$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: xpQQLzPSN6LQK6yz07B0CLarN27NEnHIFY7H8/YoUX8= Subject key identifier: 40:5F:09:CB:BC:BA:90:DA:92:D7:19:77:C1:8C:FA:C7:F5:C9:41:5E Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 2D83DF48D6A5513DCD6D6F546B01B9E3058DD4E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:09:13 +0000 Manifest this update: Sun 15 Nov 2026 04:04:13 +0000 Manifest next update: Mon 16 Nov 2026 07:38:13 +0000 Files and hashes: 1: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) 2: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 3: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) 4: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 5: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: NhpEuw7sc/tT5LUyEUjGDvTy80t+rGSXdQFz/QEnngM=) 6: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 7: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:83:df:48:d6:a5:51:3d:cd:6d:6f:54:6b:01:b9:e3:05:8d:d4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Nov 15 04:04:13 2026 GMT Not After : Nov 16 07:38:13 2026 GMT Subject: CN=405F09CBBCBA90DA92D71977C18CFAC7F5C9415E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:ee:1d:25:9d:c5:f8:40:2e:fd:c4:2b:fd: e7:ce:25:aa:60:84:11:ca:4b:0b:15:59:1d:63:b4: 38:d7:10:f3:17:f0:e4:0f:29:c6:b0:fe:78:87:ea: 80:a8:f4:6a:f5:d7:63:57:df:6b:81:2b:3a:8d:60: b2:13:49:41:8f:8e:a8:4a:84:f7:c2:0f:36:b9:c9: 74:fe:09:d5:ad:25:0a:15:ad:b2:cb:ec:e6:3a:cd: c7:1a:ed:77:fb:b7:2e:16:42:8e:65:12:65:08:74: a8:0f:60:6e:1f:fb:42:f8:ce:38:62:73:36:09:09: 20:99:1a:c7:20:62:35:30:b7:9a:63:3e:14:a0:6e: 75:1a:57:f1:3f:9d:33:57:73:2a:36:f6:88:a7:62: de:47:52:37:6e:14:a6:b2:e9:91:7a:8f:c4:73:ea: 0a:75:85:f5:13:7a:1f:89:86:de:b5:93:16:e3:01: 85:e6:11:70:bc:9a:a8:bf:80:dc:73:63:2c:5c:4b: 25:6a:e3:4b:91:90:31:72:f6:ce:c7:47:73:6d:ff: f4:da:2f:35:6f:06:81:dc:6a:03:9a:59:35:1d:17: d3:4d:5f:d4:f8:e0:b1:2a:46:be:09:7d:47:48:26: dd:51:ca:38:cd:80:09:f4:ae:d5:e5:28:9d:c1:9f: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5F:09:CB:BC:BA:90:DA:92:D7:19:77:C1:8C:FA:C7:F5:C9:41:5E X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:77:69:4b:f1:b7:36:67:68:62:1b:44:43:58:32:f4:87: a4:8d:1d:e3:65:1f:ba:c9:7a:1b:59:fa:38:16:38:27:44:fe: aa:84:c3:d7:e1:bd:d2:22:7a:4d:91:ba:aa:13:64:77:8a:2a: 76:d3:f5:b5:62:8d:4f:aa:55:01:cc:db:43:2c:10:0d:bb:68: 05:5d:85:11:51:c1:85:0e:74:d0:4e:62:fa:21:15:10:fe:74: c0:c5:9b:a0:4e:13:5f:9f:cc:c6:97:5d:82:a8:6e:25:04:2b: 65:b8:ce:c6:48:30:c4:96:d9:67:29:02:e6:c4:43:58:aa:6d: 59:b5:33:f6:83:6a:dc:b9:f9:1e:b2:41:c5:f9:ef:2f:c3:8f: b4:e0:b2:b8:14:29:bc:5e:1c:28:84:d6:11:4e:97:0f:03:a8: fe:f3:8c:25:43:e0:db:41:4d:64:ae:92:26:b1:6c:b5:dc:05: 6b:ae:8d:aa:31:b6:db:00:3f:19:03:4f:08:20:d4:6b:5f:10: 3e:1f:46:be:30:f8:c7:ff:84:d1:94:18:a0:99:f9:13:18:59: e1:fa:c2:42:fd:e1:7c:71:f5:2e:a6:e8:b3:d1:be:b2:76:b3: 6e:7b:c2:e5:a0:41:f3:94:d3:48:78:08:6b:53:a3:85:93:f0: 3d:a1:d4:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYPfSNalUT3NbW9UawG54wWN1OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjExMTUwNDA0MTNaFw0yNjExMTYwNzM4MTNaMDMxMTAvBgNV BAMTKDQwNUYwOUNCQkNCQTkwREE5MkQ3MTk3N0MxOENGQUM3RjVDOTQxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYO4dJZ3F+EAu/cQr/efOJapg hBHKSwsVWR1jtDjXEPMX8OQPKcaw/niH6oCo9Gr112NX32uBKzqNYLITSUGPjqhK hPfCDza5yXT+CdWtJQoVrbLL7OY6zcca7Xf7ty4WQo5lEmUIdKgPYG4f+0L4zjhi czYJCSCZGscgYjUwt5pjPhSgbnUaV/E/nTNXcyo29oinYt5HUjduFKay6ZF6j8Rz 6gp1hfUTeh+Jht61kxbjAYXmEXC8mqi/gNxzYyxcSyVq40uRkDFy9s7HR3Nt//Ta LzVvBoHcagOaWTUdF9NNX9T44LEqRr4JfUdIJt1RyjjNgAn0rtXlKJ3Bnxe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQF8Jy7y6kNqS1xl3wYz6x/XJQV4wHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKbd2lL8bc2Z2hiG0RDWDL0h6SNHeNlH7rJ ehtZ+jgWOCdE/qqEw9fhvdIiek2RuqoTZHeKKnbT9bVijU+qVQHM20MsEA27aAVd hRFRwYUOdNBOYvohFRD+dMDFm6BOE1+fzMaXXYKobiUEK2W4zsZIMMSW2WcpAubE Q1iqbVm1M/aDaty5+R6yQcX57y/Dj7TgsrgUKbxeHCiE1hFOlw8DqP7zjCVD4NtB TWSukiaxbLXcBWuujaoxttsAPxkDTwgg1GtfED4fRr4w+Mf/hNGUGKCZ+RMYWeH6 wkL94Xxx9S6m6LPRvrJ2s257wuWgQfOU00h4CGtTo4WT8D2h1DM= -----END CERTIFICATE-----Generated at Sun Nov 15 17:58:22 2026 by rpki-client