$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: 3TYEKjlog9txc9+UUurFo3ZvYMrstIM/ThYMtDP3KHA= Subject key identifier: 90:DB:F5:00:05:9D:AF:B8:A6:F2:F6:88:48:61:86:5F:F3:3A:AE:4B Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 762359CF724D49C4F68A003AE4BBAB6482504C1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 02:11:52 +0000 Manifest this update: Sun 15 Nov 2026 02:06:52 +0000 Manifest next update: Mon 16 Nov 2026 05:57:52 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) 2: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: HS1120Y6pUqjcv0YqIUI7kwMyJDp27oA0rDIS8DftiA=) 3: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) 4: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:23:59:cf:72:4d:49:c4:f6:8a:00:3a:e4:bb:ab:64:82:50:4c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Nov 15 02:06:52 2026 GMT Not After : Nov 16 05:57:52 2026 GMT Subject: CN=90DBF500059DAFB8A6F2F6884861865FF33AAE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:dd:ec:28:41:53:75:39:44:d0:ac:23:a8: 37:8f:18:74:e5:f6:e5:cf:a2:af:f5:9d:21:95:93: cd:75:54:45:d6:c9:a6:13:d0:4b:5a:b1:b6:3e:fd: be:ee:bd:7f:55:bc:f2:b2:b2:47:e7:c4:75:e9:33: 0e:43:49:18:45:37:c2:97:dd:1a:73:c8:0f:b8:27: 80:3d:32:3a:00:ab:71:89:b7:8b:79:04:fb:bc:2b: 16:df:f5:5d:42:dd:5d:b2:68:60:97:67:06:55:23: 4f:90:84:16:ab:da:81:da:a1:3f:06:fc:b6:58:c8: cb:38:17:c9:05:24:82:42:cf:e8:6a:c1:af:ff:f2: 03:d3:95:49:67:e9:cc:44:fd:16:5b:97:8d:51:97: f2:e9:35:94:da:95:f4:9c:f0:f1:d7:57:e0:b6:ca: 71:af:95:ac:84:51:b7:d7:cf:ff:aa:c8:d6:a6:9b: fe:75:2d:ed:c4:44:8c:23:ab:ae:7c:60:85:a2:fa: f4:d3:08:75:08:1d:be:34:03:dd:ab:f4:12:ef:1e: 5f:98:f0:f6:fe:a7:cb:c5:7e:65:76:20:dd:6b:82: 8c:2a:5b:9b:1b:6c:18:6d:90:0b:ef:fa:75:7e:22: 2c:0f:e8:ca:34:38:31:27:76:81:98:ad:16:a5:7d: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DB:F5:00:05:9D:AF:B8:A6:F2:F6:88:48:61:86:5F:F3:3A:AE:4B X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6d:b7:0a:81:8c:fc:01:ab:3b:55:85:8f:69:7b:c8:29:b0: 5f:16:99:e3:42:a6:78:b4:3f:19:5c:ba:15:93:9d:92:a3:37: 80:87:ef:4f:98:e5:97:15:f7:07:43:78:e7:a0:2d:1f:34:89: 68:c3:7c:b5:0b:cc:ff:3e:11:b3:b7:70:e7:9a:da:5f:8a:d7: aa:f8:33:e5:b5:1e:70:ec:ce:89:f5:f1:e4:80:0c:dd:95:04: ce:01:a2:83:37:95:6c:60:7b:2f:a7:2d:0e:8e:5b:72:1a:63: b7:7e:48:2e:7d:03:c2:cb:c8:fa:32:9d:e8:00:6c:b3:1a:ca: fa:46:88:5d:d0:07:5f:32:23:35:fe:48:32:2f:81:7c:c8:1d: c2:a5:ef:f9:10:b3:f3:d6:c1:a6:e1:9f:19:df:6c:cc:d0:49: 56:e6:dd:2c:70:1a:29:7a:25:6d:b6:57:0b:0d:bf:d5:72:1c: 9b:e3:4d:a6:72:4a:59:9f:c6:e7:5e:dd:c7:74:e7:e6:62:b9: 18:f3:0d:45:2c:50:8f:d6:9a:d8:2e:ba:43:c4:9d:e3:16:7e: 05:a8:16:d3:72:7d:58:7b:b8:e8:25:4a:94:87:e0:af:ee:86: 07:ee:01:4e:ca:34:87:fb:f2:79:34:34:20:be:40:c4:0f:56: 3a:af:d1:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiNZz3JNScT2igA65LurZIJQTBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjExMTUwMjA2NTJaFw0yNjExMTYwNTU3NTJaMDMxMTAvBgNV BAMTKDkwREJGNTAwMDU5REFGQjhBNkYyRjY4ODQ4NjE4NjVGRjMzQUFFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFN3sKEFTdTlE0KwjqDePGHTl 9uXPoq/1nSGVk811VEXWyaYT0EtasbY+/b7uvX9VvPKyskfnxHXpMw5DSRhFN8KX 3RpzyA+4J4A9MjoAq3GJt4t5BPu8Kxbf9V1C3V2yaGCXZwZVI0+QhBar2oHaoT8G /LZYyMs4F8kFJIJCz+hqwa//8gPTlUln6cxE/RZbl41Rl/LpNZTalfSc8PHXV+C2 ynGvlayEUbfXz/+qyNamm/51Le3ERIwjq658YIWi+vTTCHUIHb40A92r9BLvHl+Y 8Pb+p8vFfmV2IN1rgowqW5sbbBhtkAvv+nV+IiwP6Mo0ODEndoGYrRalfZMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNv1AAWdr7im8vaISGGGX/M6rkswHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdttwqBjPwBqztVhY9pe8gpsF8WmeNCpni0 PxlcuhWTnZKjN4CH70+Y5ZcV9wdDeOegLR80iWjDfLULzP8+EbO3cOea2l+K16r4 M+W1HnDszon18eSADN2VBM4BooM3lWxgey+nLQ6OW3IaY7d+SC59A8LLyPoynegA bLMayvpGiF3QB18yIzX+SDIvgXzIHcKl7/kQs/PWwabhnxnfbMzQSVbm3SxwGil6 JW22VwsNv9VyHJvjTaZySlmfxude3cd05+ZiuRjzDUUsUI/WmtguukPEneMWfgWo FtNyfVh7uOglSpSH4K/uhgfuAU7KNIf78nk0NCC+QMQPVjqv0XY= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:00 2026 by rpki-client