$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: j/7+nzy9qwa6MI9R2emanE/Dh96qMGT6AEysKkg2IOM= Subject key identifier: 4D:3A:3F:6E:03:EB:70:DF:E6:95:06:A0:89:C7:AF:6C:82:99:DF:9C Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 19D157B3812304DAE09B321871CDE9F05D2E4200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 06:37:29 +0000 Manifest this update: Sun 15 Nov 2026 06:32:29 +0000 Manifest next update: Mon 16 Nov 2026 09:42:29 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: 3BqVMWe8DKbHFVQ36AaUPSyEvqYVR6u4uAWMGnaEPRc=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d1:57:b3:81:23:04:da:e0:9b:32:18:71:cd:e9:f0:5d:2e:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Nov 15 06:32:29 2026 GMT Not After : Nov 16 09:42:29 2026 GMT Subject: CN=4D3A3F6E03EB70DFE69506A089C7AF6C8299DF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:07:7c:7a:2d:be:c8:fe:a2:98:61:05:43: eb:b5:f8:48:b5:37:a4:ea:1a:e6:bb:5b:46:d2:5a: a2:06:ca:3e:32:ad:22:0d:84:63:67:f7:31:78:93: f0:a4:cd:34:e4:4b:d0:d2:79:c1:8b:25:fa:75:62: 64:44:fc:25:ad:f6:d0:78:ce:d7:23:30:41:dc:53: 59:1a:f1:e0:7d:24:32:0b:f9:bd:ec:0d:5d:67:91: 38:8a:99:64:9b:c7:49:48:ee:3e:a4:89:f0:d2:55: 4c:56:a1:c5:95:6b:cd:f0:62:14:25:72:05:92:40: 5c:e8:93:e7:e3:eb:6d:1c:cf:c3:b3:80:c2:89:e9: 73:88:84:99:8f:d1:c4:28:68:01:3c:a6:32:10:c8: 90:5a:e8:dc:b8:21:fb:25:70:13:a8:f8:b5:78:79: bf:50:1b:0f:c6:25:52:19:18:ae:25:04:3a:ba:71: da:bc:b6:9a:60:b5:69:a6:22:41:9d:ee:5f:76:f2: a7:eb:a8:91:bd:ef:1d:b1:6e:53:ad:65:07:66:17: 58:32:d7:38:97:ba:3d:9d:82:fa:da:cc:09:f4:fe: f7:85:bd:60:09:04:0b:df:f1:63:e1:14:66:78:d2: ec:2a:20:57:f0:f6:3e:28:eb:1a:54:8c:47:0a:08: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:3F:6E:03:EB:70:DF:E6:95:06:A0:89:C7:AF:6C:82:99:DF:9C X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:58:b6:4b:2f:0a:7f:5e:fb:91:af:4e:05:e3:19:ff:98:f3: a9:1c:d9:24:15:18:e2:6f:44:95:9f:ce:f1:b4:a5:d5:21:b9: cb:c7:28:b5:22:58:ec:36:40:1e:32:98:52:93:0d:d5:6c:3b: a5:6f:1e:31:5b:47:76:69:58:ef:d2:d0:46:2d:cb:57:f0:35: 76:ba:ff:33:dc:f4:44:3c:7b:c4:1d:7f:0e:3d:58:54:d8:93: 70:a6:9c:62:25:e0:15:58:24:52:c4:d0:e1:9a:18:9c:67:1c: cc:af:56:20:ee:9f:82:3d:9b:06:a5:f6:aa:c3:a9:78:d9:47: 12:69:fd:07:1e:ad:cb:88:5c:4b:ac:48:e5:be:57:c1:04:68: cc:a1:ce:fa:9c:5e:af:1a:9c:85:78:46:8b:56:d0:39:6e:29: c3:69:6d:de:97:59:12:d3:2e:3a:bf:a8:44:55:a0:69:85:28: 8d:e3:79:a8:af:37:09:7f:ab:79:22:a6:8e:d5:47:58:eb:83: 96:39:23:b7:6d:ae:d6:4d:3a:a3:d2:e8:2a:c2:68:67:d8:ad: a0:23:f2:91:45:a6:ad:f5:e3:fe:8a:5f:80:03:0c:76:5b:76: 85:c9:a0:3c:95:8e:da:4e:f7:e1:b8:c1:a5:e3:85:fb:8f:10: f9:f8:6d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdFXs4EjBNrgmzIYcc3p8F0uQgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjExMTUwNjMyMjlaFw0yNjExMTYwOTQyMjlaMDMxMTAvBgNV BAMTKDREM0EzRjZFMDNFQjcwREZFNjk1MDZBMDg5QzdBRjZDODI5OURGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBAd8ei2+yP6imGEFQ+u1+Ei1 N6TqGua7W0bSWqIGyj4yrSINhGNn9zF4k/CkzTTkS9DSecGLJfp1YmRE/CWt9tB4 ztcjMEHcU1ka8eB9JDIL+b3sDV1nkTiKmWSbx0lI7j6kifDSVUxWocWVa83wYhQl cgWSQFzok+fj620cz8OzgMKJ6XOIhJmP0cQoaAE8pjIQyJBa6Ny4IfslcBOo+LV4 eb9QGw/GJVIZGK4lBDq6cdq8tppgtWmmIkGd7l928qfrqJG97x2xblOtZQdmF1gy 1ziXuj2dgvrazAn0/veFvWAJBAvf8WPhFGZ40uwqIFfw9j4o6xpUjEcKCHxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTo/bgPrcN/mlQagicevbIKZ35wwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9YtksvCn9e+5GvTgXjGf+Y86kc2SQVGOJv RJWfzvG0pdUhucvHKLUiWOw2QB4ymFKTDdVsO6VvHjFbR3ZpWO/S0EYty1fwNXa6 /zPc9EQ8e8Qdfw49WFTYk3CmnGIl4BVYJFLE0OGaGJxnHMyvViDun4I9mwal9qrD qXjZRxJp/QcercuIXEusSOW+V8EEaMyhzvqcXq8anIV4RotW0DluKcNpbd6XWRLT Ljq/qERVoGmFKI3jeaivNwl/q3kipo7VR1jrg5Y5I7dtrtZNOqPS6CrCaGfYraAj 8pFFpq314/6KX4ADDHZbdoXJoDyVjtpO9+G4waXjhfuPEPn4bUk= -----END CERTIFICATE-----Generated at Sun Nov 15 10:35:19 2026 by rpki-client