$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json) Hash identifier: QSlQ2ZxvuRXu00tCiSP1jLjSNMrXoPSsClSFNke+rjM= Subject key identifier: 1F:E8:F8:E2:4C:D4:27:3D:14:86:9E:7D:F7:69:E1:33:D9:89:77:FD Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Certificate serial: 1C2C07F5ED2FA37A3F335B8D62D07A2939550B84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 17:05:24 +0000 Manifest this update: Sun 15 Nov 2026 17:00:24 +0000 Manifest next update: Mon 16 Nov 2026 20:17:24 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=) 2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=) 3: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: a1DiqQVTjPVHFFJMR+DVAtzItCmLx5fMpI9YrroBlBk=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:07:f5:ed:2f:a3:7a:3f:33:5b:8d:62:d0:7a:29:39:55:0b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274 Validity Not Before: Nov 15 17:00:24 2026 GMT Not After : Nov 16 20:17:24 2026 GMT Subject: CN=1FE8F8E24CD4273D14869E7DF769E133D98977FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:93:58:a9:3b:ad:bf:cf:27:5e:73:a4:a7: d7:e6:97:57:41:49:7c:e8:09:69:01:00:50:18:d8: da:b0:e4:04:02:5f:3f:92:26:ac:cf:21:e6:17:be: 25:ba:11:0f:73:ea:1f:17:c3:cf:93:59:69:44:af: 16:8e:f8:98:bb:e3:0b:5d:37:18:db:43:f0:bc:78: 68:ce:e8:58:93:28:1a:1b:f9:93:19:1e:6f:9c:4e: ff:80:69:0b:87:d1:84:ef:23:3b:44:62:d8:4d:7d: 31:6a:ff:dd:5e:62:59:d0:10:56:eb:e8:95:2a:cb: d5:c2:19:e9:c4:ea:e7:de:22:fd:fc:de:5d:d4:af: 35:00:17:85:18:70:4b:b1:4f:c7:5d:cd:d7:2a:37: 2d:74:0c:3a:91:e2:fb:ae:64:a9:35:6d:9a:eb:9c: 97:1e:44:f3:90:4d:03:4b:88:68:8b:66:ca:1d:3e: 5b:56:95:50:0d:62:a2:59:50:b3:22:90:cf:6e:48: ab:83:0c:90:27:e2:11:5c:ff:57:bc:a4:09:35:cf: d0:e1:78:ec:77:5c:93:09:25:74:5e:ef:f2:fd:86: a9:e8:7e:81:89:5a:04:f6:53:96:0c:a9:73:a4:5b: 72:32:b3:c1:bc:84:99:3f:35:41:b3:6a:c7:9b:72: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:F8:E2:4C:D4:27:3D:14:86:9E:7D:F7:69:E1:33:D9:89:77:FD X509v3 Authority Key Identifier: keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4c:43:26:8c:53:6b:ba:d8:a9:b5:6b:c8:ff:df:42:fd:e9: 14:bd:11:a1:ba:8b:50:9c:83:11:ea:d3:cd:87:10:2d:09:a8: 35:8e:0c:5f:ed:f8:c7:f8:c8:d3:bd:6e:ab:bd:9f:f1:37:b9: 5c:49:c4:8a:c1:c8:b4:8c:81:f3:20:07:83:08:cc:ba:b3:60: 56:44:3e:a1:bd:8c:6c:ff:b5:98:1c:65:dd:e8:9d:da:d3:70: 14:4f:f3:17:81:d9:b0:2a:16:4f:d1:9c:e3:bb:02:fe:f7:73: 46:6b:64:98:e7:a8:6c:36:5b:81:53:f6:bf:ec:ca:57:1c:a4: 79:d7:42:e6:da:aa:2c:0f:72:c2:39:7b:22:7b:cf:fc:fd:16: c2:7c:5f:93:9f:17:d7:de:9f:fa:d4:83:1a:d8:77:8e:37:81: c7:d7:7b:4c:43:11:bd:3b:4a:c9:6d:5c:42:06:d1:5c:fc:c4: 6d:85:f6:0b:0c:66:85:bf:24:4e:03:00:97:73:71:4a:9e:f1: ce:3a:59:d9:41:40:6a:65:7c:58:a2:b4:44:26:1a:e3:61:0c: 8c:3f:b1:69:74:9a:90:94:92:36:f2:28:f9:35:88:cb:81:73: f0:2d:2f:75:d1:42:ed:a4:f5:c8:f5:50:37:3c:08:6e:82:36: 17:5f:27:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCwH9e0vo3o/M1uNYtB6KTlVC4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE N0Q5QzI3NDAeFw0yNjExMTUxNzAwMjRaFw0yNjExMTYyMDE3MjRaMDMxMTAvBgNV BAMTKDFGRThGOEUyNENENDI3M0QxNDg2OUU3REY3NjlFMTMzRDk4OTc3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDZNYqTutv88nXnOkp9fml1dB SXzoCWkBAFAY2Nqw5AQCXz+SJqzPIeYXviW6EQ9z6h8Xw8+TWWlErxaO+Ji74wtd NxjbQ/C8eGjO6FiTKBob+ZMZHm+cTv+AaQuH0YTvIztEYthNfTFq/91eYlnQEFbr 6JUqy9XCGenE6ufeIv383l3UrzUAF4UYcEuxT8ddzdcqNy10DDqR4vuuZKk1bZrr nJceRPOQTQNLiGiLZsodPltWlVANYqJZULMikM9uSKuDDJAn4hFc/1e8pAk1z9Dh eOx3XJMJJXRe7/L9hqnofoGJWgT2U5YMqXOkW3Iys8G8hJk/NUGzasebcgf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+j44kzUJz0Uhp5992nhM9mJd/0wHwYDVR0j BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0 QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxMQyaMU2u62Km1a8j/30L96RS9EaG6i1Cc gxHq082HEC0JqDWODF/t+Mf4yNO9bqu9n/E3uVxJxIrByLSMgfMgB4MIzLqzYFZE PqG9jGz/tZgcZd3ondrTcBRP8xeB2bAqFk/RnOO7Av73c0ZrZJjnqGw2W4FT9r/s ylccpHnXQubaqiwPcsI5eyJ7z/z9FsJ8X5OfF9fen/rUgxrYd443gcfXe0xDEb07 SsltXEIG0Vz8xG2F9gsMZoW/JE4DAJdzcUqe8c46WdlBQGplfFiitEQmGuNhDIw/ sWl0mpCUkjbyKPk1iMuBc/AtL3XRQu2k9cj1UDc8CG6CNhdfJ0E= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:53 2026 by rpki-client