$ rpki-client -vvvf rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.mft File: 780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.mft (raw, json) Hash identifier: dd6aohJq/nHjC3kZ9fJWbZCzXVVRq3nlzMKjDDHaWGU= Subject key identifier: 88:2D:8E:96:9F:64:17:34:6E:FC:F1:4B:13:B0:BD:DA:85:8F:62:B2 Authority key identifier: 78:08:35:68:3B:E7:28:BB:1D:EE:74:FD:B3:EC:5F:7D:82:64:ED:3E Certificate issuer: /CN=780835683BE728BB1DEE74FDB3EC5F7D8264ED3E Certificate serial: 4E078A66B914F4E7AAC3DA5028D2D2BC5477D965 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.mft Manifest number: 13 Signing time: Tue 10 Nov 2026 16:11:31 +0000 Manifest this update: Tue 10 Nov 2026 16:06:31 +0000 Manifest next update: Wed 11 Nov 2026 20:07:31 +0000 Files and hashes: 1: 3131362e36362e3233392e302f32342d3234203d3e20313535303535.roa (hash: lOzVYkM20dfZ48sSHtkewsvLxtREgKfTq8evNNXJ/1U=) 2: 780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.crl (hash: QBBjQRTqQPuBTKEGGcU+I7CT9t5hrg2hFuorDiotUz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.crl rsync://rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:07:8a:66:b9:14:f4:e7:aa:c3:da:50:28:d2:d2:bc:54:77:d9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780835683BE728BB1DEE74FDB3EC5F7D8264ED3E Validity Not Before: Nov 10 16:06:31 2026 GMT Not After : Nov 11 20:07:31 2026 GMT Subject: CN=882D8E969F6417346EFCF14B13B0BDDA858F62B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:e5:85:16:62:b6:ac:e1:5a:eb:85:6a:58: 1e:ab:bc:6a:0a:fa:c9:90:d5:bd:72:9a:1c:96:dd: 94:c9:23:7a:ac:e3:46:52:81:f5:60:08:92:fe:3c: 79:ab:3d:8e:e9:58:98:00:9a:a6:81:80:dd:1f:ac: 3e:2a:cb:b7:cf:a1:36:86:ef:ba:b9:ae:9d:c8:23: 76:09:82:4c:77:3c:25:fd:b3:84:17:ea:3b:67:ad: 51:02:7c:2c:31:2b:f9:60:12:b9:0c:b3:6e:05:44: b6:51:d3:5a:64:6e:b5:a3:16:59:33:cb:d3:86:72: ad:5c:38:9a:5e:d0:d7:0a:1c:9c:47:74:40:5b:74: 7a:d0:95:8f:f7:ef:9f:69:0e:4f:98:2d:10:bd:24: 37:e1:b7:0c:99:bf:cf:58:66:41:e1:c4:42:f1:f4: d0:31:21:c9:83:99:6a:2d:93:cf:68:4e:ee:71:cf: d9:ea:7f:f1:a5:87:45:84:ff:cb:26:35:e4:30:d5: 9a:b4:ce:ac:84:77:49:0f:20:c4:d2:00:54:68:4a: 5a:1a:5a:49:72:4a:d6:e0:94:3b:22:0e:fc:ac:59: 79:7a:dc:27:f4:f6:9c:dc:cf:9a:36:97:f2:05:3c: 5b:fc:3f:81:a6:23:dd:a7:ec:f8:2a:7c:fb:8f:09: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:8E:96:9F:64:17:34:6E:FC:F1:4B:13:B0:BD:DA:85:8F:62:B2 X509v3 Authority Key Identifier: keyid:78:08:35:68:3B:E7:28:BB:1D:EE:74:FD:B3:EC:5F:7D:82:64:ED:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/531a603d-ae6e-41bb-9599-c9e5274c8cca/0/780835683BE728BB1DEE74FDB3EC5F7D8264ED3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:23:f6:d5:da:80:f5:3d:a4:6c:48:ab:84:9f:bf:62:33:15: 58:8f:e8:69:22:60:0c:69:e9:eb:83:4d:3c:2f:e4:f1:71:65: 5a:63:54:f2:73:c3:03:8b:43:5b:fc:af:78:0c:ba:ca:86:0d: df:17:26:db:f1:88:b6:5d:17:9f:01:a2:7d:0c:b8:98:71:ff: 62:f5:da:5f:5a:0b:11:5e:39:23:b3:15:f4:d2:8d:19:51:28: 47:61:b1:8e:d4:b2:d1:fa:56:b6:b1:f1:ff:0f:a1:ef:af:9d: 02:2d:95:a5:25:bd:eb:db:df:08:0b:a5:4d:bb:4e:4e:69:cf: 27:b1:31:10:4b:64:e1:80:39:27:64:29:7c:a8:aa:3c:9d:8c: 5e:61:0f:ce:31:fa:6e:74:2d:92:dd:bb:0b:97:df:c2:52:74: d3:f3:8f:57:38:16:8d:d6:a9:be:5f:02:da:e8:05:0e:db:74: d3:ba:93:80:4d:3c:ae:53:25:c3:84:50:08:7c:60:d0:bb:26: 7e:27:5b:9b:3d:29:9e:d8:bc:9b:40:df:33:02:05:71:e7:14: fc:bc:84:50:65:b6:6e:1c:60:21:87:a4:bb:40:ea:04:3b:67: 56:c5:05:d9:2a:21:38:72:a7:91:9e:2c:7b:23:37:9b:c4:99: c7:35:27:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgeKZrkU9Oeqw9pQKNLSvFR32WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgwODM1NjgzQkU3MjhCQjFERUU3NEZEQjNFQzVGN0Q4 MjY0RUQzRTAeFw0yNjExMTAxNjA2MzFaFw0yNjExMTEyMDA3MzFaMDMxMTAvBgNV BAMTKDg4MkQ4RTk2OUY2NDE3MzQ2RUZDRjE0QjEzQjBCRERBODU4RjYyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7eWFFmK2rOFa64VqWB6rvGoK +smQ1b1ymhyW3ZTJI3qs40ZSgfVgCJL+PHmrPY7pWJgAmqaBgN0frD4qy7fPoTaG 77q5rp3II3YJgkx3PCX9s4QX6jtnrVECfCwxK/lgErkMs24FRLZR01pkbrWjFlkz y9OGcq1cOJpe0NcKHJxHdEBbdHrQlY/3759pDk+YLRC9JDfhtwyZv89YZkHhxELx 9NAxIcmDmWotk89oTu5xz9nqf/Glh0WE/8smNeQw1Zq0zqyEd0kPIMTSAFRoSloa WklyStbglDsiDvysWXl63Cf09pzcz5o2l/IFPFv8P4GmI92n7PgqfPuPCY3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiC2Olp9kFzRu/PFLE7C92oWPYrIwHwYDVR0j BBgwFoAUeAg1aDvnKLsd7nT9s+xffYJk7T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMxYTYwM2QtYWU2ZS00MWJiLTk1OTktYzllNTI3NGM4Y2NhLzAvNzgwODM1Njgz QkU3MjhCQjFERUU3NEZEQjNFQzVGN0Q4MjY0RUQzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODA4MzU2ODNCRTcyOEJCMURFRTc0RkRCM0VDNUY3RDgyNjRF RDNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMxYTYwM2QtYWU2ZS00MWJiLTk1 OTktYzllNTI3NGM4Y2NhLzAvNzgwODM1NjgzQkU3MjhCQjFERUU3NEZEQjNFQzVG N0Q4MjY0RUQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwj9tXagPU9pGxIq4Sfv2IzFViP6GkiYAxp 6euDTTwv5PFxZVpjVPJzwwOLQ1v8r3gMusqGDd8XJtvxiLZdF58Bon0MuJhx/2L1 2l9aCxFeOSOzFfTSjRlRKEdhsY7UstH6Vrax8f8Poe+vnQItlaUlvevb3wgLpU27 Tk5pzyexMRBLZOGAOSdkKXyoqjydjF5hD84x+m50LZLduwuX38JSdNPzj1c4Fo3W qb5fAtroBQ7bdNO6k4BNPK5TJcOEUAh8YNC7Jn4nW5s9KZ7YvJtA3zMCBXHnFPy8 hFBltm4cYCGHpLtA6gQ7Z1bFBdkqIThyp5GeLHsjN5vEmcc1J2U= -----END CERTIFICATE-----Generated at Wed Nov 11 03:56:07 2026 by rpki-client