$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft File: 9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft (raw, json) Hash identifier: 8f0nmFX46bFLfjH/thXGNMEI74JNcphd+0+jnC9c3pw= Subject key identifier: 7A:FB:66:87:4D:D9:D5:20:FF:14:7E:26:FE:19:21:88:B0:A4:6E:B1 Authority key identifier: 96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C Certificate issuer: /CN=9600C6D40C9726C4902F405B1CB4D124466EEC1C Certificate serial: 36BB4BAF7CDC9CED7B39636B59056CC469D21200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft Manifest number: 1C Signing time: Sat 14 Nov 2026 09:41:42 +0000 Manifest this update: Sat 14 Nov 2026 09:36:42 +0000 Manifest next update: Sun 15 Nov 2026 09:41:42 +0000 Files and hashes: 1: 3136302e3233362e31382e302f32342d3234203d3e20313534373239.roa (hash: RTtn3uDbhqh04YtiBI7J6fh/WdEd9LCVhLJfwBoo88w=) 2: 9600C6D40C9726C4902F405B1CB4D124466EEC1C.crl (hash: 156RZxFmqEpsVqcPeSrDF4sbYKRFJw9qrfE/98SKoM8=) 3: 3136302e3233362e31392e302f32342d3234203d3e20313534373239.roa (hash: wEiduqKIej05QLnhiw89aIb1eH4mn5ACF2EWBZxQ3jM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.crl rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bb:4b:af:7c:dc:9c:ed:7b:39:63:6b:59:05:6c:c4:69:d2:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9600C6D40C9726C4902F405B1CB4D124466EEC1C Validity Not Before: Nov 14 09:36:42 2026 GMT Not After : Nov 15 09:41:42 2026 GMT Subject: CN=7AFB66874DD9D520FF147E26FE192188B0A46EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:1c:1f:f0:c8:d3:12:c3:b4:15:23:c7:f6: e2:43:03:cb:7d:2a:04:9f:14:9a:73:bd:d6:c2:4a: 02:88:0f:7c:8f:f2:da:d2:b5:fb:16:67:98:b0:cf: c5:f8:95:56:aa:10:17:87:e2:56:6b:06:46:b4:eb: f0:40:6c:2c:04:7e:68:98:9e:27:55:b9:b2:a7:d1: d0:ff:50:42:21:ef:0c:d6:74:b7:a3:f3:57:50:b4: cd:8e:8e:1d:28:4d:b6:d3:6a:6e:60:16:69:86:57: 61:ac:25:ed:83:47:a1:1a:68:93:8c:80:b5:46:67: fc:b2:70:1f:16:23:fa:9e:af:b1:a7:dc:2e:98:15: c5:5d:10:f5:7e:80:fc:e9:c2:55:15:17:58:32:92: b5:d5:f9:2c:ca:de:c8:1a:96:63:f7:5b:d5:a3:25: 85:7b:37:0f:44:5a:3a:29:11:3b:85:18:8e:4b:07: 2f:5d:9c:c5:d4:3d:9a:ad:2f:c2:9d:e4:5e:51:22: 4d:e6:25:bd:de:42:68:57:16:d3:86:84:34:49:f8: 95:ba:5b:7b:26:60:65:79:81:b4:c1:d2:70:5c:b8: fd:00:a8:db:4a:90:2d:dd:76:a0:e9:1e:41:5c:3c: df:67:79:56:05:5a:9f:ce:02:45:02:1b:03:c8:44: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:66:87:4D:D9:D5:20:FF:14:7E:26:FE:19:21:88:B0:A4:6E:B1 X509v3 Authority Key Identifier: keyid:96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:37:cd:ed:6f:d8:bc:57:ce:7b:fb:0e:73:13:c8:1f:7f:b6: d7:b2:89:57:58:54:4c:24:88:4e:60:d9:08:33:47:a8:30:fb: 63:a9:7a:bc:3a:6c:da:b8:1b:95:d3:ee:12:62:ce:fd:bf:6d: 01:dd:1e:72:a6:a5:d5:26:b8:df:e4:7c:89:3d:34:fd:f0:58: 03:e3:56:f3:12:cf:2a:19:4d:64:71:8b:c1:5d:f1:04:fd:a1: aa:d8:4d:35:d1:71:30:23:79:5f:93:44:b0:cb:04:64:0e:fc: f3:ab:d1:a9:5f:23:b1:2e:a3:8c:89:bb:73:0a:18:d4:43:c9: b8:6f:58:38:7f:96:1a:8b:17:eb:d0:84:ba:67:31:d6:33:3f: ff:c6:d7:f7:c1:75:dc:c4:85:a8:db:d6:b5:05:7f:8f:2b:08: 3d:96:cb:26:18:64:df:3b:76:87:a3:93:ef:60:4d:7c:88:79: 0b:7a:7b:52:f3:ef:eb:bd:aa:85:fb:6e:94:82:70:0a:1a:10: 66:1b:a5:e7:1e:8a:8e:e0:cb:13:18:93:1c:c6:fe:41:ab:83: e1:fb:f2:50:2d:2d:3d:ca:7f:f7:cf:0e:c2:8b:83:fa:c1:cf: 2a:ce:89:ce:9d:70:b9:68:cd:c6:f1:4c:ea:aa:62:62:8e:88: 87:be:e4:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrtLr3zcnO17OWNrWQVsxGnSEgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYwMEM2RDQwQzk3MjZDNDkwMkY0MDVCMUNCNEQxMjQ0 NjZFRUMxQzAeFw0yNjExMTQwOTM2NDJaFw0yNjExMTUwOTQxNDJaMDMxMTAvBgNV BAMTKDdBRkI2Njg3NEREOUQ1MjBGRjE0N0UyNkZFMTkyMTg4QjBBNDZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4Rwf8MjTEsO0FSPH9uJDA8t9 KgSfFJpzvdbCSgKID3yP8trStfsWZ5iwz8X4lVaqEBeH4lZrBka06/BAbCwEfmiY nidVubKn0dD/UEIh7wzWdLej81dQtM2Ojh0oTbbTam5gFmmGV2GsJe2DR6EaaJOM gLVGZ/yycB8WI/qer7Gn3C6YFcVdEPV+gPzpwlUVF1gykrXV+SzK3sgalmP3W9Wj JYV7Nw9EWjopETuFGI5LBy9dnMXUPZqtL8Kd5F5RIk3mJb3eQmhXFtOGhDRJ+JW6 W3smYGV5gbTB0nBcuP0AqNtKkC3ddqDpHkFcPN9neVYFWp/OAkUCGwPIRNPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevtmh03Z1SD/FH4m/hkhiLCkbrEwHwYDVR0j BBgwFoAUlgDG1AyXJsSQL0BbHLTRJEZu7BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY0ZDQ1ZTEtNzIxOS00YzMyLWEyMDItYWJhODZmNGJlMGRhLzEvOTYwMEM2RDQw Qzk3MjZDNDkwMkY0MDVCMUNCNEQxMjQ0NjZFRUMxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NjAwQzZENDBDOTcyNkM0OTAyRjQwNUIxQ0I0RDEyNDQ2NkVF QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY0ZDQ1ZTEtNzIxOS00YzMyLWEy MDItYWJhODZmNGJlMGRhLzEvOTYwMEM2RDQwQzk3MjZDNDkwMkY0MDVCMUNCNEQx MjQ0NjZFRUMxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI3ze1v2LxXznv7DnMTyB9/tteyiVdYVEwk iE5g2QgzR6gw+2Operw6bNq4G5XT7hJizv2/bQHdHnKmpdUmuN/kfIk9NP3wWAPj VvMSzyoZTWRxi8Fd8QT9oarYTTXRcTAjeV+TRLDLBGQO/POr0alfI7Euo4yJu3MK GNRDybhvWDh/lhqLF+vQhLpnMdYzP//G1/fBddzEhajb1rUFf48rCD2WyyYYZN87 doejk+9gTXyIeQt6e1Lz7+u9qoX7bpSCcAoaEGYbpeceio7gyxMYkxzG/kGrg+H7 8lAtLT3Kf/fPDsKLg/rBzyrOic6dcLlozcbxTOqqYmKOiIe+5H8= -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:05 2026 by rpki-client