$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: 0ruJvPxXShxGNZI08/3APL+RYmF9QRhPajhgzdDVK08= Subject key identifier: 8E:D1:E2:98:B1:4F:F0:A6:46:48:A9:F3:E6:3F:72:8D:0D:CB:D2:AC Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 16A6AA184CEEB31056200A6C0500B4D8ECCB68E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 12:29:38 +0000 Manifest this update: Sun 15 Nov 2026 12:24:38 +0000 Manifest next update: Mon 16 Nov 2026 13:23:38 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: AFlginNRPr5Yo+IpE/wvq8+pYVzCYpjjmfgukAIHCpk=) 2: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (hash: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a6:aa:18:4c:ee:b3:10:56:20:0a:6c:05:00:b4:d8:ec:cb:68:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Nov 15 12:24:38 2026 GMT Not After : Nov 16 13:23:38 2026 GMT Subject: CN=8ED1E298B14FF0A64648A9F3E63F728D0DCBD2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:79:ab:c6:8b:35:e8:cf:ba:37:56:32:08: 5d:d4:df:a4:9e:5d:8f:9d:db:44:66:4f:bf:91:95: 0f:85:de:f6:fa:ae:71:a2:12:a4:86:a7:c7:c2:c8: e4:7f:5f:e0:d6:2a:c0:3b:c3:67:18:b5:64:56:19: 9c:47:1b:72:e3:14:8b:ea:bf:21:66:00:77:d0:63: fe:11:31:72:85:ab:5a:ae:c2:71:3f:6d:a6:d9:59: 25:46:86:0e:c5:cb:11:61:b1:41:c3:dd:06:80:0a: 8a:01:3c:2f:2a:82:79:55:dc:6b:ef:c7:57:3b:0e: 80:72:b7:bc:d2:d0:b4:3a:9a:92:5b:e7:21:cc:e7: cf:8c:a5:a2:7a:9f:cf:cb:70:e4:45:9f:74:79:7c: 9d:07:0a:72:07:c1:34:16:2e:80:98:27:f3:cb:f7: c4:d6:d7:09:09:b2:73:cc:cc:05:3a:e8:1d:eb:31: 11:b7:a0:c2:68:ce:bd:0f:fb:98:d7:c1:19:ba:35: be:90:e0:4b:81:bf:24:23:1a:b6:5e:fc:ff:ad:1d: d3:38:45:91:34:19:b6:5b:2b:f4:bb:e3:27:e2:c5: 0d:fe:95:ad:2f:71:c4:76:96:0a:4e:bf:e3:1e:51: a7:e7:be:fa:3f:55:c3:0e:d7:cf:31:2f:f2:30:b5: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:E2:98:B1:4F:F0:A6:46:48:A9:F3:E6:3F:72:8D:0D:CB:D2:AC X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:65:e8:f6:0f:5b:21:36:f9:93:09:14:d3:16:a0:2c:1e:ba: 01:f1:e8:33:96:b0:58:12:a5:2d:68:2e:e3:1d:49:5c:6a:91: 1a:f0:61:63:16:19:7a:b5:d0:4c:0b:2e:97:27:c4:48:73:90: 71:ab:7c:a2:15:af:5a:7b:11:c5:fb:35:cf:e9:ed:af:af:ed: f7:68:4e:03:02:35:a3:8c:3d:2d:ea:ae:9c:4e:eb:d7:9e:bb: a8:b1:a8:b7:73:8f:b3:bb:7a:05:72:a2:a0:0f:d5:62:10:fb: 08:e5:1c:69:ae:76:69:d1:7c:12:cd:85:d8:48:27:4c:22:08: fa:6a:c6:7c:b2:e6:51:cf:fa:0f:6b:89:51:82:12:c9:37:53: 34:96:61:92:ec:ce:02:78:cd:9a:15:a4:0e:f4:aa:0f:32:f3: e8:49:12:62:ff:ad:70:f1:00:37:14:cc:2b:1b:0e:a3:f3:99: cb:7c:9e:57:11:e6:69:fd:f2:ba:49:db:dd:bf:f5:00:1e:87: fd:4d:1f:9c:fa:6d:50:2d:2f:b3:b7:32:b7:07:50:46:cb:40: 05:7f:d7:17:ce:13:fd:e9:d6:14:ea:e5:e5:14:eb:fc:a7:12: 25:98:9e:20:5d:27:b8:88:74:4b:4e:8b:f0:57:8f:2e:de:61: 7a:49:88:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqaqGEzusxBWIApsBQC02OzLaOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjExMTUxMjI0MzhaFw0yNjExMTYxMzIzMzhaMDMxMTAvBgNV BAMTKDhFRDFFMjk4QjE0RkYwQTY0NjQ4QTlGM0U2M0Y3MjhEMERDQkQyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvHmrxos16M+6N1YyCF3U36Se XY+d20RmT7+RlQ+F3vb6rnGiEqSGp8fCyOR/X+DWKsA7w2cYtWRWGZxHG3LjFIvq vyFmAHfQY/4RMXKFq1quwnE/babZWSVGhg7FyxFhsUHD3QaACooBPC8qgnlV3Gvv x1c7DoByt7zS0LQ6mpJb5yHM58+MpaJ6n8/LcORFn3R5fJ0HCnIHwTQWLoCYJ/PL 98TW1wkJsnPMzAU66B3rMRG3oMJozr0P+5jXwRm6Nb6Q4EuBvyQjGrZe/P+tHdM4 RZE0GbZbK/S74yfixQ3+la0vccR2lgpOv+MeUafnvvo/VcMO188xL/IwtU/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtHimLFP8KZGSKnz5j9yjQ3L0qwwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFl6PYPWyE2+ZMJFNMWoCweugHx6DOWsFgS pS1oLuMdSVxqkRrwYWMWGXq10EwLLpcnxEhzkHGrfKIVr1p7EcX7Nc/p7a+v7fdo TgMCNaOMPS3qrpxO69eeu6ixqLdzj7O7egVyoqAP1WIQ+wjlHGmudmnRfBLNhdhI J0wiCPpqxnyy5lHP+g9riVGCEsk3UzSWYZLszgJ4zZoVpA70qg8y8+hJEmL/rXDx ADcUzCsbDqPzmct8nlcR5mn98rpJ292/9QAeh/1NH5z6bVAtL7O3MrcHUEbLQAV/ 1xfOE/3p1hTq5eUU6/ynEiWYniBdJ7iIdEtOi/BXjy7eYXpJiNs= -----END CERTIFICATE-----Generated at Sun Nov 15 20:32:15 2026 by rpki-client