$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: qSm6GoGxULfPFjILxB9Jivp+w+7rXVu8QHnibOaboVs= Subject key identifier: FB:59:AC:5C:4A:1A:9B:1C:5F:8F:D2:1C:2B:28:29:17:72:7C:7D:FF Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 3955B9B7AC01EB5A84B6F5FDA63224AE9E2DD6B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:05:29 +0000 Manifest this update: Sun 15 Nov 2026 05:00:29 +0000 Manifest next update: Mon 16 Nov 2026 07:09:29 +0000 Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: oPBJh2VFfIdYAz+xckZ5MVktppJjZivg+YB6KmwUHTY=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:55:b9:b7:ac:01:eb:5a:84:b6:f5:fd:a6:32:24:ae:9e:2d:d6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Nov 15 05:00:29 2026 GMT Not After : Nov 16 07:09:29 2026 GMT Subject: CN=FB59AC5C4A1A9B1C5F8FD21C2B282917727C7DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:66:f0:66:53:3c:43:11:a0:74:34:40:df: ff:b7:55:08:81:42:b7:95:59:cf:4a:94:f6:db:86: 11:34:e8:d5:81:a4:71:07:22:a6:08:2b:b2:1d:6e: 7c:d0:5a:f7:bd:8c:ca:a6:d9:b8:d5:f7:8f:84:a6: da:6c:db:ad:2a:86:d9:a0:e0:19:30:58:92:4a:66: ba:1f:bf:c4:b2:46:19:a3:e8:75:78:92:ad:58:01: 70:f3:35:a2:57:86:7a:33:b7:04:e0:8f:9c:91:53: d5:a2:c8:b2:55:8d:fd:f8:20:70:a2:99:03:52:d1: 33:4d:fa:67:df:cb:94:c3:95:97:ed:b5:76:dd:62: f6:33:50:c7:33:1e:5d:ae:82:32:96:74:16:e2:c4: f8:44:d7:7b:a1:aa:40:76:98:e1:54:43:09:fa:16: 32:ca:d0:9a:0c:1f:82:98:56:81:f4:a3:f7:46:14: 6f:0f:55:fd:1a:04:99:c1:21:a9:e1:18:76:dc:c4: 1f:d7:0f:2d:21:4e:ef:88:49:3f:b1:18:98:35:db: 35:1a:fc:7c:12:94:2c:f5:c0:a2:86:d7:22:23:e4: ae:3e:e9:8b:74:e4:26:be:35:06:61:49:18:0c:bc: 60:98:91:c3:10:4c:f0:e7:f1:29:8c:93:4a:37:c8: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:AC:5C:4A:1A:9B:1C:5F:8F:D2:1C:2B:28:29:17:72:7C:7D:FF X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:13:a3:da:d5:3f:17:8e:c2:b2:81:b2:ba:e6:b8:5e:99:15: 62:33:33:fd:73:03:5a:80:8c:03:70:04:39:5d:a1:af:b9:98: 31:b7:84:22:68:97:29:7b:89:b1:47:75:e5:08:4b:35:47:bd: 4b:9e:cc:d6:78:a2:f6:9e:8c:ba:c4:a6:af:a9:78:bf:1c:29: 90:b8:0c:db:e2:b7:60:5a:76:ac:63:2d:1b:a0:72:4e:b1:d1: 72:20:ec:99:20:6c:a9:b9:29:0b:7f:f8:63:7a:d3:68:51:05: 0d:de:3f:e3:46:7c:c2:51:2a:f0:6a:f0:d6:4a:c8:f2:93:9c: 6d:d6:46:df:60:e8:82:b5:85:93:de:b0:58:29:67:fc:fb:8b: 2e:da:ee:a5:7b:13:91:87:d1:53:28:82:3e:f0:89:2a:a9:8f: ed:8b:de:43:b7:e7:44:7c:08:2c:0e:5e:59:28:a3:3d:18:0a: ef:1a:42:7a:ce:d3:bd:52:7a:44:e5:8c:d4:e1:76:3f:96:13: 7e:3d:89:3f:9c:ad:7e:81:8e:14:9b:00:cd:3a:65:17:89:1c: 43:b5:16:b9:af:e1:fc:19:86:78:3f:e3:88:7d:b9:30:47:4e: 65:fc:d5:18:81:84:1b:4e:6a:75:6d:39:42:a9:98:fd:50:27: 61:a5:0e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVW5t6wB61qEtvX9pjIkrp4t1rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjExMTUwNTAwMjlaFw0yNjExMTYwNzA5MjlaMDMxMTAvBgNV BAMTKEZCNTlBQzVDNEExQTlCMUM1RjhGRDIxQzJCMjgyOTE3NzI3QzdERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvmbwZlM8QxGgdDRA3/+3VQiB QreVWc9KlPbbhhE06NWBpHEHIqYIK7IdbnzQWve9jMqm2bjV94+Eptps260qhtmg 4BkwWJJKZrofv8SyRhmj6HV4kq1YAXDzNaJXhnoztwTgj5yRU9WiyLJVjf34IHCi mQNS0TNN+mffy5TDlZfttXbdYvYzUMczHl2ugjKWdBbixPhE13uhqkB2mOFUQwn6 FjLK0JoMH4KYVoH0o/dGFG8PVf0aBJnBIanhGHbcxB/XDy0hTu+IST+xGJg12zUa /HwSlCz1wKKG1yIj5K4+6Yt05Ca+NQZhSRgMvGCYkcMQTPDn8SmMk0o3yJeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1msXEoamxxfj9IcKygpF3J8ff8wHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkTo9rVPxeOwrKBsrrmuF6ZFWIzM/1zA1qA jANwBDldoa+5mDG3hCJolyl7ibFHdeUISzVHvUuezNZ4ovaejLrEpq+peL8cKZC4 DNvit2BadqxjLRugck6x0XIg7JkgbKm5KQt/+GN602hRBQ3eP+NGfMJRKvBq8NZK yPKTnG3WRt9g6IK1hZPesFgpZ/z7iy7a7qV7E5GH0VMogj7wiSqpj+2L3kO350R8 CCwOXlkooz0YCu8aQnrO071SekTljNThdj+WE349iT+crX6BjhSbAM06ZReJHEO1 Frmv4fwZhng/44h9uTBHTmX81RiBhBtOanVtOUKpmP1QJ2GlDlk= -----END CERTIFICATE-----Generated at Sun Nov 15 18:48:15 2026 by rpki-client