$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 9qPTDk1uuN+ZGc+ochRMgv+AymPhh2ZorPzEB5P/kHU= Subject key identifier: 2F:8D:10:C8:F1:02:85:88:12:D2:A7:45:AE:90:F0:14:10:D9:EC:B2 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 5C1CCDB9AE94640C7E91B595FC136584CCF2412F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 00:29:52 +0000 Manifest this update: Sun 15 Nov 2026 00:24:52 +0000 Manifest next update: Mon 16 Nov 2026 04:10:52 +0000 Files and hashes: 1: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 3: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: rdQBqcRic1r49NShwjJTCgAZQMwJw941ErGZyYHwxSI=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1c:cd:b9:ae:94:64:0c:7e:91:b5:95:fc:13:65:84:cc:f2:41:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Nov 15 00:24:52 2026 GMT Not After : Nov 16 04:10:52 2026 GMT Subject: CN=2F8D10C8F102858812D2A745AE90F01410D9ECB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:16:f4:27:df:f1:a5:af:d8:5a:ce:79:b9: 54:ef:50:38:52:38:34:50:30:73:93:e2:c4:5a:07: 92:ed:1f:c7:60:41:db:21:c3:a5:18:08:3a:13:ae: df:94:75:ae:1a:75:77:63:0e:d8:1d:f7:a2:9a:9a: 57:16:4d:15:9e:d7:75:4c:67:04:d7:ac:e0:13:33: d0:c6:12:83:bc:47:61:57:06:7e:4d:aa:73:ef:fb: 95:af:55:15:4b:3b:3f:ed:29:45:bd:d1:70:b7:86: 8e:c4:5e:d9:80:89:63:1f:49:41:82:f0:35:bf:9a: f7:7a:3b:9e:05:54:9a:80:ec:65:06:e5:e8:10:62: d2:38:c0:79:67:1e:28:6f:49:8b:a2:a3:41:dc:c7: 9b:65:be:6d:b9:cd:79:87:69:b4:b3:8e:ca:de:4d: dd:ed:8e:ca:8a:b0:50:55:d3:9d:b7:bd:77:0f:3d: e2:4c:af:9d:6f:1d:98:ea:c1:6e:c8:14:2e:60:23: ed:ce:1b:d0:f2:b6:82:21:a1:ef:c5:8d:2f:32:cb: a6:6d:99:24:d8:3f:34:80:56:95:48:9c:78:a9:24: f3:2b:61:a7:3c:97:ac:92:81:fc:77:b7:2d:21:cd: 50:3e:13:39:5d:c8:40:e0:0a:fd:3c:08:9f:30:5f: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8D:10:C8:F1:02:85:88:12:D2:A7:45:AE:90:F0:14:10:D9:EC:B2 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:41:91:d3:3e:96:5f:be:28:3f:1f:f2:4e:ba:1c:b1:b1:b0: 3d:dc:b6:eb:5d:f7:db:e9:74:dc:62:65:05:ae:67:01:0b:06: ba:dc:d2:c2:63:99:d9:91:38:99:3c:ef:72:25:9f:d8:9e:63: d2:cc:81:66:41:d9:28:84:20:fb:7d:56:ff:a5:b5:68:e7:b3: 61:2b:bb:89:c9:12:3e:5c:e7:32:7f:5a:bf:1c:37:c9:db:3c: 2c:9a:74:69:7d:24:c7:6e:8f:84:a6:74:12:ac:3b:11:24:76: a1:8e:f0:74:84:86:4f:84:28:25:d2:5e:6d:4c:12:8a:76:25: 98:32:3c:d3:5e:90:68:76:a4:0f:31:d5:ff:71:6d:bb:ad:4e: ce:41:8f:65:8f:6e:c8:9c:8a:42:f8:60:e9:19:bb:b7:8f:19: e9:61:10:8c:53:8f:ab:e6:19:79:b7:77:97:e3:a9:f2:8c:50: 5e:0f:2e:29:af:9a:5f:05:66:6a:7c:0c:72:0c:2a:8d:82:76: 7f:4b:35:d2:ba:16:13:bc:ed:40:16:fc:30:cb:fa:c6:9e:b1: 89:d7:2a:e9:c0:03:87:d1:5c:88:8d:bc:e9:17:42:3e:af:cb: 5e:68:ea:34:5c:c4:7a:48:ad:bc:ab:a9:99:44:13:23:9a:27: b5:66:b0:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBzNua6UZAx+kbWV/BNlhMzyQS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjExMTUwMDI0NTJaFw0yNjExMTYwNDEwNTJaMDMxMTAvBgNV BAMTKDJGOEQxMEM4RjEwMjg1ODgxMkQyQTc0NUFFOTBGMDE0MTBEOUVDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyBb0J9/xpa/YWs55uVTvUDhS ODRQMHOT4sRaB5LtH8dgQdshw6UYCDoTrt+Uda4adXdjDtgd96KamlcWTRWe13VM ZwTXrOATM9DGEoO8R2FXBn5NqnPv+5WvVRVLOz/tKUW90XC3ho7EXtmAiWMfSUGC 8DW/mvd6O54FVJqA7GUG5egQYtI4wHlnHihvSYuio0Hcx5tlvm25zXmHabSzjsre Td3tjsqKsFBV0523vXcPPeJMr51vHZjqwW7IFC5gI+3OG9DytoIhoe/FjS8yy6Zt mSTYPzSAVpVInHipJPMrYac8l6ySgfx3ty0hzVA+EzldyEDgCv08CJ8wX1unAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL40QyPEChYgS0qdFrpDwFBDZ7LIwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRBkdM+ll++KD8f8k66HLGxsD3ctutd99vp dNxiZQWuZwELBrrc0sJjmdmROJk873Iln9ieY9LMgWZB2SiEIPt9Vv+ltWjns2Er u4nJEj5c5zJ/Wr8cN8nbPCyadGl9JMduj4SmdBKsOxEkdqGO8HSEhk+EKCXSXm1M Eop2JZgyPNNekGh2pA8x1f9xbbutTs5Bj2WPbsicikL4YOkZu7ePGelhEIxTj6vm GXm3d5fjqfKMUF4PLimvml8FZmp8DHIMKo2Cdn9LNdK6FhO87UAW/DDL+saesYnX KunAA4fRXIiNvOkXQj6vy15o6jRcxHpIrbyrqZlEEyOaJ7VmsJ8= -----END CERTIFICATE-----Generated at Sun Nov 15 02:53:06 2026 by rpki-client