$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: DiMCeTkn+0oF9XaBlOhA+7vpyF4s3UIoUoQgp5W2RqY= Subject key identifier: 51:78:43:29:A9:4B:92:CC:8F:A4:6C:55:C7:D2:79:A4:FA:98:BA:3A Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 0861C86EF611E51532FAE4B4B6DDDB0D88E8B3B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 12:45:27 +0000 Manifest this update: Sat 14 Nov 2026 12:40:27 +0000 Manifest next update: Sun 15 Nov 2026 16:33:27 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) 2: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: 2MQV/igPqJU+iGUsAGT8uq4bQk+wf0TxqFccitRscF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:61:c8:6e:f6:11:e5:15:32:fa:e4:b4:b6:dd:db:0d:88:e8:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Nov 14 12:40:27 2026 GMT Not After : Nov 15 16:33:27 2026 GMT Subject: CN=51784329A94B92CC8FA46C55C7D279A4FA98BA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:e4:aa:ef:25:a3:f7:ff:4e:58:0c:59:0f: 17:91:f8:f9:d7:03:7e:ad:8e:b4:7b:b9:34:d9:14: db:ef:3d:db:87:21:9a:3f:b9:73:1c:11:4c:4c:da: 02:b0:70:44:62:f6:59:f7:e4:4d:c4:80:d4:56:a4: 03:a3:67:80:d0:65:29:71:0b:52:99:32:4b:f9:aa: 4b:b0:60:38:ef:e6:96:36:bb:8b:ad:4d:0b:61:38: 6b:87:79:fa:1e:ca:f3:df:01:1e:08:05:92:ed:36: 91:4a:7f:9a:bd:fe:b6:80:b9:85:cf:8b:00:69:ae: 0a:fa:50:83:35:70:4f:1b:32:e1:ec:dd:55:87:90: a5:c3:0f:4a:43:b5:a3:b8:d4:b9:60:6f:ef:8c:6b: bc:52:dc:3d:98:9d:50:d5:32:fb:b2:70:c1:b4:66: 71:b0:8b:22:78:1c:21:05:ff:85:2a:2b:02:47:e8: 0a:97:09:92:57:7f:19:6f:71:a8:4a:2c:46:7e:f8: 1c:3f:0c:cb:09:0d:81:af:45:69:76:90:7a:0f:4a: 69:cb:56:44:2d:62:1e:2f:62:5c:f4:79:15:46:d1: 90:a9:73:91:d5:e2:69:ec:19:e5:c0:85:df:75:03: 61:54:45:72:cb:28:fb:19:c6:c4:30:8b:f1:76:8f: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:78:43:29:A9:4B:92:CC:8F:A4:6C:55:C7:D2:79:A4:FA:98:BA:3A X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f9:7c:be:53:d4:e1:01:41:ca:22:5b:df:82:d6:3a:a8:7f: 17:05:c8:8e:66:50:d3:1b:76:ca:35:e7:d5:f5:e0:be:64:55: 1a:52:ec:d3:f9:90:d2:9d:d6:86:dc:5b:d8:80:44:aa:8c:02: f3:a1:c5:3c:e5:bf:02:fa:e6:43:d7:b0:89:c0:9e:9c:8a:7c: b7:ee:fc:d6:32:ed:7c:12:91:51:0f:d0:15:a1:37:7f:91:a8: de:dd:6d:d4:23:e8:10:ce:f6:dc:bc:83:cb:9a:f0:ea:e2:4c: bd:6e:e3:f6:1f:6b:ee:4f:0e:ef:70:57:19:e0:b0:60:9c:f9: 8f:83:99:e4:c2:26:21:67:98:85:cb:7e:51:81:ac:06:50:6e: 8d:e3:d6:5f:9a:92:f0:8b:ee:08:02:5b:50:69:28:4a:20:70: df:f9:b7:18:26:1b:19:00:88:85:d2:d4:4d:65:e4:fe:b6:cf: 2e:2e:6c:05:65:a8:63:e6:00:69:33:5d:48:c8:9e:73:a7:a2: ba:0c:9d:82:1a:06:47:dd:66:86:bf:c8:00:e9:b6:b5:41:30: 7c:aa:ee:c8:c5:c3:05:e9:ad:6f:34:34:63:b0:63:3b:3a:d0: 25:e4:83:ef:ea:31:39:96:b3:d2:1f:97:dd:a1:6e:ec:c3:80: f0:6f:3b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGHIbvYR5RUy+uS0tt3bDYjos7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjExMTQxMjQwMjdaFw0yNjExMTUxNjMzMjdaMDMxMTAvBgNV BAMTKDUxNzg0MzI5QTk0QjkyQ0M4RkE0NkM1NUM3RDI3OUE0RkE5OEJBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvm+Sq7yWj9/9OWAxZDxeR+PnX A36tjrR7uTTZFNvvPduHIZo/uXMcEUxM2gKwcERi9ln35E3EgNRWpAOjZ4DQZSlx C1KZMkv5qkuwYDjv5pY2u4utTQthOGuHefoeyvPfAR4IBZLtNpFKf5q9/raAuYXP iwBprgr6UIM1cE8bMuHs3VWHkKXDD0pDtaO41Llgb++Ma7xS3D2YnVDVMvuycMG0 ZnGwiyJ4HCEF/4UqKwJH6AqXCZJXfxlvcahKLEZ++Bw/DMsJDYGvRWl2kHoPSmnL VkQtYh4vYlz0eRVG0ZCpc5HV4mnsGeXAhd91A2FURXLLKPsZxsQwi/F2j4k7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXhDKalLksyPpGxVx9J5pPqYujowHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD5fL5T1OEBQcoiW9+C1jqofxcFyI5mUNMb dso159X14L5kVRpS7NP5kNKd1obcW9iARKqMAvOhxTzlvwL65kPXsInAnpyKfLfu /NYy7XwSkVEP0BWhN3+RqN7dbdQj6BDO9ty8g8ua8OriTL1u4/Yfa+5PDu9wVxng sGCc+Y+DmeTCJiFnmIXLflGBrAZQbo3j1l+akvCL7ggCW1BpKEogcN/5txgmGxkA iIXS1E1l5P62zy4ubAVlqGPmAGkzXUjInnOnoroMnYIaBkfdZoa/yADptrVBMHyq 7sjFwwXprW80NGOwYzs60CXkg+/qMTmWs9Ifl92hbuzDgPBvO5k= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:49 2026 by rpki-client