$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json) Hash identifier: 7boBH8j5YLJ/sxn0sDX61M0UjRYSLLG4/NjImjAjzjI= Subject key identifier: 05:08:CD:84:74:1F:F3:3C:40:3D:BF:48:77:F2:95:C3:71:C0:09:B1 Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Certificate serial: 3794E238DE0CABD6D48BAACF444E2FC8EB56381F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 17:22:18 +0000 Manifest this update: Mon 09 Nov 2026 17:17:18 +0000 Manifest next update: Tue 10 Nov 2026 18:34:18 +0000 Files and hashes: 1: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: LDdAIB3ozuB/3Vclllb7Lg3e427C5/JxQQH60vYwRfs=) 2: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=) 3: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=) 4: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 18:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:94:e2:38:de:0c:ab:d6:d4:8b:aa:cf:44:4e:2f:c8:eb:56:38:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Validity Not Before: Nov 9 17:17:18 2026 GMT Not After : Nov 10 18:34:18 2026 GMT Subject: CN=0508CD84741FF33C403DBF4877F295C371C009B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:56:3e:15:25:79:95:b5:c9:43:dd:0b:2c: ac:7c:47:5c:e8:61:db:c6:50:8f:2b:27:1c:70:53: e4:7e:dd:a0:19:ea:4f:09:99:8e:13:11:e2:21:49: 27:14:61:bf:5d:6d:03:e6:a6:eb:8b:04:5c:23:79: 15:19:bc:5c:9b:7d:3e:03:55:2e:a1:c5:b0:af:94: 55:a5:e1:0f:98:e9:44:29:3e:00:dd:9f:ed:8e:22: 5a:d7:fb:bc:87:e8:63:2e:30:59:c3:55:91:1a:b2: ae:d4:e3:78:42:69:fb:55:b8:3e:cf:e1:cf:1e:30: ee:0d:25:28:6b:f0:1e:af:26:ac:a6:0b:a0:11:c6: e4:8f:e8:e7:de:21:43:f1:07:1e:ff:ce:4c:4c:be: 75:e8:9d:d4:43:e2:57:73:f0:c9:05:72:a2:e9:51: bf:e8:dd:ba:a4:a2:3f:14:95:30:5a:49:c6:c2:4e: 77:1c:46:29:ae:83:15:42:77:b4:21:cd:e5:c1:69: d8:93:bc:59:34:a7:7c:0f:75:da:7e:52:98:aa:40: 94:69:cb:5e:5b:e6:8c:de:c3:57:1c:89:57:c4:90: b0:72:49:ee:b7:88:b3:d6:20:26:40:4b:1c:9f:81: cb:71:53:53:7f:fa:c0:e7:72:28:2c:44:86:89:02: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:08:CD:84:74:1F:F3:3C:40:3D:BF:48:77:F2:95:C3:71:C0:09:B1 X509v3 Authority Key Identifier: keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:70:a3:55:d5:fb:55:ad:ef:ea:06:84:11:fd:cf:1e:ad:c9: 86:f4:21:64:aa:e1:f0:50:24:d5:48:46:ff:57:a5:e6:0d:43: 84:72:ef:6e:90:ab:74:16:de:d4:48:57:dd:46:45:e8:58:55: 48:80:8f:62:dc:37:3c:c8:ff:48:e6:a6:7a:c8:9e:64:9a:60: ee:1d:7f:66:db:f0:c6:33:7f:32:08:8b:70:f6:e8:38:5f:ca: 80:09:81:37:63:c1:93:79:1b:5f:c6:03:d0:01:aa:4b:85:e5: a1:b0:2b:7a:4a:2d:cb:4a:e9:42:64:85:ca:24:b3:f6:6c:6e: dd:b7:6c:1a:85:01:30:4c:6f:56:d5:c9:b6:e6:0e:8c:5d:2d: 73:b2:a8:16:f2:ff:1a:d5:66:c7:d4:ad:3a:30:a5:67:24:5e: 15:84:0e:64:f9:ad:2a:61:49:50:b1:35:a1:99:8f:b8:84:5c: c5:7e:dd:99:5a:19:be:56:c2:99:47:37:89:9e:55:68:43:92: e0:7b:84:2b:e3:98:29:d6:90:85:1b:6c:35:a2:46:a0:96:67: 96:ac:65:07:3e:33:84:b2:0a:0e:d4:4e:61:7b:3c:5b:f2:9c: 40:6f:af:ed:28:ed:51:17:30:86:db:9a:af:25:9b:5c:65:c2: 8f:83:f6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5TiON4Mq9bUi6rPRE4vyOtWOB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0 Rjk0QThFQjAeFw0yNjExMDkxNzE3MThaFw0yNjExMTAxODM0MThaMDMxMTAvBgNV BAMTKDA1MDhDRDg0NzQxRkYzM0M0MDNEQkY0ODc3RjI5NUMzNzFDMDA5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FFY+FSV5lbXJQ90LLKx8R1zo YdvGUI8rJxxwU+R+3aAZ6k8JmY4TEeIhSScUYb9dbQPmpuuLBFwjeRUZvFybfT4D VS6hxbCvlFWl4Q+Y6UQpPgDdn+2OIlrX+7yH6GMuMFnDVZEasq7U43hCaftVuD7P 4c8eMO4NJShr8B6vJqymC6ARxuSP6OfeIUPxBx7/zkxMvnXondRD4ldz8MkFcqLp Ub/o3bqkoj8UlTBaScbCTnccRimugxVCd7QhzeXBadiTvFk0p3wPddp+UpiqQJRp y15b5ozew1cciVfEkLBySe63iLPWICZASxyfgctxU1N/+sDncigsRIaJAsHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQjNhHQf8zxAPb9Id/KVw3HACbEwHwYDVR0j BBgwFoAUpV9/a3/f0kSJj8g2swb4iE+UqOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUzMzA2MzMtYTdkMS00ZDBhLWExY2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3 RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0Rjk0QThFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTVGN0Y2QjdGREZEMjQ0ODk4RkM4MzZCMzA2Rjg4ODRGOTRB OEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4 ODg0Rjk0QThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxwo1XV+1Wt7+oGhBH9zx6tyYb0IWSq4fBQ JNVIRv9XpeYNQ4Ry726Qq3QW3tRIV91GRehYVUiAj2LcNzzI/0jmpnrInmSaYO4d f2bb8MYzfzIIi3D26DhfyoAJgTdjwZN5G1/GA9ABqkuF5aGwK3pKLctK6UJkhcok s/Zsbt23bBqFATBMb1bVybbmDoxdLXOyqBby/xrVZsfUrTowpWckXhWEDmT5rSph SVCxNaGZj7iEXMV+3ZlaGb5WwplHN4meVWhDkuB7hCvjmCnWkIUbbDWiRqCWZ5as ZQc+M4SyCg7UTmF7PFvynEBvr+0o7VEXMIbbmq8lm1xlwo+D9q4= -----END CERTIFICATE-----Generated at Tue Nov 10 03:46:36 2026 by rpki-client