$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: GEAOl5w83O/2XcvwUVKOF4CKZZP+asSUBXqfwJOfgOk= Subject key identifier: 33:C9:60:C1:AD:7E:51:F5:21:95:99:6C:06:A6:05:67:35:28:42:89 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 330FA94E00A815782F5901732C97A32B9E4106AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 05:31:05 +0000 Manifest this update: Sat 14 Nov 2026 05:26:05 +0000 Manifest next update: Sun 15 Nov 2026 08:24:05 +0000 Files and hashes: 1: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) 2: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: QuJl59vuJ4TqMfmFKnPT/fOLS/MUCulooIVzz19PaP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0f:a9:4e:00:a8:15:78:2f:59:01:73:2c:97:a3:2b:9e:41:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Nov 14 05:26:05 2026 GMT Not After : Nov 15 08:24:05 2026 GMT Subject: CN=33C960C1AD7E51F52195996C06A6056735284289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:e6:6f:81:34:8b:5e:13:06:76:6c:4c:6f: 83:4c:f1:88:a3:16:fa:12:4e:dc:a5:b4:fb:7d:c5: 42:cf:b8:ac:c2:be:da:f6:19:9b:e5:f9:8a:d8:58: 7f:b7:bd:b2:6b:98:45:19:dd:f2:92:6c:65:3f:08: 2a:8c:5a:23:40:14:bb:23:09:20:27:ce:71:38:d7: 31:6f:0e:8a:be:8d:79:89:f3:4e:de:05:50:87:f9: 71:20:bb:a0:d9:ef:42:9f:4d:94:92:c3:ec:f2:44: c7:28:08:a1:05:de:4b:6b:df:c1:20:16:38:5b:f9: 5f:4d:cb:49:47:e6:46:ea:82:41:45:b9:99:10:ee: a7:5b:41:9b:e3:13:55:39:12:c9:b2:72:93:08:ca: aa:4a:1c:14:95:b6:92:c6:7c:87:25:5b:f1:eb:19: a3:de:c1:66:59:08:e8:b8:db:74:2e:92:08:58:36: ff:02:2c:ff:ab:9f:ad:6e:c1:5a:36:22:51:c1:b0: 39:93:71:42:54:38:8a:9c:d1:f8:41:cd:6a:0f:54: 8c:fe:b5:b9:de:85:f4:b6:c4:3e:3d:07:53:c2:b8: d0:60:e9:07:4a:c3:eb:72:02:eb:46:fb:6c:67:6b: d3:f3:29:41:21:a9:b1:94:f0:6d:5b:cc:e2:50:19: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:60:C1:AD:7E:51:F5:21:95:99:6C:06:A6:05:67:35:28:42:89 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:a3:95:b7:bf:1f:5a:01:e0:c8:85:b1:21:e9:5c:b5:8f:60: 87:81:8e:49:36:18:68:a7:73:a1:c4:d0:2f:e8:81:36:a2:e8: 81:29:4d:5c:cd:e1:8f:8c:55:c4:69:70:1b:5f:a3:35:7e:be: ca:78:8a:4a:60:90:05:ee:1a:01:4c:b4:1f:6f:6b:24:61:eb: 82:05:19:b8:e3:6c:38:aa:2b:7c:57:d4:a9:0d:22:50:1c:df: 43:99:15:c7:9d:b5:f3:5f:39:5d:2a:ae:98:c3:67:03:1c:33: 65:5e:99:45:9b:b1:79:22:67:bf:69:d9:87:cb:c6:d4:06:01: 4a:f1:13:09:b6:fd:a1:a3:2a:c9:6b:e7:eb:77:0c:39:31:1f: d5:02:e4:78:16:31:f8:2d:ef:ba:1c:16:0b:05:21:f4:61:28: 0c:13:26:e9:84:b0:ec:64:40:35:d1:d9:5d:20:28:0e:b0:6a: 31:ad:fd:80:b7:20:f8:36:94:60:b6:8f:a2:8e:33:2c:7c:62: ba:fd:8a:1b:2a:09:0e:19:89:70:0c:d7:2d:43:a2:40:9c:f4: f9:d1:13:fc:c6:d2:39:4e:a5:26:2c:d5:ec:4b:8d:38:f2:93: 0e:35:4d:a9:b1:d6:6d:d4:de:cd:f3:ad:6c:b6:e3:d5:e0:d1: f2:d4:5e:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMw+pTgCoFXgvWQFzLJejK55BBq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjExMTQwNTI2MDVaFw0yNjExMTUwODI0MDVaMDMxMTAvBgNV BAMTKDMzQzk2MEMxQUQ3RTUxRjUyMTk1OTk2QzA2QTYwNTY3MzUyODQyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAeZvgTSLXhMGdmxMb4NM8Yij FvoSTtyltPt9xULPuKzCvtr2GZvl+YrYWH+3vbJrmEUZ3fKSbGU/CCqMWiNAFLsj CSAnznE41zFvDoq+jXmJ807eBVCH+XEgu6DZ70KfTZSSw+zyRMcoCKEF3ktr38Eg Fjhb+V9Ny0lH5kbqgkFFuZkQ7qdbQZvjE1U5EsmycpMIyqpKHBSVtpLGfIclW/Hr GaPewWZZCOi423QukghYNv8CLP+rn61uwVo2IlHBsDmTcUJUOIqc0fhBzWoPVIz+ tbnehfS2xD49B1PCuNBg6QdKw+tyAutG+2xna9PzKUEhqbGU8G1bzOJQGVAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8lgwa1+UfUhlZlsBqYFZzUoQokwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOjlbe/H1oB4MiFsSHpXLWPYIeBjkk2GGin c6HE0C/ogTai6IEpTVzN4Y+MVcRpcBtfozV+vsp4ikpgkAXuGgFMtB9vayRh64IF GbjjbDiqK3xX1KkNIlAc30OZFcedtfNfOV0qrpjDZwMcM2VemUWbsXkiZ79p2YfL xtQGAUrxEwm2/aGjKslr5+t3DDkxH9UC5HgWMfgt77ocFgsFIfRhKAwTJumEsOxk QDXR2V0gKA6wajGt/YC3IPg2lGC2j6KOMyx8Yrr9ihsqCQ4ZiXAM1y1DokCc9PnR E/zG0jlOpSYs1exLjTjykw41Tamx1m3U3s3zrWy249Xg0fLUXqA= -----END CERTIFICATE-----Generated at Sat Nov 14 23:51:37 2026 by rpki-client