$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: 6IFypUYk6f1IMBCDN1h0Qwrog8z4YkMKGW2iUNZiJLo= Subject key identifier: 3C:1D:34:FC:12:E8:62:E6:02:2B:1B:68:F6:A7:8D:BA:B0:4E:D2:69 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 4C06ADF5703B675A5D78F241BC2032CA8DAA341F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: FE Signing time: Tue 10 Nov 2026 05:42:58 +0000 Manifest this update: Tue 10 Nov 2026 05:37:58 +0000 Manifest next update: Wed 11 Nov 2026 05:42:58 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) 3: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: N6i5fkZXRBhmSH1J6iC0Q+tKW/7vGQIHqxqAke8XJIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 05:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:ad:f5:70:3b:67:5a:5d:78:f2:41:bc:20:32:ca:8d:aa:34:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Nov 10 05:37:58 2026 GMT Not After : Nov 11 05:42:58 2026 GMT Subject: CN=3C1D34FC12E862E6022B1B68F6A78DBAB04ED269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:62:51:7d:af:b1:13:cd:ce:ab:d9:f5:a5: 38:e6:cf:06:d7:a5:b6:9a:41:4d:3c:ef:90:50:b1: 21:6d:31:60:80:3b:af:5b:ce:43:3c:18:b8:70:c7: a8:53:62:c2:4a:3a:fc:56:cc:66:06:7f:af:fe:4b: 5e:56:f6:75:bd:8f:3b:3d:a2:d3:e2:21:45:f3:0f: 96:c7:36:72:50:be:34:60:7b:21:2f:2b:33:7a:e5: 89:25:73:a6:9d:a1:ad:b8:bc:bc:4f:08:23:99:9f: 09:9c:3a:99:f3:e2:d8:50:63:11:f6:64:8f:b3:25: b5:e9:c2:88:43:b8:2d:22:7b:d9:2c:80:bc:2f:4f: 82:86:8c:1e:6f:c3:fb:13:1d:6b:0d:2d:40:6c:59: dc:af:ad:64:a7:2d:c3:81:a2:48:be:07:c6:5c:d0: 22:2e:ef:bf:3d:df:bd:d5:a6:d5:5b:c7:2b:08:16: b6:10:dc:88:55:0b:ef:8d:34:48:f8:10:fd:27:1c: ef:4c:f3:65:37:09:9b:96:9b:da:c1:07:3f:dd:e1: d4:a5:f7:89:d1:d5:c0:c9:6d:a3:04:19:81:ef:23: a6:1b:e5:b0:df:74:bd:73:5e:31:ea:79:17:6d:b7: 57:ca:d7:61:53:16:4f:71:c9:e1:07:eb:37:21:3a: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:34:FC:12:E8:62:E6:02:2B:1B:68:F6:A7:8D:BA:B0:4E:D2:69 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:47:6c:d0:6f:77:71:c7:39:e5:c2:03:c6:92:98:3c:71:86: 8d:1e:e9:88:dc:9c:2e:44:5f:94:3c:c3:49:d8:54:69:a9:52: 27:b5:e2:7f:04:83:16:50:4a:7a:ec:c1:bc:4f:f7:03:eb:b4: e6:35:db:a2:97:7a:8b:53:b2:db:77:e3:97:25:b2:37:a5:b9: 81:b2:59:31:64:ad:23:26:1e:7e:18:d2:b2:d6:f8:06:c9:df: 96:44:b4:a6:79:48:85:53:72:03:ad:af:75:77:75:82:60:ef: ea:4b:75:8d:80:6b:2d:9b:95:41:e7:7b:23:3d:e6:ed:9b:34: b3:b9:ca:88:d7:fa:2b:86:cb:2a:e0:e0:64:f8:c6:ee:2b:1c: e5:0f:04:8b:17:ae:bc:f1:93:f2:9e:83:08:e0:e8:bc:7c:e9: 84:d7:bf:bb:64:0a:3b:9f:35:56:9f:0c:c4:1e:c4:28:d5:6a: 21:19:a3:3e:10:da:be:8a:94:40:c4:05:57:5d:a3:5e:af:90: f5:d6:6f:89:50:34:ba:7a:05:07:91:97:fd:bc:7e:9d:4b:f7: e7:13:73:76:03:f9:5f:88:08:e5:e1:58:0b:f2:f6:b3:e6:3d: e1:60:c5:4f:8b:9e:d3:10:5e:f3:d2:8e:f3:d1:f8:ba:b8:15: fb:67:7a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAat9XA7Z1pdePJBvCAyyo2qNB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjExMTAwNTM3NThaFw0yNjExMTEwNTQyNThaMDMxMTAvBgNV BAMTKDNDMUQzNEZDMTJFODYyRTYwMjJCMUI2OEY2QTc4REJBQjA0RUQyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30GJRfa+xE83Oq9n1pTjmzwbX pbaaQU0875BQsSFtMWCAO69bzkM8GLhwx6hTYsJKOvxWzGYGf6/+S15W9nW9jzs9 otPiIUXzD5bHNnJQvjRgeyEvKzN65Yklc6adoa24vLxPCCOZnwmcOpnz4thQYxH2 ZI+zJbXpwohDuC0ie9ksgLwvT4KGjB5vw/sTHWsNLUBsWdyvrWSnLcOBoki+B8Zc 0CIu7789373VptVbxysIFrYQ3IhVC++NNEj4EP0nHO9M82U3CZuWm9rBBz/d4dSl 94nR1cDJbaMEGYHvI6Yb5bDfdL1zXjHqeRdtt1fK12FTFk9xyeEH6zchOrhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPB00/BLoYuYCKxto9qeNurBO0mkwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpHbNBvd3HHOeXCA8aSmDxxho0e6YjcnC5E X5Q8w0nYVGmpUie14n8EgxZQSnrswbxP9wPrtOY126KXeotTstt345clsjeluYGy WTFkrSMmHn4Y0rLW+AbJ35ZEtKZ5SIVTcgOtr3V3dYJg7+pLdY2Aay2blUHneyM9 5u2bNLO5yojX+iuGyyrg4GT4xu4rHOUPBIsXrrzxk/Kegwjg6Lx86YTXv7tkCjuf NVafDMQexCjVaiEZoz4Q2r6KlEDEBVddo16vkPXWb4lQNLp6BQeRl/28fp1L9+cT c3YD+V+ICOXhWAvy9rPmPeFgxU+LntMQXvPSjvPR+Lq4FftneuE= -----END CERTIFICATE-----Generated at Tue Nov 10 23:00:53 2026 by rpki-client