$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft File: 259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft (raw, json) Hash identifier: EnMpU49iEN/KIsldMxqyqETJSlTKK+dxr/cUZ2MryrI= Subject key identifier: 9D:3C:E7:82:D2:70:80:B9:7A:F8:62:61:15:63:81:A1:31:54:18:9F Authority key identifier: 25:96:44:D6:CC:2F:FF:59:D9:03:4C:CA:59:B2:AE:8B:06:C7:A0:6E Certificate issuer: /CN=259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E Certificate serial: 1E8ABFE7CDBCE0CE4B730D1F6E20053711A659D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft Manifest number: 09 Signing time: Sat 14 Nov 2026 21:51:45 +0000 Manifest this update: Sat 14 Nov 2026 21:46:45 +0000 Manifest next update: Sun 15 Nov 2026 23:13:45 +0000 Files and hashes: 1: 3230332e33332e33352e302f32342d3234203d3e203234323033.roa (hash: F2hnvmGfwXauucQhoZ2UY/edSJN09vTHGQuo+V29ZZA=) 2: 259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.crl (hash: BVXIWCHSqN6UEm1Hzy3l8VIF1hKgw15aKMwLcXdbrW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.crl rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8a:bf:e7:cd:bc:e0:ce:4b:73:0d:1f:6e:20:05:37:11:a6:59:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E Validity Not Before: Nov 14 21:46:45 2026 GMT Not After : Nov 15 23:13:45 2026 GMT Subject: CN=9D3CE782D27080B97AF86261156381A13154189F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:b9:17:fb:4b:a3:ff:d9:d7:32:b6:38:64: 16:e9:72:de:9d:57:6e:17:29:80:9c:80:7a:a0:85: a3:4c:9d:ec:23:ec:be:0e:18:65:72:18:79:aa:a9: cf:e6:33:d5:bd:83:d4:33:2b:04:12:a3:3a:23:1d: b0:fc:2f:b0:12:d7:a1:51:62:99:7e:72:56:ea:d4: 94:7e:dd:a6:f8:dd:6b:4d:0a:e6:ff:4f:72:dc:d9: a8:7d:a6:d9:bc:2a:2c:c3:25:0b:0f:9c:13:3a:02: 27:23:e5:34:38:b6:48:12:d2:ed:47:48:3a:0c:7a: 5b:37:1c:48:22:e7:af:f0:63:d1:6a:0c:c7:54:b0: 3d:c1:22:9a:b2:52:3d:82:ad:53:7f:49:c9:25:e9: 35:b4:ff:19:ee:f0:90:01:c4:75:90:b0:d6:14:9f: 15:63:54:ef:78:65:94:d2:0e:7d:87:c2:86:1c:fe: ab:cf:17:e4:d2:67:f0:86:d2:d0:a3:97:cd:83:55: a4:28:ac:93:1c:c8:5a:d0:43:1c:52:d0:b9:c0:c7: 56:11:ce:65:4a:ab:27:f5:66:0e:e4:8f:97:38:35: 3d:8f:9c:ef:3d:ae:f1:c7:81:1f:c4:8c:07:37:35: 0b:da:90:ea:a2:dd:fe:15:42:e4:5f:56:27:34:7d: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:E7:82:D2:70:80:B9:7A:F8:62:61:15:63:81:A1:31:54:18:9F X509v3 Authority Key Identifier: keyid:25:96:44:D6:CC:2F:FF:59:D9:03:4C:CA:59:B2:AE:8B:06:C7:A0:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d30387f-2bf0-452f-b7a6-1e19f360a56d/0/259644D6CC2FFF59D9034CCA59B2AE8B06C7A06E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:82:3d:42:88:2c:73:a9:72:1c:5e:04:d1:6d:e8:00:22:a1: 5c:c5:f2:e7:b2:a0:d6:3a:80:9e:e4:1c:fb:9f:70:91:bf:b9: 44:e2:3b:bb:70:73:d5:62:93:ef:05:1c:26:47:7a:07:22:05: bb:28:f6:99:e2:ce:6b:a3:df:1f:44:d8:82:90:fb:05:d0:66: e5:f9:5d:f2:74:59:21:7c:83:74:88:c5:06:36:33:e6:07:01: b6:48:81:06:4a:be:e2:68:98:90:05:df:37:02:34:43:47:b7: 4c:f0:78:e9:d3:57:f1:88:24:55:de:4f:8d:0d:db:1c:5b:6b: 65:23:2d:ba:21:80:02:0f:31:e2:b8:e2:0b:37:18:0d:bd:74: 08:fc:b0:1a:82:d5:3e:01:87:48:3c:e5:cb:3b:3f:3b:2b:ad: 53:ec:49:39:69:0d:93:9a:5e:fd:55:49:b1:05:08:b4:ee:ac: 80:4e:1f:8e:aa:65:fb:0e:1e:ad:72:fa:7f:f0:ce:b4:69:3a: ee:d0:4e:0c:5d:95:c5:cd:9e:0e:cc:bc:07:11:25:cb:0d:72: e5:e8:71:9b:39:78:00:7b:de:af:41:97:7f:f7:b5:bd:ad:ca: dd:06:68:aa:8b:35:ef:ee:05:a7:36:bb:64:3e:a1:c3:ba:67: d9:d0:8c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoq/58284M5Lcw0fbiAFNxGmWdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NjQ0RDZDQzJGRkY1OUQ5MDM0Q0NBNTlCMkFFOEIw NkM3QTA2RTAeFw0yNjExMTQyMTQ2NDVaFw0yNjExMTUyMzEzNDVaMDMxMTAvBgNV BAMTKDlEM0NFNzgyRDI3MDgwQjk3QUY4NjI2MTE1NjM4MUExMzE1NDE4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiM7kX+0uj/9nXMrY4ZBbpct6d V24XKYCcgHqghaNMnewj7L4OGGVyGHmqqc/mM9W9g9QzKwQSozojHbD8L7AS16FR Ypl+clbq1JR+3ab43WtNCub/T3Lc2ah9ptm8KizDJQsPnBM6Aicj5TQ4tkgS0u1H SDoMels3HEgi56/wY9FqDMdUsD3BIpqyUj2CrVN/Sckl6TW0/xnu8JABxHWQsNYU nxVjVO94ZZTSDn2HwoYc/qvPF+TSZ/CG0tCjl82DVaQorJMcyFrQQxxS0LnAx1YR zmVKqyf1Zg7kj5c4NT2PnO89rvHHgR/EjAc3NQvakOqi3f4VQuRfVic0fUCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTzngtJwgLl6+GJhFWOBoTFUGJ8wHwYDVR0j BBgwFoAUJZZE1swv/1nZA0zKWbKuiwbHoG4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQzMDM4N2YtMmJmMC00NTJmLWI3YTYtMWUxOWYzNjBhNTZkLzAvMjU5NjQ0RDZD QzJGRkY1OUQ5MDM0Q0NBNTlCMkFFOEIwNkM3QTA2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTk2NDRENkNDMkZGRjU5RDkwMzRDQ0E1OUIyQUU4QjA2QzdB MDZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQzMDM4N2YtMmJmMC00NTJmLWI3 YTYtMWUxOWYzNjBhNTZkLzAvMjU5NjQ0RDZDQzJGRkY1OUQ5MDM0Q0NBNTlCMkFF OEIwNkM3QTA2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCCPUKILHOpchxeBNFt6AAioVzF8ueyoNY6 gJ7kHPufcJG/uUTiO7twc9Vik+8FHCZHegciBbso9pnizmuj3x9E2IKQ+wXQZuX5 XfJ0WSF8g3SIxQY2M+YHAbZIgQZKvuJomJAF3zcCNENHt0zweOnTV/GIJFXeT40N 2xxba2UjLbohgAIPMeK44gs3GA29dAj8sBqC1T4Bh0g85cs7PzsrrVPsSTlpDZOa Xv1VSbEFCLTurIBOH46qZfsOHq1y+n/wzrRpOu7QTgxdlcXNng7MvAcRJcsNcuXo cZs5eAB73q9Bl3/3tb2tyt0GaKqLNe/uBac2u2Q+ocO6Z9nQjK0= -----END CERTIFICATE-----Generated at Sun Nov 15 15:06:00 2026 by rpki-client