$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft File: A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft (raw, json) Hash identifier: GXFjjuCw6m6niZwQHajEZ2GsDb97v8TNmmcC9nFdUbw= Subject key identifier: 17:A3:2C:14:9E:A3:39:23:4F:39:C6:68:D4:21:E3:D7:8F:BB:E9:8A Authority key identifier: A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF Certificate issuer: /CN=A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF Certificate serial: 1F16AE182820E058A34EF29B41BB291C856C7F86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft Manifest number: FF Signing time: Mon 09 Nov 2026 06:03:03 +0000 Manifest this update: Mon 09 Nov 2026 05:58:03 +0000 Manifest next update: Tue 10 Nov 2026 09:34:03 +0000 Files and hashes: 1: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: BJIV0M1LieiEIXkjZ4xndCN7SzyVPyBnaXnNbSG/tf8=) 2: A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl (hash: IpBM8NzuTM1irQmtbtd/Kp980VVcynWoUR/77mOXdcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:16:ae:18:28:20:e0:58:a3:4e:f2:9b:41:bb:29:1c:85:6c:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF Validity Not Before: Nov 9 05:58:03 2026 GMT Not After : Nov 10 09:34:03 2026 GMT Subject: CN=17A32C149EA339234F39C668D421E3D78FBBE98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:f6:8b:ca:08:2f:86:f1:80:66:37:c9:b5: 3c:f9:5e:1e:9b:23:ef:a5:eb:5a:62:b6:b4:2b:ca: 4b:4f:7f:81:24:34:69:ca:c6:27:87:90:7d:21:a4: 47:9f:e0:e7:9b:55:8d:5a:7a:8f:01:dd:3a:16:27: 88:00:11:4b:58:0a:c2:e0:7a:e8:f1:4f:e6:34:81: a0:f1:34:c8:29:6b:f0:59:a6:07:43:6d:8d:cd:5a: d3:13:ea:ad:e9:72:c5:30:fa:51:b7:c9:fa:2b:01: 2b:e2:39:6b:46:99:2f:63:93:5b:ed:cf:c9:9f:c3: 4a:52:03:41:29:63:cf:7f:2d:e1:0e:16:0e:03:1f: 5c:d7:31:85:d4:24:dc:95:51:c7:c2:a5:75:55:8a: 9f:33:4c:de:f7:ed:0a:01:a5:42:e3:97:68:99:b9: 99:da:ac:2a:2a:4c:88:8a:0b:33:0f:cd:0a:9d:2f: 8c:55:1b:70:44:81:d1:75:c7:ae:51:d2:c3:36:16: 2a:80:ee:8f:b9:eb:5d:96:52:e1:92:3a:eb:08:3c: ec:bc:c9:fb:54:4c:f4:42:d9:c6:79:b9:5e:bf:d5: 5a:f5:55:fd:5d:45:cb:9a:24:cb:e8:43:12:00:6b: 8f:a0:f3:c0:b7:b7:a1:25:f9:d3:c8:bf:a0:1b:3f: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:2C:14:9E:A3:39:23:4F:39:C6:68:D4:21:E3:D7:8F:BB:E9:8A X509v3 Authority Key Identifier: keyid:A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6e:42:c6:51:fb:6a:b8:04:9e:1e:73:1a:27:4e:b5:fe:52: 7b:43:05:5c:93:53:82:91:18:d2:18:9b:93:62:e4:7f:db:96: a3:85:84:6f:6f:5a:25:9d:78:c2:f9:7e:ad:bd:19:3f:8c:69: 65:e4:10:8f:6b:83:d3:63:3b:78:d6:91:b8:db:79:95:65:af: 66:36:65:0f:71:d6:40:5d:a2:5d:3f:98:f6:63:ba:ba:4d:d9: 05:aa:bd:16:07:88:b1:3b:6b:88:b6:ea:2f:1c:de:f9:69:92: ac:7c:db:a9:7b:9c:02:f1:2c:59:b5:f4:9f:a9:3a:24:af:b3: f4:31:f7:f9:e1:80:4a:5c:38:5d:eb:fc:55:59:f0:35:b2:c2: f6:25:0c:c3:ab:ca:b1:7e:23:00:3b:b1:f5:3f:4b:b9:e3:1f: 33:81:0c:8c:d4:70:6a:46:66:c7:56:94:d1:9e:0a:a6:36:30: a4:95:ab:28:3c:08:98:a6:c8:fa:78:68:85:a6:b7:b8:89:16: 97:01:b2:74:99:23:30:67:18:57:6c:de:fd:c0:cd:29:5c:e6: 70:c7:77:50:d5:08:92:87:9d:a1:b4:d6:b5:83:5a:5b:6e:ab: 3f:18:a8:e5:a3:d2:d0:f1:d5:c7:ce:8a:13:e9:f5:e6:54:fd: 8e:d6:73:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxauGCgg4FijTvKbQbspHIVsf4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQUYwMEVDQUFBMzU5MjkwMjBENkY5RjdGQUEyNjcz QjFCNDdBRjAeFw0yNjExMDkwNTU4MDNaFw0yNjExMTAwOTM0MDNaMDMxMTAvBgNV BAMTKDE3QTMyQzE0OUVBMzM5MjM0RjM5QzY2OEQ0MjFFM0Q3OEZCQkU5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTfaLyggvhvGAZjfJtTz5Xh6b I++l61pitrQryktPf4EkNGnKxieHkH0hpEef4OebVY1aeo8B3ToWJ4gAEUtYCsLg eujxT+Y0gaDxNMgpa/BZpgdDbY3NWtMT6q3pcsUw+lG3yforASviOWtGmS9jk1vt z8mfw0pSA0EpY89/LeEOFg4DH1zXMYXUJNyVUcfCpXVVip8zTN737QoBpULjl2iZ uZnarCoqTIiKCzMPzQqdL4xVG3BEgdF1x65R0sM2FiqA7o+5612WUuGSOusIPOy8 yftUTPRC2cZ5uV6/1Vr1Vf1dRcuaJMvoQxIAa4+g88C3t6El+dPIv6AbP+gbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6MsFJ6jOSNPOcZo1CHj14+76YowHwYDVR0j BBgwFoAUpjrwDsqqNZKQINb59/qiZzsbR68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NjE4M2MtZDllZi00YzMzLWJlOTktZTg0YmVkYjEwYjY4LzAvQTYzQUYwMEVD QUFBMzU5MjkwMjBENkY5RjdGQUEyNjczQjFCNDdBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjNBRjAwRUNBQUEzNTkyOTAyMEQ2RjlGN0ZBQTI2NzNCMUI0 N0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvQTYzQUYwMEVDQUFBMzU5MjkwMjBENkY5RjdGQUEy NjczQjFCNDdBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJluQsZR+2q4BJ4ecxonTrX+UntDBVyTU4KR GNIYm5Ni5H/blqOFhG9vWiWdeML5fq29GT+MaWXkEI9rg9NjO3jWkbjbeZVlr2Y2 ZQ9x1kBdol0/mPZjurpN2QWqvRYHiLE7a4i26i8c3vlpkqx826l7nALxLFm19J+p OiSvs/Qx9/nhgEpcOF3r/FVZ8DWywvYlDMOryrF+IwA7sfU/S7njHzOBDIzUcGpG ZsdWlNGeCqY2MKSVqyg8CJimyPp4aIWmt7iJFpcBsnSZIzBnGFds3v3AzSlc5nDH d1DVCJKHnaG01rWDWltuqz8YqOWj0tDx1cfOihPp9eZU/Y7WcwU= -----END CERTIFICATE-----Generated at Mon Nov 9 22:28:39 2026 by rpki-client