$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json) Hash identifier: 4c2NQ6gqsocwekNL5xIzb1GpA5kseIKt7dghaWrh6s0= Subject key identifier: 54:3F:E6:F5:EC:1A:08:A5:3F:88:6D:AD:27:8C:13:E7:70:D4:32:58 Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 1A3E04C8A837B36985D3C3DA2030183805AA44B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 11:23:08 +0000 Manifest this update: Sun 15 Nov 2026 11:18:08 +0000 Manifest next update: Mon 16 Nov 2026 13:29:08 +0000 Files and hashes: 1: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=) 2: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=) 3: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: rcewUYsxZYcksPWpImj1MAcERcyAmnIgbadRVjkLjqk=) 4: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=) 5: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=) 6: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=) 7: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=) 8: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=) 9: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=) 10: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=) 11: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=) 12: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3e:04:c8:a8:37:b3:69:85:d3:c3:da:20:30:18:38:05:aa:44:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: Nov 15 11:18:08 2026 GMT Not After : Nov 16 13:29:08 2026 GMT Subject: CN=543FE6F5EC1A08A53F886DAD278C13E770D43258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:f6:43:25:af:36:2a:ee:b5:72:2e:b0:a0: 0a:d0:de:0d:1e:27:a5:03:2b:a5:98:d2:c7:73:79: ed:b8:0f:4b:fe:44:6f:e0:b6:91:4a:e9:2f:ec:81: 18:a2:01:79:9f:b9:b6:1d:84:ee:f9:a9:9e:fe:b6: da:8a:82:69:a8:2d:a6:64:d3:d6:6b:ab:66:79:f2: 61:b3:fe:d4:16:a0:d7:8e:76:75:ac:a8:79:fa:11: 9f:d7:76:e7:f2:51:40:c5:87:bd:b5:d6:24:11:19: cc:95:0e:73:d3:dd:09:39:1e:86:9f:1c:d7:4b:93: 7a:5d:00:72:cc:35:d9:90:a5:aa:a3:83:20:7e:b1: 71:6e:ec:8e:b5:a8:f2:b8:db:d5:19:ee:42:42:25: 2e:ef:51:5b:08:84:ab:b9:8b:e3:b8:62:77:37:dc: d9:43:d6:26:e0:53:4a:af:88:fa:c7:8a:78:b4:85: 37:27:2c:01:50:23:f8:71:f2:db:a2:08:0e:9c:5c: 8d:e5:69:27:6b:c9:56:ed:b5:a4:42:e5:35:51:63: e3:3e:61:d1:91:31:4a:99:c2:04:e5:10:0c:94:e8: 4f:fb:d3:f3:aa:3a:ea:79:7b:07:2b:0d:0c:45:f2: 5c:c2:e1:3d:e6:a6:58:d2:d1:e4:90:8e:1a:28:0d: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3F:E6:F5:EC:1A:08:A5:3F:88:6D:AD:27:8C:13:E7:70:D4:32:58 X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:be:fa:44:55:2b:02:13:ea:97:ff:f8:29:cd:6e:db:79:f8: bd:cd:bc:01:b9:89:9d:b3:97:ea:13:c5:d5:f4:8f:1d:bd:e8: b1:1e:ef:32:6a:05:95:74:2a:6b:ec:aa:97:56:3d:76:0c:0e: 5b:3e:da:77:85:72:ff:10:a1:00:e5:90:58:1e:88:3f:e9:2d: 7b:da:c7:27:2d:39:f7:7d:35:d0:fa:37:3a:6e:2e:31:f0:3a: 2c:01:49:ef:79:12:bc:94:02:0b:7c:00:13:a9:0e:33:35:8c: 53:66:a8:f1:53:fa:55:73:a8:f6:74:78:bf:64:19:f3:15:ea: ea:d4:e4:e4:fc:c6:f4:60:a4:07:22:4e:75:2b:16:7f:14:78: 38:1f:17:e1:b2:22:4f:40:a6:37:02:01:2a:cd:0a:e6:1b:07: 14:de:1b:11:7d:6c:10:66:3b:8e:1e:49:f6:d6:a4:1d:d3:ad: 65:0b:ed:8e:b3:ab:21:68:7d:91:75:1a:43:67:27:f8:2d:d1: f9:a4:d4:01:88:70:bb:0e:8b:3a:48:51:22:f5:66:15:6b:87: 30:4f:c3:b0:ed:aa:ec:f5:75:69:93:be:65:25:87:76:f9:93: c8:06:b7:bc:a1:f6:10:aa:c1:3d:b5:29:07:41:d2:38:5c:8e: 76:df:90:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGj4EyKg3s2mF08PaIDAYOAWqRLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjExMTUxMTE4MDhaFw0yNjExMTYxMzI5MDhaMDMxMTAvBgNV BAMTKDU0M0ZFNkY1RUMxQTA4QTUzRjg4NkRBRDI3OEMxM0U3NzBENDMyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJvZDJa82Ku61ci6woArQ3g0e J6UDK6WY0sdzee24D0v+RG/gtpFK6S/sgRiiAXmfubYdhO75qZ7+ttqKgmmoLaZk 09Zrq2Z58mGz/tQWoNeOdnWsqHn6EZ/XdufyUUDFh7211iQRGcyVDnPT3Qk5Hoaf HNdLk3pdAHLMNdmQpaqjgyB+sXFu7I61qPK429UZ7kJCJS7vUVsIhKu5i+O4Ync3 3NlD1ibgU0qviPrHini0hTcnLAFQI/hx8tuiCA6cXI3laSdryVbttaRC5TVRY+M+ YdGRMUqZwgTlEAyU6E/70/OqOup5ewcrDQxF8lzC4T3mpljS0eSQjhooDS7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVD/m9ewaCKU/iG2tJ4wT53DUMlgwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2 NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3 MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq++kRVKwIT6pf/+CnNbtt5+L3NvAG5iZ2z l+oTxdX0jx296LEe7zJqBZV0KmvsqpdWPXYMDls+2neFcv8QoQDlkFgeiD/pLXva xyctOfd9NdD6NzpuLjHwOiwBSe95EryUAgt8ABOpDjM1jFNmqPFT+lVzqPZ0eL9k GfMV6urU5OT8xvRgpAciTnUrFn8UeDgfF+GyIk9ApjcCASrNCuYbBxTeGxF9bBBm O44eSfbWpB3TrWUL7Y6zqyFofZF1GkNnJ/gt0fmk1AGIcLsOizpIUSL1ZhVrhzBP w7Dtquz1dWmTvmUlh3b5k8gGt7yh9hCqwT21KQdB0jhcjnbfkJU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:32:11 2026 by rpki-client