$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: /mPImca/FFk72LKnp1zDi7Di0t59lFkDACGpGh0TCzk= Subject key identifier: BF:A7:19:B3:D9:23:04:89:B3:4F:F1:CC:75:AA:7D:CA:12:88:2D:8A Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 128FFC8028D4737D0A31CED0FE048C52735268DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 12:35:14 +0000 Manifest this update: Sat 14 Nov 2026 12:30:14 +0000 Manifest next update: Sun 15 Nov 2026 14:28:14 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 3: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 4: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: sxKiYZq1k+6ZOzMN3zh8GX0rNttZIA3/8TVEgZOIN7E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8f:fc:80:28:d4:73:7d:0a:31:ce:d0:fe:04:8c:52:73:52:68:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Nov 14 12:30:14 2026 GMT Not After : Nov 15 14:28:14 2026 GMT Subject: CN=BFA719B3D9230489B34FF1CC75AA7DCA12882D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:11:87:c6:ab:53:3c:03:57:4e:8c:34:93: f1:e1:4a:77:7f:c3:69:ab:9c:78:bb:85:31:19:5a: a8:ca:6c:4f:97:52:88:c3:5a:d4:ec:7d:01:64:04: 08:25:70:83:24:54:c6:f6:92:f4:77:8a:41:03:ef: c8:90:47:f3:14:55:51:30:78:f1:75:0f:7a:f2:bf: c9:19:e6:fa:10:be:42:6d:03:ed:60:e4:dd:5c:a3: 29:cd:0e:4c:89:08:ad:73:8e:1a:5d:f0:1f:44:6f: dd:b6:6f:01:f7:91:08:c0:ae:c8:d0:16:fd:91:34: bc:9b:80:5e:54:a0:59:38:90:92:63:68:8b:69:a2: 19:b6:ce:09:09:25:24:c6:17:d2:ff:98:ec:bd:43: e1:38:21:4e:c7:1b:48:26:ac:c1:e8:ae:e3:20:34: 47:a4:7c:f6:cc:e4:0f:76:7d:58:96:01:ae:3a:40: 7a:4e:92:88:7d:12:87:f4:68:da:bd:bd:d8:7f:d6: d3:51:6b:a0:09:c5:cf:74:99:82:42:1f:57:fc:07: 92:83:c3:b9:59:40:9c:ee:65:6a:91:b1:31:24:d9: 31:33:be:71:30:d9:c6:8e:b8:7e:eb:cc:29:e1:5b: a6:9e:ee:5b:10:08:f5:54:dc:91:25:3b:14:19:fd: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:19:B3:D9:23:04:89:B3:4F:F1:CC:75:AA:7D:CA:12:88:2D:8A X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bc:62:22:97:0d:ec:79:8d:b5:71:24:19:8e:33:c3:f6:e9: e6:31:a2:f9:d4:ae:3f:71:b8:4d:73:16:8f:51:34:be:8d:72: 73:c0:06:69:e1:3c:65:75:a1:19:fb:e2:e8:46:03:0b:2e:83: 15:68:ff:40:6f:2a:50:78:d9:e7:3d:57:98:51:f4:50:78:16: 26:16:ff:1b:1e:43:66:c6:11:d3:9c:96:a8:93:49:a1:7a:d7: 19:fe:45:eb:b0:dd:61:c4:5e:96:4d:04:ef:06:4e:a9:a7:00: 6a:56:02:c3:1a:1b:d7:a8:ba:6a:24:e5:d5:cd:4d:2c:9b:73: 6a:6e:02:29:ed:d9:f2:51:f7:85:1b:40:0c:f3:0b:52:e0:7e: 77:42:21:88:73:41:83:b5:08:3e:82:5c:7d:37:17:e4:1d:d4: 60:33:07:2c:af:06:4d:16:81:a1:79:a9:3f:77:1d:cd:58:b4: b8:48:35:88:e2:db:40:bd:5d:61:a2:ec:8a:1f:35:93:4b:48: ba:2c:e9:de:8d:1d:d1:4a:96:39:e0:2c:f9:0a:41:f5:db:d3: d5:0a:e1:76:bc:81:49:e4:75:b1:96:0a:e5:f8:6e:f5:cc:9d: 4f:d9:3e:3a:70:9a:5e:c2:4f:ab:9d:24:8d:7a:9f:de:40:90: 9b:09:90:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEo/8gCjUc30KMc7Q/gSMUnNSaNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjExMTQxMjMwMTRaFw0yNjExMTUxNDI4MTRaMDMxMTAvBgNV BAMTKEJGQTcxOUIzRDkyMzA0ODlCMzRGRjFDQzc1QUE3RENBMTI4ODJEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuhGHxqtTPANXTow0k/HhSnd/ w2mrnHi7hTEZWqjKbE+XUojDWtTsfQFkBAglcIMkVMb2kvR3ikED78iQR/MUVVEw ePF1D3ryv8kZ5voQvkJtA+1g5N1coynNDkyJCK1zjhpd8B9Eb922bwH3kQjArsjQ Fv2RNLybgF5UoFk4kJJjaItpohm2zgkJJSTGF9L/mOy9Q+E4IU7HG0gmrMHoruMg NEekfPbM5A92fViWAa46QHpOkoh9Eof0aNq9vdh/1tNRa6AJxc90mYJCH1f8B5KD w7lZQJzuZWqRsTEk2TEzvnEw2caOuH7rzCnhW6ae7lsQCPVU3JElOxQZ/R2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6cZs9kjBImzT/HMdap9yhKILYowHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+8YiKXDex5jbVxJBmOM8P26eYxovnUrj9x uE1zFo9RNL6NcnPABmnhPGV1oRn74uhGAwsugxVo/0BvKlB42ec9V5hR9FB4FiYW /xseQ2bGEdOclqiTSaF61xn+Reuw3WHEXpZNBO8GTqmnAGpWAsMaG9eoumok5dXN TSybc2puAint2fJR94UbQAzzC1LgfndCIYhzQYO1CD6CXH03F+Qd1GAzByyvBk0W gaF5qT93Hc1YtLhINYji20C9XWGi7IofNZNLSLos6d6NHdFKljngLPkKQfXb09UK 4Xa8gUnkdbGWCuX4bvXMnU/ZPjpwml7CT6udJI16n95AkJsJkIY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:46 2026 by rpki-client