$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft (raw, json) Hash identifier: 1FsJHnC6ON2hX/G/fVE5IttvwYXm+s8IJ+20ThthCvU= Subject key identifier: 81:C1:F0:CF:61:A0:6B:F8:B7:28:21:BE:18:04:E6:7B:85:F6:C9:93 Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Certificate issuer: /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Certificate serial: 14C6F6F7A47527B29CB1238038FC4A67F9EAF52B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 03:59:05 +0000 Manifest this update: Sun 15 Nov 2026 03:54:05 +0000 Manifest next update: Mon 16 Nov 2026 06:04:05 +0000 Files and hashes: 1: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=) 2: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: D74+LFtaiM6p1bNo+g/DP+Bfx1wgVTvyGuc6jRnjUKM=) 3: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: 6lgQliV3qWJWSqE96iH08yO2bxxIknhiUKxtAeSrcOo=) 4: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: MDqOFg62hmCAUHW4Muj3krYCTsgPpqhMHNl5EdSS1rQ=) 5: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl (hash: L5M8JWBu6Xnuam4fNkA1qKxqNm39nYNnZ5jvDgBspPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c6:f6:f7:a4:75:27:b2:9c:b1:23:80:38:fc:4a:67:f9:ea:f5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Validity Not Before: Nov 15 03:54:05 2026 GMT Not After : Nov 16 06:04:05 2026 GMT Subject: CN=81C1F0CF61A06BF8B72821BE1804E67B85F6C993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:61:0d:35:17:6c:ea:5b:b4:df:0e:e3:bb: fb:d7:51:2f:63:d9:c2:99:48:0b:29:70:37:a5:60: 93:fc:e4:19:50:64:c7:0b:53:ff:98:32:4a:69:7e: a0:cf:a8:ce:35:a2:60:65:e5:ec:e2:e1:2f:bd:dc: 50:eb:02:fc:5d:2c:09:79:7e:30:c2:29:e8:d5:69: c6:b1:3e:ab:ce:6a:15:28:80:85:d7:49:04:54:dc: 6b:57:2b:70:fc:ac:5d:88:6e:4c:cb:4c:54:41:05: a3:e6:be:28:4f:50:91:0d:81:31:1a:15:a7:b1:a9: 51:5d:86:ca:8c:84:02:91:67:7d:9c:05:f1:a0:16: db:e6:17:3e:43:de:f9:f7:fe:46:f8:12:6f:11:cf: f8:3b:53:7e:0e:ca:9a:6a:00:86:4a:9a:87:5a:92: da:a6:ab:67:88:28:a6:7e:5f:44:f7:f4:be:03:ed: 53:c1:b7:c4:96:83:53:7e:78:c7:e0:ce:f6:48:16: 9c:bd:f4:f2:a9:97:b4:27:db:84:14:3d:37:51:83: de:7c:25:3d:a2:06:a1:17:51:e3:dc:49:18:b3:b1: 6c:79:97:8e:84:cc:bf:43:49:c3:37:84:fe:d0:c9: a6:7f:29:bb:a9:12:08:dd:c8:da:2d:23:c5:ff:62: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:F0:CF:61:A0:6B:F8:B7:28:21:BE:18:04:E6:7B:85:F6:C9:93 X509v3 Authority Key Identifier: keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:37:bc:01:45:b2:af:58:58:ae:8e:b5:33:05:d1:ab:f9:ef: fc:49:13:97:c7:e6:ed:e1:b4:a1:21:88:c2:72:57:eb:81:16: ec:23:31:eb:b6:ea:4b:5e:04:be:b2:51:bf:09:13:f2:c9:f8: eb:95:30:c3:58:91:bd:63:13:2c:21:e0:c3:07:cf:29:6c:f6: 94:b1:19:21:d3:41:a7:55:f6:f8:d5:11:bf:f8:0a:57:7d:6a: 33:e9:19:96:31:c5:65:3d:4b:4b:ff:47:f0:02:fa:04:2d:32: 34:a1:86:05:44:68:dc:88:13:9d:28:69:22:1e:ea:d9:75:cc: 57:28:87:1e:61:ed:f1:78:f3:b2:6b:7d:a9:0a:34:13:70:4f: cc:53:ca:e8:a8:f5:bb:b7:38:44:db:6d:0a:63:d8:2b:4f:55: f7:19:bc:93:ee:e4:02:e1:c2:c6:43:d1:24:9d:e3:97:fd:42: 2f:e5:28:2b:65:f9:ff:3e:45:6b:7b:e7:a2:83:41:80:f0:09: bd:e2:8f:cc:7c:70:fe:e8:ee:f5:a7:82:4e:7e:b6:15:cb:42: 68:01:22:34:29:45:d0:e9:88:88:e7:e3:92:f6:dd:60:3c:f3: a5:c3:bb:e9:cc:d1:0f:7f:5c:49:95:7c:1f:90:36:ae:a3:ca: f5:e2:b9:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFMb296R1J7KcsSOAOPxKZ/nq9SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2RURF QjA5RTE3RTAeFw0yNjExMTUwMzU0MDVaFw0yNjExMTYwNjA0MDVaMDMxMTAvBgNV BAMTKDgxQzFGMENGNjFBMDZCRjhCNzI4MjFCRTE4MDRFNjdCODVGNkM5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiT2ENNRds6lu03w7ju/vXUS9j 2cKZSAspcDelYJP85BlQZMcLU/+YMkppfqDPqM41omBl5ezi4S+93FDrAvxdLAl5 fjDCKejVacaxPqvOahUogIXXSQRU3GtXK3D8rF2IbkzLTFRBBaPmvihPUJENgTEa FaexqVFdhsqMhAKRZ32cBfGgFtvmFz5D3vn3/kb4Em8Rz/g7U34OyppqAIZKmoda ktqmq2eIKKZ+X0T39L4D7VPBt8SWg1N+eMfgzvZIFpy99PKpl7Qn24QUPTdRg958 JT2iBqEXUePcSRizsWx5l46EzL9DScM3hP7QyaZ/KbupEgjdyNotI8X/YuCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcHwz2Gga/i3KCG+GATme4X2yZMwHwYDVR0j BBgwFoAUKg9mQRb74uBxfoPf1PK27esJ4X4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg0ODg1MTktOGYwNC00NGY1LTgzMTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDEx NkZCRTJFMDcxN0U4M0RGRDRGMkI2RURFQjA5RTE3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTBGNjY0MTE2RkJFMkUwNzE3RTgzREZENEYyQjZFREVCMDlF MTdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvMkEwRjY2NDExNkZCRTJFMDcxN0U4M0RGRDRGMkI2 RURFQjA5RTE3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI3vAFFsq9YWK6OtTMF0av57/xJE5fH5u3h tKEhiMJyV+uBFuwjMeu26kteBL6yUb8JE/LJ+OuVMMNYkb1jEywh4MMHzyls9pSx GSHTQadV9vjVEb/4Cld9ajPpGZYxxWU9S0v/R/AC+gQtMjShhgVEaNyIE50oaSIe 6tl1zFcohx5h7fF487JrfakKNBNwT8xTyuio9bu3OETbbQpj2CtPVfcZvJPu5ALh wsZD0SSd45f9Qi/lKCtl+f8+RWt756KDQYDwCb3ij8x8cP7o7vWngk5+thXLQmgB IjQpRdDpiIjn45L23WA886XDu+nM0Q9/XEmVfB+QNq6jyvXiub4= -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:42 2026 by rpki-client