$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json) Hash identifier: gyjkiDm+nKzkVUX3221MK6vKc+8W4KqkZADaUs+yodk= Subject key identifier: 70:D0:9D:06:18:D7:CF:AC:42:D9:00:6C:F3:3B:E7:9D:EF:BE:5D:51 Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Certificate serial: 5B341B2EBB6C54B62FC1847FFC8CF467761AB0A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft Manifest number: 0104 Signing time: Sun 15 Nov 2026 02:52:41 +0000 Manifest this update: Sun 15 Nov 2026 02:47:41 +0000 Manifest next update: Mon 16 Nov 2026 04:25:41 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=) 2: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: aPUWPmF8ZpJnDQVV8ErfPV7yANIkcA26qs12TyiZfy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:34:1b:2e:bb:6c:54:b6:2f:c1:84:7f:fc:8c:f4:67:76:1a:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Validity Not Before: Nov 15 02:47:41 2026 GMT Not After : Nov 16 04:25:41 2026 GMT Subject: CN=70D09D0618D7CFAC42D9006CF33BE79DEFBE5D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:fc:63:1c:8c:40:2c:a9:83:2a:9d:a2:7b: dd:5b:a2:70:ae:85:13:97:b8:b3:9d:23:9e:95:5e: 06:28:4a:9e:f6:3a:25:c9:3f:01:3a:69:ac:95:6b: 0f:39:fe:32:cf:14:db:28:98:44:e8:9b:2d:1a:7e: d9:fb:3d:8c:a3:4f:36:2c:cd:9e:25:ec:58:50:d8: 98:bb:45:64:e6:c9:dc:6e:8c:09:c0:84:cd:ee:50: d5:61:d2:52:7a:de:46:35:9a:fa:17:85:ac:1f:e3: 6d:74:bb:22:fb:e9:64:6d:da:f1:f6:32:a1:09:35: 36:0f:c6:ed:6c:bc:01:07:eb:83:db:70:b3:08:d4: 49:36:8c:1c:f5:b8:52:14:0e:06:f6:ed:20:98:2a: 8e:52:ef:53:a3:a6:89:08:f6:7a:50:9a:4d:14:7e: 28:27:6a:34:8e:1c:c0:e6:04:a0:02:08:3b:77:2d: f4:86:3f:00:76:d2:4c:cd:1a:72:47:cd:81:ad:0d: bc:71:14:e3:26:1c:42:9c:0e:70:06:da:74:51:86: 96:dc:11:b1:d1:bb:a6:7b:69:3b:d2:59:41:3c:46: 10:ee:fc:53:c0:db:cd:08:5f:a6:dc:d6:19:ec:4f: ce:57:37:85:7e:41:6b:80:48:0b:12:25:b7:6e:57: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D0:9D:06:18:D7:CF:AC:42:D9:00:6C:F3:3B:E7:9D:EF:BE:5D:51 X509v3 Authority Key Identifier: keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6d:6a:6c:d6:7c:31:4d:da:1a:bb:5b:59:68:83:ed:07:0c: a7:a3:db:f1:1f:91:9c:e6:1d:ac:f6:ef:3a:f3:23:79:ac:c6: ea:36:de:09:37:ef:ba:12:72:c0:22:d9:a1:45:08:fe:5f:dd: bd:83:6e:a7:c8:f3:ec:21:3c:9e:41:81:31:54:8c:11:c2:f9: 90:d2:ef:86:59:f6:37:c8:a2:14:65:fa:88:f0:f3:9d:24:87: 77:3e:90:4d:e9:df:f3:ab:80:ee:c1:6e:c6:e0:13:47:b2:7c: 1b:c0:55:87:3f:ad:1c:d6:4d:52:3d:a8:30:83:7f:a0:9e:c4: 2f:09:29:3b:53:00:f8:b0:e2:8f:6f:58:f2:dd:c5:10:cc:ef: 0a:de:95:74:dc:8d:af:bf:69:bf:bf:7d:8b:61:2b:55:c4:ce: 41:82:07:fe:a9:f1:e4:d9:2a:db:38:1b:27:18:c2:aa:77:d0: dc:29:16:64:e7:17:f4:a2:e5:1f:2d:35:48:15:e0:23:0c:65: 74:db:bd:bd:15:91:4a:ef:1e:12:a2:52:4e:9f:2d:93:1c:b0: e2:b0:99:c1:98:69:88:cb:74:a4:95:fa:d9:ea:93:3e:88:c1: 75:fc:16:ad:e4:5f:35:38:14:dd:1d:1b:ca:7e:9a:13:62:ab: eb:6c:5f:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzQbLrtsVLYvwYR//Iz0Z3YasKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIwMjZD OTZFN0IwRDAeFw0yNjExMTUwMjQ3NDFaFw0yNjExMTYwNDI1NDFaMDMxMTAvBgNV BAMTKDcwRDA5RDA2MThEN0NGQUM0MkQ5MDA2Q0YzM0JFNzlERUZCRTVENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uPxjHIxALKmDKp2ie91bonCu hROXuLOdI56VXgYoSp72OiXJPwE6aayVaw85/jLPFNsomETomy0aftn7PYyjTzYs zZ4l7FhQ2Ji7RWTmydxujAnAhM3uUNVh0lJ63kY1mvoXhawf4210uyL76WRt2vH2 MqEJNTYPxu1svAEH64PbcLMI1Ek2jBz1uFIUDgb27SCYKo5S71OjpokI9npQmk0U fignajSOHMDmBKACCDt3LfSGPwB20kzNGnJHzYGtDbxxFOMmHEKcDnAG2nRRhpbc EbHRu6Z7aTvSWUE8RhDu/FPA280IX6bc1hnsT85XN4V+QWuASAsSJbduV4HZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcNCdBhjXz6xC2QBs8zvnne++XVEwHwYDVR0j BBgwFoAUpYh0hACzXbgnH3xcQuSwJsluew0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMwYjM5ZTItNjg3Yi00NjE0LTgwOWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQw MEIzNURCODI3MUY3QzVDNDJFNEIwMjZDOTZFN0IwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTg4NzQ4NDAwQjM1REI4MjcxRjdDNUM0MkU0QjAyNkM5NkU3 QjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIw MjZDOTZFN0IwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACltamzWfDFN2hq7W1log+0HDKej2/EfkZzm Haz27zrzI3msxuo23gk377oScsAi2aFFCP5f3b2DbqfI8+whPJ5BgTFUjBHC+ZDS 74ZZ9jfIohRl+ojw850kh3c+kE3p3/OrgO7BbsbgE0eyfBvAVYc/rRzWTVI9qDCD f6CexC8JKTtTAPiw4o9vWPLdxRDM7wrelXTcja+/ab+/fYthK1XEzkGCB/6p8eTZ Kts4GycYwqp30NwpFmTnF/Si5R8tNUgV4CMMZXTbvb0VkUrvHhKiUk6fLZMcsOKw mcGYaYjLdKSV+tnqkz6IwXX8Fq3kXzU4FN0dG8p+mhNiq+tsXy4= -----END CERTIFICATE-----Generated at Sun Nov 15 17:56:37 2026 by rpki-client