$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json) Hash identifier: AO7u1wxnEzc9eEx/iIyoyx/Qe8ZT54u6HlM6hou56R8= Subject key identifier: 16:89:A1:B1:CE:EE:F1:1B:61:3A:97:BD:08:F8:7B:A1:D6:DB:2D:16 Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Certificate serial: 2F1A13F614F1FA14E2A2134C498BE54CB07265EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 14:32:17 +0000 Manifest this update: Sun 15 Nov 2026 14:27:17 +0000 Manifest next update: Mon 16 Nov 2026 18:28:17 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=) 2: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: cugjX0LUo0SUDULd/nEV06pHLQeajsZUJ2xFJDYpKxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1a:13:f6:14:f1:fa:14:e2:a2:13:4c:49:8b:e5:4c:b0:72:65:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Validity Not Before: Nov 15 14:27:17 2026 GMT Not After : Nov 16 18:28:17 2026 GMT Subject: CN=1689A1B1CEEEF11B613A97BD08F87BA1D6DB2D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:38:30:70:32:c2:e0:1f:25:d7:46:99:20: 39:c4:4c:ba:e3:2f:89:ac:f5:f0:92:4d:64:78:39: ee:8e:a6:ab:21:cc:f3:dc:2d:dc:4b:1a:70:90:d9: 52:da:04:92:ad:d9:c6:8b:1b:f2:4e:c0:e2:88:2d: af:52:77:d2:43:c7:d0:4d:2e:6a:05:99:92:e0:84: 01:bd:22:08:b9:ca:30:6a:af:d2:4d:f5:d2:cf:09: f2:2e:77:5e:dd:10:5d:09:29:29:1a:3a:00:cd:bb: 19:a1:b1:aa:ff:3e:84:21:09:6d:56:7f:e9:88:48: aa:39:dc:05:4a:53:ef:81:6d:38:8a:97:15:f1:e4: 5b:55:95:8a:62:b2:3d:33:8e:95:29:80:82:53:90: 26:5d:94:27:b3:ff:ee:17:cc:5d:d6:c9:d8:d5:e3: 78:1e:13:b5:13:73:55:97:3b:ff:4f:5f:6c:98:54: 3b:83:96:9b:e6:27:bb:d9:7f:43:fc:b9:78:f2:57: 7b:bb:23:47:12:b0:66:2f:39:a4:57:f8:f4:d4:a2: e9:74:2e:02:56:e3:0f:48:01:2e:d3:12:f3:ab:5d: 4d:d0:31:93:d4:12:e0:af:4c:a3:3e:5b:0c:81:57: 15:90:02:e0:6e:e0:cd:96:db:df:4a:50:26:7a:c5: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:A1:B1:CE:EE:F1:1B:61:3A:97:BD:08:F8:7B:A1:D6:DB:2D:16 X509v3 Authority Key Identifier: keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5f:75:76:0e:19:73:e6:e3:00:4c:54:3e:03:c9:7e:d2:f1: 56:7c:78:87:47:03:fd:12:df:c5:91:f4:3c:fc:56:bd:e2:80: 93:b0:f8:98:f9:dd:0a:d5:8c:6b:6d:fc:ca:e9:22:b6:e2:87: 0e:1d:70:8a:39:04:e0:04:cc:31:b3:47:91:b9:84:3a:05:b9: 73:e3:c2:b7:8c:a7:4c:88:7e:22:70:46:a3:dc:d8:96:5b:5f: ac:92:63:66:cf:fb:5b:18:be:06:21:0b:70:25:c9:5c:a1:c1: d3:1a:1a:26:b0:ae:3b:7b:e1:fa:9f:c8:ed:bf:86:3a:ec:fb: c8:8b:fe:23:ef:6b:cd:02:08:b2:c4:60:de:07:55:8e:a6:2c: 8c:eb:cd:47:85:f8:e4:fa:a0:d2:e5:f5:7a:bf:52:05:b7:d4: 53:16:33:c2:2a:2c:2f:90:bf:39:5e:d2:f7:39:fa:6c:ea:fa: 72:0f:6c:ab:d9:83:7e:48:15:c3:32:e5:67:e3:ab:35:52:e5: 43:8f:72:66:66:9e:fe:85:2a:5e:62:68:19:f3:76:56:eb:c3: b0:37:5c:4f:a7:ee:ad:00:ba:2d:ee:0e:30:8f:f9:dd:e5:73: 16:ed:1b:76:76:0e:f7:88:01:8a:0a:9e:7c:71:d7:ba:eb:61: 29:09:bb:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxoT9hTx+hTiohNMSYvlTLByZeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5 QzMzNjgxNzAeFw0yNjExMTUxNDI3MTdaFw0yNjExMTYxODI4MTdaMDMxMTAvBgNV BAMTKDE2ODlBMUIxQ0VFRUYxMUI2MTNBOTdCRDA4Rjg3QkExRDZEQjJEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSjgwcDLC4B8l10aZIDnETLrj L4ms9fCSTWR4Oe6OpqshzPPcLdxLGnCQ2VLaBJKt2caLG/JOwOKILa9Sd9JDx9BN LmoFmZLghAG9Igi5yjBqr9JN9dLPCfIud17dEF0JKSkaOgDNuxmhsar/PoQhCW1W f+mISKo53AVKU++BbTiKlxXx5FtVlYpisj0zjpUpgIJTkCZdlCez/+4XzF3WydjV 43geE7UTc1WXO/9PX2yYVDuDlpvmJ7vZf0P8uXjyV3u7I0cSsGYvOaRX+PTUoul0 LgJW4w9IAS7TEvOrXU3QMZPUEuCvTKM+WwyBVxWQAuBu4M2W299KUCZ6xWGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFomhsc7u8RthOpe9CPh7odbbLRYwHwYDVR0j BBgwFoAU4Jb+26/yrbc8c+fgmM5JS5wzaBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwOWNiYjktMWFhZC00YjFhLWJkNGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJB RkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5QzMzNjgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDk2RkVEQkFGRjJBREI3M0M3M0U3RTA5OENFNDk0QjlDMzM2 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5 NEI5QzMzNjgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdfdXYOGXPm4wBMVD4DyX7S8VZ8eIdHA/0S 38WR9Dz8Vr3igJOw+Jj53QrVjGtt/MrpIrbihw4dcIo5BOAEzDGzR5G5hDoFuXPj wreMp0yIfiJwRqPc2JZbX6ySY2bP+1sYvgYhC3AlyVyhwdMaGiawrjt74fqfyO2/ hjrs+8iL/iPva80CCLLEYN4HVY6mLIzrzUeF+OT6oNLl9Xq/UgW31FMWM8IqLC+Q vzle0vc5+mzq+nIPbKvZg35IFcMy5WfjqzVS5UOPcmZmnv6FKl5iaBnzdlbrw7A3 XE+n7q0Aui3uDjCP+d3lcxbtG3Z2DveIAYoKnnxx17rrYSkJu8s= -----END CERTIFICATE-----Generated at Sun Nov 15 21:30:04 2026 by rpki-client