$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json) Hash identifier: +kLeRqj9aOCWaw/H9MzquoWrKmf2RIco94cWcAoOMFI= Subject key identifier: 85:D4:A2:26:2F:67:39:F0:F4:2B:B6:70:B0:B8:B8:56:98:46:B0:BF Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B Certificate serial: 11B1556B38DD1F13AD2AA75F84EDEE8897EEB50A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 12:50:04 +0000 Manifest this update: Sun 15 Nov 2026 12:45:04 +0000 Manifest next update: Mon 16 Nov 2026 15:42:04 +0000 Files and hashes: 1: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: kqRhGAuJ+Mwa8kevYQRmGuvN15EHnA/Sz2cGzUBmftM=) 2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b1:55:6b:38:dd:1f:13:ad:2a:a7:5f:84:ed:ee:88:97:ee:b5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B Validity Not Before: Nov 15 12:45:04 2026 GMT Not After : Nov 16 15:42:04 2026 GMT Subject: CN=85D4A2262F6739F0F42BB670B0B8B8569846B0BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:1e:7a:2c:69:6a:ab:12:85:ef:69:aa:cc: 73:5c:b4:17:b5:97:2e:4c:01:51:59:97:bf:9a:85: 3f:80:e5:bf:f9:5a:4c:66:bf:31:be:af:63:a1:63: 57:9b:aa:d2:e1:3f:96:2c:71:ca:10:96:9f:1f:84: 03:66:58:a2:fb:0d:fd:e9:e4:34:bd:f3:1a:1f:f2: 70:b0:01:80:1f:bf:0a:94:53:37:57:ae:25:4e:15: 99:2a:b2:3f:63:6d:8b:b9:0f:4f:85:f9:30:ad:d8: eb:d0:1d:82:94:41:82:b6:81:71:8e:0e:fc:f3:95: 24:69:b1:b1:30:0b:2a:7d:5b:bb:cd:3e:7a:05:e6: cd:40:18:6e:2c:b7:cc:e0:92:21:04:59:3c:05:ab: ec:b0:3e:f7:02:18:67:af:c8:d4:47:e7:4f:ca:3f: 80:70:35:a9:b9:56:fe:5d:fb:e5:ae:db:68:56:d4: 9e:ba:d8:7f:f8:55:8c:c4:0b:28:fb:e5:18:95:3a: fd:ce:20:4a:c1:dd:9e:36:69:fd:e6:d0:43:7a:6f: 32:ef:b5:bc:14:5b:33:e8:d4:67:7f:27:dc:42:2f: 77:d5:74:9c:e3:c4:c2:d9:a0:b3:06:a3:fe:19:a1: 21:5d:21:a3:ff:89:15:fc:a4:65:d7:04:ab:8e:79: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:A2:26:2F:67:39:F0:F4:2B:B6:70:B0:B8:B8:56:98:46:B0:BF X509v3 Authority Key Identifier: keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0b:30:46:0f:3f:4b:36:93:32:f5:ac:1d:3f:54:3f:ba:45: b6:f9:76:ba:e8:0e:c1:50:85:68:74:89:4f:37:c7:51:9c:2b: 5b:00:3b:eb:da:0c:10:fa:36:29:a0:b1:79:56:13:46:45:d5: cc:9b:45:85:f3:cd:75:b0:80:88:e6:4c:27:f5:fa:ee:c8:cc: b1:02:83:d0:01:56:46:5c:09:49:0a:80:a6:e9:02:32:1f:d1: fe:6c:1b:92:b2:6a:c4:d5:de:c3:1b:98:f8:e6:ab:9b:9f:78: 48:71:5e:af:14:cf:8c:b4:9b:1c:6a:ed:b9:01:80:1a:fe:93: e9:45:bb:73:a8:98:01:d6:54:eb:a5:93:b9:8b:db:5d:ed:e7: b8:6e:09:80:2c:1c:ab:9b:e8:84:0a:dc:c6:16:f8:0c:a0:70: 42:29:28:08:de:85:56:de:63:d5:03:a7:c6:22:11:93:85:f1: 55:2a:91:59:a1:a7:d2:5d:35:a3:56:ed:f1:a0:78:68:04:4d: fe:56:b9:ef:d8:30:b5:c9:f7:02:d2:ea:66:73:ab:b0:d0:d2: 9b:14:ad:9a:4f:db:85:f8:82:39:e7:eb:35:92:2d:e6:9d:fe: 85:74:0d:dc:49:4f:60:f5:c2:81:98:d7:89:8b:9f:18:11:44: 09:0c:f6:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbFVazjdHxOtKqdfhO3uiJfutQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRG NkVFQUI4QjAeFw0yNjExMTUxMjQ1MDRaFw0yNjExMTYxNTQyMDRaMDMxMTAvBgNV BAMTKDg1RDRBMjI2MkY2NzM5RjBGNDJCQjY3MEIwQjhCODU2OTg0NkIwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJx56LGlqqxKF72mqzHNctBe1 ly5MAVFZl7+ahT+A5b/5WkxmvzG+r2OhY1ebqtLhP5YsccoQlp8fhANmWKL7Df3p 5DS98xof8nCwAYAfvwqUUzdXriVOFZkqsj9jbYu5D0+F+TCt2OvQHYKUQYK2gXGO DvzzlSRpsbEwCyp9W7vNPnoF5s1AGG4st8zgkiEEWTwFq+ywPvcCGGevyNRH50/K P4BwNam5Vv5d++Wu22hW1J662H/4VYzECyj75RiVOv3OIErB3Z42af3m0EN6bzLv tbwUWzPo1Gd/J9xCL3fVdJzjxMLZoLMGo/4ZoSFdIaP/iRX8pGXXBKuOeWjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdSiJi9nOfD0K7ZwsLi4VphGsL8wHwYDVR0j BBgwFoAUwdx4KpjTxicXAiVszL2sZPbuq4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2ZTQ1NjQtNDhmMi00M2I1LTg1MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5 OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRGNkVFQUI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMURDNzgyQTk4RDNDNjI3MTcwMjI1NkNDQ0JEQUM2NEY2RUVB QjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFD NjRGNkVFQUI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMLMEYPP0s2kzL1rB0/VD+6Rbb5drroDsFQ hWh0iU83x1GcK1sAO+vaDBD6NimgsXlWE0ZF1cybRYXzzXWwgIjmTCf1+u7IzLEC g9ABVkZcCUkKgKbpAjIf0f5sG5KyasTV3sMbmPjmq5ufeEhxXq8Uz4y0mxxq7bkB gBr+k+lFu3OomAHWVOulk7mL213t57huCYAsHKub6IQK3MYW+AygcEIpKAjehVbe Y9UDp8YiEZOF8VUqkVmhp9JdNaNW7fGgeGgETf5Wue/YMLXJ9wLS6mZzq7DQ0psU rZpP24X4gjnn6zWSLead/oV0DdxJT2D1woGY14mLnxgRRAkM9hs= -----END CERTIFICATE-----Generated at Sun Nov 15 15:21:28 2026 by rpki-client