$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: QVDX4QANVbl/iLsDR112IpthShx2u+oNHLppwV77dZ4= Subject key identifier: 09:60:AF:F5:4A:CE:5E:57:B9:85:97:9F:62:71:6E:C7:58:04:8F:C8 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 407D647C35D4AF1F290C1D72E5ED7F54A8E89A1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 17:21:17 +0000 Manifest this update: Sat 14 Nov 2026 17:16:17 +0000 Manifest next update: Sun 15 Nov 2026 17:33:17 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: SY5q/3/aeC2o72C4pr2Gb7nXkz9+Gu/rKihukmG2SPw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7d:64:7c:35:d4:af:1f:29:0c:1d:72:e5:ed:7f:54:a8:e8:9a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Nov 14 17:16:17 2026 GMT Not After : Nov 15 17:33:17 2026 GMT Subject: CN=0960AFF54ACE5E57B985979F62716EC758048FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:19:60:f8:f7:7c:a7:27:84:56:24:48:5b: 73:f9:2f:28:88:1d:e2:ac:66:84:b5:3d:19:3b:cc: 9c:de:a2:e7:44:9e:d3:d9:6c:46:fe:81:b6:29:1b: aa:b8:91:91:04:eb:ad:ff:a9:ec:79:44:88:d4:fe: a6:64:1b:8e:33:fb:e1:c1:66:5d:89:25:f7:e3:c6: 96:3c:cc:d8:22:af:75:3b:96:b8:ba:60:52:a9:08: f3:fe:70:16:23:f6:55:59:f1:3a:a0:8c:5c:32:f0: 64:20:24:65:a5:47:62:b5:4b:e1:c3:c8:28:2c:11: 40:35:b5:73:b7:bb:5e:db:87:c9:db:7e:9b:95:ac: 8f:2b:c1:e2:81:4a:ff:df:e2:2c:76:7d:90:05:86: 06:d0:d5:46:ef:77:55:45:b3:2c:aa:9e:0c:bf:d8: 6b:6b:56:df:a9:5b:bd:48:d1:32:04:f2:35:79:44: 6a:5d:43:d9:38:e1:dd:3c:49:6f:01:62:36:8b:bd: 75:b4:83:ce:17:11:2f:43:f3:96:54:18:5a:e5:6e: 66:55:a2:a2:d5:aa:f4:f3:5a:cb:aa:ad:25:38:b1: dc:e9:a6:81:5b:09:80:ce:76:3b:7b:4f:86:21:d3: 39:f6:52:05:cc:b6:da:55:e4:b6:af:93:07:b6:10: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:AF:F5:4A:CE:5E:57:B9:85:97:9F:62:71:6E:C7:58:04:8F:C8 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:94:6d:e2:53:74:d2:dd:1a:2c:09:24:52:5a:97:4f:c1:22: cd:d8:82:ff:2a:93:59:d4:3a:ca:a4:1a:6d:78:3b:07:bf:85: f6:7a:17:62:fa:e3:83:2d:8b:be:09:25:a5:72:c6:8e:b6:44: 32:75:f0:d6:b5:8b:d6:3f:9e:8c:ec:60:12:53:04:35:ad:a5: ea:bc:96:6e:4c:12:20:64:f5:e8:98:14:68:c6:1c:97:1e:3c: 93:cc:7f:99:b6:a1:ef:78:70:f2:a5:3d:aa:57:6d:0f:bf:ae: ab:c6:65:17:0b:5c:fc:f4:bc:d9:59:56:4f:8e:f3:a0:55:47: fc:5b:30:02:82:35:b6:ab:7b:c1:bd:61:6a:73:61:c4:3a:11: da:87:b4:4d:d1:9d:e2:5d:55:2a:ce:b7:e2:7b:44:5b:91:d2: 3b:cf:74:af:38:ad:e7:51:fc:fd:3f:39:30:74:1a:7a:0a:70: 29:44:16:d6:85:1e:5d:68:4b:5a:19:07:19:35:91:51:a2:52: 44:6f:fe:12:7c:79:e3:d9:f0:13:00:c8:68:40:1c:a4:f3:cd: f7:15:9c:e4:26:60:0e:d1:12:85:49:d1:5c:2e:55:d2:27:86: d0:56:da:81:25:f1:b9:d0:3d:9c:af:fb:f3:e3:ac:78:a9:40: ff:68:de:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQH1kfDXUrx8pDB1y5e1/VKjomh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjExMTQxNzE2MTdaFw0yNjExMTUxNzMzMTdaMDMxMTAvBgNV BAMTKDA5NjBBRkY1NEFDRTVFNTdCOTg1OTc5RjYyNzE2RUM3NTgwNDhGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zxlg+Pd8pyeEViRIW3P5LyiI HeKsZoS1PRk7zJzeoudEntPZbEb+gbYpG6q4kZEE663/qex5RIjU/qZkG44z++HB Zl2JJffjxpY8zNgir3U7lri6YFKpCPP+cBYj9lVZ8TqgjFwy8GQgJGWlR2K1S+HD yCgsEUA1tXO3u17bh8nbfpuVrI8rweKBSv/f4ix2fZAFhgbQ1Ubvd1VFsyyqngy/ 2GtrVt+pW71I0TIE8jV5RGpdQ9k44d08SW8BYjaLvXW0g84XES9D85ZUGFrlbmZV oqLVqvTzWsuqrSU4sdzppoFbCYDOdjt7T4Yh0zn2UgXMttpV5Lavkwe2EIfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWCv9UrOXle5hZefYnFux1gEj8gwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKUbeJTdNLdGiwJJFJal0/BIs3Ygv8qk1nU OsqkGm14Owe/hfZ6F2L644Mti74JJaVyxo62RDJ18Na1i9Y/nozsYBJTBDWtpeq8 lm5MEiBk9eiYFGjGHJcePJPMf5m2oe94cPKlPapXbQ+/rqvGZRcLXPz0vNlZVk+O 86BVR/xbMAKCNbare8G9YWpzYcQ6EdqHtE3RneJdVSrOt+J7RFuR0jvPdK84redR /P0/OTB0GnoKcClEFtaFHl1oS1oZBxk1kVGiUkRv/hJ8eePZ8BMAyGhAHKTzzfcV nOQmYA7REoVJ0VwuVdInhtBW2oEl8bnQPZyv+/PjrHipQP9o3vU= -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:55 2026 by rpki-client