$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: IKHMNG4Vj6+Ucm8YGy2yVusIr5vXb/v7fFzfs4K2UiY= Subject key identifier: A5:C9:85:7E:E1:C0:38:C0:E5:58:CB:BC:68:DD:0F:1D:F3:C5:D1:00 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 36C220253C07AF2A1977D939742BA859DFBCF153 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 00:45:07 +0000 Manifest this update: Sun 15 Nov 2026 00:40:07 +0000 Manifest next update: Mon 16 Nov 2026 04:12:07 +0000 Files and hashes: 1: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: 0l7zETZn1K2qZCVArVI8i8J590lz7yCogJOGRonEogI=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c2:20:25:3c:07:af:2a:19:77:d9:39:74:2b:a8:59:df:bc:f1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Nov 15 00:40:07 2026 GMT Not After : Nov 16 04:12:07 2026 GMT Subject: CN=A5C9857EE1C038C0E558CBBC68DD0F1DF3C5D100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:c1:d8:06:03:bc:22:61:f9:e1:36:9d:a7: fc:41:12:cd:d7:a5:a5:c1:d0:d2:24:9a:fd:1f:3b: e0:37:6b:a4:55:21:d3:ca:20:97:15:06:91:b2:61: 8b:53:ea:fd:a6:f7:d8:43:60:a9:a4:2b:1b:07:53: 50:c5:dc:9c:60:10:bc:f3:0c:8d:41:b2:c8:68:fb: e9:50:fc:80:4a:9f:00:dd:c2:b3:91:3b:8f:b7:56: 2a:93:0c:61:01:86:5c:90:f0:19:02:78:2c:af:3c: f1:59:04:d0:d5:9c:aa:da:83:6d:b8:7a:a1:0f:64: ba:ca:99:86:7f:9d:2a:ab:96:2c:a9:49:1b:c9:ad: 25:46:9b:69:7e:84:ee:5b:18:99:e9:48:79:82:2f: 4e:85:ad:27:02:9f:06:e5:61:67:5d:51:5a:d8:23: 3f:c9:1b:3b:bf:53:3a:a0:59:c5:ad:7b:00:20:10: 65:e4:43:20:28:bf:96:e7:90:f8:06:38:4f:f7:56: 52:60:e8:76:f9:8c:d0:40:77:76:04:2b:ea:f8:a1: 8d:72:c3:94:d7:00:fc:e9:bc:a9:9f:3c:87:71:3a: 2f:09:fd:fc:a1:77:7c:c7:42:da:e4:4d:a8:e9:47: ad:7f:25:e4:17:c2:68:2e:6a:e8:a3:bf:bf:41:02: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:85:7E:E1:C0:38:C0:E5:58:CB:BC:68:DD:0F:1D:F3:C5:D1:00 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0a:ca:03:93:5f:91:b1:83:cd:e9:2e:7b:f5:aa:ed:00:c0: 96:bc:00:be:e3:5e:67:77:ba:f4:82:f0:99:23:00:06:73:77: f0:68:9a:e1:c6:f5:61:fc:4b:ea:97:c4:15:12:27:20:53:14: a6:0b:e4:7b:1d:91:f1:c5:48:6f:1d:f5:63:55:85:57:77:5e: ef:21:39:22:07:5c:48:4b:af:a6:75:40:3e:59:bf:bd:62:7b: 20:ca:34:08:e5:55:93:b4:31:f0:1d:f8:b5:50:7f:37:b8:37: 6b:b7:8c:3c:1f:fb:58:ed:cc:18:21:af:95:db:e1:05:35:91: b0:aa:69:04:08:61:8a:a1:70:85:f3:56:35:85:76:e7:9f:fe: ee:de:28:5e:fa:c7:e8:8f:ec:e2:ff:3d:97:5b:ab:76:eb:b5: d8:06:55:71:75:6c:28:c5:83:64:f4:3c:9c:c5:7b:6d:61:17: 8a:bb:26:df:61:e2:56:81:e7:e4:99:66:c0:62:e9:f8:22:ac: 7b:f9:af:45:03:fa:75:84:4a:5f:6e:95:d3:67:71:4e:9c:30: 52:39:e9:4c:4e:7f:64:94:5c:0f:11:8b:55:03:ca:9a:b0:38: 04:d1:93:be:4e:5d:9f:83:6c:89:6d:82:e2:43:bc:ef:44:fa: 37:37:9e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsIgJTwHryoZd9k5dCuoWd+88VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjExMTUwMDQwMDdaFw0yNjExMTYwNDEyMDdaMDMxMTAvBgNV BAMTKEE1Qzk4NTdFRTFDMDM4QzBFNTU4Q0JCQzY4REQwRjFERjNDNUQxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AcHYBgO8ImH54Tadp/xBEs3X paXB0NIkmv0fO+A3a6RVIdPKIJcVBpGyYYtT6v2m99hDYKmkKxsHU1DF3JxgELzz DI1Bssho++lQ/IBKnwDdwrORO4+3ViqTDGEBhlyQ8BkCeCyvPPFZBNDVnKrag224 eqEPZLrKmYZ/nSqrliypSRvJrSVGm2l+hO5bGJnpSHmCL06FrScCnwblYWddUVrY Iz/JGzu/UzqgWcWtewAgEGXkQyAov5bnkPgGOE/3VlJg6Hb5jNBAd3YEK+r4oY1y w5TXAPzpvKmfPIdxOi8J/fyhd3zHQtrkTajpR61/JeQXwmguauijv79BAtDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcmFfuHAOMDlWMu8aN0PHfPF0QAwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIKygOTX5Gxg83pLnv1qu0AwJa8AL7jXmd3 uvSC8JkjAAZzd/BomuHG9WH8S+qXxBUSJyBTFKYL5HsdkfHFSG8d9WNVhVd3Xu8h OSIHXEhLr6Z1QD5Zv71ieyDKNAjlVZO0MfAd+LVQfze4N2u3jDwf+1jtzBghr5Xb 4QU1kbCqaQQIYYqhcIXzVjWFduef/u7eKF76x+iP7OL/PZdbq3brtdgGVXF1bCjF g2T0PJzFe21hF4q7Jt9h4laB5+SZZsBi6fgirHv5r0UD+nWESl9uldNncU6cMFI5 6UxOf2SUXA8Ri1UDypqwOATRk75OXZ+DbIltguJDvO9E+jc3nno= -----END CERTIFICATE-----Generated at Sun Nov 15 08:37:48 2026 by rpki-client