$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: vLraPtIS1LDUruTBjeRCcuelpQskbcyCcDfoyd5fTZA= Subject key identifier: CF:5F:CA:EE:85:DA:55:06:47:BC:CB:8B:CB:D4:91:60:99:45:DC:E0 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 568808A438DD45DCC564FB8E93921ADDE449B08D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 07:38:50 +0000 Manifest this update: Sun 15 Nov 2026 07:33:50 +0000 Manifest next update: Mon 16 Nov 2026 10:25:50 +0000 Files and hashes: 1: D88374740C8E344956042586CFB98762292C9BED.crl (hash: Fv1/LDkeeTb+QcjQNsP+4NHyZsssp3h9IkscEeXwZ4o=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 3: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) 4: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:88:08:a4:38:dd:45:dc:c5:64:fb:8e:93:92:1a:dd:e4:49:b0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Nov 15 07:33:50 2026 GMT Not After : Nov 16 10:25:50 2026 GMT Subject: CN=CF5FCAEE85DA550647BCCB8BCBD491609945DCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:14:e6:ed:af:e9:35:67:25:97:2f:84:ee: f0:24:53:ce:c4:7b:09:42:54:bb:3c:3f:e3:a2:78: e6:a6:7f:b4:5f:b9:3c:82:b7:e4:ea:6d:ca:bb:3a: 5a:1e:8c:28:64:78:d6:e0:23:44:eb:54:39:22:db: ac:e6:19:68:48:5f:6e:8d:4c:ed:0b:17:58:06:15: b1:19:5f:44:80:05:fa:d2:31:29:a8:62:4d:cf:34: 46:e1:c6:40:b4:a1:19:a5:dc:78:00:37:a7:c9:f7: e7:24:47:7b:1e:f8:c8:1b:85:65:d1:d6:44:73:a8: 31:b1:38:6a:f5:60:18:85:84:35:86:7a:7f:42:29: e1:88:a7:d7:b3:79:08:e5:35:2c:32:ec:a7:fe:f1: 28:e3:20:f6:9b:96:26:19:bb:74:08:bf:df:01:47: 33:05:36:2d:31:0b:5d:c9:db:25:97:9a:1c:c6:b0: 50:aa:2e:bc:ee:9c:d8:6c:a5:04:b9:c0:60:49:c0: 19:2f:fb:e1:ee:14:e0:cf:fe:42:57:77:68:e6:b9: 25:09:c8:eb:7a:80:4b:04:e3:41:19:f3:97:1b:a8: a8:ca:e2:a2:3e:5c:b9:25:36:15:0c:13:b9:7b:26: 47:27:4b:b7:6e:8f:11:8d:6e:27:56:42:79:a3:54: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:CA:EE:85:DA:55:06:47:BC:CB:8B:CB:D4:91:60:99:45:DC:E0 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:66:92:94:cc:1c:41:eb:90:d7:0d:73:43:fc:e1:5f:5c:48: f4:26:91:64:8a:9f:2d:ac:43:99:df:57:50:ef:fd:29:1c:40: 1e:b4:7b:b2:84:c5:70:3f:a3:e9:96:4e:8a:de:2d:27:11:61: a4:c5:e2:11:57:4f:38:b8:3b:af:0e:d7:de:1d:62:8a:58:2c: 9a:e9:fd:b5:31:3e:40:ce:e1:b4:cd:3e:40:93:a1:8e:47:2d: 4c:16:70:cc:4c:91:1b:47:2d:02:35:0c:30:26:fe:24:11:95: 29:f5:90:c4:0c:f8:42:f8:8c:75:7d:b9:e3:af:40:b9:78:ea: 73:7f:0c:20:8a:b1:00:ed:aa:39:7a:e0:4d:51:5f:72:d5:36: cf:7b:bd:8a:e0:04:a0:4c:8f:01:ee:b8:8f:0f:49:c9:aa:36: 82:34:1c:7f:9f:e3:f3:3f:eb:b4:b6:56:8a:bb:ff:f2:5a:11: d2:b7:fc:09:34:46:78:46:76:54:3c:a5:81:56:93:23:1e:17: f1:69:8f:27:a6:c4:e2:1c:89:70:89:80:af:db:76:b2:9d:31: 16:5e:05:ab:f7:c2:1e:f4:71:91:83:a1:0d:b0:ca:3e:27:50: 57:6d:c3:a8:15:e3:88:7d:d4:7c:9c:09:d1:f1:6f:2e:36:db: 64:01:cf:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVogIpDjdRdzFZPuOk5Ia3eRJsI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjExMTUwNzMzNTBaFw0yNjExMTYxMDI1NTBaMDMxMTAvBgNV BAMTKENGNUZDQUVFODVEQTU1MDY0N0JDQ0I4QkNCRDQ5MTYwOTk0NURDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5BTm7a/pNWclly+E7vAkU87E ewlCVLs8P+OieOamf7RfuTyCt+Tqbcq7OloejChkeNbgI0TrVDki26zmGWhIX26N TO0LF1gGFbEZX0SABfrSMSmoYk3PNEbhxkC0oRml3HgAN6fJ9+ckR3se+MgbhWXR 1kRzqDGxOGr1YBiFhDWGen9CKeGIp9ezeQjlNSwy7Kf+8SjjIPabliYZu3QIv98B RzMFNi0xC13J2yWXmhzGsFCqLrzunNhspQS5wGBJwBkv++HuFODP/kJXd2jmuSUJ yOt6gEsE40EZ85cbqKjK4qI+XLklNhUME7l7JkcnS7dujxGNbidWQnmjVGRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1/K7oXaVQZHvMuLy9SRYJlF3OAwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZmkpTMHEHrkNcNc0P84V9cSPQmkWSKny2s Q5nfV1Dv/SkcQB60e7KExXA/o+mWToreLScRYaTF4hFXTzi4O68O194dYopYLJrp /bUxPkDO4bTNPkCToY5HLUwWcMxMkRtHLQI1DDAm/iQRlSn1kMQM+EL4jHV9ueOv QLl46nN/DCCKsQDtqjl64E1RX3LVNs97vYrgBKBMjwHuuI8PScmqNoI0HH+f4/M/ 67S2Voq7//JaEdK3/Ak0RnhGdlQ8pYFWkyMeF/FpjyemxOIciXCJgK/bdrKdMRZe Bav3wh70cZGDoQ2wyj4nUFdtw6gV44h91HycCdHxby4222QBz90= -----END CERTIFICATE-----Generated at Sun Nov 15 12:40:10 2026 by rpki-client