$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: KbnhrTDxQ5HgsgSWDN0gGDyO2gG422EVrgayirRCUgE= Subject key identifier: E6:2B:90:0F:0D:86:96:D9:A9:62:02:B8:3F:4D:7D:16:B3:F2:56:09 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 788903E756D122774237E02E17426AA3D1429D03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 08:16:22 +0000 Manifest this update: Tue 10 Nov 2026 08:11:22 +0000 Manifest next update: Wed 11 Nov 2026 11:22:22 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 4: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: 4/dXuE1L4WzOtZGUG8Sh2CGUMNy16Sr8WD/3pVJ510c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:89:03:e7:56:d1:22:77:42:37:e0:2e:17:42:6a:a3:d1:42:9d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Nov 10 08:11:22 2026 GMT Not After : Nov 11 11:22:22 2026 GMT Subject: CN=E62B900F0D8696D9A96202B83F4D7D16B3F25609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:2c:07:b8:f0:08:80:14:ea:3d:a1:f7:b0: bb:44:69:36:01:b7:c0:93:26:bd:16:dc:dc:e3:56: 5d:cf:f6:d8:2f:da:01:87:ab:ba:c5:c6:93:f5:de: 0a:bc:6b:1e:7b:72:a6:81:f4:6c:0c:43:8a:dc:c7: 0d:04:43:8c:0e:c0:66:54:a2:f0:9c:31:8a:46:85: 95:48:33:81:d9:75:d7:e1:50:70:bd:ba:45:22:c6: 44:7b:9a:17:78:65:a0:6b:a6:11:ef:9d:b5:78:e1: 77:95:51:8e:42:cf:33:56:6d:32:c3:fa:fd:e2:bc: e7:31:9c:90:2b:f8:42:b6:18:04:25:df:c4:03:cf: a6:5b:e7:61:bf:80:6c:3d:86:59:5c:01:7a:87:8f: d0:ab:64:dc:47:6b:d4:b1:9c:40:48:98:da:a2:10: ce:cb:75:d9:57:a9:08:eb:ac:06:04:a5:70:2c:b6: 9f:31:7f:b2:f3:20:05:d6:b3:3e:87:e1:3e:f5:4b: 44:80:28:7f:59:bb:c9:4d:ae:f2:15:23:44:16:e5: e4:fc:69:cf:7c:45:09:2e:54:6c:cf:96:29:89:1b: ba:d0:fb:9e:88:05:62:c7:4a:b5:2e:00:65:0a:fc: dc:55:c9:0b:6a:c6:e9:8d:f9:26:f8:5f:06:81:a2: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2B:90:0F:0D:86:96:D9:A9:62:02:B8:3F:4D:7D:16:B3:F2:56:09 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:16:d3:9e:bc:bf:8b:29:58:e4:6d:b5:99:1d:3d:64:32:fa: 99:40:14:3b:c1:8d:cf:a5:24:bc:11:f1:1d:a3:40:ba:c3:14: dc:ae:63:cf:32:27:69:82:15:89:b5:0a:2f:24:fc:d4:79:04: b6:3f:d8:2a:89:46:08:45:0e:4b:bb:e8:0e:6d:32:05:a8:ee: 48:aa:eb:8c:e8:ee:03:5c:ed:b4:85:c3:33:66:c8:c3:32:6c: 9b:33:90:7d:1f:d1:b2:a5:04:1c:aa:4e:c4:1e:06:76:0e:b1: 09:13:31:58:1f:43:be:94:5f:9d:20:1f:d1:5c:60:7b:88:c9: 54:26:e8:70:70:ce:f1:ec:2d:76:72:9e:3e:02:6a:cc:f6:bf: 81:e8:dd:40:be:45:40:ff:83:81:2d:14:1c:ea:c5:19:b1:de: e1:83:b1:e9:3c:7f:a2:dc:49:76:bd:79:f2:49:84:bb:5b:25: 1d:7c:5a:e9:1e:2b:0d:b7:1f:1b:4a:27:2b:0f:57:67:79:3d: 7a:b3:57:2c:f8:28:a4:51:be:ab:6a:03:62:0b:da:4d:e6:f9: 43:c1:df:cb:ca:48:bc:18:5b:a6:97:37:f4:60:05:3c:be:ee: be:06:77:be:38:a0:67:40:7b:0a:d5:04:6f:4d:d5:90:62:bd: 34:c8:02:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIkD51bRIndCN+AuF0Jqo9FCnQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjExMTAwODExMjJaFw0yNjExMTExMTIyMjJaMDMxMTAvBgNV BAMTKEU2MkI5MDBGMEQ4Njk2RDlBOTYyMDJCODNGNEQ3RDE2QjNGMjU2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLywHuPAIgBTqPaH3sLtEaTYB t8CTJr0W3NzjVl3P9tgv2gGHq7rFxpP13gq8ax57cqaB9GwMQ4rcxw0EQ4wOwGZU ovCcMYpGhZVIM4HZddfhUHC9ukUixkR7mhd4ZaBrphHvnbV44XeVUY5CzzNWbTLD +v3ivOcxnJAr+EK2GAQl38QDz6Zb52G/gGw9hllcAXqHj9CrZNxHa9SxnEBImNqi EM7LddlXqQjrrAYEpXAstp8xf7LzIAXWsz6H4T71S0SAKH9Zu8lNrvIVI0QW5eT8 ac98RQkuVGzPlimJG7rQ+56IBWLHSrUuAGUK/NxVyQtqxumN+Sb4XwaBoooPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iuQDw2GltmpYgK4P019FrPyVgkwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYW0568v4spWORttZkdPWQy+plAFDvBjc+l JLwR8R2jQLrDFNyuY88yJ2mCFYm1Ci8k/NR5BLY/2CqJRghFDku76A5tMgWo7kiq 64zo7gNc7bSFwzNmyMMybJszkH0f0bKlBByqTsQeBnYOsQkTMVgfQ76UX50gH9Fc YHuIyVQm6HBwzvHsLXZynj4Casz2v4Ho3UC+RUD/g4EtFBzqxRmx3uGDsek8f6Lc SXa9efJJhLtbJR18WukeKw23HxtKJysPV2d5PXqzVyz4KKRRvqtqA2IL2k3m+UPB 38vKSLwYW6aXN/RgBTy+7r4Gd744oGdAewrVBG9N1ZBivTTIAv0= -----END CERTIFICATE-----Generated at Wed Nov 11 00:48:40 2026 by rpki-client