$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: 2E4xEwbIP8/l0a9a9Z/GoftQT9qSt/4p79StSJd2KkA= Subject key identifier: 48:BD:B4:A9:E3:E4:7A:1B:CF:D1:0E:2A:A3:97:4C:66:78:C5:81:DA Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 123EDF7B69FB3B9EE92659E2E022E51F7D4EA137 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 05:48:08 +0000 Manifest this update: Tue 10 Nov 2026 05:43:08 +0000 Manifest next update: Wed 11 Nov 2026 07:35:08 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) 2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: RrSdOR+nIXfbWWikOnvFFThWxWO/cdSwNYzNNxKIj70=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3e:df:7b:69:fb:3b:9e:e9:26:59:e2:e0:22:e5:1f:7d:4e:a1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: Nov 10 05:43:08 2026 GMT Not After : Nov 11 07:35:08 2026 GMT Subject: CN=48BDB4A9E3E47A1BCFD10E2AA3974C6678C581DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:a8:59:10:8f:a3:43:cc:10:b4:d2:d8:75: 46:cc:86:6c:c5:3d:3e:fc:26:29:6b:74:89:fb:26: 6f:8b:42:39:07:95:d7:a9:78:fb:f5:cf:a0:33:9a: fc:d3:9b:e5:e0:16:8d:36:76:a2:be:8a:1a:28:6c: f4:2b:3e:b4:3c:1a:b1:64:cd:39:73:ba:c0:f7:29: c2:68:df:19:35:40:8b:7e:fd:ac:5a:85:ed:09:92: 14:eb:70:8d:ca:3f:f9:e6:e7:5e:59:0c:dd:2b:b8: fc:a7:9b:fd:87:dc:9c:44:92:e7:3d:03:42:53:81: 84:cc:e7:f0:ea:a6:54:4c:03:3a:af:db:7a:87:fb: 65:96:73:ba:30:79:52:d4:fa:01:36:8d:22:29:d5: 88:91:95:03:00:1c:31:34:14:ef:07:54:ae:e7:55: 04:a6:78:78:a6:70:11:8e:37:25:ce:10:2a:53:6a: 9a:f3:f4:ca:5e:11:26:3c:f7:b6:fe:eb:f3:57:23: ed:21:ca:f7:7d:65:05:17:44:ce:fb:a0:2c:92:5e: 62:dc:0d:dc:de:d6:7b:89:71:a9:f5:f3:58:9b:d1: f9:6a:cc:f5:e9:6e:58:61:fa:c8:36:97:c1:e5:db: 73:dc:c3:82:d6:16:17:89:74:c2:66:05:7b:e0:00: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BD:B4:A9:E3:E4:7A:1B:CF:D1:0E:2A:A3:97:4C:66:78:C5:81:DA X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:aa:09:22:56:63:65:de:4e:5f:23:ee:f0:e3:73:bb:8b: 2a:e4:31:e6:14:9d:24:08:dd:a7:d4:58:bd:d5:42:5c:12:75: 04:ba:3f:7e:05:1d:2c:ec:6e:bb:f2:ee:4b:c3:16:0f:8e:45: 10:80:de:c7:40:f5:38:64:48:79:22:d0:42:6b:33:de:2a:37: e6:56:38:de:5d:ea:1e:90:4f:c1:ce:8d:b0:06:26:06:30:da: 01:e0:46:ef:b1:b1:ff:d9:4a:20:2e:dd:0d:ea:48:3a:fd:c3: a9:5f:60:9b:c9:f5:5d:7c:ac:a9:4e:96:89:d7:d5:7b:a3:82: 37:e4:79:8f:a9:b3:39:6a:cd:72:52:36:38:d8:1b:66:70:84: 64:0f:f7:9d:f9:1d:ae:ec:3a:1f:a8:a5:a1:c2:d0:a5:95:c6: be:8c:a1:42:5e:7b:88:5d:1c:8c:e3:b7:0e:8c:42:96:f3:39: 11:41:df:5c:f4:6e:06:30:15:98:a4:77:92:8f:22:2a:79:11: 06:15:19:d6:cc:4a:0f:69:8b:07:7e:c4:40:0d:57:e7:dc:49: 49:67:b9:6b:48:70:50:a3:fd:f4:61:98:bb:a9:44:8b:dd:87: f3:7c:02:06:c1:f7:9d:37:d7:1b:1c:fa:00:3e:da:50:51:00: f1:a4:0c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEj7fe2n7O57pJlni4CLlH31OoTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjExMTAwNTQzMDhaFw0yNjExMTEwNzM1MDhaMDMxMTAvBgNV BAMTKDQ4QkRCNEE5RTNFNDdBMUJDRkQxMEUyQUEzOTc0QzY2NzhDNTgxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+KhZEI+jQ8wQtNLYdUbMhmzF PT78JilrdIn7Jm+LQjkHldepePv1z6AzmvzTm+XgFo02dqK+ihoobPQrPrQ8GrFk zTlzusD3KcJo3xk1QIt+/axahe0JkhTrcI3KP/nm515ZDN0ruPynm/2H3JxEkuc9 A0JTgYTM5/DqplRMAzqv23qH+2WWc7oweVLU+gE2jSIp1YiRlQMAHDE0FO8HVK7n VQSmeHimcBGONyXOECpTaprz9MpeESY897b+6/NXI+0hyvd9ZQUXRM77oCySXmLc Ddze1nuJcan181ib0flqzPXpblhh+sg2l8Hl23Pcw4LWFheJdMJmBXvgAJTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSL20qePkehvP0Q4qo5dMZnjFgdowHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWMqgkiVmNl3k5fI+7w43O7iyrkMeYUnSQI 3afUWL3VQlwSdQS6P34FHSzsbrvy7kvDFg+ORRCA3sdA9ThkSHki0EJrM94qN+ZW ON5d6h6QT8HOjbAGJgYw2gHgRu+xsf/ZSiAu3Q3qSDr9w6lfYJvJ9V18rKlOlonX 1XujgjfkeY+pszlqzXJSNjjYG2ZwhGQP9535Ha7sOh+opaHC0KWVxr6MoUJee4hd HIzjtw6MQpbzORFB31z0bgYwFZikd5KPIip5EQYVGdbMSg9piwd+xEANV+fcSUln uWtIcFCj/fRhmLupRIvdh/N8AgbB95031xsc+gA+2lBRAPGkDJE= -----END CERTIFICATE-----Generated at Tue Nov 10 08:55:49 2026 by rpki-client