$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: PyO28SYFHpiX5XrC+CqDU5GQdmCxRbPp1wLUARed5fs= Subject key identifier: C7:5B:10:F6:81:4E:8C:5F:7D:D4:F2:97:1C:B1:71:E4:8C:85:27:4C Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 30DCC03BD249F4A9AA4262D04CFF72A545AE23AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:28:40 +0000 Manifest this update: Sun 15 Nov 2026 07:23:40 +0000 Manifest next update: Mon 16 Nov 2026 09:03:40 +0000 Files and hashes: 1: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: mtaKoNkg4J457RzH6F2Wwvf1yQom+7FBzcnmxLxiDPQ=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dc:c0:3b:d2:49:f4:a9:aa:42:62:d0:4c:ff:72:a5:45:ae:23:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Nov 15 07:23:40 2026 GMT Not After : Nov 16 09:03:40 2026 GMT Subject: CN=C75B10F6814E8C5F7DD4F2971CB171E48C85274C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:bd:42:5f:ca:c8:e4:50:65:42:8e:0e:7c: 86:e1:a3:33:4f:02:6a:b8:e7:13:ca:04:b1:c1:b0: c2:8a:89:02:5b:9b:ab:f6:ba:96:e4:21:09:b0:6d: 93:be:51:79:8a:61:6e:4e:b9:8c:7f:be:e2:c8:b8: 50:95:e3:65:42:8f:2e:fc:73:cd:eb:62:77:65:c1: 28:9b:45:16:a9:96:9c:e7:2b:29:58:3d:c4:1c:f7: 08:2e:46:ff:e8:10:6b:b7:6f:25:d9:39:86:a3:89: 1c:e5:18:3e:ba:01:88:35:16:b1:da:14:a5:f5:ce: 40:73:8b:1a:c5:2d:83:49:ec:bb:da:bb:65:b9:5f: 44:78:3a:78:f7:de:21:2d:55:34:c1:e5:ed:2d:e9: 71:e3:64:2a:30:a2:fa:1e:27:00:89:1f:b9:97:21: 24:e5:73:9e:a3:e4:f6:75:35:1f:4e:fe:3b:bf:fc: 7d:65:ba:4c:67:99:09:0f:3d:fd:91:e4:ad:4c:60: 92:82:ae:12:14:c7:a7:dc:40:1f:94:88:93:e8:6c: 54:b1:01:d2:1b:34:fa:89:37:bd:a9:28:fe:85:f0: b9:83:e8:ef:95:ec:95:9c:a3:d9:28:01:d3:55:9f: fb:d1:bd:bc:f6:38:fc:06:d3:5a:8c:97:d5:13:e2: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5B:10:F6:81:4E:8C:5F:7D:D4:F2:97:1C:B1:71:E4:8C:85:27:4C X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cf:5b:64:a7:82:b0:c1:3b:48:a8:90:f3:70:15:b1:1e:23: b7:d0:e3:3b:11:4c:9e:5f:4a:ca:5a:06:04:e4:4e:f0:59:13: 33:ce:5c:e0:aa:c5:3f:87:1c:2e:fd:99:c7:52:30:37:44:a3: 8d:4b:ba:4c:92:7e:9c:30:a5:b2:30:a0:26:e0:22:f0:b0:18: 55:2b:01:3f:58:68:8f:a9:fa:4c:d8:dd:0f:aa:a7:1f:de:97: 19:80:ae:fb:bc:35:3d:6c:32:4a:a2:87:82:94:f8:a2:58:3b: a5:23:34:76:4c:fa:83:35:e8:ac:2d:77:43:f6:66:18:6c:7f: 74:4c:3a:81:77:91:0e:be:01:40:c7:6e:85:84:82:67:c0:7a: d3:1d:b5:1f:82:58:31:70:0f:20:18:25:99:e0:b9:41:74:32: 37:c3:3e:b8:68:4d:f6:f4:54:71:4b:d9:6f:26:83:1e:1f:51: b3:00:c4:df:0c:17:5d:39:04:3c:5a:18:ea:3d:88:9d:0c:8c: 78:e9:a3:06:ac:a7:29:f2:5e:2b:eb:94:63:37:6f:4a:78:ea: 6b:70:ac:96:d1:f1:e5:94:d9:26:bc:09:40:d7:79:3d:96:c4: a4:af:1f:7d:bf:e7:7b:39:49:c2:df:a2:d7:11:7c:25:26:b0: 76:74:4b:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNzAO9JJ9KmqQmLQTP9ypUWuI68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjExMTUwNzIzNDBaFw0yNjExMTYwOTAzNDBaMDMxMTAvBgNV BAMTKEM3NUIxMEY2ODE0RThDNUY3REQ0RjI5NzFDQjE3MUU0OEM4NTI3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkSb1CX8rI5FBlQo4OfIbhozNP Amq45xPKBLHBsMKKiQJbm6v2upbkIQmwbZO+UXmKYW5OuYx/vuLIuFCV42VCjy78 c83rYndlwSibRRaplpznKylYPcQc9wguRv/oEGu3byXZOYajiRzlGD66AYg1FrHa FKX1zkBzixrFLYNJ7Lvau2W5X0R4Onj33iEtVTTB5e0t6XHjZCowovoeJwCJH7mX ISTlc56j5PZ1NR9O/ju//H1lukxnmQkPPf2R5K1MYJKCrhIUx6fcQB+UiJPobFSx AdIbNPqJN72pKP6F8LmD6O+V7JWco9koAdNVn/vRvbz2OPwG01qMl9UT4jFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1sQ9oFOjF991PKXHLFx5IyFJ0wwHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnPW2SngrDBO0iokPNwFbEeI7fQ4zsRTJ5f SspaBgTkTvBZEzPOXOCqxT+HHC79mcdSMDdEo41LukySfpwwpbIwoCbgIvCwGFUr AT9YaI+p+kzY3Q+qpx/elxmArvu8NT1sMkqih4KU+KJYO6UjNHZM+oM16Kwtd0P2 Zhhsf3RMOoF3kQ6+AUDHboWEgmfAetMdtR+CWDFwDyAYJZnguUF0MjfDPrhoTfb0 VHFL2W8mgx4fUbMAxN8MF105BDxaGOo9iJ0MjHjpowaspynyXivrlGM3b0p46mtw rJbR8eWU2Sa8CUDXeT2WxKSvH32/53s5ScLfotcRfCUmsHZ0S+w= -----END CERTIFICATE-----Generated at Sun Nov 15 21:55:39 2026 by rpki-client