$ rpki-client -vvvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: KSNiXQz71MD4QyVNItFlaWSSmdqyc/wetKATgqvhK94= Subject key identifier: E4:20:96:25:C9:F9:B1:25:6D:38:F2:75:C8:5F:0C:CB:64:33:CF:F1 Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 067A5667E2EB4998E51063A97DD2584B2263768B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:43:55 +0000 Manifest this update: Sun 15 Nov 2026 07:38:55 +0000 Manifest next update: Mon 16 Nov 2026 09:41:55 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) 2: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: cHH/T1jYbT0ncn+IjSjqofoSYKY1QxncOu3xXJTckLs=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7a:56:67:e2:eb:49:98:e5:10:63:a9:7d:d2:58:4b:22:63:76:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: Nov 15 07:38:55 2026 GMT Not After : Nov 16 09:41:55 2026 GMT Subject: CN=E4209625C9F9B1256D38F275C85F0CCB6433CFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:e9:b3:b8:d5:c1:09:f1:a2:da:18:18:85: 64:f7:d1:e1:07:ac:da:8d:56:56:b9:6f:83:84:ee: 2b:98:a5:d7:9a:a4:b0:36:d6:3e:d7:af:c8:5e:d3: 57:b5:7b:35:40:8c:bf:63:5c:62:7e:11:ae:ee:ae: 41:71:e5:d8:6e:aa:9d:e2:ba:2b:c0:47:f9:86:e7: a9:84:63:34:67:07:98:94:5b:d1:a7:49:f4:e8:54: 35:b9:95:58:85:7e:38:a8:53:5c:cc:07:05:fd:db: b4:90:a6:01:b9:d1:5d:2b:38:2c:06:9f:b6:a9:23: 1f:b2:4a:5c:00:4c:e2:06:05:35:06:e6:08:7b:12: 50:73:12:86:80:e7:b1:09:3c:20:1d:f8:50:15:80: b2:cc:09:61:70:6c:2c:64:99:5d:2a:11:0a:82:08: 9a:b8:95:ca:89:bd:ef:d8:76:ec:63:5a:74:f7:66: e9:34:68:d4:9e:d2:b6:96:c0:da:6e:b9:60:2b:0c: a7:45:1e:8c:01:f1:76:25:e9:69:49:c1:4d:f6:50: d6:5e:d8:1b:98:e0:a8:5c:21:27:39:1e:c2:32:a4: 57:0b:dc:b9:30:55:0d:3c:f2:2a:a8:3e:b1:94:48: 17:19:b3:2f:bc:75:b8:fe:b6:f0:3a:7e:5f:37:73: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:96:25:C9:F9:B1:25:6D:38:F2:75:C8:5F:0C:CB:64:33:CF:F1 X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:73:c5:26:e7:5c:cf:32:4e:99:02:c0:96:14:83:28:ca:00: 94:a2:5e:f6:13:4c:25:51:30:24:de:d0:70:41:60:55:20:20: b2:1e:d5:9e:72:21:90:fd:c6:ff:e7:70:ab:72:e9:b7:d4:d7: c8:52:e2:5e:ae:ba:82:86:d0:1b:2d:25:0b:52:05:d4:2d:bf: 82:c7:fc:d9:de:ff:df:12:8b:f3:12:f8:68:24:32:c1:ba:00: 18:55:22:8a:67:cc:98:fc:c4:7f:5b:96:3c:0e:42:ce:fd:ca: 1e:e1:ea:d3:17:f5:70:51:e4:96:15:e1:11:03:5b:df:cf:65: 93:49:17:da:35:72:c5:28:6e:2f:ca:ef:14:7d:03:5b:c4:a9: fd:ff:35:7c:d4:80:12:ce:18:4b:10:d0:45:db:18:0c:16:18: b0:b1:34:1f:3c:fe:6e:1d:fd:78:a7:7b:7b:43:67:5d:fd:c4: 8a:de:36:b2:ac:71:a1:f1:42:24:1a:7f:c1:97:b2:7e:6f:03: 57:e3:49:79:03:d1:b1:5b:5c:cb:0d:4f:a3:67:c8:2b:eb:94: 10:8b:3e:46:2d:57:18:aa:14:75:d2:7e:2d:cf:dc:f7:17:d1: d9:4b:2d:95:c1:e1:fe:7e:61:b3:38:33:89:c9:62:36:e3:8f: 7e:9d:f0:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnpWZ+LrSZjlEGOpfdJYSyJjdoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjExMTUwNzM4NTVaFw0yNjExMTYwOTQxNTVaMDMxMTAvBgNV BAMTKEU0MjA5NjI1QzlGOUIxMjU2RDM4RjI3NUM4NUYwQ0NCNjQzM0NGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbtOmzuNXBCfGi2hgYhWT30eEH rNqNVla5b4OE7iuYpdeapLA21j7Xr8he01e1ezVAjL9jXGJ+Ea7urkFx5dhuqp3i uivAR/mG56mEYzRnB5iUW9GnSfToVDW5lViFfjioU1zMBwX927SQpgG50V0rOCwG n7apIx+ySlwATOIGBTUG5gh7ElBzEoaA57EJPCAd+FAVgLLMCWFwbCxkmV0qEQqC CJq4lcqJve/YduxjWnT3Zuk0aNSe0raWwNpuuWArDKdFHowB8XYl6WlJwU32UNZe 2BuY4KhcISc5HsIypFcL3LkwVQ088iqoPrGUSBcZsy+8dbj+tvA6fl83cyPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5CCWJcn5sSVtOPJ1yF8My2Qzz/EwHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5zxSbnXM8yTpkCwJYUgyjKAJSiXvYTTCVR MCTe0HBBYFUgILIe1Z5yIZD9xv/ncKty6bfU18hS4l6uuoKG0BstJQtSBdQtv4LH /Nne/98Si/MS+GgkMsG6ABhVIopnzJj8xH9bljwOQs79yh7h6tMX9XBR5JYV4RED W9/PZZNJF9o1csUobi/K7xR9A1vEqf3/NXzUgBLOGEsQ0EXbGAwWGLCxNB88/m4d /Xine3tDZ139xIreNrKscaHxQiQaf8GXsn5vA1fjSXkD0bFbXMsNT6NnyCvrlBCL PkYtVxiqFHXSfi3P3PcX0dlLLZXB4f5+YbM4M4nJYjbjj36d8N4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:55 2026 by rpki-client