$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: Rg9XFMIhuVKzYWO9hIiRQfyQJFoQMqOYq7c8ZOy+ftg= Subject key identifier: C6:0E:5D:55:9E:BB:B0:B4:7B:C9:D3:07:6D:F7:56:B7:16:D3:E9:53 Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 1E6727AF051FD8811BDB3E0CA2DC8528EFBD4D3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 23:23:27 +0000 Manifest this update: Sat 14 Nov 2026 23:18:27 +0000 Manifest next update: Mon 16 Nov 2026 03:16:27 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: Z3JekiRJR9DkSLsgBv3yWxqftWSgbED9TxI3rNwVv0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:67:27:af:05:1f:d8:81:1b:db:3e:0c:a2:dc:85:28:ef:bd:4d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Nov 14 23:18:27 2026 GMT Not After : Nov 16 03:16:27 2026 GMT Subject: CN=C60E5D559EBBB0B47BC9D3076DF756B716D3E953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:8f:5a:d0:fc:49:65:98:bb:cf:eb:aa:af: ec:58:65:fd:37:c8:c6:2e:c0:dc:49:ca:64:d8:80: 1f:46:0e:5b:d2:0c:f5:b6:67:87:29:5f:8a:cb:82: d4:82:25:4d:51:15:c5:17:45:41:93:8d:ef:ab:8f: 7d:4b:b3:90:56:c5:54:b7:5f:a0:f6:c1:85:7d:9e: 6b:9e:b9:aa:cc:36:5a:fa:72:07:43:88:6a:8b:95: c2:7c:e6:04:2b:04:56:ad:53:ef:72:fc:7a:47:e4: 94:00:2f:81:6d:21:93:ee:cb:9e:20:0e:2a:fd:23: 1f:b6:4e:c6:cc:f1:b5:be:2c:68:06:d8:a1:b6:99: 1a:77:5b:04:b8:40:84:49:fc:37:a0:f2:8c:6e:62: ec:a6:68:cd:04:5c:82:cf:50:d8:6c:46:25:d7:df: 62:31:54:21:86:f2:23:84:d5:9b:df:2c:ea:c7:70: 92:0d:44:38:ad:92:81:fe:3d:b6:31:12:e4:aa:4b: c2:35:81:fd:34:66:0e:bc:16:44:98:15:db:a1:3e: 52:5c:dd:cc:44:2c:6e:c1:74:5a:1e:73:d8:ab:db: c1:78:d7:13:dd:6a:1f:bd:b0:ec:fa:b6:ce:02:54: a5:3c:d0:a6:c3:12:85:4d:a0:24:7a:c2:1d:c2:9c: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0E:5D:55:9E:BB:B0:B4:7B:C9:D3:07:6D:F7:56:B7:16:D3:E9:53 X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2e:c3:63:8f:9e:50:aa:5b:c8:63:ac:69:37:0e:0c:07:1a: 7e:b9:0b:0b:ef:e3:6e:40:f0:cf:a2:4c:9f:52:8b:b9:ba:6c: 4c:c3:c4:da:00:67:bb:e7:c0:74:a5:8e:eb:b5:d1:74:00:3b: 4d:ee:9b:39:ef:9b:5c:b2:31:4d:16:e0:f1:2f:11:1f:95:df: 4b:d3:6f:3a:20:f3:8a:8d:68:16:86:02:21:cd:eb:8d:4c:32: 2e:47:70:32:54:c8:49:6d:d1:78:c0:e9:10:97:eb:e8:4d:68: c6:7d:72:64:5e:87:42:7d:d4:07:ec:d6:c1:34:0e:3b:54:78: 58:bc:8c:9a:6d:41:fc:a5:91:6e:43:e7:aa:8a:58:ee:13:b6: 4d:05:1c:53:0b:ce:a0:d4:77:cc:fe:76:20:5e:8c:b5:19:f8: af:06:22:c0:47:8d:0f:fb:f0:8d:8f:62:6f:4a:68:bf:47:04: 26:9a:ac:f7:c3:43:4b:33:47:11:d5:0f:b8:0c:0b:3e:fa:50: 76:0a:36:35:d0:5f:33:8a:dc:7e:a8:c0:dd:d2:a8:6c:a6:52: 57:28:2b:61:78:6c:24:16:e7:ba:e6:0f:15:ae:a9:80:ad:41: 6c:e8:dc:39:b2:e2:31:5b:42:55:97:fc:97:62:28:7c:c2:a0: 3e:e7:a1:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmcnrwUf2IEb2z4MotyFKO+9TTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjExMTQyMzE4MjdaFw0yNjExMTYwMzE2MjdaMDMxMTAvBgNV BAMTKEM2MEU1RDU1OUVCQkIwQjQ3QkM5RDMwNzZERjc1NkI3MTZEM0U5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXo9a0PxJZZi7z+uqr+xYZf03 yMYuwNxJymTYgB9GDlvSDPW2Z4cpX4rLgtSCJU1RFcUXRUGTje+rj31Ls5BWxVS3 X6D2wYV9nmueuarMNlr6cgdDiGqLlcJ85gQrBFatU+9y/HpH5JQAL4FtIZPuy54g Dir9Ix+2TsbM8bW+LGgG2KG2mRp3WwS4QIRJ/Deg8oxuYuymaM0EXILPUNhsRiXX 32IxVCGG8iOE1ZvfLOrHcJINRDitkoH+PbYxEuSqS8I1gf00Zg68FkSYFduhPlJc 3cxELG7BdFoec9ir28F41xPdah+9sOz6ts4CVKU80KbDEoVNoCR6wh3CnNinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxg5dVZ67sLR7ydMHbfdWtxbT6VMwHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACguw2OPnlCqW8hjrGk3DgwHGn65Cwvv425A 8M+iTJ9Si7m6bEzDxNoAZ7vnwHSljuu10XQAO03umznvm1yyMU0W4PEvER+V30vT bzog84qNaBaGAiHN641MMi5HcDJUyElt0XjA6RCX6+hNaMZ9cmReh0J91Afs1sE0 DjtUeFi8jJptQfylkW5D56qKWO4Ttk0FHFMLzqDUd8z+diBejLUZ+K8GIsBHjQ/7 8I2PYm9KaL9HBCaarPfDQ0szRxHVD7gMCz76UHYKNjXQXzOK3H6owN3SqGymUlco K2F4bCQW57rmDxWuqYCtQWzo3Dmy4jFbQlWX/JdiKHzCoD7noXI= -----END CERTIFICATE-----Generated at Sun Nov 15 16:59:20 2026 by rpki-client