$ rpki-client -vvvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: jN10+195tkVkmfjhWSc2QIWg0vjUhSH7C+ctadGj1q0= Subject key identifier: 4C:5C:EC:A2:44:7D:65:80:57:F9:5B:36:6E:E0:39:79:EC:0D:53:39 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 1EC8A96961FE213173D332C01F883C4FB3362305 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 11:07:51 +0000 Manifest this update: Sun 15 Nov 2026 11:02:51 +0000 Manifest next update: Mon 16 Nov 2026 12:40:51 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 2: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: dXzvQweAi3YfmLO1POZC+q/a755WMap2qmnp6VdPMqA=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c8:a9:69:61:fe:21:31:73:d3:32:c0:1f:88:3c:4f:b3:36:23:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Nov 15 11:02:51 2026 GMT Not After : Nov 16 12:40:51 2026 GMT Subject: CN=4C5CECA2447D658057F95B366EE03979EC0D5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:17:62:15:e7:bb:1d:fa:94:57:8d:c9:39:f6: 59:bf:c7:ec:3f:5a:2b:53:f4:3a:ce:7e:3c:05:42: ca:44:1c:c2:ff:64:c2:fd:9a:80:f9:db:c3:73:b5: 61:dd:65:8e:d4:34:04:80:82:be:8d:5b:d0:c0:5f: e3:8b:ab:d2:10:71:9a:c7:8c:8d:eb:c9:61:24:14: c2:e3:7b:09:b9:17:d6:89:ee:28:b8:b3:26:bb:94: 8d:21:fc:7f:c4:e9:3d:64:1e:e8:da:7e:33:4b:8d: ef:6d:23:a0:f3:77:3a:69:86:e9:2f:54:6b:ce:02: 5e:64:a5:d4:d7:23:4f:39:5d:68:3a:99:07:53:a6: bd:5b:24:9e:3e:c5:88:4b:3e:fa:00:c3:de:e1:75: c7:e3:82:c5:0f:0d:b1:f4:e3:c6:f8:13:51:b9:b9: 93:0b:30:5e:75:bb:45:5c:67:df:71:22:c1:06:d4: 60:e5:ad:2d:35:8c:a9:c4:59:3c:29:b1:3d:01:b7: 34:fa:73:5f:56:ed:3b:fc:61:dd:30:a4:45:15:68: 3d:8a:e8:86:4b:c2:85:82:e5:b9:8d:7d:2f:ce:01: 11:93:98:09:ab:fa:72:b2:cc:d6:dc:73:7e:93:7d: 55:30:ec:06:bc:a1:58:5d:c7:59:b8:9a:68:ec:06: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:EC:A2:44:7D:65:80:57:F9:5B:36:6E:E0:39:79:EC:0D:53:39 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:be:3e:6e:b4:12:a2:45:46:3a:95:38:58:b1:e8:9e:88:c0: b3:a1:d3:9b:89:57:80:5e:c6:72:50:93:92:ea:22:3a:4c:b7: a6:47:4f:26:6d:03:32:07:10:7b:94:ee:8a:7e:b6:ad:e3:3c: af:e5:cf:89:70:19:5c:da:f3:84:32:bc:51:40:ca:88:01:33: 5f:1e:26:f1:82:26:cf:4b:07:c4:21:9c:41:72:4a:0b:b6:35: 6f:6e:27:5e:8f:22:29:9e:31:bd:0e:42:c5:fe:56:92:a1:0c: f9:fd:4d:75:ab:84:09:1f:15:57:59:05:90:35:76:d9:96:ef: 48:07:61:d4:c2:b6:be:f5:7c:76:1a:97:50:2a:b5:fc:4b:9a: 08:50:b9:96:2b:03:d4:a8:ed:b0:c0:8f:dc:12:33:61:43:0b: 7d:e7:74:61:d6:d0:8e:f0:44:3c:d5:8a:2c:84:db:1d:7a:64: 2f:8b:08:11:15:0a:2b:3d:8a:88:1b:17:56:90:80:17:34:11: a3:25:6e:31:2a:2a:55:09:69:80:65:c6:d3:cf:fb:f3:6f:55: 14:cf:ab:c0:62:92:d3:65:2c:ed:56:4e:a1:94:98:62:5d:d0: b1:f0:06:11:fe:76:0e:de:00:6a:94:7f:a0:8b:1e:61:4c:46: 9b:a1:25:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsipaWH+ITFz0zLAH4g8T7M2IwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjExMTUxMTAyNTFaFw0yNjExMTYxMjQwNTFaMDMxMTAvBgNV BAMTKDRDNUNFQ0EyNDQ3RDY1ODA1N0Y5NUIzNjZFRTAzOTc5RUMwRDUzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyF2IV57sd+pRXjck59lm/x+w/ WitT9DrOfjwFQspEHML/ZML9moD528NztWHdZY7UNASAgr6NW9DAX+OLq9IQcZrH jI3ryWEkFMLjewm5F9aJ7ii4sya7lI0h/H/E6T1kHujafjNLje9tI6Dzdzpphukv VGvOAl5kpdTXI085XWg6mQdTpr1bJJ4+xYhLPvoAw97hdcfjgsUPDbH048b4E1G5 uZMLMF51u0VcZ99xIsEG1GDlrS01jKnEWTwpsT0BtzT6c19W7Tv8Yd0wpEUVaD2K 6IZLwoWC5bmNfS/OARGTmAmr+nKyzNbcc36TfVUw7Aa8oVhdx1m4mmjsBnYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFzsokR9ZYBX+Vs2buA5eewNUzkwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK+Pm60EqJFRjqVOFix6J6IwLOh05uJV4Be xnJQk5LqIjpMt6ZHTyZtAzIHEHuU7op+tq3jPK/lz4lwGVza84QyvFFAyogBM18e JvGCJs9LB8QhnEFySgu2NW9uJ16PIimeMb0OQsX+VpKhDPn9TXWrhAkfFVdZBZA1 dtmW70gHYdTCtr71fHYal1AqtfxLmghQuZYrA9So7bDAj9wSM2FDC33ndGHW0I7w RDzViiyE2x16ZC+LCBEVCis9iogbF1aQgBc0EaMlbjEqKlUJaYBlxtPP+/NvVRTP q8BiktNlLO1WTqGUmGJd0LHwBhH+dg7eAGqUf6CLHmFMRpuhJW8= -----END CERTIFICATE-----Generated at Sun Nov 15 14:59:19 2026 by rpki-client