$ rpki-client -vvvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: ebb/kJepoiUD/5Oix7+uyBn7fFec7PqVwi+pWGFin74= Subject key identifier: 54:68:A0:3F:6A:20:32:8C:79:B5:0F:86:AA:F4:D3:72:29:09:8B:81 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 65F80F50D3BF318F1B51E1B01ED1F982D43A6D13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: FF Signing time: Mon 09 Nov 2026 20:05:47 +0000 Manifest this update: Mon 09 Nov 2026 20:00:47 +0000 Manifest next update: Tue 10 Nov 2026 23:20:47 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: fK6sCMDcxIC1G64BnNNqZd+5e4FrsgZW/4jEaMSfQ7c=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f8:0f:50:d3:bf:31:8f:1b:51:e1:b0:1e:d1:f9:82:d4:3a:6d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Nov 9 20:00:47 2026 GMT Not After : Nov 10 23:20:47 2026 GMT Subject: CN=5468A03F6A20328C79B50F86AAF4D37229098B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a0:2b:3b:76:27:43:84:b2:85:a1:86:67:6c: 91:58:c1:5e:70:6f:de:6e:c2:3e:54:f5:4d:42:3c: 97:f0:c1:ee:19:44:e0:29:cf:0b:02:85:af:c8:96: 29:4e:32:e1:55:74:e0:ab:a8:bb:a7:03:92:39:8d: 73:3e:52:36:e4:a9:f2:6f:2e:0d:77:0f:7f:8f:47: 2a:5b:13:75:49:02:72:9b:2f:87:0c:e1:21:d0:be: 64:90:1f:fa:13:7a:a5:20:61:96:d7:42:ae:80:86: 79:81:13:5c:dd:fd:38:f0:f1:2f:58:3b:92:41:e8: 2c:b6:d7:0a:7f:d2:4f:46:65:b5:91:aa:50:0f:09: d6:2d:84:ec:53:2f:f4:e6:e1:be:70:c7:e9:78:b6: d1:b4:2a:50:57:74:b6:ae:e4:a7:58:e7:1e:96:82: 58:46:b7:d2:e9:78:43:cc:45:c2:11:8a:bf:13:83: a6:00:2f:58:1c:39:0f:09:ab:44:63:cf:46:87:fa: 9c:62:90:b9:c6:9f:8a:59:fb:0a:67:23:c7:96:b3: 31:58:c5:21:5d:ba:05:d4:0c:bc:ab:5f:e5:54:72: a7:dc:f8:53:7e:a7:93:16:d1:75:58:97:7d:7c:f9: 5f:fd:6d:ac:47:95:78:a9:11:f1:9b:92:b1:32:d5: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:A0:3F:6A:20:32:8C:79:B5:0F:86:AA:F4:D3:72:29:09:8B:81 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:ac:64:fb:13:fc:79:4c:97:d8:2c:ce:f7:2c:3e:75:12: a4:c6:73:40:b4:7c:9c:b3:09:aa:d2:a1:4d:a8:d1:5d:b6:72: 83:e3:f1:63:07:4f:eb:83:53:74:87:6b:d5:df:37:c6:f1:bb: aa:88:02:5c:88:bf:ea:d9:ae:ed:6e:e2:3f:41:d8:25:f6:96: b4:d0:2d:3c:84:17:99:d8:8e:da:ba:f4:b9:e0:d3:14:8c:41: dd:e9:4c:63:b6:c3:7e:b3:c0:70:66:cd:18:ee:0e:13:28:bd: 34:be:d0:18:15:52:1e:4c:a8:ef:5f:d5:44:a4:59:3d:bc:4c: 49:d6:ed:6b:32:eb:b5:68:c6:54:77:7b:95:ec:cf:02:9d:cf: 34:e0:e8:fe:a4:e1:2b:51:56:1f:4e:7e:9f:02:88:d9:e8:73: 44:b3:b7:56:96:75:48:d3:06:49:98:7a:0a:a1:e1:8c:27:95: 1c:93:f5:5e:59:1c:25:40:2a:0d:58:71:46:fb:bb:49:ff:c7: b4:0c:8c:c5:9e:52:18:8a:60:b9:b0:86:42:dd:55:34:5c:b8: 4f:26:4a:fa:52:23:4c:6e:46:41:a6:d7:6e:eb:e5:89:b2:06: bd:4b:89:98:fd:bb:06:73:8c:cb:13:e7:04:f0:b9:a9:88:d6: 3b:92:ac:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfgPUNO/MY8bUeGwHtH5gtQ6bRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjExMDkyMDAwNDdaFw0yNjExMTAyMzIwNDdaMDMxMTAvBgNV BAMTKDU0NjhBMDNGNkEyMDMyOEM3OUI1MEY4NkFBRjREMzcyMjkwOThCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuoCs7didDhLKFoYZnbJFYwV5w b95uwj5U9U1CPJfwwe4ZROApzwsCha/IlilOMuFVdOCrqLunA5I5jXM+UjbkqfJv Lg13D3+PRypbE3VJAnKbL4cM4SHQvmSQH/oTeqUgYZbXQq6AhnmBE1zd/Tjw8S9Y O5JB6Cy21wp/0k9GZbWRqlAPCdYthOxTL/Tm4b5wx+l4ttG0KlBXdLau5KdY5x6W glhGt9LpeEPMRcIRir8Tg6YAL1gcOQ8Jq0Rjz0aH+pxikLnGn4pZ+wpnI8eWszFY xSFdugXUDLyrX+VUcqfc+FN+p5MW0XVYl318+V/9baxHlXipEfGbkrEy1UIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGigP2ogMox5tQ+GqvTTcikJi4EwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF97rGT7E/x5TJfYLM73LD51EqTGc0C0fJyz CarSoU2o0V22coPj8WMHT+uDU3SHa9XfN8bxu6qIAlyIv+rZru1u4j9B2CX2lrTQ LTyEF5nYjtq69Lng0xSMQd3pTGO2w36zwHBmzRjuDhMovTS+0BgVUh5MqO9f1USk WT28TEnW7Wsy67VoxlR3e5XszwKdzzTg6P6k4StRVh9Ofp8CiNnoc0Szt1aWdUjT BkmYegqh4YwnlRyT9V5ZHCVAKg1YcUb7u0n/x7QMjMWeUhiKYLmwhkLdVTRcuE8m SvpSI0xuRkGm127r5YmyBr1LiZj9uwZzjMsT5wTwuamI1juSrBA= -----END CERTIFICATE-----Generated at Tue Nov 10 03:03:06 2026 by rpki-client