$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json) Hash identifier: w7VoqzRwVZqWkAADdj8cnu3lIrg1p8YItocF3GQp/8o= Subject key identifier: 28:82:12:8E:1C:2E:0B:40:50:B7:33:2F:69:39:9A:C1:47:37:B2:8B Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Certificate serial: 119B9F13770E4EEC86AA2EC326D4FFF17478CAD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:05:33 +0000 Manifest this update: Sun 15 Nov 2026 09:00:33 +0000 Manifest next update: Mon 16 Nov 2026 12:02:33 +0000 Files and hashes: 1: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: vqQ+WUiL9HLvA2pr+qdVsf4ctQEhZbhJc1tDzO1Zw5k=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9b:9f:13:77:0e:4e:ec:86:aa:2e:c3:26:d4:ff:f1:74:78:ca:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Validity Not Before: Nov 15 09:00:33 2026 GMT Not After : Nov 16 12:02:33 2026 GMT Subject: CN=2882128E1C2E0B4050B7332F69399AC14737B28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:cb:f0:82:56:52:df:fa:12:fc:0a:fa:3f: ae:4a:66:d5:4a:a5:df:d6:e1:99:ca:42:96:7b:f9: a7:1e:65:63:7e:82:f9:b7:c1:7f:38:77:ce:d9:28: d4:a1:4e:41:7f:c9:b2:b4:26:71:e4:7f:4f:94:c5: 2c:c7:0e:c3:06:ca:09:50:44:46:4a:04:ac:3d:26: fe:7d:ca:41:aa:70:ea:12:46:c7:de:c9:0e:9a:1d: f0:0a:e9:42:96:59:2c:17:db:14:64:90:18:f9:7b: 9a:2f:08:22:61:2f:cb:fe:e9:f5:8a:ec:a0:8d:99: c2:9b:e4:3d:07:01:06:31:81:d9:95:ef:fe:13:40: ec:32:5f:f6:70:f1:61:27:8e:e0:71:23:6b:19:eb: 21:de:cd:1d:7f:ea:96:a9:1e:3f:30:fc:27:21:ee: 9d:3b:0f:6a:3d:5f:18:41:16:0b:73:78:a9:23:05: cf:90:80:c2:7d:db:c4:60:50:1f:d9:c8:bb:f1:92: 5d:1f:41:85:be:df:e5:ff:7f:0a:15:99:55:92:f7: 91:6f:20:17:a2:f1:20:50:f8:28:8f:a3:c3:8c:e7: 4a:da:a5:dd:17:b7:43:96:dc:e7:7b:4f:e5:b6:d1: 41:99:bd:0b:56:b3:09:d2:71:17:ab:09:84:50:56: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:12:8E:1C:2E:0B:40:50:B7:33:2F:69:39:9A:C1:47:37:B2:8B X509v3 Authority Key Identifier: keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:3c:c9:a4:d7:5d:f2:13:d8:26:16:ee:69:64:8d:e7:5a: 9e:7f:af:f0:b3:42:8a:3d:68:b0:b6:6b:c9:a4:b1:10:53:fa: a7:10:00:c8:37:40:27:0a:01:bf:41:d2:5e:a9:2f:ce:b7:00: 53:7c:40:aa:92:63:e3:e0:1b:54:5c:58:49:18:92:b1:fd:4b: 56:17:cf:be:55:7a:3f:b2:72:1f:42:4b:00:c4:ee:39:6c:63: b7:06:5f:42:9a:e8:0c:ec:73:84:a7:73:6b:6c:33:8c:52:be: 9c:d7:34:e7:83:65:74:09:e9:ec:1f:cf:e3:26:68:15:c1:d2: 88:83:f6:ea:c8:e3:b2:8e:97:c9:01:a5:fc:38:d1:cf:93:6f: fe:81:2a:dd:df:0c:ac:db:56:69:61:af:a8:12:d6:d8:01:e9: aa:7c:0e:05:c4:af:25:65:19:42:97:4f:4a:3d:44:98:5e:f4: 6b:f0:8a:88:18:fa:33:57:de:32:a3:d0:43:0d:3c:b9:71:d2: 84:fe:62:74:44:8b:fa:68:7b:4a:a1:8d:e6:c6:af:3a:bc:a1: 6c:21:99:8d:f1:b4:29:0f:fe:7e:a5:03:db:44:51:b4:d0:f3: 2a:c8:af:0c:8f:aa:6e:78:db:4b:4d:2c:6b:87:9a:44:84:80: e9:f3:73:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZufE3cOTuyGqi7DJtT/8XR4ytQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2MzlG MUY1RTQ4NzAeFw0yNjExMTUwOTAwMzNaFw0yNjExMTYxMjAyMzNaMDMxMTAvBgNV BAMTKDI4ODIxMjhFMUMyRTBCNDA1MEI3MzMyRjY5Mzk5QUMxNDczN0IyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eMvwglZS3/oS/Ar6P65KZtVK pd/W4ZnKQpZ7+aceZWN+gvm3wX84d87ZKNShTkF/ybK0JnHkf0+UxSzHDsMGyglQ REZKBKw9Jv59ykGqcOoSRsfeyQ6aHfAK6UKWWSwX2xRkkBj5e5ovCCJhL8v+6fWK 7KCNmcKb5D0HAQYxgdmV7/4TQOwyX/Zw8WEnjuBxI2sZ6yHezR1/6papHj8w/Cch 7p07D2o9XxhBFgtzeKkjBc+QgMJ928RgUB/ZyLvxkl0fQYW+3+X/fwoVmVWS95Fv IBei8SBQ+CiPo8OM50rapd0Xt0OW3Od7T+W20UGZvQtWswnScRerCYRQVjpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIISjhwuC0BQtzMvaTmawUc3soswHwYDVR0j BBgwFoAUcUaL7MU7ljJThe2Lsy82OfH15IcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJkYmQ3ODUtNmJjYS00OTNiLThhNjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUND NTNCOTYzMjUzODVFRDhCQjMyRjM2MzlGMUY1RTQ4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVF NDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2 MzlGMUY1RTQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH7PMmk113yE9gmFu5pZI3nWp5/r/CzQoo9 aLC2a8mksRBT+qcQAMg3QCcKAb9B0l6pL863AFN8QKqSY+PgG1RcWEkYkrH9S1YX z75Vej+ych9CSwDE7jlsY7cGX0Ka6Azsc4Snc2tsM4xSvpzXNOeDZXQJ6ewfz+Mm aBXB0oiD9urI47KOl8kBpfw40c+Tb/6BKt3fDKzbVmlhr6gS1tgB6ap8DgXEryVl GUKXT0o9RJhe9GvwiogY+jNX3jKj0EMNPLlx0oT+YnREi/poe0qhjebGrzq8oWwh mY3xtCkP/n6lA9tEUbTQ8yrIrwyPqm5420tNLGuHmkSEgOnzc6Q= -----END CERTIFICATE-----Generated at Sun Nov 15 11:55:31 2026 by rpki-client