$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft File: 04802014594DAC827C3F8FBF392DF25D2C1943C5.mft (raw, json) Hash identifier: 6dNwKGoqMFAFVkpw80/7ujfxsLzSzwtXfseWWMn03D8= Subject key identifier: 9B:29:A9:9D:72:59:4A:C5:61:88:26:7B:41:81:E0:C3:DF:D4:14:A4 Authority key identifier: 04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5 Certificate issuer: /CN=04802014594DAC827C3F8FBF392DF25D2C1943C5 Certificate serial: 7C1932B4ED7F943680EE893BB7DEDE161D96C592 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft Manifest number: FF Signing time: Mon 09 Nov 2026 18:44:03 +0000 Manifest this update: Mon 09 Nov 2026 18:39:03 +0000 Manifest next update: Tue 10 Nov 2026 22:19:03 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: DPbwWaqhZhIf++Ujgi9BYNcGolMoqcI02wvNDZg4xw8=) 2: 04802014594DAC827C3F8FBF392DF25D2C1943C5.crl (hash: cLAjz9Cb1gmd4drfHE3sRWVBMPa+sOdNIxGrrgpvP4o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:19:32:b4:ed:7f:94:36:80:ee:89:3b:b7:de:de:16:1d:96:c5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04802014594DAC827C3F8FBF392DF25D2C1943C5 Validity Not Before: Nov 9 18:39:03 2026 GMT Not After : Nov 10 22:19:03 2026 GMT Subject: CN=9B29A99D72594AC56188267B4181E0C3DFD414A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:bb:57:3f:e4:4f:40:60:26:d8:d5:e3:12: 7e:fc:18:ce:eb:00:05:c3:8c:41:7c:b6:af:73:a1: 86:cf:f8:60:34:c6:79:31:cb:43:a2:c7:c2:79:c3: 41:9e:ad:1a:75:8f:de:61:e6:10:98:76:1d:91:ed: 38:75:f9:5f:59:43:d3:ec:18:98:57:b5:85:a0:35: 45:da:6c:a4:1a:5d:f9:5f:a4:21:fc:ae:23:e2:1c: b7:d2:df:d2:89:44:76:d9:7d:f7:4a:cf:dc:fd:49: 01:23:dc:f1:88:2d:b1:ef:13:21:e9:10:a8:e5:56: ae:be:97:cc:e7:1d:a6:04:2f:69:6e:ff:42:5b:18: b3:2c:6e:12:b6:a8:dc:05:2a:3b:03:dc:40:d2:3b: 39:6b:09:8a:fb:74:4d:63:4b:e0:1b:28:3d:bd:14: 82:ce:7a:36:a4:77:b1:23:05:68:e7:e5:b5:1c:20: 7e:b9:ed:ff:66:44:ff:0e:fe:ff:a3:b9:2f:e8:be: 4d:34:ea:1a:16:a7:63:28:77:36:3c:ea:29:45:c2: 16:19:5e:8c:b9:18:75:74:85:27:9c:fe:9c:ca:4e: 1b:0c:95:3b:e1:65:d0:be:62:6a:ab:87:26:61:2c: 2e:91:21:f3:6b:38:77:4e:23:86:5d:e2:af:9c:e9: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:29:A9:9D:72:59:4A:C5:61:88:26:7B:41:81:E0:C3:DF:D4:14:A4 X509v3 Authority Key Identifier: keyid:04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:ca:4a:6a:e0:5e:21:f5:5d:f9:c7:63:e3:42:45:02:0a: f9:d1:51:fa:7d:38:f7:af:98:56:e1:09:07:66:49:e6:ed:75: 7b:db:cd:e7:84:e5:aa:08:04:38:72:f6:36:a6:b4:4a:f9:16: 60:e0:75:36:75:16:84:bc:72:2d:90:0c:35:73:5a:de:a8:92: eb:95:f1:b5:4a:2d:fe:b0:cf:d0:34:f8:1f:ea:7b:68:0a:3f: 12:d8:1b:e1:e0:1f:3e:fa:c3:64:8b:d5:2b:08:fa:69:6e:1f: bd:58:fd:44:e8:86:a5:34:d3:1f:4b:3e:a8:30:9e:b3:5c:b0: bb:7f:0e:fe:fb:a5:bf:7f:d5:8c:21:ae:b1:a2:fd:39:a0:1c: be:26:77:d6:60:18:a0:c4:4f:17:f2:47:64:80:ed:9d:d9:8f: 46:1c:6f:fa:54:6f:87:13:2c:b9:4b:3c:6b:f1:b9:a0:c5:35: d3:41:c0:8d:cb:af:be:41:8b:b2:58:e0:17:5e:a4:66:65:6c: 69:18:fb:23:fc:57:33:5b:73:0b:60:1e:0a:85:be:62:06:4e: 43:19:fc:b0:02:66:59:b7:b8:e9:45:85:44:61:31:21:04:6f: f0:73:c5:59:0f:57:96:aa:f2:1d:77:ba:13:f7:9c:b4:10:41: 52:1e:96:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBkytO1/lDaA7ok7t97eFh2WxZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4MDIwMTQ1OTREQUM4MjdDM0Y4RkJGMzkyREYyNUQy QzE5NDNDNTAeFw0yNjExMDkxODM5MDNaFw0yNjExMTAyMjE5MDNaMDMxMTAvBgNV BAMTKDlCMjlBOTlENzI1OTRBQzU2MTg4MjY3QjQxODFFMEMzREZENDE0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLbbtXP+RPQGAm2NXjEn78GM7r AAXDjEF8tq9zoYbP+GA0xnkxy0Oix8J5w0GerRp1j95h5hCYdh2R7Th1+V9ZQ9Ps GJhXtYWgNUXabKQaXflfpCH8riPiHLfS39KJRHbZffdKz9z9SQEj3PGILbHvEyHp EKjlVq6+l8znHaYEL2lu/0JbGLMsbhK2qNwFKjsD3EDSOzlrCYr7dE1jS+AbKD29 FILOejakd7EjBWjn5bUcIH657f9mRP8O/v+juS/ovk006hoWp2ModzY86ilFwhYZ Xoy5GHV0hSec/pzKThsMlTvhZdC+YmqrhyZhLC6RIfNrOHdOI4Zd4q+c6Z21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmympnXJZSsVhiCZ7QYHgw9/UFKQwHwYDVR0j BBgwFoAUBIAgFFlNrIJ8P4+/OS3yXSwZQ8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU2YmJlNGQtM2EyYi00ZTFiLWExYWEtNTkzNjEwYjNkZWM5LzAvMDQ4MDIwMTQ1 OTREQUM4MjdDM0Y4RkJGMzkyREYyNUQyQzE5NDNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDgwMjAxNDU5NERBQzgyN0MzRjhGQkYzOTJERjI1RDJDMTk0 M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvMDQ4MDIwMTQ1OTREQUM4MjdDM0Y4RkJGMzkyREYy NUQyQzE5NDNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAbykpq4F4h9V35x2PjQkUCCvnRUfp9OPev mFbhCQdmSebtdXvbzeeE5aoIBDhy9jamtEr5FmDgdTZ1FoS8ci2QDDVzWt6okuuV 8bVKLf6wz9A0+B/qe2gKPxLYG+HgHz76w2SL1SsI+mluH71Y/UTohqU00x9LPqgw nrNcsLt/Dv77pb9/1YwhrrGi/TmgHL4md9ZgGKDETxfyR2SA7Z3Zj0Ycb/pUb4cT LLlLPGvxuaDFNdNBwI3Lr75Bi7JY4BdepGZlbGkY+yP8VzNbcwtgHgqFvmIGTkMZ /LACZlm3uOlFhURhMSEEb/BzxVkPV5aq8h13uhP3nLQQQVIelnA= -----END CERTIFICATE-----Generated at Mon Nov 9 23:23:42 2026 by rpki-client