$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft File: CDA698011D10F436E3BBC31664239B3150C53C19.mft (raw, json) Hash identifier: ZPzUUQ01IH0UduN3Ai8X5Lq9tDs9hvzAuBN3wBnSNR0= Subject key identifier: 7C:C7:A0:60:20:78:CB:6A:CC:C1:46:DC:64:B9:24:E8:C8:1D:B5:DE Authority key identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 Certificate issuer: /CN=CDA698011D10F436E3BBC31664239B3150C53C19 Certificate serial: 1C80142D48033CD808CE185C1C7AED43150B2F85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft Manifest number: 23 Signing time: Sun 15 Nov 2026 06:06:44 +0000 Manifest this update: Sun 15 Nov 2026 06:01:44 +0000 Manifest next update: Mon 16 Nov 2026 09:03:44 +0000 Files and hashes: 1: 3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa (hash: ZVz1K3VmS9pSvR4B6qvtVOc38rvIm8D4hBzA2h5rzlI=) 2: CDA698011D10F436E3BBC31664239B3150C53C19.crl (hash: 3ri1/iLciTR+apLcH17BhDCCHwPfQCi3ax8o0moHH6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:80:14:2d:48:03:3c:d8:08:ce:18:5c:1c:7a:ed:43:15:0b:2f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA698011D10F436E3BBC31664239B3150C53C19 Validity Not Before: Nov 15 06:01:44 2026 GMT Not After : Nov 16 09:03:44 2026 GMT Subject: CN=7CC7A0602078CB6ACCC146DC64B924E8C81DB5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:85:af:89:b9:61:16:51:3d:0e:b8:30:1a: 6d:90:f8:fa:bb:f5:62:76:af:5e:01:82:a5:cc:2f: b6:f5:26:86:ab:4a:09:88:0a:1f:92:41:6d:fc:c2: d8:c2:f3:ba:fc:f9:d3:59:61:1d:8e:ef:8e:93:fe: 33:f7:53:b4:08:1e:ea:4e:47:b6:b4:91:c8:41:ac: 1b:f6:75:36:41:ef:e0:42:ea:7c:d5:2f:3b:d7:5e: 1f:fc:af:c7:60:ab:01:30:37:32:70:09:64:c7:fd: 00:66:8b:49:df:39:f3:c2:3d:2e:2e:f1:97:1e:2b: e2:26:99:39:4d:39:37:a0:e2:50:88:85:c7:c2:8f: 12:8c:90:1b:19:02:34:99:e3:cd:93:6c:ac:3b:97: 71:07:18:3c:c9:22:08:e8:db:3c:ef:c2:da:f8:f6: 49:f4:03:02:e9:2a:fa:94:91:81:5c:bc:3f:a9:ab: d0:74:31:46:a5:c1:5d:94:85:32:da:c0:38:37:af: 2b:76:57:40:bb:be:e2:e6:70:4b:a7:49:e8:8d:04: d6:aa:b5:0b:f7:ef:c0:ea:90:61:a5:2f:0d:70:ac: 92:5e:1f:ea:c0:07:8f:a5:9d:09:37:b1:70:22:0f: c7:d0:b4:cf:04:71:95:16:90:20:ec:00:a3:83:aa: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C7:A0:60:20:78:CB:6A:CC:C1:46:DC:64:B9:24:E8:C8:1D:B5:DE X509v3 Authority Key Identifier: keyid:CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9c:cf:66:c1:4a:6b:6d:1b:15:e2:a5:dc:d7:91:5c:a8:76: 3a:52:39:cb:19:f4:bc:ac:6a:84:15:71:ea:ab:b3:1f:bb:ac: 4e:e9:f3:03:c8:c2:28:58:aa:53:38:f9:e5:53:8f:2c:fc:78: 35:3d:e6:a8:76:89:f8:61:a6:2f:90:0d:07:28:a6:5e:b0:ea: 51:ff:62:37:96:c6:52:4a:01:09:95:a2:cd:d2:c6:da:5a:7f: 91:50:fe:bd:be:1a:81:ee:9a:eb:ef:1e:58:16:a8:d0:50:cc: 1a:25:8b:c7:f2:7a:6e:77:3b:0c:da:ac:93:43:b7:61:8c:e4: 92:e9:ce:ad:7e:a3:77:04:b2:c4:ec:7f:7e:69:37:f9:1e:e1: 85:65:e0:30:0b:8c:6d:c0:23:71:87:5c:1c:78:91:c4:d2:27: 28:ed:cb:a7:b0:26:eb:f0:02:7e:ea:23:a4:35:05:23:44:8d: e2:07:7c:93:e6:2a:45:1d:a5:41:50:b3:b4:a8:42:82:25:d1: 98:30:60:65:1c:63:61:3b:09:7f:bb:8f:59:6a:e3:34:49:07: 6b:b2:16:10:df:5b:06:b9:5f:fe:9c:ef:53:89:86:8b:fd:4c: 6b:af:fe:3f:04:36:44:dd:ed:5a:c7:f0:75:4f:be:57:bd:25: c4:d1:71:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIAULUgDPNgIzhhcHHrtQxULL4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1 MEM1M0MxOTAeFw0yNjExMTUwNjAxNDRaFw0yNjExMTYwOTAzNDRaMDMxMTAvBgNV BAMTKDdDQzdBMDYwMjA3OENCNkFDQ0MxNDZEQzY0QjkyNEU4QzgxREI1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBYWviblhFlE9DrgwGm2Q+Pq7 9WJ2r14BgqXML7b1JoarSgmICh+SQW38wtjC87r8+dNZYR2O746T/jP3U7QIHupO R7a0kchBrBv2dTZB7+BC6nzVLzvXXh/8r8dgqwEwNzJwCWTH/QBmi0nfOfPCPS4u 8ZceK+ImmTlNOTeg4lCIhcfCjxKMkBsZAjSZ482TbKw7l3EHGDzJIgjo2zzvwtr4 9kn0AwLpKvqUkYFcvD+pq9B0MUalwV2UhTLawDg3ryt2V0C7vuLmcEunSeiNBNaq tQv378DqkGGlLw1wrJJeH+rAB4+lnQk3sXAiD8fQtM8EcZUWkCDsAKODqk4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMegYCB4y2rMwUbcZLkk6Mgdtd4wHwYDVR0j BBgwFoAUzaaYAR0Q9Dbju8MWZCObMVDFPBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIwMWI4OTUtNTNjNi00YTIxLWEyYzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDEx RDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1MEM1M0MxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DREE2OTgwMTFEMTBGNDM2RTNCQkMzMTY2NDIzOUIzMTUwQzUz QzE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIwMWI4OTUtNTNjNi00YTIxLWEy YzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlC MzE1MEM1M0MxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGcz2bBSmttGxXipdzXkVyodjpSOcsZ9Lys aoQVceqrsx+7rE7p8wPIwihYqlM4+eVTjyz8eDU95qh2ifhhpi+QDQcopl6w6lH/ YjeWxlJKAQmVos3Sxtpaf5FQ/r2+GoHumuvvHlgWqNBQzBoli8fyem53OwzarJND t2GM5JLpzq1+o3cEssTsf35pN/ke4YVl4DALjG3AI3GHXBx4kcTSJyjty6ewJuvw An7qI6Q1BSNEjeIHfJPmKkUdpUFQs7SoQoIl0ZgwYGUcY2E7CX+7j1lq4zRJB2uy FhDfWwa5X/6c71OJhov9TGuv/j8ENkTd7VrH8HVPvle9JcTRcU4= -----END CERTIFICATE-----Generated at Sun Nov 15 20:57:12 2026 by rpki-client