$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: NIGNoZASbyekLndREuD8cE/Ht//OHUeHeL40ODaUBdk= Subject key identifier: D9:A0:C7:0F:5C:65:52:61:76:8C:92:AB:58:58:08:96:77:23:9E:91 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 7226B5AE67F9820BF20DB884D66491666EEBCEA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 01:12:06 +0000 Manifest this update: Tue 10 Nov 2026 01:07:06 +0000 Manifest next update: Wed 11 Nov 2026 02:45:06 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 2: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: lZpvHEyIju+qJJbY0XTXdjCAGkZOS5unVUElMXfrgfA=) 3: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 02:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:26:b5:ae:67:f9:82:0b:f2:0d:b8:84:d6:64:91:66:6e:eb:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Nov 10 01:07:06 2026 GMT Not After : Nov 11 02:45:06 2026 GMT Subject: CN=D9A0C70F5C655261768C92AB5858089677239E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:9f:2a:43:d8:10:15:c6:70:f2:17:f1:72: e1:cf:62:a6:f7:9c:42:96:d5:52:7e:04:12:61:1d: 40:37:4f:7c:62:d4:4a:f5:4c:05:0b:48:07:d7:7b: 05:cf:52:b7:93:3b:fe:a5:40:37:32:53:35:7d:57: fd:dd:e9:6c:61:b1:e3:d2:92:65:4b:7c:d9:56:38: 25:d2:af:b5:75:bc:87:f9:c6:0a:ca:ba:91:cf:cc: a5:68:20:ea:a0:ce:a8:4a:9b:52:70:0c:f9:63:1b: bf:4a:04:95:b3:e7:78:ff:c7:7a:6c:03:90:27:cc: 4d:25:1b:8b:c8:ba:ba:e1:c5:b2:19:8f:10:59:df: 81:66:35:c8:9e:ef:92:71:2e:06:bf:41:76:72:9b: 0e:45:37:d0:20:fb:62:96:9d:6f:c8:b1:98:14:69: 05:b2:d1:d0:b8:26:2c:a0:bd:d5:ca:17:00:37:15: e8:d0:29:59:9f:c3:fc:71:cc:65:63:f7:a6:76:d2: 54:d0:ac:7b:34:f2:20:a6:0e:82:0d:94:b2:d8:c1: 89:eb:b3:4a:13:8e:95:a0:40:33:ed:2e:55:da:37: 3c:da:f5:12:b6:e5:23:fc:eb:13:f5:ff:cb:e4:1c: 4c:aa:5b:a1:6c:01:70:ae:e1:a8:a3:cd:00:28:60: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A0:C7:0F:5C:65:52:61:76:8C:92:AB:58:58:08:96:77:23:9E:91 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2b:22:da:1a:78:74:0c:1f:8e:5e:39:4a:e7:f8:a7:27:b3: 11:f2:4a:1e:e9:1f:86:df:e2:bf:d8:ac:b6:30:30:e6:e0:43: fb:fe:3a:9d:ab:79:c3:51:d6:d3:db:34:bd:49:27:57:31:db: e6:9a:e8:dc:29:4b:92:f6:9f:28:39:b3:88:be:b8:df:59:5c: 0a:d3:d9:46:92:f1:81:62:13:2a:30:83:10:91:3f:d1:bf:4f: 42:81:b6:86:cc:ce:6d:5c:29:7b:6a:38:ae:06:1d:a5:99:4d: 23:36:a6:dd:bc:46:4d:78:7a:bd:3e:36:f0:65:5a:2c:71:cf: c8:a7:c3:5f:a1:d6:f6:42:01:b2:1c:16:59:53:12:84:c0:26: 31:37:1e:de:bc:08:7c:ec:0e:f3:11:61:e2:7f:d0:82:39:3b: 3a:8e:e3:57:63:73:05:5f:eb:20:c1:42:81:dd:16:45:9f:7f: 43:54:1c:b7:5f:0f:09:07:7b:75:33:b2:3b:37:c8:3e:28:b9: d8:c7:06:96:0a:0b:e8:7b:2b:59:a1:fe:f8:24:f8:1e:f5:3e: db:56:7c:dd:4b:97:5d:a8:e7:4a:f7:f2:98:af:3f:0d:12:09: 23:d6:c1:21:0a:3b:bb:df:67:02:b8:57:4d:70:ef:11:f8:69: 4a:a1:9f:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcia1rmf5ggvyDbiE1mSRZm7rzqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjExMTAwMTA3MDZaFw0yNjExMTEwMjQ1MDZaMDMxMTAvBgNV BAMTKEQ5QTBDNzBGNUM2NTUyNjE3NjhDOTJBQjU4NTgwODk2NzcyMzlFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g58qQ9gQFcZw8hfxcuHPYqb3 nEKW1VJ+BBJhHUA3T3xi1Er1TAULSAfXewXPUreTO/6lQDcyUzV9V/3d6WxhsePS kmVLfNlWOCXSr7V1vIf5xgrKupHPzKVoIOqgzqhKm1JwDPljG79KBJWz53j/x3ps A5AnzE0lG4vIurrhxbIZjxBZ34FmNcie75JxLga/QXZymw5FN9Ag+2KWnW/IsZgU aQWy0dC4JiygvdXKFwA3FejQKVmfw/xxzGVj96Z20lTQrHs08iCmDoINlLLYwYnr s0oTjpWgQDPtLlXaNzza9RK25SP86xP1/8vkHEyqW6FsAXCu4aijzQAoYKEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2aDHD1xlUmF2jJKrWFgIlncjnpEwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQrItoaeHQMH45eOUrn+KcnsxHySh7pH4bf 4r/YrLYwMObgQ/v+Op2recNR1tPbNL1JJ1cx2+aa6NwpS5L2nyg5s4i+uN9ZXArT 2UaS8YFiEyowgxCRP9G/T0KBtobMzm1cKXtqOK4GHaWZTSM2pt28Rk14er0+NvBl Wixxz8inw1+h1vZCAbIcFllTEoTAJjE3Ht68CHzsDvMRYeJ/0II5OzqO41djcwVf 6yDBQoHdFkWff0NUHLdfDwkHe3Uzsjs3yD4oudjHBpYKC+h7K1mh/vgk+B71PttW fN1Ll12o50r38pivPw0SCSPWwSEKO7vfZwK4V01w7xH4aUqhn5A= -----END CERTIFICATE-----Generated at Tue Nov 10 14:15:34 2026 by rpki-client