$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: TrnFrZkknNIWZkEymOLbfMMRA3s1gQNr3AOwWN7qyVM= Subject key identifier: A6:BC:87:24:B7:F5:1E:ED:48:65:AD:ED:FD:C7:61:09:4D:79:CA:D0 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 7B095B5D9F82237F5ABC286D91894F7CB5C546C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 14:17:16 +0000 Manifest this update: Sat 14 Nov 2026 14:12:16 +0000 Manifest next update: Sun 15 Nov 2026 18:03:16 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 3: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: EF7hFMRBnDWKuda0jDt2jLICAzRN74MfJJKbUrC8Mw8=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:09:5b:5d:9f:82:23:7f:5a:bc:28:6d:91:89:4f:7c:b5:c5:46:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Nov 14 14:12:16 2026 GMT Not After : Nov 15 18:03:16 2026 GMT Subject: CN=A6BC8724B7F51EED4865ADEDFDC761094D79CAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:3e:14:4c:d2:19:a6:e4:58:41:f8:d0:f3: 5f:c0:dd:51:cd:1e:24:43:98:60:d1:19:71:37:41: c6:2f:97:05:4d:92:32:eb:15:91:8c:bc:ce:6c:d9: d9:45:27:6a:f1:33:de:4d:69:5a:0a:b9:fc:f1:cd: 2b:64:2b:6a:5e:69:82:46:18:c7:b6:59:53:11:9e: e8:ad:4f:45:fc:57:36:88:6d:a6:b2:bf:88:1a:0e: 39:7b:03:b1:9a:66:0f:b3:54:f9:55:ff:e3:5f:62: d1:0e:1b:8d:5c:5d:83:18:f5:a1:dd:be:bb:49:ee: d7:0d:7a:1f:30:4b:db:46:61:f9:de:92:33:c0:52: a8:4e:b2:79:75:4c:14:8a:5e:ef:84:a4:54:1d:a0: c4:d0:e1:4a:11:ad:7d:a7:37:1b:73:0a:0b:c9:d7: 1c:83:4b:4e:c9:48:6e:18:05:d5:a2:d9:f5:a6:bb: f2:58:01:eb:3d:bf:20:61:39:b3:66:6f:ea:d1:c5: d8:49:52:52:fc:ba:3b:b9:23:f4:c8:04:70:28:ed: 39:34:c1:b1:51:d9:88:c6:3c:e5:c4:a0:1b:69:c5: 9b:7c:50:ce:28:84:06:c8:b0:be:06:ab:59:e7:08: 7c:11:70:4c:97:0e:75:ed:26:de:90:10:db:5c:4f: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:87:24:B7:F5:1E:ED:48:65:AD:ED:FD:C7:61:09:4D:79:CA:D0 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:53:11:e1:3b:d5:1c:87:9c:2d:56:8a:18:b4:fb:19:96:de: ea:07:21:19:ed:54:fa:d8:e5:83:10:19:d3:2d:52:83:3e:4c: fd:0c:a2:41:25:e3:f1:ef:a9:e9:3e:a7:c2:25:bf:20:8a:6b: e7:eb:cb:8b:e2:15:23:39:46:c1:a9:d8:0a:0a:e1:a4:bf:b6: 29:5b:0e:00:59:00:a3:e0:44:b9:b4:d4:32:fa:8d:8d:0a:10: e4:10:1b:ed:19:fc:40:71:e5:f7:c4:e6:7b:73:c3:13:45:3a: b7:08:1a:11:e8:95:c2:37:c7:d9:0a:4f:2b:dd:8b:ad:d1:5d: 16:59:97:eb:96:f3:cd:4f:55:64:aa:00:31:07:34:89:42:9f: 08:b9:1c:7c:3d:84:64:be:c2:ee:f4:4d:9d:45:86:31:1a:41: 5e:51:07:f8:4f:3b:85:9f:f1:40:cd:e0:df:a1:58:05:77:d0: a9:e8:c6:10:39:b4:67:db:78:5c:c1:05:b4:54:1b:4c:c1:dc: ea:6f:3a:7c:12:e9:ca:bc:2b:df:c6:ff:ee:28:a6:ea:31:a2: c5:3e:6e:1d:87:c5:37:a7:cb:28:a2:a0:2d:02:31:d7:49:d4: 0c:37:34:d5:c5:62:7d:b0:0e:78:f1:74:c7:0b:ba:2e:52:0d: 61:49:d6:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewlbXZ+CI39avChtkYlPfLXFRscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjExMTQxNDEyMTZaFw0yNjExMTUxODAzMTZaMDMxMTAvBgNV BAMTKEE2QkM4NzI0QjdGNTFFRUQ0ODY1QURFREZEQzc2MTA5NEQ3OUNBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHnT4UTNIZpuRYQfjQ81/A3VHN HiRDmGDRGXE3QcYvlwVNkjLrFZGMvM5s2dlFJ2rxM95NaVoKufzxzStkK2peaYJG GMe2WVMRnuitT0X8VzaIbaayv4gaDjl7A7GaZg+zVPlV/+NfYtEOG41cXYMY9aHd vrtJ7tcNeh8wS9tGYfnekjPAUqhOsnl1TBSKXu+EpFQdoMTQ4UoRrX2nNxtzCgvJ 1xyDS07JSG4YBdWi2fWmu/JYAes9vyBhObNmb+rRxdhJUlL8uju5I/TIBHAo7Tk0 wbFR2YjGPOXEoBtpxZt8UM4ohAbIsL4Gq1nnCHwRcEyXDnXtJt6QENtcTxk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpryHJLf1Hu1IZa3t/cdhCU15ytAwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJTEeE71RyHnC1Wihi0+xmW3uoHIRntVPrY 5YMQGdMtUoM+TP0MokEl4/Hvqek+p8IlvyCKa+fry4viFSM5RsGp2AoK4aS/tilb DgBZAKPgRLm01DL6jY0KEOQQG+0Z/EBx5ffE5ntzwxNFOrcIGhHolcI3x9kKTyvd i63RXRZZl+uW881PVWSqADEHNIlCnwi5HHw9hGS+wu70TZ1FhjEaQV5RB/hPO4Wf 8UDN4N+hWAV30KnoxhA5tGfbeFzBBbRUG0zB3OpvOnwS6cq8K9/G/+4opuoxosU+ bh2HxTenyyiioC0CMddJ1Aw3NNXFYn2wDnjxdMcLui5SDWFJ1mo= -----END CERTIFICATE-----Generated at Sun Nov 15 08:38:00 2026 by rpki-client