$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft File: B10811E98433E40D5FC6AFC366AA6FEE28172365.mft (raw, json) Hash identifier: JY31h1KJIafVYrybAcRQ9pt5Q5Q0xnkszONPDUUIOfA= Subject key identifier: F3:21:82:07:1E:98:E2:5F:B1:6A:88:B9:38:62:12:FE:D9:7C:88:14 Authority key identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 Certificate issuer: /CN=B10811E98433E40D5FC6AFC366AA6FEE28172365 Certificate serial: 49D65D01EC3F60D2A093C122418386223828206F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft Manifest number: 29 Signing time: Mon 09 Nov 2026 15:50:39 +0000 Manifest this update: Mon 09 Nov 2026 15:45:39 +0000 Manifest next update: Tue 10 Nov 2026 19:28:39 +0000 Files and hashes: 1: 34352e3234392e3231362e302f32342d3234203d3e20313430303331.roa (hash: Hsk07ZaiWixWIF+X4I8V15TEU0xBcmXxmHrSbAVgT3c=) 2: B10811E98433E40D5FC6AFC366AA6FEE28172365.crl (hash: XFqExS0vHJk0KiYCehpkeDRd6cairgZXlXnpDN0Bl3A=) 3: 3130332e3233302e34382e302f32332d3234203d3e20313430303331.roa (hash: 35NWWPvqAIQgry5l9f2plU2ObOJmasO0Fu/hhS+8rX0=) 4: 3130332e3231382e3136362e302f32332d3234203d3e20313439333334.roa (hash: xgNhTfNSRBrkRPtPemyNq0brWtK8n1B4NQuWBqAgAE8=) 5: 3139322e3134352e3232382e302f32332d3234203d3e20313430303331.roa (hash: QIrlBs0TTDg2xjO/SB49yDW2zY9RwuZ4JAxZkBr6ucA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d6:5d:01:ec:3f:60:d2:a0:93:c1:22:41:83:86:22:38:28:20:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10811E98433E40D5FC6AFC366AA6FEE28172365 Validity Not Before: Nov 9 15:45:39 2026 GMT Not After : Nov 10 19:28:39 2026 GMT Subject: CN=F32182071E98E25FB16A88B9386212FED97C8814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:01:13:9a:4d:2b:ed:63:eb:6a:dd:9c:ce: ca:8a:c5:b2:dc:8c:81:49:3c:06:14:d2:07:0e:fe: a5:f2:34:b8:e8:18:59:3d:dd:b8:78:04:65:af:10: 01:98:1a:7d:00:5f:d4:5c:f1:bd:7a:97:c1:ed:41: 01:c2:78:a6:ac:3b:31:ea:3c:6d:67:68:52:9b:55: 0a:c5:dd:94:32:6b:f3:a3:2e:fd:86:99:4c:22:d5: c3:4c:37:36:bc:c2:21:35:d4:1b:3e:fc:23:93:66: 60:69:df:a2:4c:6e:83:7c:b0:47:18:4e:34:60:17: dd:1e:47:9e:50:9f:48:2a:b5:93:fd:68:04:d9:8e: 0e:9f:9a:3d:84:65:3f:32:91:51:7a:5d:21:98:bc: 6b:74:07:36:a4:ac:9c:a5:6e:77:47:6b:f5:b9:23: 2b:f0:fe:f4:39:1b:f2:48:25:da:d2:1d:22:00:c8: 51:19:31:1f:5c:c5:7b:2f:a9:33:15:98:87:00:cf: 35:5e:de:56:77:0b:ea:1e:30:6b:12:b0:4b:8f:fd: 2b:8b:6e:3a:de:8f:fa:f5:d1:5f:f3:8a:ea:53:ba: ec:81:81:fd:aa:65:ec:54:f3:b4:a0:01:14:03:d1: c5:e3:a7:cf:dc:00:23:5e:e8:b5:07:76:a4:fa:8f: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:82:07:1E:98:E2:5F:B1:6A:88:B9:38:62:12:FE:D9:7C:88:14 X509v3 Authority Key Identifier: keyid:B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5e:26:48:f4:54:5e:ce:bb:ab:f3:c6:27:69:ec:b8:56:79: 8f:33:a3:73:d5:68:cc:1e:ad:28:a0:22:11:d2:f5:fe:6c:19: 5f:df:3a:e6:c8:de:3d:21:8b:42:c6:53:77:a9:f0:af:f2:a6: 05:bc:bb:9e:18:de:2a:05:2f:44:88:59:92:ad:e1:6b:7f:44: 47:d4:4a:1e:dc:cc:61:64:46:ee:4a:c6:4d:9b:87:18:ca:91: 68:41:2c:5e:3b:8e:22:c3:21:bc:2a:fe:c5:79:fb:c5:7b:e0: 3c:c9:8d:3d:ac:41:8f:c8:1d:3a:82:9f:87:2a:bc:29:27:ff: a0:a7:fd:7e:7f:0e:04:22:38:96:67:cf:ec:d8:36:40:c4:97: 3a:24:9e:20:40:13:55:1a:d8:36:3f:1d:58:4c:5f:5d:3a:ed: 19:eb:56:50:74:d9:9e:9b:cf:b2:5d:bd:a0:4a:fb:80:fb:00: 0f:b8:51:ad:46:b7:83:c4:f4:cb:38:ad:85:64:85:b2:42:81: 82:8f:8c:66:db:41:43:8b:5d:3a:ce:46:59:10:62:6f:ce:2c: 21:c8:8b:66:63:7d:dc:56:2a:a0:41:93:f3:bf:6a:f8:92:06: 0c:e6:f5:68:d3:6c:6e:f8:b3:a2:0c:79:50:fb:d6:13:74:98: 1e:c4:85:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdZdAew/YNKgk8EiQYOGIjgoIG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwODExRTk4NDMzRTQwRDVGQzZBRkMzNjZBQTZGRUUy ODE3MjM2NTAeFw0yNjExMDkxNTQ1MzlaFw0yNjExMTAxOTI4MzlaMDMxMTAvBgNV BAMTKEYzMjE4MjA3MUU5OEUyNUZCMTZBODhCOTM4NjIxMkZFRDk3Qzg4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IAETmk0r7WPrat2czsqKxbLc jIFJPAYU0gcO/qXyNLjoGFk93bh4BGWvEAGYGn0AX9Rc8b16l8HtQQHCeKasOzHq PG1naFKbVQrF3ZQya/OjLv2GmUwi1cNMNza8wiE11Bs+/COTZmBp36JMboN8sEcY TjRgF90eR55Qn0gqtZP9aATZjg6fmj2EZT8ykVF6XSGYvGt0BzakrJylbndHa/W5 Iyvw/vQ5G/JIJdrSHSIAyFEZMR9cxXsvqTMVmIcAzzVe3lZ3C+oeMGsSsEuP/SuL bjrej/r10V/ziupTuuyBgf2qZexU87SgARQD0cXjp8/cACNe6LUHdqT6j5T9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8yGCBx6Y4l+xaoi5OGIS/tl8iBQwHwYDVR0j BBgwFoAUsQgR6YQz5A1fxq/DZqpv7igXI2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNmYzIyNTUtZTRhYS00M2QwLTg5OWUtZTQ0YmFjYmIwMzIxLzAvQjEwODExRTk4 NDMzRTQwRDVGQzZBRkMzNjZBQTZGRUUyODE3MjM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTA4MTFFOTg0MzNFNDBENUZDNkFGQzM2NkFBNkZFRTI4MTcy MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNmYzIyNTUtZTRhYS00M2QwLTg5 OWUtZTQ0YmFjYmIwMzIxLzAvQjEwODExRTk4NDMzRTQwRDVGQzZBRkMzNjZBQTZG RUUyODE3MjM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1eJkj0VF7Ou6vzxidp7LhWeY8zo3PVaMwe rSigIhHS9f5sGV/fOubI3j0hi0LGU3ep8K/ypgW8u54Y3ioFL0SIWZKt4Wt/REfU Sh7czGFkRu5Kxk2bhxjKkWhBLF47jiLDIbwq/sV5+8V74DzJjT2sQY/IHTqCn4cq vCkn/6Cn/X5/DgQiOJZnz+zYNkDElzokniBAE1Ua2DY/HVhMX1067RnrVlB02Z6b z7JdvaBK+4D7AA+4Ua1Gt4PE9Ms4rYVkhbJCgYKPjGbbQUOLXTrORlkQYm/OLCHI i2ZjfdxWKqBBk/O/aviSBgzm9WjTbG74s6IMeVD71hN0mB7EhZ4= -----END CERTIFICATE-----Generated at Tue Nov 10 03:26:14 2026 by rpki-client