$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: 0sn7KbN7bCc0CJUzx69BZAG0/lHEpKikbNi9/2NJ2N8= Subject key identifier: 0C:AB:C2:58:CE:4B:89:29:E0:FC:2C:22:51:73:DD:BA:E9:A3:40:1B Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 02D770897373D531D99E2377483072988B0EB226 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 15:33:52 +0000 Manifest this update: Sat 14 Nov 2026 15:28:52 +0000 Manifest next update: Sun 15 Nov 2026 18:17:52 +0000 Files and hashes: 1: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: uDeaWcGQYdsM6oCnVwTQBthk0jOV7bUxEClXbEmh7mQ=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d7:70:89:73:73:d5:31:d9:9e:23:77:48:30:72:98:8b:0e:b2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: Nov 14 15:28:52 2026 GMT Not After : Nov 15 18:17:52 2026 GMT Subject: CN=0CABC258CE4B8929E0FC2C225173DDBAE9A3401B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:74:df:6b:76:71:49:1e:af:e9:5d:2c:75: db:b1:0f:27:d4:be:6f:4e:cd:fe:d9:bd:19:5f:23: cb:51:77:35:59:0b:cd:05:a2:06:12:db:86:1f:79: 0e:c8:e7:88:74:af:bc:09:84:ab:05:a0:47:87:a6: 8e:e7:a7:37:a5:3f:0f:18:9f:d3:e9:e8:ff:90:65: 0d:fb:b7:94:93:16:92:bc:82:94:aa:03:6a:f7:1e: f4:e4:3f:23:ed:22:7a:33:a0:d9:71:67:13:cf:31: 92:f1:89:1b:b2:99:4f:da:3e:38:e1:a9:42:41:7b: 22:b6:85:fe:fc:cb:00:40:67:ce:48:2a:07:55:d8: b0:98:7e:d6:91:30:35:9b:30:f4:02:e7:f3:92:b9: 78:02:99:6c:1d:05:72:c3:86:55:cf:86:59:63:41: f2:e2:f1:34:94:a8:79:4d:41:86:50:31:dd:ad:89: 61:dd:a0:6b:5b:fa:13:32:0b:20:9c:e9:4a:44:dc: 61:59:36:17:96:da:87:4a:1b:da:22:59:f2:cd:2b: 58:ec:cb:7b:ab:30:87:37:dc:8a:c1:fb:4b:3f:01: 45:27:51:4e:a4:1b:61:3a:82:8d:c3:62:c9:48:bf: de:d1:d7:ec:52:c0:bd:e0:2a:5f:30:af:f7:75:3d: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:C2:58:CE:4B:89:29:E0:FC:2C:22:51:73:DD:BA:E9:A3:40:1B X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2b:ee:85:ac:d7:cb:b0:fc:51:a1:85:8e:9b:17:43:03:98: 90:7b:bc:1b:e4:bb:38:41:32:f6:b6:4b:11:1f:99:0b:36:d6: 4e:61:74:06:4a:d1:7c:fd:71:78:30:b4:5a:0c:4c:ca:c4:73: 14:4e:d5:dc:82:ff:16:df:20:0b:1a:ce:e1:76:3c:16:ff:a1: 54:76:8e:04:fa:38:a4:2b:e2:8a:97:d9:92:87:c5:81:5e:c2: f6:3f:76:8f:3c:9c:c1:9a:91:0b:fa:13:62:89:65:d6:69:6d: c3:59:3e:2a:84:2e:13:31:ec:17:ee:b1:a0:23:9b:73:03:cf: 80:bb:ef:b8:22:2b:ba:fb:8c:5b:53:e9:ac:2a:ac:7b:c9:4d: 26:bb:59:47:9d:e2:0c:c7:62:a8:58:1c:d6:23:10:b4:bf:60: 34:ac:ef:68:59:24:ae:78:c1:d8:59:49:f8:c9:b0:0e:2f:ff: 54:1b:04:9d:b3:17:7a:6d:c7:3d:5e:53:3c:e6:8e:10:86:6d: 26:05:20:08:81:95:30:c7:b8:f5:4e:fb:78:97:67:66:9f:31: 8a:99:34:7f:d6:00:43:2c:e7:0b:0f:2c:79:0b:69:fc:9c:ea: 50:e7:68:77:53:9d:cd:ba:38:f8:67:1f:7a:37:5f:d3:84:d0: 25:4d:47:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtdwiXNz1THZniN3SDBymIsOsiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjExMTQxNTI4NTJaFw0yNjExMTUxODE3NTJaMDMxMTAvBgNV BAMTKDBDQUJDMjU4Q0U0Qjg5MjlFMEZDMkMyMjUxNzNEREJBRTlBMzQwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJnTfa3ZxSR6v6V0sdduxDyfU vm9Ozf7ZvRlfI8tRdzVZC80FogYS24YfeQ7I54h0r7wJhKsFoEeHpo7npzelPw8Y n9Pp6P+QZQ37t5STFpK8gpSqA2r3HvTkPyPtInozoNlxZxPPMZLxiRuymU/aPjjh qUJBeyK2hf78ywBAZ85IKgdV2LCYftaRMDWbMPQC5/OSuXgCmWwdBXLDhlXPhllj QfLi8TSUqHlNQYZQMd2tiWHdoGtb+hMyCyCc6UpE3GFZNheW2odKG9oiWfLNK1js y3urMIc33IrB+0s/AUUnUU6kG2E6go3DYslIv97R1+xSwL3gKl8wr/d1PSXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDKvCWM5LiSng/CwiUXPduumjQBswHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACor7oWs18uw/FGhhY6bF0MDmJB7vBvkuzhB Mva2SxEfmQs21k5hdAZK0Xz9cXgwtFoMTMrEcxRO1dyC/xbfIAsazuF2PBb/oVR2 jgT6OKQr4oqX2ZKHxYFewvY/do88nMGakQv6E2KJZdZpbcNZPiqELhMx7BfusaAj m3MDz4C777giK7r7jFtT6awqrHvJTSa7WUed4gzHYqhYHNYjELS/YDSs72hZJK54 wdhZSfjJsA4v/1QbBJ2zF3ptxz1eUzzmjhCGbSYFIAiBlTDHuPVO+3iXZ2afMYqZ NH/WAEMs5wsPLHkLafyc6lDnaHdTnc26OPhnH3o3X9OE0CVNRxM= -----END CERTIFICATE-----Generated at Sun Nov 15 10:56:21 2026 by rpki-client