$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: ZDO99k5MGQnZRlgVmozdXFliBmlbY8NkLwlpEu7+6nc= Subject key identifier: A9:3C:5A:C1:CA:6A:01:E9:44:17:41:E0:06:91:30:05:B4:C7:6B:85 Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 6C5DE77BE491073EAD33794417D5D1078AE2FDB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 03:53:55 +0000 Manifest this update: Sun 15 Nov 2026 03:48:55 +0000 Manifest next update: Mon 16 Nov 2026 05:35:55 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) 3: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: 6rtkZUYKEpO8YjEmN6SfOrEUeXVnwIfJTJevU+wxymk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5d:e7:7b:e4:91:07:3e:ad:33:79:44:17:d5:d1:07:8a:e2:fd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Nov 15 03:48:55 2026 GMT Not After : Nov 16 05:35:55 2026 GMT Subject: CN=A93C5AC1CA6A01E9441741E006913005B4C76B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:92:db:c8:c5:ee:a1:4e:74:c0:e1:0a:b0: 29:70:8d:2d:50:2d:71:78:16:ae:3b:1c:eb:6f:0f: 1b:5e:55:a6:15:44:89:05:92:f9:ea:45:f5:d6:c1: 0e:26:2f:25:d8:99:2c:25:bf:dc:57:a7:36:7d:4e: 5b:d4:e6:49:de:32:e9:ff:0f:79:51:92:3a:ab:01: 1e:e8:8e:8e:c2:7f:79:ce:2e:6f:5b:6c:c9:6a:69: 1b:27:f9:06:0c:47:f8:99:94:14:d3:ec:31:21:f5: 82:d6:04:11:d9:2b:e0:9e:da:5e:b3:4c:c5:4e:6f: fd:af:94:db:d9:38:fb:1b:ba:8a:a8:c0:fe:c3:5e: 86:ee:4f:59:8b:cf:8d:8e:50:81:39:20:4b:2d:75: ed:56:87:bf:21:21:1f:e6:cb:c1:4b:92:4b:9f:c9: e5:e6:6e:a4:63:76:04:d3:92:d4:48:4b:1f:c0:1c: 13:9e:77:f3:16:71:92:8f:ec:2d:f8:6b:39:60:e6: 5b:c4:82:a0:09:5b:d6:49:bf:39:0d:a2:6e:c4:52: d9:80:db:48:9a:47:c2:b9:56:f5:2b:10:1d:1f:6b: f4:b2:8b:2f:7e:e6:50:33:c6:0a:02:47:e7:f2:3a: 7a:7d:d9:74:b3:be:3c:b0:cf:55:f3:ea:c5:5d:04: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3C:5A:C1:CA:6A:01:E9:44:17:41:E0:06:91:30:05:B4:C7:6B:85 X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e1:a6:9b:91:59:5b:c4:4a:ce:91:4d:38:18:4b:e5:5f:85: ac:1e:29:e6:c0:55:2f:86:93:9f:d2:27:0c:0d:73:3a:a5:3a: 6e:e6:69:25:a4:5a:b2:06:ce:a5:f4:ae:48:a1:0d:89:f1:3a: ff:ae:85:0f:42:05:e7:cc:39:d1:ef:74:92:e9:c9:26:84:08: 89:f7:7c:86:59:cf:04:8d:90:90:b8:70:59:ef:d5:97:ed:63: 9f:c6:b1:b7:22:1d:f4:59:93:93:58:9d:a1:48:e1:a7:6c:1a: fc:a4:94:41:91:dc:6a:80:8b:ca:f8:cb:15:f2:bf:ef:d2:d2: cb:95:10:a7:a7:52:98:d3:7b:e3:2e:3c:db:c1:1f:99:90:b8: 98:29:f9:c4:55:01:9e:df:05:7a:be:e4:50:7a:4b:9a:84:ef: ea:d4:ec:13:fa:69:07:30:26:c2:33:ec:90:f6:70:49:d0:19: 1a:3c:fe:da:ed:11:2e:6d:24:9b:7f:b1:e7:46:54:da:ad:70: 99:fc:6b:ee:f2:61:0f:37:48:33:9d:a2:30:fa:5a:89:dd:21: 84:0f:4b:a4:6a:88:98:e0:2a:15:99:49:51:bf:2b:f0:9e:f5: dc:b6:22:25:e6:c0:3a:1b:8d:10:73:4a:71:46:56:4d:4f:cd: 98:1e:3c:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbF3ne+SRBz6tM3lEF9XRB4ri/bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjExMTUwMzQ4NTVaFw0yNjExMTYwNTM1NTVaMDMxMTAvBgNV BAMTKEE5M0M1QUMxQ0E2QTAxRTk0NDE3NDFFMDA2OTEzMDA1QjRDNzZCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4JLbyMXuoU50wOEKsClwjS1Q LXF4Fq47HOtvDxteVaYVRIkFkvnqRfXWwQ4mLyXYmSwlv9xXpzZ9TlvU5kneMun/ D3lRkjqrAR7ojo7Cf3nOLm9bbMlqaRsn+QYMR/iZlBTT7DEh9YLWBBHZK+Ce2l6z TMVOb/2vlNvZOPsbuoqowP7DXobuT1mLz42OUIE5IEstde1Wh78hIR/my8FLkkuf yeXmbqRjdgTTktRISx/AHBOed/MWcZKP7C34azlg5lvEgqAJW9ZJvzkNom7EUtmA 20iaR8K5VvUrEB0fa/Syiy9+5lAzxgoCR+fyOnp92XSzvjywz1Xz6sVdBLpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTxawcpqAelEF0HgBpEwBbTHa4UwHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvhppuRWVvESs6RTTgYS+VfhaweKebAVS+G k5/SJwwNczqlOm7maSWkWrIGzqX0rkihDYnxOv+uhQ9CBefMOdHvdJLpySaECIn3 fIZZzwSNkJC4cFnv1ZftY5/GsbciHfRZk5NYnaFI4adsGvyklEGR3GqAi8r4yxXy v+/S0suVEKenUpjTe+MuPNvBH5mQuJgp+cRVAZ7fBXq+5FB6S5qE7+rU7BP6aQcw JsIz7JD2cEnQGRo8/trtES5tJJt/sedGVNqtcJn8a+7yYQ83SDOdojD6WondIYQP S6RqiJjgKhWZSVG/K/Ce9dy2IiXmwDobjRBzSnFGVk1PzZgePMs= -----END CERTIFICATE-----Generated at Sun Nov 15 20:56:30 2026 by rpki-client