0: 33:ec:ce:41:13:ff:d2:78:0d:58:03:4c:df:36:24: 48:98:4d:2a:58:fc:1e:b8:2d:5a:cf:d7:99:ae:a7: 02:0f:b9:8b:1f:e0:e3:13:21:9a:61:96:07:be:86: 19:c9:be:f4:ae:c4:8d:d9:bf:82:c4:fc:63:01:f9: 4b:f0:c7:46:16:fe:8f:a3:f8:99:10:8d:b1:cd:8d: fd:2f:5d:7d:24:15:ba:36:a6:d8:f4:1b:0e:5d:50: be:d4:62:35:55:34:88:e4:c4:02:c5:41:c3:8d:d3: 58:b1:e2:c8:e7:9a:a9:44:b6:15:f3:b9:e2:d8:81: 23:51:e3:af:52:51:cc:3c:fa:61:b9:e0:0e:cc:f4: 99:47:c0:a4:4b:32:18:ed:5d:e2:f3:24:1c:55:b9: 97:4c:19:b2:a9:a3:77:b2:f2:0e:97:98:7d:04:b4: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:5B:3C:84:3F:4B:C6:4F:0A:A2:73:ED:D6:D5:CB:4D:16:BC:61 X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:03:b3:ce:53:84:53:ab:1d:37:1e:50:92:b3:6a:9e:fd:ac: 24:17:88:03:2b:cf:a3:1d:c3:2c:49:46:c2:87:96:51:36:a0: 4b:d3:97:7b:65:38:6f:de:68:20:17:5e:78:20:f4:74:54:57: 49:70:7c:a4:3a:04:9f:b3:69:32:bd:97:25:77:5d:cc:80:22: 78:9c:b1:79:e8:44:3a:bf:cf:a6:28:b8:00:25:c0:46:ed:a8: 20:02:5a:b7:4a:17:a7:47:92:75:e2:58:d4:27:89:31:f0:10: 35:af:4b:71:c3:a6:e5:bf:99:29:bb:d6:db:4f:c9:ed:ec:08: 53:19:e7:8c:a2:fd:25:ce:c1:85:db:91:fe:22:e8:c9:e2:f2: 79:e3:8e:dc:a8:da:75:2e:64:8d:b1:ae:8d:35:95:d6:0a:00: 2e:d7:ee:3c:02:5a:1b:5c:fc:b7:fc:08:94:35:60:3d:b3:74: a8:90:04:04:33:a6:4f:7b:2d:d6:e1:2f:0a:ef:08:c9:08:0e: 3b:3f:3c:02:da:30:17:ce:bf:8a:03:8f:82:c0:6a:21:8b:71: 33:3e:c8:1d:b6:02:c9:f7:e2:96:14:5e:14:6b:27:62:ae:27: 6f:9b:49:2d:be:29:ea:81:c3:23:39:92:1c:c4:62:e0:48:59: f2:1a:55:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAT0uau6TAKEVID6p+TnjDlvZWsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjExMTUxMTE4MTNaFw0yNjExMTYxMzMwMTNaMDMxMTAvBgNV BAMTKDRGMUE1QjNDODQzRjRCQzY0RjBBQTI3M0VERDZENUNCNEQxNkJDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Tb9IhHSEMzPeaLs0vg1XdZ5+ tkKkQnly7zkTKmPU0usl30eW/bJwdEL6oAJWV/fjZ42m0BH77jaC6oSVJpWQ3NF4 7ltqjm6No9tBjpgcCKdejfMmU+UAwDPszkET/9J4DVgDTN82JEiYTSpY/B64LVrP 15mupwIPuYsf4OMTIZphlge+hhnJvvSuxI3Zv4LE/GMB+Uvwx0YW/o+j+JkQjbHN jf0vXX0kFbo2ptj0Gw5dUL7UYjVVNIjkxALFQcON01ix4sjnmqlEthXzueLYgSNR 469SUcw8+mG54A7M9JlHwKRLMhjtXeLzJBxVuZdMGbKpo3ey8g6XmH0EtOFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxpbPIQ/S8ZPCqJz7dbVy00WvGEwHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsDs85ThFOrHTceUJKzap79rCQXiAMrz6Md wyxJRsKHllE2oEvTl3tlOG/eaCAXXngg9HRUV0lwfKQ6BJ+zaTK9lyV3XcyAInic sXnoRDq/z6YouAAlwEbtqCACWrdKF6dHknXiWNQniTHwEDWvS3HDpuW/mSm71ttP ye3sCFMZ54yi/SXOwYXbkf4i6Mni8nnjjtyo2nUuZI2xro01ldYKAC7X7jwCWhtc /Lf8CJQ1YD2zdKiQBAQzpk97LdbhLwrvCMkIDjs/PALaMBfOv4oDj4LAaiGLcTM+ yB22Asn34pYUXhRrJ2KuJ2+bSS2+KeqBwyM5khzEYuBIWfIaVSE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:00 2026 by rpki-client