$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: /HSSjnYhl/x04aB7NxyIJpsRh6ntCzR5zClKCXbYAY4= Subject key identifier: 07:6D:47:92:94:40:EB:88:5A:B7:6B:F1:E3:B2:E8:CC:0F:25:FC:95 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 3EEA59DAC56F232CC123177DBE8B4DB89950F250 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:17:34 +0000 Manifest this update: Sat 14 Nov 2026 18:12:34 +0000 Manifest next update: Sun 15 Nov 2026 20:48:34 +0000 Files and hashes: 1: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 3: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: 3Rwnr/2FEa+JT4hSoiT8nGyqynpiUoNwjugW5OmA0WE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ea:59:da:c5:6f:23:2c:c1:23:17:7d:be:8b:4d:b8:99:50:f2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Nov 14 18:12:34 2026 GMT Not After : Nov 15 20:48:34 2026 GMT Subject: CN=076D47929440EB885AB76BF1E3B2E8CC0F25FC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:9d:ff:a2:b2:33:44:0c:f9:1b:00:20:38: ba:e0:0e:a7:eb:57:99:48:4f:ef:59:f3:04:04:cf: 5d:5f:ee:40:0d:60:c0:8e:9b:70:76:c0:52:4f:95: 18:61:65:52:10:d2:ea:72:e6:92:fe:cf:27:16:f1: e5:49:b4:3c:1c:ba:ea:e8:9a:c3:18:af:1a:fc:be: b6:a0:bb:b2:70:20:7e:95:92:8f:75:dd:f9:79:eb: 1f:38:4d:60:ae:b4:bd:61:c9:2f:dc:04:37:96:f8: 53:25:36:03:b2:5a:0b:af:31:c9:fc:91:52:1a:33: 96:65:b3:53:87:16:a8:ed:74:7d:cb:d0:b5:29:29: bf:5f:57:d9:71:dc:8f:2a:22:82:89:6d:77:05:78: 0a:a0:88:3d:24:30:81:53:1d:12:4e:77:e3:e6:ee: 2c:f3:bf:f2:02:ed:83:24:0f:cc:4c:9f:82:55:78: b6:da:81:a9:d3:56:a4:5f:4c:bf:c9:7c:3d:e8:06: 5d:1d:3a:d9:61:2b:15:a0:9b:7b:5f:26:ac:2d:07: 30:2a:1e:63:c1:1d:1b:c7:bf:61:59:2b:fc:d6:84: 37:8d:28:2a:73:91:2a:99:d6:32:2b:fe:55:78:cd: 02:67:70:dc:b5:f2:cb:41:ad:c5:21:41:27:0b:4b: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6D:47:92:94:40:EB:88:5A:B7:6B:F1:E3:B2:E8:CC:0F:25:FC:95 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:67:f3:49:58:e3:8b:e5:d3:39:0f:ea:d4:ee:80:9e:78:e3: df:17:5d:07:14:bc:ca:3b:dc:ae:c9:4e:9c:a2:56:05:43:af: be:ea:1c:46:86:31:9a:e8:fb:16:83:dd:68:15:ae:0e:74:c1: f2:17:32:5e:14:84:4c:04:bf:34:da:6c:a7:2d:1c:98:5b:91: 02:87:10:66:a6:7c:3f:c9:7a:be:25:7a:5b:e5:9d:9b:b8:5c: c3:26:28:36:7e:55:cc:32:39:64:fc:bf:14:3d:fc:d3:a4:63: db:9e:91:6a:77:6f:c9:c5:e3:89:94:ec:2e:72:50:10:ef:38: fa:74:b5:a5:25:ac:01:e9:fa:ec:02:c6:a9:53:fc:a0:93:8a: dc:e1:0b:c0:19:a9:2a:68:19:03:06:28:80:16:fd:d0:6b:2b: 3e:ea:b3:52:be:16:4d:21:8a:c5:75:61:b4:50:6b:de:8b:54: 1d:a7:1c:4b:4a:77:d1:24:78:b5:65:94:a7:a7:d6:57:6f:6a: 59:f6:b4:22:a2:da:60:5e:4a:ac:e5:09:48:4f:ad:07:53:94: 47:f8:67:08:d6:7d:76:0e:52:1d:ce:8d:07:38:99:39:94:49: 79:8f:2a:af:da:66:d9:79:a8:f6:ca:65:d5:0a:31:c3:8c:ea: c6:10:e0:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPupZ2sVvIyzBIxd9votNuJlQ8lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjExMTQxODEyMzRaFw0yNjExMTUyMDQ4MzRaMDMxMTAvBgNV BAMTKDA3NkQ0NzkyOTQ0MEVCODg1QUI3NkJGMUUzQjJFOENDMEYyNUZDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6Z3/orIzRAz5GwAgOLrgDqfr V5lIT+9Z8wQEz11f7kANYMCOm3B2wFJPlRhhZVIQ0upy5pL+zycW8eVJtDwcuuro msMYrxr8vragu7JwIH6Vko913fl56x84TWCutL1hyS/cBDeW+FMlNgOyWguvMcn8 kVIaM5Zls1OHFqjtdH3L0LUpKb9fV9lx3I8qIoKJbXcFeAqgiD0kMIFTHRJOd+Pm 7izzv/IC7YMkD8xMn4JVeLbaganTVqRfTL/JfD3oBl0dOtlhKxWgm3tfJqwtBzAq HmPBHRvHv2FZK/zWhDeNKCpzkSqZ1jIr/lV4zQJncNy18stBrcUhQScLS7YTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB21HkpRA64hat2vx47LozA8l/JUwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5n80lY44vl0zkP6tTugJ54498XXQcUvMo7 3K7JTpyiVgVDr77qHEaGMZro+xaD3WgVrg50wfIXMl4UhEwEvzTabKctHJhbkQKH EGamfD/Jer4lelvlnZu4XMMmKDZ+VcwyOWT8vxQ9/NOkY9uekWp3b8nF44mU7C5y UBDvOPp0taUlrAHp+uwCxqlT/KCTitzhC8AZqSpoGQMGKIAW/dBrKz7qs1K+Fk0h isV1YbRQa96LVB2nHEtKd9EkeLVllKen1ldvaln2tCKi2mBeSqzlCUhPrQdTlEf4 ZwjWfXYOUh3OjQc4mTmUSXmPKq/aZtl5qPbKZdUKMcOM6sYQ4Dw= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:33 2026 by rpki-client