$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: +PIjbggw2DSROrOgOx1ZmcHLWolFjoGbxsDxowpMXVc= Subject key identifier: 43:C2:66:EB:16:45:3E:19:20:C1:06:83:4D:95:28:09:56:B2:72:52 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 03713D7EB978FF72F1DB3B44521C57C8660C3E1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 10:57:39 +0000 Manifest this update: Sun 15 Nov 2026 10:52:39 +0000 Manifest next update: Mon 16 Nov 2026 12:21:39 +0000 Files and hashes: 1: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: bfrTgYG8+Y+DABF4p7EwUAOzCRyI2q7REeCS2zHMhAM=) 2: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 3: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 4: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:71:3d:7e:b9:78:ff:72:f1:db:3b:44:52:1c:57:c8:66:0c:3e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Nov 15 10:52:39 2026 GMT Not After : Nov 16 12:21:39 2026 GMT Subject: CN=43C266EB16453E1920C106834D95280956B27252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:70:d2:fe:1a:25:85:0d:86:c7:7f:56:e9: 51:49:2b:0e:cc:7e:63:84:6d:b5:d7:6c:db:cd:81: 68:a9:9f:79:5b:92:c0:93:16:94:d4:f1:cd:b5:f9: 0c:65:10:ed:10:cc:38:dc:64:f4:38:0c:93:6e:4a: b2:13:9f:00:ed:78:7a:b8:89:e7:9b:57:87:7f:d7: 90:e3:8e:19:d9:78:86:ca:29:01:de:13:22:5a:7c: 14:fa:0a:43:0a:bb:44:07:c8:a6:47:40:4d:0d:b4: 4a:26:d6:91:6d:62:1f:20:b1:fa:4e:8c:99:bd:5d: a1:a0:b4:54:fe:f7:37:a8:95:96:7d:12:2b:c7:f2: 28:04:26:5e:ba:e4:9e:6d:06:6e:0a:da:fb:e1:aa: 3f:78:8a:85:43:dd:12:1e:a5:00:74:0a:48:88:5a: d5:43:8b:5f:44:41:db:eb:35:6c:92:ac:9c:e1:8a: d6:ec:94:d9:82:9d:65:c8:6c:87:42:63:1a:b7:3c: c5:e9:64:da:f3:0f:1d:ac:4d:d8:53:3e:bd:f2:1a: 11:c5:34:42:eb:cf:ad:43:01:60:ec:a5:1c:5a:5a: d0:e8:23:35:7a:a0:44:78:8d:9f:cf:75:44:a0:e3: 9c:59:32:c4:d1:7d:5f:6b:20:82:9c:db:4d:ed:20: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C2:66:EB:16:45:3E:19:20:C1:06:83:4D:95:28:09:56:B2:72:52 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f9:9f:d8:af:09:a1:c9:e5:e3:ee:d0:fa:18:3d:8e:05:ca: e9:10:a3:6d:64:10:db:6f:10:00:2a:18:c1:74:ca:10:0a:1a: 31:54:62:79:b7:de:b3:39:c9:0e:46:d0:f4:19:f0:96:67:68: 7b:f9:7a:01:5b:b8:37:2c:a6:c6:7c:d5:95:63:11:ac:5a:7d: 58:82:d1:ae:f6:68:35:7b:07:76:e1:3a:15:29:48:67:10:0f: 98:1c:26:8a:2b:00:d9:63:e5:01:61:b6:95:d6:63:63:a9:f2: c3:ae:03:5b:c0:0b:b0:12:8e:eb:07:7b:c8:74:ea:86:be:01: a8:5a:f1:58:d4:da:a3:9f:19:9e:de:69:5e:d9:40:a2:c2:70: 67:de:9a:90:20:42:33:17:75:f8:34:4d:a1:36:36:f3:52:0e: fd:12:2e:e6:05:97:62:73:a3:f1:8d:3e:7d:e4:f5:03:6b:9f: 3b:44:28:bb:a9:8d:b5:fb:4d:3d:25:06:a3:2b:f9:06:4b:29: 6b:f8:8f:92:86:df:12:d3:ba:67:44:b0:1e:2e:63:b5:0c:5a: cb:18:72:92:b0:8d:1e:da:7f:aa:3c:ac:36:d3:fa:1f:95:03: 7f:ad:fc:a4:38:4f:a3:9a:d6:59:55:d8:b1:5e:b4:e1:32:d4: 02:cf:9a:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3E9frl4/3Lx2ztEUhxXyGYMPhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjExMTUxMDUyMzlaFw0yNjExMTYxMjIxMzlaMDMxMTAvBgNV BAMTKDQzQzI2NkVCMTY0NTNFMTkyMEMxMDY4MzREOTUyODA5NTZCMjcyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6XDS/holhQ2Gx39W6VFJKw7M fmOEbbXXbNvNgWipn3lbksCTFpTU8c21+QxlEO0QzDjcZPQ4DJNuSrITnwDteHq4 ieebV4d/15DjjhnZeIbKKQHeEyJafBT6CkMKu0QHyKZHQE0NtEom1pFtYh8gsfpO jJm9XaGgtFT+9zeolZZ9EivH8igEJl665J5tBm4K2vvhqj94ioVD3RIepQB0CkiI WtVDi19EQdvrNWySrJzhitbslNmCnWXIbIdCYxq3PMXpZNrzDx2sTdhTPr3yGhHF NELrz61DAWDspRxaWtDoIzV6oER4jZ/PdUSg45xZMsTRfV9rIIKc203tIP/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8Jm6xZFPhkgwQaDTZUoCVayclIwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKj5n9ivCaHJ5ePu0PoYPY4FyukQo21kENtv EAAqGMF0yhAKGjFUYnm33rM5yQ5G0PQZ8JZnaHv5egFbuDcspsZ81ZVjEaxafViC 0a72aDV7B3bhOhUpSGcQD5gcJoorANlj5QFhtpXWY2Op8sOuA1vAC7ASjusHe8h0 6oa+Aaha8VjU2qOfGZ7eaV7ZQKLCcGfempAgQjMXdfg0TaE2NvNSDv0SLuYFl2Jz o/GNPn3k9QNrnztEKLupjbX7TT0lBqMr+QZLKWv4j5KG3xLTumdEsB4uY7UMWssY cpKwjR7af6o8rDbT+h+VA3+t/KQ4T6Oa1llV2LFetOEy1ALPmvU= -----END CERTIFICATE-----Generated at Sun Nov 15 21:25:13 2026 by rpki-client