$ rpki-client -vvvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: fgGRJdjOIRTAM/KOA4g4T/bHlpIb1p//WqWFNNjuWpY= Subject key identifier: 13:3E:59:1F:60:B5:DC:1F:0F:8C:9D:FC:D5:71:DA:5E:0C:ED:3A:63 Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 21483E792E752FA28F6D12F8C4710959ABDC04FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 13:10:26 +0000 Manifest this update: Sun 15 Nov 2026 13:05:26 +0000 Manifest next update: Mon 16 Nov 2026 16:56:26 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) 2: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: ulXmKYEowYvXhYfeXGuSiUCEixc9dWbwpM40rZ9jn3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:48:3e:79:2e:75:2f:a2:8f:6d:12:f8:c4:71:09:59:ab:dc:04:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: Nov 15 13:05:26 2026 GMT Not After : Nov 16 16:56:26 2026 GMT Subject: CN=133E591F60B5DC1F0F8C9DFCD571DA5E0CED3A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:ce:86:07:4b:2a:02:ee:38:3b:6b:e2:bc: d0:15:98:f8:21:17:57:63:43:04:5c:68:c0:c6:bd: c7:76:95:59:5b:ba:13:3a:73:2a:da:c0:4b:6a:0b: 69:c2:51:5c:5d:c7:7e:bc:53:63:37:2c:57:40:b5: 72:27:b0:10:af:22:bf:b2:7c:0c:5d:d8:e6:fa:7a: 99:df:c0:08:c4:50:9c:70:22:51:ed:7b:60:2a:51: ef:db:ca:e4:4b:0d:fe:0b:ed:00:1b:57:28:a2:29: c3:7e:f1:53:40:65:ab:4e:2c:7f:5e:fb:ee:5b:77: ed:3c:e2:7b:ad:20:5b:03:22:9b:07:db:af:2f:8a: b6:9c:ea:d6:4b:82:70:d7:0a:79:49:17:ce:72:4a: ec:fd:69:0b:fa:48:3a:59:a5:44:86:87:c4:d1:3f: 43:34:55:2f:c4:69:ba:36:f7:8b:47:5c:e6:99:56: c3:4b:63:32:02:86:05:ba:90:8a:77:a0:b4:22:bb: 14:68:c2:17:2e:02:93:5f:6b:ef:2f:7b:67:08:a2: 60:aa:0f:85:59:a5:cf:03:5d:65:a5:03:5d:ee:80: 6b:c8:f7:62:18:cc:1a:bc:ed:a5:6d:e4:e4:a8:0a: 80:7e:99:d1:a5:93:f2:93:c1:96:a2:1c:e9:3d:1b: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:59:1F:60:B5:DC:1F:0F:8C:9D:FC:D5:71:DA:5E:0C:ED:3A:63 X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:de:00:b0:cf:c1:bc:9f:ec:63:f9:2c:93:4c:27:5c:a3:d2: b4:8a:7b:4b:0b:ad:af:af:9b:c8:65:eb:85:a4:30:99:7c:07: a1:2f:34:42:a5:b0:fb:11:ed:22:6b:ea:8c:35:67:b6:63:74: a0:1d:fc:3a:4e:9e:22:96:52:26:dc:f8:df:73:9a:3b:b7:93: a0:7b:bc:3a:a8:05:03:5a:04:75:ec:2d:2b:58:5c:f8:27:e0: cd:3a:5b:50:29:77:11:6a:d9:cc:e9:3b:76:9f:27:00:48:54: a7:0c:a8:6d:2a:42:3b:bb:9b:4b:6d:bb:df:65:1d:33:28:14: ff:c9:03:c4:2c:5d:c9:a4:21:61:24:49:22:5f:b1:ee:73:44: 3b:5c:bb:ef:49:04:57:25:28:42:1d:52:4e:92:20:09:e8:ac: a9:f3:98:d1:2e:af:2d:cb:e6:00:df:52:52:ab:a9:aa:30:11: ca:cf:8f:c6:c8:cc:cd:41:74:32:60:a7:17:be:1f:76:06:59: f3:8d:0d:62:5b:72:cd:25:df:78:ef:0e:39:5c:8d:77:68:00: 84:ec:73:3b:ec:a2:a2:ae:a1:2b:23:cf:ef:d1:15:06:eb:2f: f6:a3:7a:2b:25:74:36:98:ac:b8:63:ae:fe:b1:24:f0:29:b4: 92:0e:44:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUg+eS51L6KPbRL4xHEJWavcBPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjExMTUxMzA1MjZaFw0yNjExMTYxNjU2MjZaMDMxMTAvBgNV BAMTKDEzM0U1OTFGNjBCNURDMUYwRjhDOURGQ0Q1NzFEQTVFMENFRDNBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvM6GB0sqAu44O2vivNAVmPgh F1djQwRcaMDGvcd2lVlbuhM6cyrawEtqC2nCUVxdx368U2M3LFdAtXInsBCvIr+y fAxd2Ob6epnfwAjEUJxwIlHte2AqUe/byuRLDf4L7QAbVyiiKcN+8VNAZatOLH9e ++5bd+084nutIFsDIpsH268virac6tZLgnDXCnlJF85ySuz9aQv6SDpZpUSGh8TR P0M0VS/Eabo294tHXOaZVsNLYzIChgW6kIp3oLQiuxRowhcuApNfa+8ve2cIomCq D4VZpc8DXWWlA13ugGvI92IYzBq87aVt5OSoCoB+mdGlk/KTwZaiHOk9G70TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEz5ZH2C13B8PjJ381XHaXgztOmMwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIreALDPwbyf7GP5LJNMJ1yj0rSKe0sLra+v m8hl64WkMJl8B6EvNEKlsPsR7SJr6ow1Z7ZjdKAd/DpOniKWUibc+N9zmju3k6B7 vDqoBQNaBHXsLStYXPgn4M06W1ApdxFq2czpO3afJwBIVKcMqG0qQju7m0ttu99l HTMoFP/JA8QsXcmkIWEkSSJfse5zRDtcu+9JBFclKEIdUk6SIAnorKnzmNEury3L 5gDfUlKrqaowEcrPj8bIzM1BdDJgpxe+H3YGWfONDWJbcs0l33jvDjlcjXdoAITs czvsoqKuoSsjz+/RFQbrL/ajeisldDaYrLhjrv6xJPAptJIORPM= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:44 2026 by rpki-client