$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft File: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft (raw, json) Hash identifier: OpnNSY51LpGjBxdy8jMZzzgWwyI8pDFXoCc/fZkyZWA= Subject key identifier: 2D:7A:65:57:FD:8B:59:A1:3C:87:DE:B3:9F:65:E6:80:97:4A:50:7F Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Certificate serial: 6ABEA0ABBA6599446F5D449FB6B44215F1D28033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 15:23:14 +0000 Manifest this update: Sun 15 Nov 2026 15:18:14 +0000 Manifest next update: Mon 16 Nov 2026 15:54:14 +0000 Files and hashes: 1: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=) 2: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=) 3: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=) 4: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: dGdlLSEHAjcJ4pF+nJ/zA2guRtQM9WITw951OaaIjIY=) 5: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=) 6: DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl (hash: PA8jL3a7I5X+5CSY9kAMTylCClxC0Et5PNQ099J6MD0=) 7: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=) 8: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=) 9: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: /N5wTnzqjzFsnj42mRLwrc4fGmzK+1uIwKiyAnk610A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:be:a0:ab:ba:65:99:44:6f:5d:44:9f:b6:b4:42:15:f1:d2:80:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2 Validity Not Before: Nov 15 15:18:14 2026 GMT Not After : Nov 16 15:54:14 2026 GMT Subject: CN=2D7A6557FD8B59A13C87DEB39F65E680974A507F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:93:ae:14:81:f3:3f:8c:d7:27:99:68:83: 58:b2:c3:f9:3c:67:1b:cd:1d:67:2b:6d:83:39:32: 51:94:cb:87:7a:0f:4d:68:8c:8e:d5:57:c4:c9:04: 7f:57:52:cf:61:7c:89:6a:4a:22:69:db:ef:a5:4a: 9d:b1:56:41:83:e7:87:84:d5:3d:63:aa:02:8b:b1: 87:82:9a:87:9a:3b:a6:26:87:4e:14:71:d9:5d:62: 05:9d:27:04:30:79:8c:ca:d5:08:66:7a:10:41:2a: f5:41:fb:a6:86:9e:29:63:6e:12:dc:2a:13:25:50: 75:05:ae:54:4d:41:4e:32:ca:9d:33:fc:12:57:49: e0:4c:67:6d:83:f9:dd:63:5a:b1:46:b2:50:7b:33: c6:d1:3b:ca:c3:8c:dd:d4:38:b6:93:54:a4:d6:c7: 0b:f1:87:22:eb:15:5a:b2:ed:9f:47:e8:85:1e:11: 6d:5d:85:5d:65:7b:14:62:5f:78:9a:e6:75:90:c4: df:09:1b:40:64:e4:b2:ae:4a:cf:b3:a0:de:f7:fc: 85:56:d4:0b:85:f3:e6:eb:72:34:40:3d:62:d3:24: d0:43:81:56:02:0f:ba:16:06:4c:b6:14:9c:11:0a: fd:ee:2d:46:a4:41:b5:a7:a6:ed:d1:bc:32:b8:7b: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:65:57:FD:8B:59:A1:3C:87:DE:B3:9F:65:E6:80:97:4A:50:7F X509v3 Authority Key Identifier: keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ef:13:50:4e:16:de:0c:55:88:1b:d6:a5:b1:3f:39:10:29: ba:93:e1:63:01:28:42:76:23:d7:e3:12:14:49:b6:89:4d:2e: b6:86:06:e6:6e:a2:31:18:b8:a6:98:cb:76:12:0a:b2:bb:d2: 12:f2:c4:69:3b:a4:d1:b5:40:78:9b:1c:eb:72:b3:bf:23:55: fe:91:a8:9d:7f:a5:09:6d:38:36:8b:15:cb:c0:ff:d5:b3:63: f7:54:bc:5c:7a:56:9c:3c:80:e5:ba:23:f1:32:81:6c:74:93: a2:57:1b:3f:ff:e3:3e:5e:ce:cd:92:22:33:58:60:65:70:04: f4:b3:9e:70:16:7f:c6:9a:83:04:fa:7e:14:ef:f2:c7:f4:eb: b8:de:b9:c1:d9:7f:4b:73:52:42:09:c0:d4:18:0d:5a:2b:a2: f5:02:0a:4f:33:4d:cf:0d:09:f4:4b:28:c4:8b:48:0e:97:89: 68:6e:bd:6f:12:34:eb:2d:04:10:b0:ee:ed:f1:84:34:f7:83: 97:fa:13:01:9d:14:ec:34:d5:2b:f1:20:89:36:3f:24:5c:39: 0b:7f:af:b5:c6:f9:06:f7:27:ef:7f:8e:e2:11:c1:2d:96:f7: 98:e8:d8:cd:20:f0:88:57:9b:e1:c5:b9:45:8b:38:c9:90:a6: 56:df:de:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUar6gq7plmURvXUSftrRCFfHSgDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD NDFFMzFDMjAeFw0yNjExMTUxNTE4MTRaFw0yNjExMTYxNTU0MTRaMDMxMTAvBgNV BAMTKDJEN0E2NTU3RkQ4QjU5QTEzQzg3REVCMzlGNjVFNjgwOTc0QTUwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6z5OuFIHzP4zXJ5log1iyw/k8 ZxvNHWcrbYM5MlGUy4d6D01ojI7VV8TJBH9XUs9hfIlqSiJp2++lSp2xVkGD54eE 1T1jqgKLsYeCmoeaO6Ymh04UcdldYgWdJwQweYzK1QhmehBBKvVB+6aGniljbhLc KhMlUHUFrlRNQU4yyp0z/BJXSeBMZ22D+d1jWrFGslB7M8bRO8rDjN3UOLaTVKTW xwvxhyLrFVqy7Z9H6IUeEW1dhV1lexRiX3ia5nWQxN8JG0Bk5LKuSs+zoN73/IVW 1AuF8+brcjRAPWLTJNBDgVYCD7oWBky2FJwRCv3uLUakQbWnpu3RvDK4e85pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULXplV/2LWaE8h96zn2XmgJdKUH8wHwYDVR0j BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5 MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz MUMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIx MjlDNDFFMzFDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbvE1BOFt4MVYgb1qWxPzkQKbqT4WMBKEJ2 I9fjEhRJtolNLraGBuZuojEYuKaYy3YSCrK70hLyxGk7pNG1QHibHOtys78jVf6R qJ1/pQltODaLFcvA/9WzY/dUvFx6Vpw8gOW6I/EygWx0k6JXGz//4z5ezs2SIjNY YGVwBPSznnAWf8aagwT6fhTv8sf067jeucHZf0tzUkIJwNQYDVorovUCCk8zTc8N CfRLKMSLSA6XiWhuvW8SNOstBBCw7u3xhDT3g5f6EwGdFOw01SvxIIk2PyRcOQt/ r7XG+Qb3J+9/juIRwS2W95jo2M0g8IhXm+HFuUWLOMmQplbf3s8= -----END CERTIFICATE-----Generated at Sun Nov 15 17:57:36 2026 by rpki-client