$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: 1u5hhth+GqioPaCbsa7QAtimBVcPLMYQ26l7/Ql2Oe8= Subject key identifier: F3:33:76:F9:0F:C5:79:95:AE:E0:0C:6D:1E:D7:B4:C4:5A:B4:74:30 Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 1347740E336369E5D2A76D4AD98C8A8E2042106D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:55:11 +0000 Manifest this update: Sun 15 Nov 2026 04:50:11 +0000 Manifest next update: Mon 16 Nov 2026 08:32:11 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: 5SAHNJzpoS5dTLYBLe36sq8k7gH6t9doDmpneMtTdvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:47:74:0e:33:63:69:e5:d2:a7:6d:4a:d9:8c:8a:8e:20:42:10:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Nov 15 04:50:11 2026 GMT Not After : Nov 16 08:32:11 2026 GMT Subject: CN=F33376F90FC57995AEE00C6D1ED7B4C45AB47430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:d6:1a:48:61:04:11:c1:9a:7f:de:bd:3b: 68:87:64:43:4d:a4:37:86:8f:5b:10:58:f6:e8:6f: 9d:dc:a4:1f:bc:36:db:b7:f6:84:df:06:1f:6d:09: 1f:b5:92:f9:7c:cf:cf:10:96:e9:20:ec:a6:16:f4: f5:74:19:6f:ac:bb:d4:b5:39:cb:1f:cb:c7:e8:9e: eb:e5:c6:c6:a4:22:9b:11:fb:6a:83:07:fd:35:4d: 55:7b:0e:46:f6:bc:b8:9e:64:39:c6:58:8b:70:e4: 6c:e4:f3:21:9b:d5:c6:c6:29:d1:fc:42:19:26:5b: b9:ab:4a:b1:1c:62:72:9a:d6:71:85:98:7d:7b:d7: 35:67:4b:63:99:0b:12:51:99:2b:5f:c0:73:ca:3f: db:63:c8:77:71:7b:27:fc:bf:59:e2:43:06:62:59: 5e:75:d7:19:ee:d3:31:e2:77:d0:0b:46:b4:1b:1f: a2:fa:64:d8:0b:4c:b4:6b:1c:4f:1f:7b:0f:9a:5f: 9d:ff:c4:ea:9f:cc:4a:e8:ea:7a:dd:0e:6d:be:2f: c9:0f:ab:1a:6e:a6:fb:7f:7f:e5:60:47:e9:1f:01: 81:a3:e3:dc:a1:03:22:24:97:45:34:07:14:19:1d: d8:a1:c2:f5:31:5f:db:ee:62:d2:b4:7c:e4:5d:d6: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:33:76:F9:0F:C5:79:95:AE:E0:0C:6D:1E:D7:B4:C4:5A:B4:74:30 X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e6:02:d3:9c:33:be:c3:34:98:8e:1b:be:cc:a4:75:6e:a2: 65:a4:bf:3d:27:eb:01:16:a1:5a:2b:f1:8b:b6:f5:5e:64:9a: fd:3a:18:93:2a:e8:1f:39:11:f3:1d:8a:33:1e:dd:ab:81:cb: c4:91:cf:81:0e:52:f0:8d:a8:ea:ec:0a:97:43:11:61:17:92: ea:19:7d:36:c9:85:7f:ef:da:e4:ab:ba:47:e5:3c:c3:aa:13: 5a:dc:53:49:1e:60:6b:e5:ff:d1:7f:53:df:10:e0:18:cd:92: 32:79:a5:cc:35:d9:c0:80:f6:d5:66:42:a1:3e:fd:ce:68:6b: 29:09:bd:0c:c9:f0:89:b7:d2:30:50:de:d0:20:59:ba:98:c0: c9:fa:da:35:1a:bb:a2:f6:f2:d4:16:77:52:bf:75:13:53:0d: 2a:7b:7c:64:72:1f:8b:20:86:65:8c:d4:31:33:6d:6c:3b:db: 2d:bd:71:a6:d3:04:37:35:61:59:5c:ab:33:55:05:80:56:63: 22:1a:34:f4:42:b0:af:d5:83:05:a9:f1:39:a2:92:62:66:93: 9d:c8:73:94:83:c3:c5:6a:88:ba:83:cc:71:09:65:47:48:40: 1f:17:18:75:df:e2:0b:8a:03:69:55:d9:97:88:c7:30:59:02: 93:93:48:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0d0DjNjaeXSp21K2YyKjiBCEG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjExMTUwNDUwMTFaFw0yNjExMTYwODMyMTFaMDMxMTAvBgNV BAMTKEYzMzM3NkY5MEZDNTc5OTVBRUUwMEM2RDFFRDdCNEM0NUFCNDc0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3NYaSGEEEcGaf969O2iHZENN pDeGj1sQWPbob53cpB+8Ntu39oTfBh9tCR+1kvl8z88Qlukg7KYW9PV0GW+su9S1 Ocsfy8fonuvlxsakIpsR+2qDB/01TVV7Dkb2vLieZDnGWItw5Gzk8yGb1cbGKdH8 QhkmW7mrSrEcYnKa1nGFmH171zVnS2OZCxJRmStfwHPKP9tjyHdxeyf8v1niQwZi WV511xnu0zHid9ALRrQbH6L6ZNgLTLRrHE8few+aX53/xOqfzEro6nrdDm2+L8kP qxpupvt/f+VgR+kfAYGj49yhAyIkl0U0BxQZHdihwvUxX9vuYtK0fORd1i4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zN2+Q/FeZWu4AxtHte0xFq0dDAwHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvmAtOcM77DNJiOG77MpHVuomWkvz0n6wEW oVor8Yu29V5kmv06GJMq6B85EfMdijMe3auBy8SRz4EOUvCNqOrsCpdDEWEXkuoZ fTbJhX/v2uSrukflPMOqE1rcU0keYGvl/9F/U98Q4BjNkjJ5pcw12cCA9tVmQqE+ /c5oaykJvQzJ8Im30jBQ3tAgWbqYwMn62jUau6L28tQWd1K/dRNTDSp7fGRyH4sg hmWM1DEzbWw72y29cabTBDc1YVlcqzNVBYBWYyIaNPRCsK/VgwWp8TmikmJmk53I c5SDw8VqiLqDzHEJZUdIQB8XGHXf4guKA2lV2ZeIxzBZApOTSOE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:25:18 2026 by rpki-client