$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft File: F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft (raw, json) Hash identifier: aoQG+l0sYp7RlOrDJ+5DuryeUdCbLdagWQqp4Utpn58= Subject key identifier: B9:BF:A1:12:0C:37:0C:6D:C7:33:42:18:C0:B6:39:8B:4C:49:AF:96 Authority key identifier: F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97 Certificate issuer: /CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797 Certificate serial: 2051CC66E708B4FBF6A2DC72E3539F765177BEA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 02:27:13 +0000 Manifest this update: Sun 15 Nov 2026 02:22:13 +0000 Manifest next update: Mon 16 Nov 2026 04:23:13 +0000 Files and hashes: 1: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: imn0bSKNfH06upPmhn2tYthgsfP9Fs6RXvoYDtKKr64=) 2: F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl (hash: jIvH715r7ItpF6SZY30rbdUQBNoZIBDWzYhLtooG0xQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:51:cc:66:e7:08:b4:fb:f6:a2:dc:72:e3:53:9f:76:51:77:be:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797 Validity Not Before: Nov 15 02:22:13 2026 GMT Not After : Nov 16 04:23:13 2026 GMT Subject: CN=B9BFA1120C370C6DC7334218C0B6398B4C49AF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:f8:a0:78:39:9d:30:6e:05:06:41:9a:0e: 6b:77:02:f6:9f:83:6e:15:26:0c:b3:d8:3e:82:23: 6d:70:eb:a8:24:e3:f1:46:b0:93:96:dd:0d:7d:e1: b0:97:25:8b:ad:54:4a:03:be:12:a8:e8:1c:78:47: c5:c8:7f:f0:5f:a0:66:b6:bf:92:1a:68:ba:64:85: b7:2c:db:23:d5:64:58:c3:fc:91:fe:bb:1b:51:9b: ee:25:bb:c2:b0:15:8e:81:19:c0:d3:f1:83:30:b5: aa:38:91:ed:f1:29:1a:0b:7a:0f:cd:4b:83:e5:b6: 33:ff:32:29:ea:f3:84:bf:72:58:8c:e6:74:22:3c: 79:60:0c:9e:17:07:5c:c7:ca:05:ed:a5:29:20:d6: 88:b2:02:a5:c8:7d:17:6b:b6:60:e7:30:24:73:04: 13:64:b0:b0:12:8e:8a:a6:ea:5b:2e:50:8e:6c:3d: e5:47:64:71:f0:e0:63:bc:a9:e6:af:4a:2b:3f:b8: 18:c8:26:4c:ca:47:c3:6a:bc:11:29:ad:25:96:c5: 5d:e6:87:2f:c7:0b:c1:74:fa:b1:ed:54:88:e9:3f: 4a:e1:e5:bb:c9:b5:27:fb:74:a7:d3:ad:b2:4f:36: 11:30:a4:57:d2:40:21:87:26:96:c2:1f:83:88:d0: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BF:A1:12:0C:37:0C:6D:C7:33:42:18:C0:B6:39:8B:4C:49:AF:96 X509v3 Authority Key Identifier: keyid:F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:97:d1:e0:59:de:36:07:3c:40:75:a3:8b:91:4b:e3:ae: ab:65:91:d6:69:38:d7:f9:03:0c:13:9c:d7:95:b1:4c:9a:3c: e8:34:b2:e7:e0:e1:42:4a:6c:cb:b4:78:33:20:4a:5c:da:ff: 6b:54:ba:ff:5f:ae:48:a8:7f:71:ff:5f:e7:ea:b8:40:1a:1b: 87:67:a9:dc:15:42:11:cd:70:75:de:b6:aa:5e:dc:c2:35:a4: bb:35:c2:9a:b9:fc:df:3f:b4:c8:27:95:b3:98:f5:fa:df:bf: c4:53:88:e5:d1:db:b2:82:bc:5a:60:f1:76:36:1a:c0:96:eb: 71:9e:08:0c:f3:13:af:71:0e:91:37:4a:53:38:c1:7c:cd:73: 54:79:a1:6e:ab:6b:6f:84:9e:20:e2:46:bb:a3:37:b4:db:08: df:7e:dc:fd:83:b2:44:6f:c7:a2:54:39:70:dc:f8:ff:75:f0: 3a:fb:51:b5:b0:fe:74:9d:fb:6c:3e:63:18:d7:6d:c5:be:cd: 6e:bd:ac:5e:86:16:e0:2f:38:e5:ee:7a:a1:43:3e:a5:92:ce: 79:b2:53:c6:b4:2e:7a:de:66:0a:a1:e8:da:71:8f:aa:83:6b: e5:4b:b7:b5:3d:f8:b8:8e:09:b1:1f:9f:49:42:30:13:2a:5e: 6d:07:d7:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFHMZucItPv2otxy41OfdlF3vqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM2QjQ2OEM0Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2QzdE QTA2Qzc5NzAeFw0yNjExMTUwMjIyMTNaFw0yNjExMTYwNDIzMTNaMDMxMTAvBgNV BAMTKEI5QkZBMTEyMEMzNzBDNkRDNzMzNDIxOEMwQjYzOThCNEM0OUFGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIvigeDmdMG4FBkGaDmt3Avaf g24VJgyz2D6CI21w66gk4/FGsJOW3Q194bCXJYutVEoDvhKo6Bx4R8XIf/BfoGa2 v5IaaLpkhbcs2yPVZFjD/JH+uxtRm+4lu8KwFY6BGcDT8YMwtao4ke3xKRoLeg/N S4PltjP/Minq84S/cliM5nQiPHlgDJ4XB1zHygXtpSkg1oiyAqXIfRdrtmDnMCRz BBNksLASjoqm6lsuUI5sPeVHZHHw4GO8qeavSis/uBjIJkzKR8NqvBEprSWWxV3m hy/HC8F0+rHtVIjpP0rh5bvJtSf7dKfTrbJPNhEwpFfSQCGHJpbCH4OI0OcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUub+hEgw3DG3HM0IYwLY5i0xJr5YwHwYDVR0j BBgwFoAU82tGjEz08G8MQ/riMO6Gx9oGx5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U0NWViYWItZWMxNi00NTg5LWE5YTYtOGEzNjYxZDQzZTNlLzAvRjM2QjQ2OEM0 Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2QzdEQTA2Qzc5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzZCNDY4QzRDRjRGMDZGMEM0M0ZBRTIzMEVFODZDN0RBMDZD Nzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvRjM2QjQ2OEM0Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2 QzdEQTA2Qzc5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJql9HgWd42BzxAdaOLkUvjrqtlkdZpONf5 AwwTnNeVsUyaPOg0sufg4UJKbMu0eDMgSlza/2tUuv9frkiof3H/X+fquEAaG4dn qdwVQhHNcHXetqpe3MI1pLs1wpq5/N8/tMgnlbOY9frfv8RTiOXR27KCvFpg8XY2 GsCW63GeCAzzE69xDpE3SlM4wXzNc1R5oW6ra2+EniDiRrujN7TbCN9+3P2DskRv x6JUOXDc+P918Dr7UbWw/nSd+2w+YxjXbcW+zW69rF6GFuAvOOXueqFDPqWSznmy U8a0LnreZgqh6Npxj6qDa+VLt7U9+LiOCbEfn0lCMBMqXm0H1xo= -----END CERTIFICATE-----Generated at Sun Nov 15 11:32:09 2026 by rpki-client