$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: d3lw3tvaJFIjNtH+D0l8xAAdtP+/vIesW4ks2MFOp8Y= Subject key identifier: A7:93:D2:E9:FD:3E:34:DE:E4:14:A4:88:55:D6:7B:80:C0:9D:52:E4 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 04AB520F7A6F2EA838A441085A7E0A72BC64E99D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 06:47:42 +0000 Manifest this update: Sun 15 Nov 2026 06:42:42 +0000 Manifest next update: Mon 16 Nov 2026 07:15:42 +0000 Files and hashes: 1: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 2: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: DNkol+rgnd1WTnW4iAYT55JMi8EVLqZXUS0juEsnad4=) 3: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ab:52:0f:7a:6f:2e:a8:38:a4:41:08:5a:7e:0a:72:bc:64:e9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Nov 15 06:42:42 2026 GMT Not After : Nov 16 07:15:42 2026 GMT Subject: CN=A793D2E9FD3E34DEE414A48855D67B80C09D52E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:b8:e7:ef:48:9d:06:28:53:2d:87:0b:8a: 3b:f2:84:c5:84:59:12:b3:cc:0f:a1:07:16:29:f6: 23:e5:ba:f5:e6:11:50:82:58:4f:64:08:4f:58:97: f0:cf:ab:cf:71:8a:90:ec:a3:82:a7:c4:6b:5d:cc: 8e:a1:85:ab:44:76:d5:0e:08:a7:e2:7a:d7:dd:43: ae:2d:a6:88:c7:66:1a:66:39:4e:6a:d0:c3:bc:13: ba:a9:58:a4:84:6a:62:b6:8c:83:e7:8e:52:66:9f: 37:eb:ca:bf:c4:b6:52:c1:30:2f:18:20:ea:23:d7: 91:da:ca:27:90:1a:2b:00:fc:9c:1e:8f:5d:7f:75: 88:8d:94:9a:15:df:db:3f:44:cf:f4:8b:e3:38:ba: 76:fc:dc:c9:96:bb:59:b3:b8:a8:bb:cb:0e:88:16: df:8e:2a:7d:c1:69:22:6a:38:2f:df:48:07:d3:bb: 21:0f:7a:5a:9b:0b:01:b3:43:bc:e2:0e:bf:fa:17: 38:59:3a:bf:5c:80:1f:4d:25:c7:e6:de:21:0b:8d: 97:0e:06:a1:8e:20:24:9c:b6:8f:b7:29:39:58:6f: 4c:02:ee:5f:c8:26:15:3f:df:a5:ce:ba:5a:20:ee: 29:2c:0f:67:c0:cf:49:2e:3f:7d:9f:b6:57:39:4e: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:D2:E9:FD:3E:34:DE:E4:14:A4:88:55:D6:7B:80:C0:9D:52:E4 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:82:1d:8b:fe:0c:9a:5a:88:91:e6:70:1a:c4:4f:e9:06:3a: de:e8:ee:b2:fd:e6:2a:ac:4d:f1:a0:85:f6:bd:db:af:33:90: 23:87:ce:e6:69:06:a2:b8:95:c2:94:63:7a:6f:92:2a:f7:9f: ab:bc:f1:df:ff:87:2a:bd:2f:88:28:ef:da:77:e7:99:75:50: 2a:2b:af:c7:74:95:f8:0b:26:e5:71:fc:f2:80:fc:c5:e8:69: d0:b6:50:6b:2d:96:e0:12:4d:bf:0c:52:62:50:c8:61:78:44: a1:ea:03:74:ed:d5:cb:45:7e:7d:59:0e:39:02:b9:de:7e:19: 17:12:79:94:54:c3:5f:d4:40:ee:5e:83:0d:57:a6:61:00:16: 61:81:48:77:e6:3e:45:15:46:a8:b8:5c:67:81:5e:14:34:3f: 41:39:a2:2c:ff:f1:bc:29:6e:60:d1:2c:66:17:3b:f8:02:fd: e2:c3:df:dd:a3:d9:f6:c8:38:30:f3:f6:50:ad:fd:a2:2b:23: 4b:5d:a6:d3:8e:8d:d6:e2:6b:bf:fb:52:bd:14:9d:4a:21:29: 1b:f4:51:2d:ef:94:4c:b5:e3:c8:41:0f:2d:37:d4:6c:28:a3: 04:70:4e:95:c0:4e:a0:d4:51:50:0e:81:87:ba:e2:86:ee:53: c2:da:b7:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKtSD3pvLqg4pEEIWn4Kcrxk6Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjExMTUwNjQyNDJaFw0yNjExMTYwNzE1NDJaMDMxMTAvBgNV BAMTKEE3OTNEMkU5RkQzRTM0REVFNDE0QTQ4ODU1RDY3QjgwQzA5RDUyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinLjn70idBihTLYcLijvyhMWE WRKzzA+hBxYp9iPluvXmEVCCWE9kCE9Yl/DPq89xipDso4KnxGtdzI6hhatEdtUO CKfietfdQ64tpojHZhpmOU5q0MO8E7qpWKSEamK2jIPnjlJmnzfryr/EtlLBMC8Y IOoj15HayieQGisA/Jwej11/dYiNlJoV39s/RM/0i+M4unb83MmWu1mzuKi7yw6I Ft+OKn3BaSJqOC/fSAfTuyEPelqbCwGzQ7ziDr/6FzhZOr9cgB9NJcfm3iELjZcO BqGOICScto+3KTlYb0wC7l/IJhU/36XOulog7iksD2fAz0kuP32ftlc5TnLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp5PS6f0+NN7kFKSIVdZ7gMCdUuQwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaCHYv+DJpaiJHmcBrET+kGOt7o7rL95iqs TfGghfa9268zkCOHzuZpBqK4lcKUY3pvkir3n6u88d//hyq9L4go79p355l1UCor r8d0lfgLJuVx/PKA/MXoadC2UGstluASTb8MUmJQyGF4RKHqA3Tt1ctFfn1ZDjkC ud5+GRcSeZRUw1/UQO5egw1XpmEAFmGBSHfmPkUVRqi4XGeBXhQ0P0E5oiz/8bwp bmDRLGYXO/gC/eLD392j2fbIODDz9lCt/aIrI0tdptOOjdbia7/7Ur0UnUohKRv0 US3vlEy148hBDy031GwoowRwTpXATqDUUVAOgYe64obuU8Latx8= -----END CERTIFICATE-----Generated at Sun Nov 15 20:23:07 2026 by rpki-client