$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: vswzMuuueXwusAZ/eRCzqur3pJFD7F5s0pN13UT+O/c= Subject key identifier: 02:04:41:45:DE:3B:CF:BC:19:64:72:B5:CE:71:55:7C:DB:45:59:4F Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 09BDD2C6CB75E442A0175A2CA65D7717B9AD5C97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 08:50:11 +0000 Manifest this update: Sun 15 Nov 2026 08:45:11 +0000 Manifest next update: Mon 16 Nov 2026 09:00:11 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: pguBIcbaFDv+UuAlYbSIMa0mQ74OUztdhyaNA+sHGqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bd:d2:c6:cb:75:e4:42:a0:17:5a:2c:a6:5d:77:17:b9:ad:5c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Nov 15 08:45:11 2026 GMT Not After : Nov 16 09:00:11 2026 GMT Subject: CN=02044145DE3BCFBC196472B5CE71557CDB45594F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:c0:b7:02:16:ac:41:8a:a7:91:69:f5:54: 1b:3d:db:6c:9a:a5:8b:cd:a7:14:57:8c:2e:51:f3: 7b:fc:40:cf:62:ed:68:32:ec:33:80:7b:46:54:ba: 28:06:2b:7c:28:04:a2:9f:e6:bf:45:54:94:15:d5: 33:65:df:45:f5:d5:ab:4f:0a:cb:d9:50:20:43:f5: ca:76:b8:b2:a6:56:8b:40:2e:56:ad:70:c0:0c:23: 44:e7:30:a3:69:5e:2a:64:2b:b1:e6:b6:7b:78:7a: b0:01:65:9b:82:7a:80:ae:99:8c:24:64:e8:d9:e3: f6:ae:02:de:a1:1a:8d:81:91:ef:20:dc:b2:dd:6d: 2a:e8:16:61:90:1f:6c:fb:54:f1:c5:f2:51:06:66: 99:bd:93:3e:00:a0:2d:42:7b:39:64:0b:57:68:77: b9:9e:f3:c9:44:a0:8a:22:65:20:0d:70:37:86:24: 25:ff:36:11:97:e9:a9:18:03:a2:5e:7d:6d:8d:e8: e5:0c:1f:b5:fb:9b:5c:ae:b8:06:ea:48:ba:b6:7d: bd:74:7b:f7:b1:e6:cb:1b:65:c3:a9:d5:a1:27:a0: 5c:fc:e3:0d:c9:1b:b0:dd:9b:3a:38:8a:6a:ac:4f: fb:6b:32:98:97:d1:a4:59:c4:c1:11:51:14:10:d0: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:41:45:DE:3B:CF:BC:19:64:72:B5:CE:71:55:7C:DB:45:59:4F X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:28:89:9e:00:fa:15:e2:5d:01:a5:33:be:0f:f6:15:35:b1: 9b:c9:cc:ed:db:ef:6a:88:5d:b3:34:9a:b4:4f:d1:ce:bb:0f: b9:19:9d:e3:bd:39:bc:6e:cf:59:3d:18:51:32:31:b1:2c:8f: 8f:74:27:f2:6c:12:85:e3:9c:5e:dd:f8:18:c1:2a:0c:9c:c4: d0:3b:43:6b:d7:aa:8f:6b:64:4a:8d:dc:b5:54:f2:95:fa:39: 73:4c:eb:f0:41:82:49:e8:02:e8:a7:a6:36:50:70:b4:b4:ac: 83:78:33:37:e9:4c:52:f4:37:0d:5d:74:c1:d6:40:70:0a:0c: 20:4e:5f:29:8d:f4:78:5a:24:aa:d1:f2:59:30:71:3f:9a:8e: 98:10:a2:72:3f:bf:c6:5e:1f:90:3a:9e:58:d4:da:10:c7:59: 4a:4b:41:e8:a9:c8:95:05:b8:ee:cf:ff:53:56:6c:3b:5b:d6: 33:f7:b0:76:ef:27:16:a7:0c:4a:9d:0d:30:67:ae:d8:d0:ac: e6:0f:e2:c5:0f:3c:01:07:95:a6:23:fd:fe:3a:41:10:ac:93: 5b:5c:94:06:2b:d6:31:7f:2a:8b:e9:bc:c5:1a:8c:6c:53:a8: 64:ef:53:2a:a5:4d:10:24:61:6a:ec:f7:3e:7c:f1:00:48:58: 39:6c:61:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCb3Sxst15EKgF1ospl13F7mtXJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjExMTUwODQ1MTFaFw0yNjExMTYwOTAwMTFaMDMxMTAvBgNV BAMTKDAyMDQ0MTQ1REUzQkNGQkMxOTY0NzJCNUNFNzE1NTdDREI0NTU5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQsC3AhasQYqnkWn1VBs922ya pYvNpxRXjC5R83v8QM9i7Wgy7DOAe0ZUuigGK3woBKKf5r9FVJQV1TNl30X11atP CsvZUCBD9cp2uLKmVotALlatcMAMI0TnMKNpXipkK7Hmtnt4erABZZuCeoCumYwk ZOjZ4/auAt6hGo2Bke8g3LLdbSroFmGQH2z7VPHF8lEGZpm9kz4AoC1CezlkC1do d7me88lEoIoiZSANcDeGJCX/NhGX6akYA6JefW2N6OUMH7X7m1yuuAbqSLq2fb10 e/ex5ssbZcOp1aEnoFz84w3JG7Ddmzo4imqsT/trMpiX0aRZxMERURQQ0HarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgRBRd47z7wZZHK1znFVfNtFWU8wHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQoiZ4A+hXiXQGlM74P9hU1sZvJzO3b72qI XbM0mrRP0c67D7kZneO9Obxuz1k9GFEyMbEsj490J/JsEoXjnF7d+BjBKgycxNA7 Q2vXqo9rZEqN3LVU8pX6OXNM6/BBgknoAuinpjZQcLS0rIN4MzfpTFL0Nw1ddMHW QHAKDCBOXymN9HhaJKrR8lkwcT+ajpgQonI/v8ZeH5A6nljU2hDHWUpLQeipyJUF uO7P/1NWbDtb1jP3sHbvJxanDEqdDTBnrtjQrOYP4sUPPAEHlaYj/f46QRCsk1tc lAYr1jF/KovpvMUajGxTqGTvUyqlTRAkYWrs9z588QBIWDlsYUg= -----END CERTIFICATE-----Generated at Sun Nov 15 12:43:08 2026 by rpki-client