$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft File: C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft (raw, json) Hash identifier: BgoA1ejncZD5fg7cBGYh/ZPtuwAUPUKZTGdaFVvIcNQ= Subject key identifier: 5E:24:D0:AD:97:5E:00:1B:1D:3D:79:B4:AC:4E:AC:42:94:16:B1:ED Authority key identifier: C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6 Certificate issuer: /CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6 Certificate serial: 6F09B78119B3BA25E62E70D9D8210AAD2DBB5345 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 20:09:48 +0000 Manifest this update: Sat 14 Nov 2026 20:04:48 +0000 Manifest next update: Sun 15 Nov 2026 20:43:48 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: UXkd0faoisOkStofIDAfK2htT8/ITEfQcEcnGH3OuXg=) 2: C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl (hash: ah5utI3ggOAD7vFIWolzuiiTLzZ1PlsHgT767hvxVwY=) 3: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: FJISYiehb+isZLmdCEovtMtqPbmkmTJQ7IEYdacbi0g=) 4: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: n0alGDAQHzfwa/TCA71GvBc0gKSVwlNBnQQN05lyfzo=) 5: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: rLDPQJO68wJrimu4TJs2pIl/cXWHfaWgrJapXpkI9R8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:09:b7:81:19:b3:ba:25:e6:2e:70:d9:d8:21:0a:ad:2d:bb:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6 Validity Not Before: Nov 14 20:04:48 2026 GMT Not After : Nov 15 20:43:48 2026 GMT Subject: CN=5E24D0AD975E001B1D3D79B4AC4EAC429416B1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:8b:07:a1:11:80:ab:52:88:94:74:e3:d8: 08:84:1c:bd:a6:b8:bd:bb:2d:9e:38:2a:ed:3d:a4: 27:5d:76:59:3f:a7:19:30:a9:90:73:11:45:4b:f9: c1:c2:52:2e:03:a4:57:ec:8c:92:67:c9:33:e0:e3: 3e:d5:ba:3b:14:3a:ed:b9:ff:b2:f5:09:1e:ec:fd: 0d:e6:e0:04:ca:c9:e1:59:b8:7f:de:66:e4:c6:08: 53:4a:41:66:8b:db:ff:6b:05:c3:ee:b0:8f:ba:fd: 02:d8:37:c4:de:58:35:73:02:8c:b3:ce:11:72:9a: 7a:3e:ca:19:01:7f:84:1e:09:ef:79:5e:2a:f6:93: 46:be:26:25:ea:da:2b:4d:da:e0:99:21:12:0f:ff: df:9b:a4:5d:7c:f3:00:51:4f:72:bc:fd:07:e5:d7: 7e:3d:4a:cf:13:96:ac:8b:be:19:e5:85:f2:4c:5c: b5:fb:2d:bd:a6:72:7f:48:e0:2c:ca:91:29:e5:25: ff:81:50:35:de:3e:78:95:77:68:7f:ab:95:59:60: f3:3e:44:4c:b6:3e:21:5c:37:07:ee:53:04:9a:ba: 85:1d:de:b3:7a:45:a7:48:5d:dc:f0:3e:cb:b0:0a: 3c:7b:1d:37:3a:eb:f4:80:b7:fc:62:1d:4b:65:a6: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:D0:AD:97:5E:00:1B:1D:3D:79:B4:AC:4E:AC:42:94:16:B1:ED X509v3 Authority Key Identifier: keyid:C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:e1:32:27:5b:95:26:24:6e:4a:78:3a:f9:af:fc:a4:fe: 47:34:08:7d:e0:af:50:69:3c:d8:e8:31:83:91:6d:fe:27:69: ed:ee:6c:4b:df:7c:97:96:d5:67:cb:6b:13:ff:07:79:88:c7: 28:2c:f9:28:07:98:b6:7a:7b:5c:93:32:d7:4b:ad:bc:52:00: fb:64:4a:9b:3f:66:97:4d:ac:99:44:a9:ba:f3:a2:96:79:9c: 30:d9:35:2e:de:b1:18:8c:00:6f:a4:e1:32:97:9c:63:3e:08: 13:5d:16:7e:91:08:48:3d:14:1b:e6:4f:fe:3e:d6:12:98:e4: f8:99:33:7c:19:b6:d6:18:3b:76:af:e3:bf:e6:81:42:b4:13: 7f:fe:23:15:17:ba:b5:56:1d:31:bd:76:cf:18:b8:58:ec:3a: 3c:97:84:8d:92:79:31:61:ae:74:04:d2:34:2e:2a:6e:8a:ba: 3f:a0:a2:b4:e0:d5:77:e4:6a:50:ad:ba:90:c0:b1:b4:1f:71: 81:5c:cb:db:31:63:25:0a:23:d0:a7:c4:7e:c1:8e:5a:95:a3: 5e:55:8a:39:80:0e:2d:46:ef:26:18:4e:50:97:a0:41:c9:f9: 74:a3:63:01:f6:02:2b:0e:1d:e9:be:a8:b0:4a:45:a4:31:ab: 40:5f:e1:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwm3gRmzuiXmLnDZ2CEKrS27U0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExMDcxNjBFRDE5MzgwQTJBMzU5MzQyMzBEREJENEVC RkNENkJCNjAeFw0yNjExMTQyMDA0NDhaFw0yNjExMTUyMDQzNDhaMDMxMTAvBgNV BAMTKDVFMjREMEFEOTc1RTAwMUIxRDNENzlCNEFDNEVBQzQyOTQxNkIxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3YsHoRGAq1KIlHTj2AiEHL2m uL27LZ44Ku09pCdddlk/pxkwqZBzEUVL+cHCUi4DpFfsjJJnyTPg4z7VujsUOu25 /7L1CR7s/Q3m4ATKyeFZuH/eZuTGCFNKQWaL2/9rBcPusI+6/QLYN8TeWDVzAoyz zhFymno+yhkBf4QeCe95Xir2k0a+JiXq2itN2uCZIRIP/9+bpF188wBRT3K8/Qfl 1349Ss8TlqyLvhnlhfJMXLX7Lb2mcn9I4CzKkSnlJf+BUDXePniVd2h/q5VZYPM+ REy2PiFcNwfuUwSauoUd3rN6RadIXdzwPsuwCjx7HTc66/SAt/xiHUtlpoJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXiTQrZdeABsdPXm0rE6sQpQWse0wHwYDVR0j BBgwFoAUwRBxYO0ZOAoqNZNCMN29Tr/Na7YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJkNDkxNzktNGQ4Yi00ZDJkLWFiZjQtNDMyMzFkZWI1YjAxLzAvQzExMDcxNjBF RDE5MzgwQTJBMzU5MzQyMzBEREJENEVCRkNENkJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTEwNzE2MEVEMTkzODBBMkEzNTkzNDIzMEREQkQ0RUJGQ0Q2 QkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvQzExMDcxNjBFRDE5MzgwQTJBMzU5MzQyMzBEREJE NEVCRkNENkJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyL4TInW5UmJG5KeDr5r/yk/kc0CH3gr1Bp PNjoMYORbf4nae3ubEvffJeW1WfLaxP/B3mIxygs+SgHmLZ6e1yTMtdLrbxSAPtk Sps/ZpdNrJlEqbrzopZ5nDDZNS7esRiMAG+k4TKXnGM+CBNdFn6RCEg9FBvmT/4+ 1hKY5PiZM3wZttYYO3av47/mgUK0E3/+IxUXurVWHTG9ds8YuFjsOjyXhI2SeTFh rnQE0jQuKm6Kuj+gorTg1XfkalCtupDAsbQfcYFcy9sxYyUKI9CnxH7BjlqVo15V ijmADi1G7yYYTlCXoEHJ+XSjYwH2AisOHem+qLBKRaQxq0Bf4Sk= -----END CERTIFICATE-----Generated at Sun Nov 15 13:31:30 2026 by rpki-client