$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft File: B28E2055919DC6491CBE15480ABD67D66E672F45.mft (raw, json) Hash identifier: SxV6gilMGO8vtmj60dxtGFjBJw3+URNT/+liNskc1Ig= Subject key identifier: 5A:71:FD:F1:F2:A6:4F:EB:99:E8:07:6B:78:AA:56:81:37:0E:95:20 Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45 Certificate issuer: /CN=B28E2055919DC6491CBE15480ABD67D66E672F45 Certificate serial: 4BD5E263E33ACC3A2B08206558082A2DFA1390D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft Manifest number: 34 Signing time: Tue 10 Nov 2026 06:44:24 +0000 Manifest this update: Tue 10 Nov 2026 06:39:24 +0000 Manifest next update: Wed 11 Nov 2026 07:41:24 +0000 Files and hashes: 1: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: KHtVXWtlCbbhxsDHGtD1PEIjpcpKfmg4Svhc1ZAfVdk=) 2: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: 359rkfgNfx4V4hTwp7iUNXWUoA246Siku87oN38U+EE=) 3: B28E2055919DC6491CBE15480ABD67D66E672F45.crl (hash: CrAkWBYtQ4CnJYU59gHA0MnMxY7MJtatPvyPNJlTsXk=) 4: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: ZIG19GtUImOIMgkhkzHVqhQKpT31kT1KFCjOplZhGFs=) 5: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: 9hNKKHOX5nZS01hYRXDjqScWbYWs1NA1/xINDpYkBoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d5:e2:63:e3:3a:cc:3a:2b:08:20:65:58:08:2a:2d:fa:13:90:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45 Validity Not Before: Nov 10 06:39:24 2026 GMT Not After : Nov 11 07:41:24 2026 GMT Subject: CN=5A71FDF1F2A64FEB99E8076B78AA5681370E9520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:2b:e5:fd:32:31:e7:74:98:a5:18:fd:81: 74:83:6a:92:7b:a2:2d:1e:f3:97:35:05:1a:77:af: 1f:a1:f3:6d:8a:d9:2f:75:25:63:50:56:06:6d:dc: 24:c2:8e:2a:08:b7:cf:5d:78:d6:d4:ab:cd:91:32: 36:86:3c:e5:3f:2f:26:ca:86:eb:f8:03:46:15:8e: 3d:d8:2e:7f:2b:aa:c7:67:be:6d:ec:b9:f6:11:c2: 8a:93:e1:a0:37:62:25:bd:3f:f7:36:65:0d:de:54: 30:32:53:0c:54:f5:52:ad:81:f9:19:86:6c:73:1e: ba:02:ae:b2:47:7d:af:cb:5b:ec:4e:7f:4c:86:1c: 20:b4:d9:21:4b:93:00:4a:e0:e7:11:9b:65:e7:76: cf:63:78:37:84:1b:5e:82:ad:80:52:5c:de:8d:3e: 3c:21:9b:80:64:ef:9e:89:36:d8:2f:fa:f6:d0:c9: 79:af:86:41:36:62:1e:7b:bd:31:ff:3b:21:c3:e9: d9:2a:e5:26:34:ba:47:a8:ec:4b:b3:fc:7f:b2:6d: 29:7f:e7:4c:59:58:95:c2:50:6e:07:7b:c6:27:74: 05:9a:6a:fa:c0:ca:00:e4:73:1c:ca:72:27:e4:dc: 17:34:c5:00:ef:a6:f8:8f:14:18:e7:d1:28:8b:e5: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:71:FD:F1:F2:A6:4F:EB:99:E8:07:6B:78:AA:56:81:37:0E:95:20 X509v3 Authority Key Identifier: keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4b:96:d5:14:60:40:0d:8f:12:99:83:41:b0:96:b1:e9:b0: 18:b8:ce:c5:e9:a5:a2:13:30:9c:71:e7:6d:57:a2:7a:d5:68: 54:41:77:6b:9b:52:9b:ac:2b:0a:08:d2:ad:c4:46:b5:7b:70: 3a:80:17:05:8f:fd:aa:b9:85:c7:f6:7a:68:75:31:99:98:e1: 26:7d:4b:b9:43:d4:49:d2:1e:cf:eb:e8:81:8d:d8:f1:7b:96: ea:cd:bd:7b:20:58:58:0d:91:ff:af:f8:26:90:53:86:57:c8: d9:0f:7c:c9:68:99:02:04:ef:5c:ce:db:f1:1e:24:1e:33:fc: e4:3f:08:7d:dd:e3:79:ea:81:77:97:fa:11:60:87:ce:5f:47: 40:52:42:f4:1c:ee:9a:98:54:66:f7:99:f9:35:6f:be:48:27: c4:0e:76:de:a1:44:38:c7:14:70:32:f4:eb:5a:f6:6c:44:46: d8:f0:d3:93:2c:d6:75:d3:c2:ca:f6:57:b7:db:0d:bd:61:c2: d0:b3:7e:ab:b7:51:6f:d8:4b:aa:6b:6a:97:c9:49:fe:c5:04: 9a:67:cd:7c:f2:45:96:e4:c4:1a:1c:0a:4d:35:24:4e:71:45: ce:c2:95:92:e1:5d:bb:b5:e6:62:20:38:2c:35:8a:b4:31:d1: 65:b2:9c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9XiY+M6zDorCCBlWAgqLfoTkNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI4RTIwNTU5MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2 RTY3MkY0NTAeFw0yNjExMTAwNjM5MjRaFw0yNjExMTEwNzQxMjRaMDMxMTAvBgNV BAMTKDVBNzFGREYxRjJBNjRGRUI5OUU4MDc2Qjc4QUE1NjgxMzcwRTk1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWivl/TIx53SYpRj9gXSDapJ7 oi0e85c1BRp3rx+h822K2S91JWNQVgZt3CTCjioIt89deNbUq82RMjaGPOU/LybK huv4A0YVjj3YLn8rqsdnvm3sufYRwoqT4aA3YiW9P/c2ZQ3eVDAyUwxU9VKtgfkZ hmxzHroCrrJHfa/LW+xOf0yGHCC02SFLkwBK4OcRm2Xnds9jeDeEG16CrYBSXN6N Pjwhm4Bk756JNtgv+vbQyXmvhkE2Yh57vTH/OyHD6dkq5SY0ukeo7Euz/H+ybSl/ 50xZWJXCUG4He8YndAWaavrAygDkcxzKcifk3Bc0xQDvpviPFBjn0SiL5VFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnH98fKmT+uZ6AdreKpWgTcOlSAwHwYDVR0j BBgwFoAUso4gVZGdxkkcvhVICr1n1m5nL0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFkZjI1NjktZTFmNC00YzY4LTg2MTUtZTM5ZGNlNTJhYmI0LzAvQjI4RTIwNTU5 MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2RTY3MkY0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjhFMjA1NTkxOURDNjQ5MUNCRTE1NDgwQUJENjdENjZFNjcy RjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFkZjI1NjktZTFmNC00YzY4LTg2 MTUtZTM5ZGNlNTJhYmI0LzAvQjI4RTIwNTU5MTlEQzY0OTFDQkUxNTQ4MEFCRDY3 RDY2RTY3MkY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhLltUUYEANjxKZg0GwlrHpsBi4zsXppaIT MJxx521XonrVaFRBd2ubUpusKwoI0q3ERrV7cDqAFwWP/aq5hcf2emh1MZmY4SZ9 S7lD1EnSHs/r6IGN2PF7lurNvXsgWFgNkf+v+CaQU4ZXyNkPfMlomQIE71zO2/Ee JB4z/OQ/CH3d43nqgXeX+hFgh85fR0BSQvQc7pqYVGb3mfk1b75IJ8QOdt6hRDjH FHAy9Ota9mxERtjw05Ms1nXTwsr2V7fbDb1hwtCzfqu3UW/YS6prapfJSf7FBJpn zXzyRZbkxBocCk01JE5xRc7ClZLhXbu15mIgOCw1irQx0WWynLY= -----END CERTIFICATE-----Generated at Tue Nov 10 11:13:54 2026 by rpki-client