$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft File: 257400396282690A629EEAC8D9AE6FFBDA48213E.mft (raw, json) Hash identifier: KU+J5q8KsjfhQf2xfuCANgH5EAi57fVh1aB54aBoMLQ= Subject key identifier: 42:5F:BF:06:F3:4D:E1:F2:92:67:53:E1:EA:D5:A3:83:54:6A:CB:72 Authority key identifier: 25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E Certificate issuer: /CN=257400396282690A629EEAC8D9AE6FFBDA48213E Certificate serial: 01AA150FEF8BF86682201CCE00C0C259701B34A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft Manifest number: 11 Signing time: Sun 15 Nov 2026 10:37:07 +0000 Manifest this update: Sun 15 Nov 2026 10:32:07 +0000 Manifest next update: Mon 16 Nov 2026 12:17:07 +0000 Files and hashes: 1: 3136332e35322e3230302e302f32332d3234203d3e20313534393236.roa (hash: uyIJ2Z4ScpSTnFTUd/7BFjto0Eh1ZVPBoc/68apK7UI=) 2: 257400396282690A629EEAC8D9AE6FFBDA48213E.crl (hash: PJ319GfMHy8MOUByhMAXbgrToR62bYiKmR0iq0jxEnM=) 3: 323030313a6466373a383863303a3a2f34382d3438203d3e20313534393236.roa (hash: HlKOT+vq+T4578ocYwg+C7z65kYJxA9tLfoH5XFqm08=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.crl rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:aa:15:0f:ef:8b:f8:66:82:20:1c:ce:00:c0:c2:59:70:1b:34:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257400396282690A629EEAC8D9AE6FFBDA48213E Validity Not Before: Nov 15 10:32:07 2026 GMT Not After : Nov 16 12:17:07 2026 GMT Subject: CN=425FBF06F34DE1F2926753E1EAD5A383546ACB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:de:82:c4:d3:72:f7:1f:03:84:ad:56:b7: 8b:f7:b0:33:7a:70:0d:83:e6:47:bf:4b:96:70:ca: 4d:d7:a7:7c:da:ba:79:e1:96:39:a3:1d:21:94:fe: 3e:f6:3a:97:af:0a:bb:d6:02:aa:54:46:df:39:c7: 2c:c3:32:bb:54:f8:18:3d:d9:e7:0e:27:5b:ca:2f: a8:aa:93:b3:80:11:17:c8:a9:c6:83:49:8e:75:5a: 29:61:34:66:88:c5:46:fb:f0:a9:2c:33:3f:17:2a: 23:13:fd:a1:7f:a2:10:8d:f8:14:05:cb:0c:05:ee: f5:56:4e:bf:38:60:dd:37:7b:f5:60:05:25:bc:82: ab:dc:74:5d:be:5d:b9:9b:6f:3e:57:43:36:8f:e5: 39:e4:31:cd:bb:7e:d7:7c:a6:97:03:36:48:e1:32: 8b:b0:a3:01:a0:b8:cb:6f:14:b5:98:15:c2:b9:65: f7:ee:98:0f:68:2f:eb:de:4b:5b:36:e4:90:b6:a6: a5:ab:ee:e0:cd:5c:bb:7b:2f:24:a0:48:7d:e3:40: 3b:1e:ce:1b:d8:37:42:dc:61:90:80:04:0d:f2:cb: dc:d9:27:2b:fe:c0:41:fa:3b:7f:be:04:97:f9:d2: 25:cf:2b:e8:a8:3c:3f:dc:ed:39:14:7d:9f:a4:87: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:BF:06:F3:4D:E1:F2:92:67:53:E1:EA:D5:A3:83:54:6A:CB:72 X509v3 Authority Key Identifier: keyid:25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:79:a9:ee:7d:de:d9:b3:57:0f:40:33:c9:dd:1e:a1:94:11: 9e:8b:00:1a:70:0c:42:ec:58:1b:30:07:44:93:89:73:a4:f1: 32:8f:f1:41:42:2d:38:50:37:9a:11:25:fb:08:c7:0e:ec:3f: e4:6c:4f:28:b3:68:ae:2c:77:5e:78:a3:42:42:52:0f:fe:14: 36:0d:d6:b5:b1:a5:86:7f:f4:44:09:e7:d0:7d:d1:c1:64:88: 7c:3b:cf:23:a8:02:80:38:65:cc:2e:6d:8a:d7:33:77:58:b3: 9d:8a:d2:fd:6c:dc:d6:29:61:84:0d:fe:4d:87:8e:69:f3:91: 90:ff:f6:20:d7:a6:89:20:01:a5:a5:32:71:f2:c7:b3:ab:09: 07:89:42:38:70:41:d5:db:e9:f8:62:4a:cb:ce:8c:da:f1:0d: 29:21:a3:67:d7:64:f6:f0:3a:a6:2c:24:94:3c:ec:05:fa:be: ef:c9:72:fa:24:d4:4e:bf:cf:27:b4:33:9d:10:63:71:6a:49: 65:6e:4d:e0:4c:31:7a:9f:df:37:b5:85:1d:e1:67:7e:64:7f: 8e:41:92:b8:2f:18:e4:90:d3:11:22:00:9f:ff:80:da:69:84: 35:3d:61:70:a4:7c:e2:d4:05:6f:da:82:8c:e2:15:45:cf:a1: 70:0e:4a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaoVD++L+GaCIBzOAMDCWXAbNKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3NDAwMzk2MjgyNjkwQTYyOUVFQUM4RDlBRTZGRkJE QTQ4MjEzRTAeFw0yNjExMTUxMDMyMDdaFw0yNjExMTYxMjE3MDdaMDMxMTAvBgNV BAMTKDQyNUZCRjA2RjM0REUxRjI5MjY3NTNFMUVBRDVBMzgzNTQ2QUNCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBt6CxNNy9x8DhK1Wt4v3sDN6 cA2D5ke/S5Zwyk3Xp3zaunnhljmjHSGU/j72OpevCrvWAqpURt85xyzDMrtU+Bg9 2ecOJ1vKL6iqk7OAERfIqcaDSY51WilhNGaIxUb78KksMz8XKiMT/aF/ohCN+BQF ywwF7vVWTr84YN03e/VgBSW8gqvcdF2+Xbmbbz5XQzaP5TnkMc27ftd8ppcDNkjh MouwowGguMtvFLWYFcK5ZffumA9oL+veS1s25JC2pqWr7uDNXLt7LySgSH3jQDse zhvYN0LcYZCABA3yy9zZJyv+wEH6O3++BJf50iXPK+ioPD/c7TkUfZ+kh0/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQl+/BvNN4fKSZ1Ph6tWjg1Rqy3IwHwYDVR0j BBgwFoAUJXQAOWKCaQpinurI2a5v+9pIIT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2E4Y2RiYWUtYzY3Yi00ZTllLTliNWQtYjY0OTM3ZGE4ZGVmLzAvMjU3NDAwMzk2 MjgyNjkwQTYyOUVFQUM4RDlBRTZGRkJEQTQ4MjEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTc0MDAzOTYyODI2OTBBNjI5RUVBQzhEOUFFNkZGQkRBNDgy MTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2E4Y2RiYWUtYzY3Yi00ZTllLTli NWQtYjY0OTM3ZGE4ZGVmLzAvMjU3NDAwMzk2MjgyNjkwQTYyOUVFQUM4RDlBRTZG RkJEQTQ4MjEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF5qe593tmzVw9AM8ndHqGUEZ6LABpwDELs WBswB0STiXOk8TKP8UFCLThQN5oRJfsIxw7sP+RsTyizaK4sd154o0JCUg/+FDYN 1rWxpYZ/9EQJ59B90cFkiHw7zyOoAoA4ZcwubYrXM3dYs52K0v1s3NYpYYQN/k2H jmnzkZD/9iDXpokgAaWlMnHyx7OrCQeJQjhwQdXb6fhiSsvOjNrxDSkho2fXZPbw OqYsJJQ87AX6vu/Jcvok1E6/zye0M50QY3FqSWVuTeBMMXqf3ze1hR3hZ35kf45B krgvGOSQ0xEiAJ//gNpphDU9YXCkfOLUBW/agoziFUXPoXAOSho= -----END CERTIFICATE-----Generated at Sun Nov 15 17:17:22 2026 by rpki-client