$ rpki-client -vvvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: ZrD1xfOWBBmNYAekrKAHK2w3VwfpPlhoTWokYUXYLoo= Subject key identifier: DD:6A:E4:6C:F3:31:B2:68:77:81:A7:8E:4F:E8:5C:5A:D5:EE:13:76 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 7DBB66A9905F730284304B52AA51C8DB788EA210 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 08:29:46 +0000 Manifest this update: Sun 15 Nov 2026 08:24:46 +0000 Manifest next update: Mon 16 Nov 2026 11:29:46 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 3: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: CytDF31885SiVd6BjudSdKPmex1ivK+2wzaWzIvmzWU=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:bb:66:a9:90:5f:73:02:84:30:4b:52:aa:51:c8:db:78:8e:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Nov 15 08:24:46 2026 GMT Not After : Nov 16 11:29:46 2026 GMT Subject: CN=DD6AE46CF331B2687781A78E4FE85C5AD5EE1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:7d:45:79:5a:17:8f:a6:7d:c3:7b:58:44: 9d:92:46:7d:7b:ee:0b:53:6a:ad:fe:36:dc:05:ac: 63:03:49:ea:8b:89:25:46:f1:ba:37:1a:d5:a6:5d: c0:bd:1e:28:86:ab:92:19:8c:ff:4d:91:ac:97:33: 6b:10:4e:a6:88:e4:60:da:d7:14:70:66:d1:3e:d6: 87:d1:cc:20:50:82:70:b7:6f:26:3f:07:b1:c7:06: b0:eb:bb:a3:ce:8b:80:7a:62:c6:5b:00:12:11:42: 45:e1:87:9f:da:f3:51:68:bc:36:44:f8:56:79:40: 78:f6:2c:ed:2f:23:ab:70:42:50:a1:5a:9f:71:b7: 1f:53:33:ae:4c:19:03:7c:3d:5b:e7:cc:08:94:ea: 0a:35:fc:e4:a9:88:d2:0c:6a:e2:4f:b9:70:58:fa: 69:e9:87:55:14:b2:c5:99:97:87:85:73:0f:94:ef: 06:d1:90:98:f9:3e:eb:41:52:3a:43:ca:42:54:4a: e9:42:f8:0d:d0:7a:d8:3c:cc:0e:42:eb:a8:7b:93: 6c:f7:5f:18:c5:2c:71:ec:d0:e9:28:dd:71:f9:18: af:c1:c7:2b:6d:07:0f:47:20:77:5d:11:95:6b:f5: a5:c0:67:fc:24:a2:c7:4f:a7:1f:dc:1a:c5:c5:66: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:E4:6C:F3:31:B2:68:77:81:A7:8E:4F:E8:5C:5A:D5:EE:13:76 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:6b:25:d5:c0:06:da:b7:d4:1a:ca:28:9e:55:53:1a:fe: 60:e3:71:be:20:59:9c:83:72:41:62:ab:a6:0a:3e:12:9f:8c: 3b:fe:eb:9f:8e:5f:33:06:cc:50:7b:18:ea:df:c3:f1:62:e1: e8:12:c0:7f:12:3c:69:f9:c2:98:61:85:2d:63:5d:14:60:ee: ec:02:1f:3b:9f:4b:4d:d6:a6:46:1a:0f:f6:86:03:9c:74:7e: 57:91:35:9c:0a:33:15:66:2f:ed:a8:4b:a4:1c:7d:b2:f4:08: 1a:41:a2:e3:54:32:28:3c:63:3e:50:a6:ee:ae:dc:05:b9:93: 0d:6c:62:ee:f6:be:90:0a:43:1a:af:5e:73:0c:6a:96:d1:bd: 3a:e7:73:2e:6c:df:77:47:2e:ce:bb:ca:bb:90:9f:2f:d2:ac: 28:3f:8d:23:05:44:9b:ca:ee:a5:61:46:96:17:ae:0e:fe:d1: fb:40:d4:28:59:e4:38:34:11:f7:2a:c5:a8:10:5e:70:ad:cf: cf:90:d2:7e:e8:49:dc:62:fe:f1:d3:37:0a:ac:1b:da:70:98: 99:49:dd:4a:6c:51:27:ab:47:3d:13:44:05:fd:53:94:4b:06: da:15:8a:16:de:c0:84:26:e1:60:d1:f6:c0:14:dc:a9:cf:b4: 76:c8:ba:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbtmqZBfcwKEMEtSqlHI23iOohAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjExMTUwODI0NDZaFw0yNjExMTYxMTI5NDZaMDMxMTAvBgNV BAMTKERENkFFNDZDRjMzMUIyNjg3NzgxQTc4RTRGRTg1QzVBRDVFRTEzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmfH1FeVoXj6Z9w3tYRJ2SRn17 7gtTaq3+NtwFrGMDSeqLiSVG8bo3GtWmXcC9HiiGq5IZjP9NkayXM2sQTqaI5GDa 1xRwZtE+1ofRzCBQgnC3byY/B7HHBrDru6POi4B6YsZbABIRQkXhh5/a81FovDZE +FZ5QHj2LO0vI6twQlChWp9xtx9TM65MGQN8PVvnzAiU6go1/OSpiNIMauJPuXBY +mnph1UUssWZl4eFcw+U7wbRkJj5PutBUjpDykJUSulC+A3Qetg8zA5C66h7k2z3 XxjFLHHs0Oko3XH5GK/BxyttBw9HIHddEZVr9aXAZ/wkosdPpx/cGsXFZrc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WrkbPMxsmh3gaeOT+hcWtXuE3YwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9YayXVwAbat9QayiieVVMa/mDjcb4gWZyD ckFiq6YKPhKfjDv+65+OXzMGzFB7GOrfw/Fi4egSwH8SPGn5wphhhS1jXRRg7uwC HzufS03WpkYaD/aGA5x0fleRNZwKMxVmL+2oS6QcfbL0CBpBouNUMig8Yz5Qpu6u 3AW5kw1sYu72vpAKQxqvXnMMapbRvTrncy5s33dHLs67yruQny/SrCg/jSMFRJvK 7qVhRpYXrg7+0ftA1ChZ5Dg0EfcqxagQXnCtz8+Q0n7oSdxi/vHTNwqsG9pwmJlJ 3UpsUSerRz0TRAX9U5RLBtoVihbewIQm4WDR9sAU3KnPtHbIuuU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:28:47 2026 by rpki-client