$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: fGLlUlsC15gwSnvDBkbDEdlIPvV5LASrcwT3yiivjjU= Subject key identifier: 97:5C:23:96:AA:B8:16:98:8C:84:75:5E:10:8C:A0:AB:DA:6A:13:41 Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 64224201CB31434F6774557D4B0461A854A2AFE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:00:41 +0000 Manifest this update: Sat 14 Nov 2026 08:55:41 +0000 Manifest next update: Sun 15 Nov 2026 10:57:41 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: 4kKAhM8WJIHeW/Xdo9s2jzJ1DxMRq60M31zX2UjSfTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:22:42:01:cb:31:43:4f:67:74:55:7d:4b:04:61:a8:54:a2:af:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Nov 14 08:55:41 2026 GMT Not After : Nov 15 10:57:41 2026 GMT Subject: CN=975C2396AAB816988C84755E108CA0ABDA6A1341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:dc:f7:d6:e8:fa:0c:4d:8f:e8:fb:41:85: 3c:d6:1c:fc:48:f5:b0:d2:b6:3c:90:bb:ea:62:ac: 32:36:56:2b:47:50:a5:c6:31:49:35:5e:dc:6e:57: 95:b8:1d:5d:c1:15:8d:73:dd:91:2a:1f:5b:6a:3d: 99:2e:36:4e:53:4f:42:d0:37:8a:9c:7b:d4:04:89: 77:22:ad:68:db:82:7d:90:b1:25:fd:16:30:dd:82: a2:9c:54:1b:cb:9d:38:f1:3d:32:2f:7b:15:ff:5c: 43:9c:0b:99:da:ca:b9:a1:2b:c9:66:d2:c4:2a:99: 3e:fc:e0:f3:48:1d:91:85:42:a9:7e:54:9f:36:61: c6:58:24:65:24:47:1e:b3:70:61:b2:ab:df:4e:b6: 14:61:29:4d:30:12:30:8d:34:34:88:6c:46:50:fc: 3d:b4:01:c9:07:24:32:d5:86:b3:5d:0c:7a:c8:40: 22:13:dc:a5:1b:23:b7:46:10:8a:24:14:e3:6f:88: 95:ed:78:66:1e:b7:72:2c:9d:22:53:de:1b:fb:30: 0d:0a:02:1f:b1:16:40:4f:2b:48:7b:4a:16:75:17: 96:90:10:b4:f8:ea:5d:8c:a8:0a:6d:75:99:c0:b0: c9:15:50:4a:57:71:fc:59:f6:a8:70:dc:fa:b2:af: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:23:96:AA:B8:16:98:8C:84:75:5E:10:8C:A0:AB:DA:6A:13:41 X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3f:7e:1a:60:0e:f1:42:61:86:3a:89:8c:06:00:a6:95:84: da:b0:a7:59:c4:f7:08:10:6a:ec:73:cb:73:c4:dd:c4:b0:06: 41:c1:a9:c7:e2:5e:19:39:24:ed:20:94:34:b9:92:76:b3:4f: 0c:bd:6c:15:8d:e1:15:cd:2f:e6:f8:83:cc:a3:0b:5e:a7:f4: f7:32:ca:cb:2f:f5:28:76:89:0d:c0:a6:ab:26:72:c3:5d:7b: b2:a7:f2:f7:40:5e:e4:f6:9c:86:28:06:c6:66:98:0b:ec:35: 8b:81:fa:db:b4:f6:11:d4:9e:31:1b:58:db:46:ab:f0:4c:82: 2c:37:25:98:3b:2d:c7:17:f4:85:de:be:b7:06:8e:c7:31:74: 49:f9:fe:87:91:d5:22:f9:24:5b:6d:ee:00:f7:61:b5:bd:67: ce:83:00:6a:fe:e4:98:d1:bc:b7:ed:ba:a8:b9:50:bf:3a:aa: 57:30:76:b4:b2:10:6f:a1:aa:7f:b4:61:c9:5f:40:a6:cf:e8: f7:b7:b6:c8:95:62:03:30:d2:ea:93:e8:3b:e5:c1:82:62:52: 0a:19:87:2c:32:8f:4b:e7:7e:b2:85:57:09:2c:05:40:8c:d5: 42:03:1d:4f:0e:e5:ec:dd:22:49:bb:b3:bc:8c:0f:19:38:23: 7b:c4:5a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCJCAcsxQ09ndFV9SwRhqFSir+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjExMTQwODU1NDFaFw0yNjExMTUxMDU3NDFaMDMxMTAvBgNV BAMTKDk3NUMyMzk2QUFCODE2OTg4Qzg0NzU1RTEwOENBMEFCREE2QTEzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmNz31uj6DE2P6PtBhTzWHPxI 9bDStjyQu+pirDI2VitHUKXGMUk1XtxuV5W4HV3BFY1z3ZEqH1tqPZkuNk5TT0LQ N4qce9QEiXcirWjbgn2QsSX9FjDdgqKcVBvLnTjxPTIvexX/XEOcC5nayrmhK8lm 0sQqmT784PNIHZGFQql+VJ82YcZYJGUkRx6zcGGyq99OthRhKU0wEjCNNDSIbEZQ /D20AckHJDLVhrNdDHrIQCIT3KUbI7dGEIokFONviJXteGYet3IsnSJT3hv7MA0K Ah+xFkBPK0h7ShZ1F5aQELT46l2MqAptdZnAsMkVUEpXcfxZ9qhw3Pqyr/d/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1wjlqq4FpiMhHVeEIygq9pqE0EwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY/fhpgDvFCYYY6iYwGAKaVhNqwp1nE9wgQ auxzy3PE3cSwBkHBqcfiXhk5JO0glDS5knazTwy9bBWN4RXNL+b4g8yjC16n9Pcy yssv9Sh2iQ3ApqsmcsNde7Kn8vdAXuT2nIYoBsZmmAvsNYuB+tu09hHUnjEbWNtG q/BMgiw3JZg7LccX9IXevrcGjscxdEn5/oeR1SL5JFtt7gD3YbW9Z86DAGr+5JjR vLftuqi5UL86qlcwdrSyEG+hqn+0YclfQKbP6Pe3tsiVYgMw0uqT6DvlwYJiUgoZ hywyj0vnfrKFVwksBUCM1UIDHU8O5ezdIkm7s7yMDxk4I3vEWi0= -----END CERTIFICATE-----Generated at Sun Nov 15 01:21:30 2026 by rpki-client