$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: N12ElRcrr4FdcS4s06FfIMn6Fjq0osdCCKrfF9+1zd0= Subject key identifier: D8:F2:A7:E5:8A:7A:63:95:AA:C2:48:8B:8B:BB:52:97:AE:67:A0:D6 Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 53989498AA8E3308D18EFD4252868243255C64FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 16:51:49 +0000 Manifest this update: Mon 09 Nov 2026 16:46:49 +0000 Manifest next update: Tue 10 Nov 2026 18:15:49 +0000 Files and hashes: 1: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 2: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 3: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 4: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 5: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 6: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 7: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: 5O5Z9lbL/NtUdldVTOp7RaFs/d6uuusu9VsuI2q/tS4=) 8: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (hash: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=) 9: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 10: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:98:94:98:aa:8e:33:08:d1:8e:fd:42:52:86:82:43:25:5c:64:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Nov 9 16:46:49 2026 GMT Not After : Nov 10 18:15:49 2026 GMT Subject: CN=D8F2A7E58A7A6395AAC2488B8BBB5297AE67A0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:f9:c6:9d:27:c6:c0:46:41:c0:79:52:03: 0c:e2:d1:88:0e:0c:82:9d:df:4c:a7:00:b2:a2:bb: bd:c2:ec:40:82:e5:8b:ea:9f:ea:52:a8:c8:5e:6e: 3d:c1:99:b8:f0:66:34:b6:75:b5:df:d4:0c:4f:1c: 80:bf:29:01:7c:3f:fc:7f:93:a7:21:b1:13:49:fc: 85:21:70:3e:9a:2e:b0:ea:cd:e3:83:a6:7e:bb:e0: 91:77:89:3f:eb:36:0f:b0:ec:70:b2:bf:1c:48:6f: 1e:1f:db:2d:c2:12:09:5c:9a:10:8e:2e:54:25:c8: 72:57:1f:fd:bd:13:d4:4d:f9:c4:b0:23:bb:5d:a1: 30:01:58:73:98:e1:22:06:36:3b:51:8f:e1:7a:78: ca:18:3d:b0:51:3c:0e:de:4e:a7:56:c0:8f:e0:1c: eb:27:ed:90:a5:2b:db:7e:7e:65:5d:70:fb:a3:a0: cb:2a:21:d4:d1:0b:ef:8e:93:c1:6a:96:5e:db:46: 51:0a:7d:fd:c9:ab:ee:90:5f:a2:63:d7:0b:a8:f1: a5:05:b6:7c:94:97:bb:e1:84:bb:b1:c4:fc:a5:a3: 5a:4d:cf:2c:e8:64:65:c1:59:45:3a:0b:fe:8b:fa: f8:ff:ac:01:92:4c:25:4e:5a:b3:16:e2:8c:c8:2e: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:A7:E5:8A:7A:63:95:AA:C2:48:8B:8B:BB:52:97:AE:67:A0:D6 X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:df:28:9d:a2:98:ca:5f:71:03:af:2a:bb:4f:e2:4e:28:29: 2b:f3:b7:1d:a1:ef:ae:65:1a:eb:cb:64:9a:9d:fd:ef:1c:fa: 8b:01:df:62:38:81:cf:26:6e:00:12:14:9b:9f:92:ca:84:d5: bd:a4:47:87:5b:52:1a:91:1f:0d:0f:cc:a5:55:8e:1e:01:fc: 17:f8:ca:90:1c:bb:45:24:13:95:12:71:09:f4:b1:1a:b2:e5: ff:54:1d:8e:6b:46:f4:a9:7a:d6:f5:5d:04:62:ee:dd:2e:ca: ef:09:1f:d6:34:3c:b2:09:2a:b9:da:58:37:5f:95:29:04:f4: a8:ac:41:bb:37:fd:c9:0d:5d:d5:c2:f6:d8:39:3f:22:36:63: c9:07:bb:28:85:02:af:0c:44:3e:0f:ba:73:35:a6:47:94:73: ce:7c:be:c9:87:84:91:ac:f2:8e:9d:c0:0e:88:07:b2:3c:8f: ef:e5:52:5f:97:61:b3:5c:aa:69:18:d3:70:c9:5d:a7:27:63: 5b:4d:6c:a8:d1:67:b6:6a:f8:d0:84:10:98:c8:2c:98:50:76: 16:37:1c:83:ed:9d:e5:02:ae:8c:5f:0d:ff:66:77:a8:c5:53: 26:82:72:77:b4:4f:cd:92:52:5b:00:b3:52:4d:19:81:9f:5d: 46:29:e8:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5iUmKqOMwjRjv1CUoaCQyVcZPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjExMDkxNjQ2NDlaFw0yNjExMTAxODE1NDlaMDMxMTAvBgNV BAMTKEQ4RjJBN0U1OEE3QTYzOTVBQUMyNDg4QjhCQkI1Mjk3QUU2N0EwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgA/nGnSfGwEZBwHlSAwzi0YgO DIKd30ynALKiu73C7ECC5Yvqn+pSqMhebj3BmbjwZjS2dbXf1AxPHIC/KQF8P/x/ k6chsRNJ/IUhcD6aLrDqzeODpn674JF3iT/rNg+w7HCyvxxIbx4f2y3CEglcmhCO LlQlyHJXH/29E9RN+cSwI7tdoTABWHOY4SIGNjtRj+F6eMoYPbBRPA7eTqdWwI/g HOsn7ZClK9t+fmVdcPujoMsqIdTRC++Ok8Fqll7bRlEKff3Jq+6QX6Jj1wuo8aUF tnyUl7vhhLuxxPylo1pNzyzoZGXBWUU6C/6L+vj/rAGSTCVOWrMW4ozILh1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2PKn5Yp6Y5WqwkiLi7tSl65noNYwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXfKJ2imMpfcQOvKrtP4k4oKSvztx2h765l GuvLZJqd/e8c+osB32I4gc8mbgASFJufksqE1b2kR4dbUhqRHw0PzKVVjh4B/Bf4 ypAcu0UkE5UScQn0sRqy5f9UHY5rRvSpetb1XQRi7t0uyu8JH9Y0PLIJKrnaWDdf lSkE9KisQbs3/ckNXdXC9tg5PyI2Y8kHuyiFAq8MRD4PunM1pkeUc858vsmHhJGs 8o6dwA6IB7I8j+/lUl+XYbNcqmkY03DJXacnY1tNbKjRZ7Zq+NCEEJjILJhQdhY3 HIPtneUCroxfDf9md6jFUyaCcne0T82SUlsAs1JNGYGfXUYp6Hk= -----END CERTIFICATE-----Generated at Mon Nov 9 23:53:45 2026 by rpki-client