$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: kxBqRFLLHpHLt3trNHNMjdR2lP9yqzkRlhtvlItkNCQ= Subject key identifier: AD:87:29:9B:83:2F:83:16:12:29:A2:D2:5A:10:47:1E:61:A1:E1:71 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 7CAC3DA78C1ECCBFAB17BAE7072B0A13E9DCF666 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:46:16 +0000 Manifest this update: Sun 15 Nov 2026 09:41:16 +0000 Manifest next update: Mon 16 Nov 2026 11:54:16 +0000 Files and hashes: 1: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: PH64CugtiYLbpPtmeq7PP04pYGyXK0+8B0H9gCEc0ws=) 2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ac:3d:a7:8c:1e:cc:bf:ab:17:ba:e7:07:2b:0a:13:e9:dc:f6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Nov 15 09:41:16 2026 GMT Not After : Nov 16 11:54:16 2026 GMT Subject: CN=AD87299B832F83161229A2D25A10471E61A1E171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:34:e7:94:a8:df:2a:d6:b5:72:db:e2:1d: c3:88:83:01:6f:68:6a:b5:83:93:e9:1c:4f:6d:8b: df:af:00:2f:77:7a:dd:83:01:ca:38:32:b3:d4:6c: 49:b5:b7:d1:c9:d8:8e:b5:01:18:7d:fd:83:9f:09: 0d:0d:f0:d3:5b:d1:9c:e3:b9:4e:eb:94:ae:da:de: 6a:86:dd:f6:0b:05:5f:0e:f3:c8:12:8e:bf:06:17: 16:28:7d:50:b1:8e:a8:9c:24:0d:86:6f:75:d2:a0: 9b:bb:3d:41:ce:a1:60:50:de:01:f6:5a:6b:e1:4e: a3:a6:1d:6f:00:25:34:77:42:77:d3:a4:dd:09:60: 7d:ec:87:f6:c1:77:96:c2:78:e9:ec:8d:41:cb:24: 7b:ec:a7:33:ac:a8:ba:d6:a8:04:bb:55:60:a2:e8: eb:62:d9:3a:2b:b0:fc:09:8e:69:15:ca:a6:7c:64: 10:e4:dd:0e:f7:c9:48:b0:ad:11:ae:29:0b:0a:6b: 6d:4c:60:f9:8f:9c:b0:38:ef:99:68:42:33:93:74: e7:6c:d9:e3:5f:95:5a:ee:88:ad:f3:e6:1a:19:f3: a9:b5:21:47:c0:fd:d6:d6:c7:68:06:46:fd:19:e0: dd:e2:03:ec:44:9c:78:8b:52:95:f8:75:6b:9f:e3: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:87:29:9B:83:2F:83:16:12:29:A2:D2:5A:10:47:1E:61:A1:E1:71 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c0:57:e1:1c:85:aa:49:73:2b:c2:61:66:3f:f9:af:36:58: 08:89:7b:62:e9:63:23:3b:56:1d:b5:76:b0:89:4c:16:30:e9: 16:39:bc:b2:f7:f1:12:55:c5:72:85:63:64:14:85:98:9f:ce: 04:af:d6:32:67:ae:43:64:58:f8:9d:bf:ee:c4:b5:41:f2:76: 68:05:24:2d:96:98:cf:5f:9d:18:9c:3f:29:35:98:f5:2b:39: 11:67:ed:23:2a:07:83:3f:4a:cd:ef:85:7a:3b:67:2e:79:c0: 0c:c4:d4:8f:fa:06:87:a4:8c:04:00:25:9a:c1:96:d0:b9:8b: 16:f7:2e:b4:76:40:65:b4:65:7c:06:cd:0f:05:0a:c0:5a:2a: d1:cd:81:6c:6a:6b:39:f8:d2:ae:d5:8b:b5:59:b5:d3:a3:06: 66:e9:33:dd:cd:b7:30:22:b3:19:55:ed:99:b6:d8:61:6c:42: bb:ce:7b:43:cd:f7:45:5d:04:7f:b1:91:43:5d:b3:1d:2b:7b: 28:54:65:6f:11:21:a3:87:c1:e7:b1:2e:53:a0:48:f8:d2:e1: 13:0d:2d:8f:e4:67:a4:41:74:aa:ae:a8:36:4a:40:6c:02:e0: aa:10:cc:d9:a2:d9:c6:51:a7:95:c3:80:6a:89:7f:53:2c:a2: 5e:c2:07:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKw9p4wezL+rF7rnBysKE+nc9mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjExMTUwOTQxMTZaFw0yNjExMTYxMTU0MTZaMDMxMTAvBgNV BAMTKEFEODcyOTlCODMyRjgzMTYxMjI5QTJEMjVBMTA0NzFFNjFBMUUxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoDTnlKjfKta1ctviHcOIgwFv aGq1g5PpHE9ti9+vAC93et2DAco4MrPUbEm1t9HJ2I61ARh9/YOfCQ0N8NNb0Zzj uU7rlK7a3mqG3fYLBV8O88gSjr8GFxYofVCxjqicJA2Gb3XSoJu7PUHOoWBQ3gH2 WmvhTqOmHW8AJTR3QnfTpN0JYH3sh/bBd5bCeOnsjUHLJHvspzOsqLrWqAS7VWCi 6Oti2TorsPwJjmkVyqZ8ZBDk3Q73yUiwrRGuKQsKa21MYPmPnLA475loQjOTdOds 2eNflVruiK3z5hoZ86m1IUfA/dbWx2gGRv0Z4N3iA+xEnHiLUpX4dWuf4wzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYcpm4MvgxYSKaLSWhBHHmGh4XEwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnAV+EchapJcyvCYWY/+a82WAiJe2LpYyM7 Vh21drCJTBYw6RY5vLL38RJVxXKFY2QUhZifzgSv1jJnrkNkWPidv+7EtUHydmgF JC2WmM9fnRicPyk1mPUrORFn7SMqB4M/Ss3vhXo7Zy55wAzE1I/6BoekjAQAJZrB ltC5ixb3LrR2QGW0ZXwGzQ8FCsBaKtHNgWxqazn40q7Vi7VZtdOjBmbpM93NtzAi sxlV7Zm22GFsQrvOe0PN90VdBH+xkUNdsx0reyhUZW8RIaOHweexLlOgSPjS4RMN LY/kZ6RBdKquqDZKQGwC4KoQzNmi2cZRp5XDgGqJf1Msol7CB44= -----END CERTIFICATE-----Generated at Sun Nov 15 21:55:33 2026 by rpki-client