$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: q8rEBZFUkk0uu6tlBno8NDtCrfsRI6LsS1mVt6YVEIo= Subject key identifier: 2C:2A:15:A3:44:0A:D8:BA:CF:E0:7D:F4:D2:AC:9B:2C:FA:4C:68:7A Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 187F9C4C9970841B187BC602010199351065D5C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 10:27:01 +0000 Manifest this update: Sun 15 Nov 2026 10:22:01 +0000 Manifest next update: Mon 16 Nov 2026 14:00:01 +0000 Files and hashes: 1: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) 3: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: R8X5f2m3TJTaQp3EdlXmJG5kDqhHUcnAu8U96tl62Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7f:9c:4c:99:70:84:1b:18:7b:c6:02:01:01:99:35:10:65:d5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Nov 15 10:22:01 2026 GMT Not After : Nov 16 14:00:01 2026 GMT Subject: CN=2C2A15A3440AD8BACFE07DF4D2AC9B2CFA4C687A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:d2:3a:b7:fc:41:5b:2d:2e:93:41:52:92: f6:b7:1c:27:92:55:62:c5:e1:eb:24:d7:10:cd:81: 15:f9:ac:60:70:9c:99:04:d5:46:d9:68:1c:4d:21: 34:de:56:e9:30:c1:09:13:10:04:38:c8:c6:35:3e: ba:e8:45:e9:75:79:f7:4d:62:cb:3d:be:d2:54:c7: 87:50:df:5e:7f:ef:40:7f:d2:4b:99:df:b3:c9:cd: 25:f1:d9:cd:5e:f0:14:48:78:77:c3:2e:c5:a9:06: 46:2b:f0:8b:e2:4a:b1:41:d1:fe:17:35:ce:f9:41: 0c:61:fa:a0:d0:81:f2:1b:cd:f8:7d:e6:32:66:b0: 61:d5:c7:21:c6:4b:9b:94:cf:ae:47:33:1a:da:e4: 11:bb:50:ba:16:d0:a9:5a:29:81:b3:1c:fe:a3:e9: 29:c6:36:f8:d1:21:0a:0a:15:35:e8:e0:d7:a9:58: 10:f9:96:15:b4:c7:e0:f9:f3:d1:52:9a:f3:e5:ae: d5:c4:f3:80:77:de:58:73:fa:ef:82:eb:2d:7c:2b: dd:8e:94:fd:92:a0:1e:34:aa:00:86:39:ec:61:49: 07:57:06:4e:80:d9:08:fb:c9:16:65:7f:11:82:17: c9:b6:03:dc:9c:06:2d:01:34:61:cb:fc:d7:05:00: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:15:A3:44:0A:D8:BA:CF:E0:7D:F4:D2:AC:9B:2C:FA:4C:68:7A X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:af:8e:a8:4d:95:c3:4a:d4:44:e8:4d:35:d4:fc:ed:cf:ca: 5d:d9:6c:22:73:43:a9:1f:5f:35:fe:5e:b8:45:ed:91:03:70: 34:91:5f:9e:dc:4a:40:a1:01:ab:95:7c:01:dc:64:a1:49:cb: 16:e6:c5:84:fd:fa:20:a7:03:3c:a1:d5:5d:50:f9:2a:78:f7: 8d:e9:ab:e5:d9:e4:1a:c8:f6:43:db:9e:23:be:d0:a1:24:b8: 98:6e:54:c9:59:70:09:b9:a0:dd:40:df:13:a1:bb:03:db:89: ff:5e:e1:b4:91:3d:e6:83:69:d5:00:30:2f:1a:0c:a2:8d:8c: fd:6e:ee:63:aa:f3:aa:cb:f3:ba:2a:83:ac:fe:50:d8:fe:75: 29:d6:1e:4f:0a:db:2f:3a:fe:aa:28:f6:ce:16:a8:a0:e0:a5: c4:36:c8:9e:9b:2e:0e:a3:fe:bd:6d:f2:81:8e:b5:88:03:bf: 61:34:f6:c7:a1:40:00:63:ea:f0:fa:c0:bf:41:d1:dc:1e:7a: 0c:b5:f0:a7:cf:88:56:17:8f:e5:35:2a:88:20:92:ae:7f:da: a9:09:7a:ff:ec:5b:60:5c:1e:c2:b1:69:b2:37:db:09:29:b8: a8:92:8e:c0:32:7a:bd:48:10:b8:9c:99:96:6e:b5:7b:e6:b3: 17:f3:24:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGH+cTJlwhBsYe8YCAQGZNRBl1cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjExMTUxMDIyMDFaFw0yNjExMTYxNDAwMDFaMDMxMTAvBgNV BAMTKDJDMkExNUEzNDQwQUQ4QkFDRkUwN0RGNEQyQUM5QjJDRkE0QzY4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotNI6t/xBWy0uk0FSkva3HCeS VWLF4esk1xDNgRX5rGBwnJkE1UbZaBxNITTeVukwwQkTEAQ4yMY1PrroRel1efdN Yss9vtJUx4dQ315/70B/0kuZ37PJzSXx2c1e8BRIeHfDLsWpBkYr8IviSrFB0f4X Nc75QQxh+qDQgfIbzfh95jJmsGHVxyHGS5uUz65HMxra5BG7ULoW0KlaKYGzHP6j 6SnGNvjRIQoKFTXo4NepWBD5lhW0x+D589FSmvPlrtXE84B33lhz+u+C6y18K92O lP2SoB40qgCGOexhSQdXBk6A2Qj7yRZlfxGCF8m2A9ycBi0BNGHL/NcFAP2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCoVo0QK2LrP4H300qybLPpMaHowHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6vjqhNlcNK1EToTTXU/O3Pyl3ZbCJzQ6kf XzX+XrhF7ZEDcDSRX57cSkChAauVfAHcZKFJyxbmxYT9+iCnAzyh1V1Q+Sp4943p q+XZ5BrI9kPbniO+0KEkuJhuVMlZcAm5oN1A3xOhuwPbif9e4bSRPeaDadUAMC8a DKKNjP1u7mOq86rL87oqg6z+UNj+dSnWHk8K2y86/qoo9s4WqKDgpcQ2yJ6bLg6j /r1t8oGOtYgDv2E09sehQABj6vD6wL9B0dweegy18KfPiFYXj+U1Koggkq5/2qkJ ev/sW2BcHsKxabI32wkpuKiSjsAyer1IELicmZZutXvmsxfzJE8= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:33 2026 by rpki-client