$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json) Hash identifier: 3RgKYHiZ+Sfue5Nt/T4vCkB2aRPsMLEyImrWar4LLzs= Subject key identifier: 48:E3:7C:01:19:5E:9C:1A:EA:96:8D:C9:0D:4D:98:4B:38:0F:DB:F6 Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Certificate serial: 05B9F9582AA8FBB440A460203D6CC4F635288C4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 08:50:10 +0000 Manifest this update: Sun 15 Nov 2026 08:45:10 +0000 Manifest next update: Mon 16 Nov 2026 10:15:10 +0000 Files and hashes: 1: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: jZmSpRk/0KVDJKSwBc81O4GaQyhYOsDGNUM1XBeGsvE=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b9:f9:58:2a:a8:fb:b4:40:a4:60:20:3d:6c:c4:f6:35:28:8c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F Validity Not Before: Nov 15 08:45:10 2026 GMT Not After : Nov 16 10:15:10 2026 GMT Subject: CN=48E37C01195E9C1AEA968DC90D4D984B380FDBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:2d:c1:16:0c:ef:b1:cc:cc:46:d2:f2:f3: 59:71:2d:55:09:88:5a:72:f2:3f:9d:65:3a:fb:e2: ab:25:b8:4e:a6:85:15:b2:f5:e4:b9:a0:d4:0a:24: c2:a8:3b:4c:11:f2:59:d4:e4:1a:dd:2e:97:79:71: 8b:3c:8b:4b:c1:e6:30:9a:ce:80:da:f2:6a:a5:92: 9a:ed:db:6e:cb:b0:46:cc:34:7c:1a:4d:60:c5:37: b8:63:83:c9:4a:9c:86:d7:a2:50:da:66:4e:2f:b2: ef:5d:1c:a5:f4:7a:40:0a:18:20:7e:96:a7:4e:ab: 8f:a3:d3:76:ad:dd:0e:03:48:b2:70:e2:0f:e9:7f: 83:83:88:26:77:d0:ea:b5:22:ff:70:df:8d:cd:34: de:a3:72:de:fc:28:67:f8:62:9b:7a:ed:4d:73:6e: 08:10:e7:f8:2c:b8:25:0a:26:58:0d:a3:4a:df:9c: 6d:5f:9a:c3:52:e0:83:7f:a3:f0:19:b7:87:cd:27: b6:94:72:fd:ec:44:a3:3c:03:7d:fc:eb:e8:ed:3d: 9d:ab:e2:9c:d5:ea:6e:6c:24:18:57:4c:19:4c:a1: a0:02:33:b9:83:d0:02:1a:b0:24:93:c0:d7:ed:aa: 3d:97:2b:1a:23:f1:37:06:87:bc:a4:6e:ed:84:c8: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E3:7C:01:19:5E:9C:1A:EA:96:8D:C9:0D:4D:98:4B:38:0F:DB:F6 X509v3 Authority Key Identifier: keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3c:42:b8:d5:52:24:41:db:a6:ba:31:6f:22:a8:eb:a9:8e: 98:da:62:cc:93:72:fd:4d:7b:f3:f4:9e:e1:fc:9e:dd:dc:52: 35:68:18:04:37:c9:16:f0:6a:81:1e:6c:c2:67:0d:43:ec:90: 56:70:65:d1:84:38:2d:76:4b:6a:55:6e:5e:b4:2e:d5:b1:4e: 6f:63:b2:ab:98:7c:7e:d0:09:c7:9a:35:9c:f2:0c:1e:c3:d9: 7b:10:65:13:32:d2:8b:d4:d0:11:4c:85:af:9c:b6:79:83:56: 2d:27:c7:49:88:2c:50:01:3d:0e:df:65:21:78:a7:f4:3c:56: 61:5c:64:0b:37:bd:97:32:34:ff:58:8d:18:42:79:4f:f8:ba: b0:09:57:74:e4:6d:72:92:44:81:42:5a:cd:c1:20:3b:b3:84: 46:1a:15:4e:21:27:fb:58:e9:b2:84:d4:a3:1c:63:02:95:b5: 10:86:4c:f4:59:64:7a:68:7c:1b:a3:f2:35:3b:df:f4:b5:c3: 1c:5d:af:5b:17:3e:b3:e6:21:e6:15:06:e8:61:f4:fd:2d:c8: 98:4d:07:85:68:33:6f:0d:62:05:34:7c:e8:f1:61:85:38:73: 8c:71:4b:7e:99:d7:95:74:18:40:83:5a:36:25:79:96:93:38: be:0d:04:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbn5WCqo+7RApGAgPWzE9jUojE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG OTI2RkI3RjAeFw0yNjExMTUwODQ1MTBaFw0yNjExMTYxMDE1MTBaMDMxMTAvBgNV BAMTKDQ4RTM3QzAxMTk1RTlDMUFFQTk2OERDOTBENEQ5ODRCMzgwRkRCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53C3BFgzvsczMRtLy81lxLVUJ iFpy8j+dZTr74qsluE6mhRWy9eS5oNQKJMKoO0wR8lnU5BrdLpd5cYs8i0vB5jCa zoDa8mqlkprt227LsEbMNHwaTWDFN7hjg8lKnIbXolDaZk4vsu9dHKX0ekAKGCB+ lqdOq4+j03at3Q4DSLJw4g/pf4ODiCZ30Oq1Iv9w343NNN6jct78KGf4Ypt67U1z bggQ5/gsuCUKJlgNo0rfnG1fmsNS4IN/o/AZt4fNJ7aUcv3sRKM8A3386+jtPZ2r 4pzV6m5sJBhXTBlMoaACM7mD0AIasCSTwNftqj2XKxoj8TcGh7ykbu2EyMLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSON8ARlenBrqlo3JDU2YSzgP2/YwHwYDVR0j BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4 RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ8QrjVUiRB26a6MW8iqOupjpjaYsyTcv1N e/P0nuH8nt3cUjVoGAQ3yRbwaoEebMJnDUPskFZwZdGEOC12S2pVbl60LtWxTm9j squYfH7QCceaNZzyDB7D2XsQZRMy0ovU0BFMha+ctnmDVi0nx0mILFABPQ7fZSF4 p/Q8VmFcZAs3vZcyNP9YjRhCeU/4urAJV3TkbXKSRIFCWs3BIDuzhEYaFU4hJ/tY 6bKE1KMcYwKVtRCGTPRZZHpofBuj8jU73/S1wxxdr1sXPrPmIeYVBuhh9P0tyJhN B4VoM28NYgU0fOjxYYU4c4xxS36Z15V0GECDWjYleZaTOL4NBNk= -----END CERTIFICATE-----Generated at Sun Nov 15 20:55:18 2026 by rpki-client