$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: f7emfUMv3RdxghXqgY+EzxPP/m4WYGKDmgDH6m5oq1s= Subject key identifier: C2:43:C4:04:E3:35:FC:DE:BE:00:61:2E:0F:CA:FB:B1:6E:9F:B5:01 Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 3D15637C6792D9ACA857D9ACAE6BFC8387E9D762 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:48:54 +0000 Manifest this update: Sun 15 Nov 2026 03:43:54 +0000 Manifest next update: Mon 16 Nov 2026 06:32:54 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: gFDqSk5NLIq1yT+RdX5JtHAkWeEwwmT//jSlbBbF0DE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:15:63:7c:67:92:d9:ac:a8:57:d9:ac:ae:6b:fc:83:87:e9:d7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Nov 15 03:43:54 2026 GMT Not After : Nov 16 06:32:54 2026 GMT Subject: CN=C243C404E335FCDEBE00612E0FCAFBB16E9FB501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:4b:73:b9:71:e8:81:59:40:e3:8f:af:90: d2:53:f9:17:b7:28:01:82:7a:64:61:50:3a:93:3b: 03:d5:ea:7c:bc:f2:64:7e:9e:24:d1:8a:54:1a:51: 47:ca:c1:9a:2e:19:df:3e:6c:44:1b:88:7b:4f:8d: 93:e6:72:27:4d:5e:f4:70:bb:50:48:0c:58:67:36: 69:ab:d9:9a:6d:bd:fa:71:d7:3a:c1:2a:93:24:2c: 51:0a:ce:9a:f5:c3:07:85:50:cf:5f:cc:d7:4b:b7: 59:fb:c7:f8:50:80:7c:b9:ed:65:d2:ab:e3:a9:c9: 8a:a3:43:ab:fc:2e:26:9b:9a:0c:93:5e:df:9e:2b: b6:6d:d1:e2:1b:7a:bf:a8:44:9f:ee:05:45:be:b0: 83:53:89:7e:77:d6:88:ea:66:7b:1d:2b:89:a9:f9: 4c:e7:84:05:a3:39:72:1a:9c:c1:e6:50:69:19:ad: ce:6d:a3:f3:f3:1c:fe:67:9c:12:b7:52:5e:9d:af: 38:ac:87:4e:bb:e8:85:99:ef:c0:6a:8b:c4:c8:52: b2:88:b7:fe:2d:5f:db:47:7e:53:f9:ed:49:6f:69: bc:80:d2:6b:30:d6:f5:15:91:ea:95:70:bf:eb:a9: a3:f0:5e:ce:d4:f0:8a:83:25:7c:f9:b1:22:3d:e1: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:43:C4:04:E3:35:FC:DE:BE:00:61:2E:0F:CA:FB:B1:6E:9F:B5:01 X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8f:73:41:6f:21:39:64:e9:7d:83:5c:f5:16:b4:96:52:c7: 42:84:47:e2:9f:4d:da:53:6e:f1:6f:4f:ec:be:58:ae:c5:88: 4c:c2:f4:1d:af:4f:8c:4c:65:94:aa:0e:57:87:33:1e:8c:ac: ad:61:0b:0d:9b:ca:58:79:a6:b5:38:c7:2a:f8:29:89:9a:2e: 3e:e3:67:93:64:6a:49:48:57:b9:1a:49:31:5e:6d:52:d4:19: 3e:46:04:9a:c9:27:02:44:f6:01:c0:d6:c1:23:a2:ca:cd:4f: 0d:24:d3:51:cd:9c:8d:f6:26:05:27:81:56:8e:93:d7:e6:25: aa:96:00:5a:cc:fd:82:75:96:03:c4:33:83:f0:22:c1:21:cb: 1c:68:cd:ef:d7:53:04:fb:38:d1:3c:63:15:8b:4f:e6:bb:a2: 42:e9:20:45:8a:d9:a9:80:55:1d:9a:00:b0:2d:20:a2:f0:f5: 75:57:c1:78:ae:42:c7:dc:5b:92:5d:65:68:87:86:a6:56:c9: 99:db:ea:48:df:a0:36:cc:c2:c2:bf:1a:51:10:28:d9:ca:95: 45:41:eb:a1:b2:3c:12:48:4b:2b:9c:b1:50:25:77:09:52:81: 64:3d:a9:cc:28:98:65:f7:9a:d6:29:18:18:26:4d:30:18:08: 5b:01:76:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRVjfGeS2ayoV9msrmv8g4fp12IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjExMTUwMzQzNTRaFw0yNjExMTYwNjMyNTRaMDMxMTAvBgNV BAMTKEMyNDNDNDA0RTMzNUZDREVCRTAwNjEyRTBGQ0FGQkIxNkU5RkI1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tktzuXHogVlA44+vkNJT+Re3 KAGCemRhUDqTOwPV6ny88mR+niTRilQaUUfKwZouGd8+bEQbiHtPjZPmcidNXvRw u1BIDFhnNmmr2Zptvfpx1zrBKpMkLFEKzpr1wweFUM9fzNdLt1n7x/hQgHy57WXS q+OpyYqjQ6v8LiabmgyTXt+eK7Zt0eIber+oRJ/uBUW+sINTiX531ojqZnsdK4mp +UznhAWjOXIanMHmUGkZrc5to/PzHP5nnBK3Ul6drzish0676IWZ78Bqi8TIUrKI t/4tX9tHflP57UlvabyA0msw1vUVkeqVcL/rqaPwXs7U8IqDJXz5sSI94ef7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkPEBOM1/N6+AGEuD8r7sW6ftQEwHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGPc0FvITlk6X2DXPUWtJZSx0KER+KfTdpT bvFvT+y+WK7FiEzC9B2vT4xMZZSqDleHMx6MrK1hCw2bylh5prU4xyr4KYmaLj7j Z5NkaklIV7kaSTFebVLUGT5GBJrJJwJE9gHA1sEjosrNTw0k01HNnI32JgUngVaO k9fmJaqWAFrM/YJ1lgPEM4PwIsEhyxxoze/XUwT7ONE8YxWLT+a7okLpIEWK2amA VR2aALAtIKLw9XVXwXiuQsfcW5JdZWiHhqZWyZnb6kjfoDbMwsK/GlEQKNnKlUVB 66GyPBJISyucsVAldwlSgWQ9qcwomGX3mtYpGBgmTTAYCFsBdrE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:20:31 2026 by rpki-client