$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json) Hash identifier: ADR4sslwI9LFLGqZ1tcUDQ7QwC2vp4+ktxSEghXSfOY= Subject key identifier: 28:AA:98:8A:60:AB:D2:28:D7:FD:C3:EF:F6:7D:AC:D7:03:F8:11:E2 Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Certificate serial: 44BD8BF3C4EE138883B2463D31CEDD4E8F534A76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 02:57:56 +0000 Manifest this update: Sun 15 Nov 2026 02:52:56 +0000 Manifest next update: Mon 16 Nov 2026 05:09:56 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=) 2: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: S8LoaRKcm2nM3jaDnx1AEtxjynBAT79dUJpwSc55+IM=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bd:8b:f3:c4:ee:13:88:83:b2:46:3d:31:ce:dd:4e:8f:53:4a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Validity Not Before: Nov 15 02:52:56 2026 GMT Not After : Nov 16 05:09:56 2026 GMT Subject: CN=28AA988A60ABD228D7FDC3EFF67DACD703F811E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:28:3d:b8:a6:92:88:fb:c1:19:19:50:ba: cb:b0:63:bd:d7:d6:57:80:64:d0:64:2b:dc:14:0c: ab:c9:8e:3b:77:ee:ca:99:d6:ca:6b:2a:62:96:0c: a8:71:9b:12:29:29:c7:1e:51:20:d7:2d:61:7c:d8: 3d:84:41:fc:d4:3f:84:b4:1d:8e:a4:bc:95:66:03: 3e:51:aa:5c:28:2d:f2:63:a6:a5:d0:25:87:ca:37: 72:b0:b5:4f:4f:34:08:c7:95:3c:f5:48:fb:78:c8: cc:70:be:2e:1f:67:27:2a:39:78:eb:e6:f4:ee:e9: be:92:cd:35:68:38:6c:f4:04:c0:e2:4d:a6:cf:b1: f7:38:fd:fc:f0:0c:19:08:07:a5:c0:b7:e6:c7:6e: 3f:96:04:6c:44:c2:c6:8d:07:2b:88:81:35:e7:78: 03:51:8b:dd:e6:ac:01:bc:b0:67:1c:53:7e:c8:61: b7:8a:a9:41:6e:c6:21:8e:6c:43:a0:1a:c8:26:71: dc:a2:d5:dd:88:f0:42:d7:7d:e8:d0:3f:45:0a:91: 0f:ad:99:28:75:bd:ba:dd:64:1d:3c:d8:ce:68:0e: df:c2:5d:cd:2e:eb:b5:b4:d3:c0:ae:b9:6a:4c:e1: 0d:ff:83:21:39:2e:59:84:f8:93:79:8d:cb:2a:4d: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:98:8A:60:AB:D2:28:D7:FD:C3:EF:F6:7D:AC:D7:03:F8:11:E2 X509v3 Authority Key Identifier: keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:f1:85:1e:d8:2c:f3:20:12:a6:67:c4:11:d7:d7:e0:1d: b2:0a:d2:42:f4:4d:ad:c7:ce:06:48:3d:3e:c4:b5:db:3d:c8: ea:91:d5:3c:40:8d:fc:19:f9:da:b5:d3:5f:22:7d:9a:2a:f8: 79:8f:7c:d6:9a:94:4d:a3:35:c8:01:aa:d7:e6:ab:3d:dd:40: a2:d7:ea:fa:7d:fc:d2:d7:2c:79:da:e5:76:37:8c:ec:d0:39: 55:32:ee:63:49:2e:15:06:04:74:94:ca:dc:cc:78:f4:8b:fd: 0f:15:fb:c5:af:43:7c:1d:87:75:fc:36:33:d0:ad:23:12:c3: 56:46:1a:72:27:b4:2b:26:b0:e5:e6:79:23:1c:a8:a9:f3:e8: 35:34:b7:df:5e:9e:64:64:e2:08:25:bb:f7:e1:45:f7:ea:09: 07:83:18:cd:b0:ba:77:4a:59:d5:c1:f0:0c:95:db:fa:e9:ff: 6d:18:55:63:07:07:38:6f:85:45:96:87:3a:c4:3e:e8:ce:ea: 70:25:49:8b:ac:54:53:9b:ef:a2:0e:e3:d9:06:9e:b8:76:a1: 10:b8:55:e8:99:fc:60:ca:b2:2e:fb:07:14:61:63:34:19:af: 1b:b1:5b:21:ce:11:dc:2b:16:a9:80:9e:a5:04:8f:81:75:f0: 11:33:a5:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURL2L88TuE4iDskY9Mc7dTo9TSnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4 NDBBQUNFQzAeFw0yNjExMTUwMjUyNTZaFw0yNjExMTYwNTA5NTZaMDMxMTAvBgNV BAMTKDI4QUE5ODhBNjBBQkQyMjhEN0ZEQzNFRkY2N0RBQ0Q3MDNGODExRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21ig9uKaSiPvBGRlQusuwY73X 1leAZNBkK9wUDKvJjjt37sqZ1sprKmKWDKhxmxIpKcceUSDXLWF82D2EQfzUP4S0 HY6kvJVmAz5RqlwoLfJjpqXQJYfKN3KwtU9PNAjHlTz1SPt4yMxwvi4fZycqOXjr 5vTu6b6SzTVoOGz0BMDiTabPsfc4/fzwDBkIB6XAt+bHbj+WBGxEwsaNByuIgTXn eANRi93mrAG8sGccU37IYbeKqUFuxiGObEOgGsgmcdyi1d2I8ELXfejQP0UKkQ+t mSh1vbrdZB082M5oDt/CXc0u67W008CuuWpM4Q3/gyE5LlmE+JN5jcsqTQvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKqYimCr0ijX/cPv9n2s1wP4EeIwHwYDVR0j BBgwFoAULP5sBBkbKO2hOYT1VJIx0YQKrOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU5MDhiODMtN2Y0NC00NmUwLTg1MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQx OTFCMjhFREExMzk4NEY1NTQ5MjMxRDE4NDBBQUNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0ZFNkMwNDE5MUIyOEVEQTEzOTg0RjU1NDkyMzFEMTg0MEFB Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMkNGRTZDMDQxOTFCMjhFREExMzk4NEY1NTQ5MjMx RDE4NDBBQUNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX58YUe2CzzIBKmZ8QR19fgHbIK0kL0Ta3H zgZIPT7Etds9yOqR1TxAjfwZ+dq1018ifZoq+HmPfNaalE2jNcgBqtfmqz3dQKLX 6vp9/NLXLHna5XY3jOzQOVUy7mNJLhUGBHSUytzMePSL/Q8V+8WvQ3wdh3X8NjPQ rSMSw1ZGGnIntCsmsOXmeSMcqKnz6DU0t99enmRk4gglu/fhRffqCQeDGM2wundK WdXB8AyV2/rp/20YVWMHBzhvhUWWhzrEPujO6nAlSYusVFOb76IO49kGnrh2oRC4 VeiZ/GDKsi77BxRhYzQZrxuxWyHOEdwrFqmAnqUEj4F18BEzpVA= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:31 2026 by rpki-client