$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft File: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft (raw, json) Hash identifier: U+vtG/Yvk4CkiW3V1o/E/LKJVuQl/XhEL6QYYJzA92Q= Subject key identifier: 6C:B2:40:80:36:5F:72:B7:C0:7F:0C:36:B0:24:9D:75:AC:E6:F7:15 Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 Certificate issuer: /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Certificate serial: 406050CCBE01DDAF352E2E6AE755ACDD016867FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 15:28:44 +0000 Manifest this update: Sat 14 Nov 2026 15:23:44 +0000 Manifest next update: Sun 15 Nov 2026 19:05:44 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: kPZOXT2GwEKlfeP/fQyv701xiJsSoJM2RbBmmUbPZZ8=) 2: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl (hash: nAhSMx2sr3g8OM3uhjHeMoAjB8EtBxw1/90yKTls05c=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: dfrPktjrSxat3OJSIEiclXrWQZl7b22xPg7tyk7/iXg=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: qQsnDUNPeHXu+DNiw4SOcpK8StEWum36MYHLhy1M0Kc=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: gtZNev9cMMORIviikpj/urAy+yvYIWDnCmncjDmI/0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 19:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:60:50:cc:be:01:dd:af:35:2e:2e:6a:e7:55:ac:dd:01:68:67:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Validity Not Before: Nov 14 15:23:44 2026 GMT Not After : Nov 15 19:05:44 2026 GMT Subject: CN=6CB24080365F72B7C07F0C36B0249D75ACE6F715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:5f:36:ef:34:20:d5:86:18:b4:f4:20:1a: 05:16:2a:86:bf:b4:10:46:a6:e5:db:c7:46:4f:46: 0c:dc:43:19:c5:f3:34:6d:f2:a1:4f:33:99:67:2c: ff:31:3f:7d:b6:53:a4:39:ac:af:38:6e:58:df:e7: 52:02:1a:53:52:b1:ed:1e:c7:5e:48:d4:30:dc:e8: 1a:73:7b:c2:0a:3c:c6:55:62:e9:70:89:2f:a6:20: 21:0c:9d:fb:09:7b:38:91:c8:30:e0:10:5c:c1:db: 8e:fa:d7:1e:fb:75:77:a2:ba:62:44:96:d0:f3:3e: b8:c9:84:16:62:77:01:18:b4:29:a1:85:26:ca:b6: 70:76:d0:b4:35:5e:f5:97:59:e7:fb:d0:5e:c9:cf: 5b:b3:02:29:06:0e:d1:47:ee:93:eb:7b:9d:21:45: 56:b5:ad:66:51:5e:1c:f6:3f:9a:86:bd:94:5f:b5: 6d:bb:ed:fe:66:cd:d9:ec:2d:4a:10:b7:d2:7d:6b: 90:5b:ee:f4:75:a7:eb:f5:10:81:d4:b1:ee:89:97: 63:65:57:c6:29:b5:ea:26:23:cf:06:1c:84:2f:05: 5a:90:93:1a:c3:3a:1e:81:d3:1c:ee:31:8a:38:f6: ba:c7:21:4d:c0:ba:fd:1b:e7:f8:38:53:4d:f0:1a: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:40:80:36:5F:72:B7:C0:7F:0C:36:B0:24:9D:75:AC:E6:F7:15 X509v3 Authority Key Identifier: keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5e:d0:80:55:14:b4:81:c3:d4:bb:54:42:cb:c1:87:8f:d6: 87:3f:eb:a2:f7:1e:05:30:49:a1:ad:29:ed:f2:b2:19:51:b5: a9:46:f3:6b:07:8e:a3:f5:32:22:51:3c:aa:ec:56:01:cd:d6: 5b:03:f4:40:72:38:e2:72:ad:1d:ec:91:bb:4b:02:28:32:bb: 2e:a9:38:0f:00:91:93:d4:c3:55:c2:2b:d9:34:79:28:45:a5: 2a:8e:26:04:e4:51:03:b0:17:c2:f6:01:18:d3:f8:63:9d:df: 0e:28:09:97:14:59:a7:83:a8:03:72:92:b7:61:d0:ed:cb:5e: a0:62:ed:2b:e2:01:8c:45:0b:ed:72:3d:42:be:71:c1:29:02: 70:fe:66:97:8a:f2:1c:4e:eb:bf:e0:ff:27:bb:a1:94:65:7d: 1e:b6:a9:ff:5f:80:da:84:19:bd:f9:1b:83:01:af:2e:40:3d: 9b:56:8f:1f:c7:30:9a:5b:57:fe:ff:63:3c:37:a6:32:f6:87: e2:41:0a:d1:3d:53:c1:34:1f:b6:61:42:50:89:fd:d7:90:64: 79:c7:dd:04:46:9c:91:31:14:71:84:cf:35:58:db:fd:52:1c: ea:0d:13:86:4b:94:23:9e:c3:7c:08:2c:74:89:35:9d:f5:1f: 03:19:74:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGBQzL4B3a81Li5q51Ws3QFoZ/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2 RkI4N0Y1NTAeFw0yNjExMTQxNTIzNDRaFw0yNjExMTUxOTA1NDRaMDMxMTAvBgNV BAMTKDZDQjI0MDgwMzY1RjcyQjdDMDdGMEMzNkIwMjQ5RDc1QUNFNkY3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/F827zQg1YYYtPQgGgUWKoa/ tBBGpuXbx0ZPRgzcQxnF8zRt8qFPM5lnLP8xP322U6Q5rK84bljf51ICGlNSse0e x15I1DDc6Bpze8IKPMZVYulwiS+mICEMnfsJeziRyDDgEFzB24761x77dXeiumJE ltDzPrjJhBZidwEYtCmhhSbKtnB20LQ1XvWXWef70F7Jz1uzAikGDtFH7pPre50h RVa1rWZRXhz2P5qGvZRftW277f5mzdnsLUoQt9J9a5Bb7vR1p+v1EIHUse6Jl2Nl V8YpteomI88GHIQvBVqQkxrDOh6B0xzuMYo49rrHIU3Auv0b5/g4U03wGt2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLJAgDZfcrfAfww2sCSddazm9xUwHwYDVR0j BBgwFoAUgCwssaVIZkQ0CeP94S937G+4f1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZlM2RkOTUtMmE4NS00MzllLTg0ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFB NTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2RkI4N0Y1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDJDMkNCMUE1NDg2NjQ0MzQwOUUzRkRFMTJGNzdFQzZGQjg3 RjU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3 RUM2RkI4N0Y1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBe0IBVFLSBw9S7VELLwYeP1oc/66L3HgUw SaGtKe3yshlRtalG82sHjqP1MiJRPKrsVgHN1lsD9EByOOJyrR3skbtLAigyuy6p OA8AkZPUw1XCK9k0eShFpSqOJgTkUQOwF8L2ARjT+GOd3w4oCZcUWaeDqANykrdh 0O3LXqBi7SviAYxFC+1yPUK+ccEpAnD+ZpeK8hxO67/g/ye7oZRlfR62qf9fgNqE Gb35G4MBry5APZtWjx/HMJpbV/7/Yzw3pjL2h+JBCtE9U8E0H7ZhQlCJ/deQZHnH 3QRGnJExFHGEzzVY2/1SHOoNE4ZLlCOew3wILHSJNZ31HwMZdNQ= -----END CERTIFICATE-----Generated at Sun Nov 15 11:54:15 2026 by rpki-client