$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: Uw3b2VOskK5RC/lLuYnTYJugB/QCelScRjIUWpC5k+c= Subject key identifier: C8:E1:D2:D7:A8:BC:36:05:D9:8E:6B:20:58:DF:3F:5C:1B:D5:E5:35 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 684E34863D57D0DE4A507D02CD21168A96D57239 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 010A Signing time: Sun 15 Nov 2026 06:32:19 +0000 Manifest this update: Sun 15 Nov 2026 06:27:19 +0000 Manifest next update: Mon 16 Nov 2026 09:23:19 +0000 Files and hashes: 1: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: w38TaSItBH/kT6le/8jLrFIsi18uFNgaJv/oRilOq2M=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4e:34:86:3d:57:d0:de:4a:50:7d:02:cd:21:16:8a:96:d5:72:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Nov 15 06:27:19 2026 GMT Not After : Nov 16 09:23:19 2026 GMT Subject: CN=C8E1D2D7A8BC3605D98E6B2058DF3F5C1BD5E535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:8e:57:b4:dc:ec:3b:56:b3:5f:fa:60:8f: 36:f9:f8:b4:ab:b8:b3:03:24:82:a8:ac:56:8e:ee: 9a:00:95:40:df:be:6d:a3:89:e9:ae:df:2e:37:ef: c1:1c:7f:38:96:af:52:c8:7e:ca:2a:67:02:00:69: d7:bd:5b:25:69:a2:d6:c6:e2:ec:1d:86:bc:a7:97: b5:3f:1b:20:44:cd:ae:46:b6:5a:82:cb:26:7d:3b: 4e:bf:11:95:63:37:fe:5c:e4:af:17:ce:85:16:ad: 64:99:68:a4:92:3c:0f:2d:8c:76:ab:a8:f3:f0:4d: c4:03:ae:54:2b:f4:be:f0:8e:8f:1f:36:56:0b:47: 44:90:65:af:52:70:57:89:d4:48:f2:e2:ec:5a:fc: 0b:b7:c3:dd:4b:ad:b3:e4:cb:96:1b:e8:d9:c1:3d: 37:db:c6:94:a7:f6:63:61:6b:da:03:49:9e:c9:96: 7d:26:e3:32:c2:20:bf:51:a5:f4:e7:f2:93:1a:0d: 92:a0:9b:3d:04:23:21:d8:bb:fd:a9:62:f6:4b:7d: a2:e8:ea:59:9b:f4:bb:7a:08:5d:08:e6:2a:24:e0: b3:a8:d7:aa:d0:f0:e3:be:cf:af:10:75:bd:5d:4c: b9:34:0b:a6:ee:f0:76:db:29:2c:c4:72:cc:b3:0b: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E1:D2:D7:A8:BC:36:05:D9:8E:6B:20:58:DF:3F:5C:1B:D5:E5:35 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b4:89:a0:d4:c9:9e:82:fc:89:f2:48:e0:c6:00:f3:c4:2f: be:a5:eb:17:0f:a0:c2:5f:6f:94:4f:b7:a3:0b:a9:b7:95:8d: b4:72:76:54:20:13:ac:95:98:a2:13:31:83:30:8d:4d:46:cc: d4:eb:7d:2f:5c:4d:95:16:6f:bc:95:bc:48:27:f4:59:f5:3b: 0d:e3:31:d4:11:20:54:fa:35:ed:e1:3c:44:58:ab:00:f4:57: 14:14:f6:3d:29:05:5f:3b:aa:46:5d:7a:c3:61:62:ee:fb:de: 71:63:8d:40:9f:6a:62:81:9a:d5:69:62:b9:e6:ce:1f:68:b0: 96:28:d2:cd:07:38:64:16:3f:0f:9b:b7:77:2b:75:66:0b:b8: be:c2:f3:65:e4:3d:3d:c2:a2:f5:6c:85:b0:71:a9:a1:06:47: 46:df:69:46:47:2a:f6:13:e1:9d:d8:8f:d2:b9:d8:c6:12:0a: 03:52:ca:be:9f:48:d2:fe:8c:59:c7:06:01:65:c8:a3:99:7f: 8d:f2:3f:51:23:7d:d1:b3:17:36:20:f3:b2:63:f6:bd:39:20: c9:59:a4:f4:66:d0:2e:76:d6:ee:e4:e5:8c:12:9b:db:45:4a: 1a:a0:1e:95:7b:ac:9a:18:9b:90:b5:fd:11:94:bb:b1:f7:9f: 5b:cd:8d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE40hj1X0N5KUH0CzSEWipbVcjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjExMTUwNjI3MTlaFw0yNjExMTYwOTIzMTlaMDMxMTAvBgNV BAMTKEM4RTFEMkQ3QThCQzM2MDVEOThFNkIyMDU4REYzRjVDMUJENUU1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPo5XtNzsO1azX/pgjzb5+LSr uLMDJIKorFaO7poAlUDfvm2jiemu3y4378EcfziWr1LIfsoqZwIAade9WyVpotbG 4uwdhrynl7U/GyBEza5GtlqCyyZ9O06/EZVjN/5c5K8XzoUWrWSZaKSSPA8tjHar qPPwTcQDrlQr9L7wjo8fNlYLR0SQZa9ScFeJ1Ejy4uxa/Au3w91LrbPky5Yb6NnB PTfbxpSn9mNha9oDSZ7Jln0m4zLCIL9RpfTn8pMaDZKgmz0EIyHYu/2pYvZLfaLo 6lmb9Lt6CF0I5iok4LOo16rQ8OO+z68Qdb1dTLk0C6bu8HbbKSzEcsyzCwsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyOHS16i8NgXZjmsgWN8/XBvV5TUwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq0iaDUyZ6C/InySODGAPPEL76l6xcPoMJf b5RPt6MLqbeVjbRydlQgE6yVmKITMYMwjU1GzNTrfS9cTZUWb7yVvEgn9Fn1Ow3j MdQRIFT6Ne3hPERYqwD0VxQU9j0pBV87qkZdesNhYu773nFjjUCfamKBmtVpYrnm zh9osJYo0s0HOGQWPw+bt3crdWYLuL7C82XkPT3CovVshbBxqaEGR0bfaUZHKvYT 4Z3Yj9K52MYSCgNSyr6fSNL+jFnHBgFlyKOZf43yP1EjfdGzFzYg87Jj9r05IMlZ pPRm0C521u7k5YwSm9tFShqgHpV7rJoYm5C1/RGUu7H3n1vNjQ0= -----END CERTIFICATE-----Generated at Sun Nov 15 15:26:06 2026 by rpki-client