$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json) Hash identifier: kjMN9wgqW8njIDW1Ye5zsRAonLekcTE3s3DSOwWwyvc= Subject key identifier: B8:5A:70:0B:D8:DD:5D:1A:00:C9:2F:BE:FA:19:C3:92:98:79:B2:F7 Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C Certificate serial: 6B17003EAEB7E57743544DE3DBD602391C7D87B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 00:35:00 +0000 Manifest this update: Sun 15 Nov 2026 00:30:00 +0000 Manifest next update: Mon 16 Nov 2026 00:47:00 +0000 Files and hashes: 1: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: ZM1U5SCch4SfEf0VAJv4WFMDx/o/DCulIqNhfGUWua8=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:17:00:3e:ae:b7:e5:77:43:54:4d:e3:db:d6:02:39:1c:7d:87:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Validity Not Before: Nov 15 00:30:00 2026 GMT Not After : Nov 16 00:47:00 2026 GMT Subject: CN=B85A700BD8DD5D1A00C92FBEFA19C3929879B2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:f3:c2:f3:8f:36:91:18:24:fa:98:11:55: 53:bd:86:f9:66:7a:e2:33:eb:ad:7c:04:e3:82:c1: 64:28:60:39:dd:6f:25:ef:41:b8:91:0e:38:b4:60: 82:a1:0c:4d:33:c9:95:88:34:8b:15:e6:31:dd:73: 67:56:ce:a0:6c:5a:61:7a:dd:c0:c9:e2:d1:7d:88: 7d:8b:b9:46:cd:67:e9:6d:38:45:3d:92:2c:f3:21: 0e:61:5c:9c:0d:34:45:39:67:57:d9:94:17:38:30: be:34:d7:a0:8a:cb:45:23:67:9a:e4:47:85:33:30: 1a:65:8a:f9:89:d9:12:25:6d:71:2f:16:f4:0f:7d: 55:63:cb:8b:a9:e6:9a:f0:6b:56:a4:a6:1f:bf:bc: a9:d7:b6:18:44:ae:6a:11:68:17:31:3a:d7:3b:20: 6b:11:98:f7:20:7e:25:fc:d4:de:23:d2:17:41:57: 48:da:9a:fc:92:db:35:ea:44:b4:d6:6d:34:c5:b3: 72:bb:80:16:83:05:fb:42:1f:74:01:63:a4:b3:2c: 06:a2:5f:a8:3b:cd:3a:b5:2b:85:13:e1:53:0a:dc: eb:26:60:35:8b:e8:26:21:38:c6:b0:c5:f0:99:d2: a2:b6:34:c9:ee:6e:bb:c4:55:9a:f3:56:b8:cb:e4: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:70:0B:D8:DD:5D:1A:00:C9:2F:BE:FA:19:C3:92:98:79:B2:F7 X509v3 Authority Key Identifier: keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1c:75:f8:e0:4b:be:23:f5:f4:9c:03:83:f9:d3:d7:f4:64: ca:56:03:2b:2b:95:64:4a:fe:7d:78:7b:25:d7:78:53:ea:45: 72:6f:ac:30:75:51:d1:05:c3:4a:20:af:96:76:a8:f0:02:b4: 23:32:a4:1d:5c:d2:a7:cf:ee:1e:4c:3d:2c:45:16:bb:3c:da: 25:3e:31:49:d1:6a:67:f6:d8:db:49:f5:22:96:d8:1d:75:0c: e5:57:72:f1:fc:81:a1:b2:1e:be:59:8d:af:d1:d5:5b:1e:d7: e1:a1:7c:18:8c:1d:c8:aa:b9:5b:ae:20:5e:a6:37:58:dc:e0: 0e:81:13:c8:bb:2d:f7:4e:fe:00:78:2e:1d:83:41:7d:d2:2e: c4:47:10:8f:f6:10:69:35:6c:74:39:3b:4f:fc:b3:04:3b:c0: d2:99:c1:20:a1:de:21:2d:d7:27:dc:fc:f5:fd:12:6b:cf:12: ed:71:e8:87:28:6a:88:86:ce:8a:3d:70:50:56:35:bc:a4:9c: 5a:a0:04:08:e8:41:f2:30:26:65:62:fe:7f:e4:e9:be:aa:da: 2b:59:8d:5f:c1:84:71:32:9b:f7:4b:20:85:a9:0e:7a:bd:fa: ac:bc:ee:f1:7f:a4:7e:2a:13:5e:05:55:ba:99:1a:85:8e:65: 8f:09:98:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxcAPq635XdDVE3j29YCORx9h7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5 NEU0MjgxQzAeFw0yNjExMTUwMDMwMDBaFw0yNjExMTYwMDQ3MDBaMDMxMTAvBgNV BAMTKEI4NUE3MDBCRDhERDVEMUEwMEM5MkZCRUZBMTlDMzkyOTg3OUIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwPPC8482kRgk+pgRVVO9hvlm euIz6618BOOCwWQoYDndbyXvQbiRDji0YIKhDE0zyZWINIsV5jHdc2dWzqBsWmF6 3cDJ4tF9iH2LuUbNZ+ltOEU9kizzIQ5hXJwNNEU5Z1fZlBc4ML4016CKy0UjZ5rk R4UzMBplivmJ2RIlbXEvFvQPfVVjy4up5prwa1akph+/vKnXthhErmoRaBcxOtc7 IGsRmPcgfiX81N4j0hdBV0jamvyS2zXqRLTWbTTFs3K7gBaDBftCH3QBY6SzLAai X6g7zTq1K4UT4VMK3OsmYDWL6CYhOMawxfCZ0qK2NMnubrvEVZrzVrjL5ENLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFpwC9jdXRoAyS+++hnDkph5svcwHwYDVR0j BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0 RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIcdfjgS74j9fScA4P509f0ZMpWAysrlWRK /n14eyXXeFPqRXJvrDB1UdEFw0ogr5Z2qPACtCMypB1c0qfP7h5MPSxFFrs82iU+ MUnRamf22NtJ9SKW2B11DOVXcvH8gaGyHr5Zja/R1Vse1+GhfBiMHciquVuuIF6m N1jc4A6BE8i7LfdO/gB4Lh2DQX3SLsRHEI/2EGk1bHQ5O0/8swQ7wNKZwSCh3iEt 1yfc/PX9EmvPEu1x6IcoaoiGzoo9cFBWNbyknFqgBAjoQfIwJmVi/n/k6b6q2itZ jV/BhHEym/dLIIWpDnq9+qy87vF/pH4qE14FVbqZGoWOZY8JmEo= -----END CERTIFICATE-----Generated at Sun Nov 15 17:58:54 2026 by rpki-client