$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json) Hash identifier: SPGhyxi/oW1EyhYNYTHKlBhf7QNYkqBtLiIG7tI7HJo= Subject key identifier: 70:04:CE:4C:D7:AF:4B:8A:C3:DC:5E:80:AD:28:B9:BB:CF:5A:AF:3F Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Certificate serial: 7FEFE3391B0433497DAFEA5ECFB004F3BAC87C41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 08:45:06 +0000 Manifest this update: Sun 15 Nov 2026 08:40:06 +0000 Manifest next update: Mon 16 Nov 2026 09:22:06 +0000 Files and hashes: 1: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=) 3: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=) 4: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=) 5: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: pn3h2VcMmailUnEtj4zkqJz3igUXak3SsSPmkblyFY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ef:e3:39:1b:04:33:49:7d:af:ea:5e:cf:b0:04:f3:ba:c8:7c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Validity Not Before: Nov 15 08:40:06 2026 GMT Not After : Nov 16 09:22:06 2026 GMT Subject: CN=7004CE4CD7AF4B8AC3DC5E80AD28B9BBCF5AAF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:8f:d0:ef:e8:fc:a8:43:46:7a:15:4e:a7: 8b:d0:32:42:b7:c2:72:02:58:f8:52:3b:26:be:3d: 77:30:68:b3:23:36:b7:85:d3:da:60:c0:e9:65:54: b8:fc:0b:4a:d4:6c:e7:85:d2:fa:43:63:66:e4:88: 4b:7a:f2:9d:c4:29:ad:df:3c:53:34:16:03:91:46: ac:45:35:44:ea:44:39:f2:dc:77:af:82:87:1b:92: 87:0a:41:a1:f6:42:d2:94:cd:73:c8:a6:58:d7:c9: c6:67:8d:89:c2:06:13:b4:a9:0d:50:30:4f:3a:83: 3b:ea:ea:1d:7e:2f:b4:2a:aa:08:a0:eb:ee:17:41: 15:e8:58:0a:e6:92:eb:35:e5:15:5d:3b:92:5e:1b: 8b:4f:50:a6:fc:c4:30:4b:47:25:6d:e1:d5:1b:e5: 71:db:e1:9b:3a:16:dd:d6:87:b5:34:dd:c1:74:4d: 25:b9:f5:11:24:da:71:d6:36:0f:c3:b4:b2:ec:c8: 58:d8:24:22:20:c6:90:58:8b:6d:ab:2c:ee:dc:1a: d9:d7:ce:39:5d:4c:e9:b8:5c:ce:06:75:50:ae:ed: 30:5e:05:ee:8c:4e:1e:d9:1e:bc:b7:0a:03:d5:fa: 2b:70:87:cc:1f:0b:f1:26:b4:ca:93:4b:da:af:01: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:04:CE:4C:D7:AF:4B:8A:C3:DC:5E:80:AD:28:B9:BB:CF:5A:AF:3F X509v3 Authority Key Identifier: keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:11:39:d5:85:af:15:e7:21:5f:1c:86:d0:64:db:38:68: aa:15:63:26:4e:05:01:e4:b0:2e:ec:67:fc:6d:7f:a9:72:c5: 26:5c:49:f6:cf:a5:3b:5d:c0:e2:36:5f:5f:72:88:29:72:01: 63:1e:c8:6d:63:12:d0:bd:fc:2a:1b:7b:8e:89:6a:2e:08:86: 77:09:14:3f:f3:d5:f4:cd:ad:d2:23:4b:53:f2:cb:bb:e8:83: 1b:59:90:a2:42:06:32:2f:78:56:87:71:08:c6:58:0f:28:92: 17:c3:43:a3:68:91:04:0f:b8:61:b9:c3:85:a5:44:64:bc:26: 9d:06:5d:a1:7e:da:0a:81:5d:a4:b2:4f:fe:b2:da:84:90:aa: da:89:aa:3c:52:f7:7e:62:99:27:83:52:35:b1:3c:00:4d:cc: cb:00:12:69:0e:ea:7e:d9:fe:a3:e7:da:d2:d6:76:93:54:e6: d0:f6:b8:43:ef:5f:76:9a:1b:17:31:ab:79:a5:5a:9c:91:c6: e8:b5:c0:43:fe:43:13:c9:b2:b2:76:ce:4a:fd:44:43:c1:a4: 28:0a:7b:b1:12:be:30:56:a6:04:ef:39:03:20:f1:e2:d6:81: b1:dd:a0:b8:1b:45:dc:46:f8:fb:fb:bb:fe:24:8d:06:16:93: dd:50:44:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+/jORsEM0l9r+pez7AE87rIfEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0 RjRBMkVGMTAeFw0yNjExMTUwODQwMDZaFw0yNjExMTYwOTIyMDZaMDMxMTAvBgNV BAMTKDcwMDRDRTRDRDdBRjRCOEFDM0RDNUU4MEFEMjhCOUJCQ0Y1QUFGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPI/Q7+j8qENGehVOp4vQMkK3 wnICWPhSOya+PXcwaLMjNreF09pgwOllVLj8C0rUbOeF0vpDY2bkiEt68p3EKa3f PFM0FgORRqxFNUTqRDny3HevgocbkocKQaH2QtKUzXPIpljXycZnjYnCBhO0qQ1Q ME86gzvq6h1+L7Qqqgig6+4XQRXoWArmkus15RVdO5JeG4tPUKb8xDBLRyVt4dUb 5XHb4Zs6Ft3Wh7U03cF0TSW59REk2nHWNg/DtLLsyFjYJCIgxpBYi22rLO7cGtnX zjldTOm4XM4GdVCu7TBeBe6MTh7ZHry3CgPV+itwh8wfC/EmtMqTS9qvAaWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcATOTNevS4rD3F6ArSi5u89arz8wHwYDVR0j BBgwFoAUwHSD/Rj/GDnmKiT/jtYHpE9KLvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY3ZmI4MzctMWIyZi00YzRlLWI5OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQx OEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0RjRBMkVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDc0ODNGRDE4RkYxODM5RTYyQTI0RkY4RUQ2MDdBNDRGNEEy RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3 QTQ0RjRBMkVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIluETnVha8V5yFfHIbQZNs4aKoVYyZOBQHk sC7sZ/xtf6lyxSZcSfbPpTtdwOI2X19yiClyAWMeyG1jEtC9/Cobe46Jai4IhncJ FD/z1fTNrdIjS1Pyy7vogxtZkKJCBjIveFaHcQjGWA8okhfDQ6NokQQPuGG5w4Wl RGS8Jp0GXaF+2gqBXaSyT/6y2oSQqtqJqjxS935imSeDUjWxPABNzMsAEmkO6n7Z /qPn2tLWdpNU5tD2uEPvX3aaGxcxq3mlWpyRxui1wEP+QxPJsrJ2zkr9REPBpCgK e7ESvjBWpgTvOQMg8eLWgbHdoLgbRdxG+Pv7u/4kjQYWk91QRH4= -----END CERTIFICATE-----Generated at Sun Nov 15 15:26:12 2026 by rpki-client