$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json) Hash identifier: Hi0Wv5D/KqRFwRdqlksMZmsTgsYloAKn56QBaZeL+c4= Subject key identifier: 1F:0F:E7:67:8D:E4:F3:17:92:31:62:54:92:DC:93:75:8E:A4:06:F9 Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Certificate serial: 3EF47F41E48F1C0BFF1D81F29631AF4ABE8C8E5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 18:08:21 +0000 Manifest this update: Mon 09 Nov 2026 18:03:21 +0000 Manifest next update: Tue 10 Nov 2026 18:38:21 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=) 2: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: bq6TxN6sJ/WmFq/yx0Q6e53homUyhBStFWMUyLo4JbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 18:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f4:7f:41:e4:8f:1c:0b:ff:1d:81:f2:96:31:af:4a:be:8c:8e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Validity Not Before: Nov 9 18:03:21 2026 GMT Not After : Nov 10 18:38:21 2026 GMT Subject: CN=1F0FE7678DE4F3179231625492DC93758EA406F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6f:1f:f9:22:44:d3:68:43:3f:1f:55:a0:a1: 05:7a:7f:1d:e1:b6:90:db:be:fd:32:64:8a:22:ca: aa:fd:54:fe:a5:cf:65:39:d5:fa:a9:bb:ad:1f:e7: 3a:74:a8:62:ee:25:b5:c7:17:41:4b:dc:e8:25:11: da:cd:4e:dc:a4:88:18:d9:45:9a:b2:94:27:3d:7d: 48:36:3c:9f:51:94:dc:c2:03:f2:02:07:27:d4:b1: a5:d1:cb:c6:df:cc:b6:a7:b8:69:23:ff:b0:d8:90: 21:b9:83:e0:fd:ba:3e:59:39:2a:51:d5:35:4f:f1: 1a:d3:80:b3:f0:67:9f:8b:f9:24:57:fd:16:a1:f2: 67:27:46:b2:d7:10:01:f5:c4:12:de:e6:c3:e3:3c: 15:ce:ee:a7:04:51:e8:8a:84:fe:07:53:98:68:4d: 84:68:3b:56:89:2e:fa:ef:09:f1:d3:d8:33:63:d9: dc:58:a0:71:72:2b:18:a6:43:2b:42:a9:67:bc:f1: 54:56:f0:e1:10:fa:1e:cc:ca:bd:bc:b7:95:c2:01: 66:98:82:b1:a4:fc:fc:99:dc:12:dc:fe:7e:3f:37: 28:c9:91:3e:93:01:b3:ee:b3:8e:8a:44:a9:41:53: 92:b0:42:df:c3:b1:ff:62:59:43:7d:89:2a:bb:20: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0F:E7:67:8D:E4:F3:17:92:31:62:54:92:DC:93:75:8E:A4:06:F9 X509v3 Authority Key Identifier: keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0b:cf:98:5d:44:bd:73:4c:a0:00:2a:bd:1b:91:ac:69:70: 34:76:36:ee:e6:1b:ec:ca:0f:a3:00:2d:4b:8f:9d:9b:63:86: d8:8d:fe:3c:fc:7d:67:9a:ed:8c:ca:5a:f2:e1:43:4d:8c:ae: b2:19:f1:3e:71:0d:16:63:d1:69:49:b2:44:a3:1b:a7:35:97: ff:df:e0:96:4d:a5:a1:44:fe:da:1f:b8:b3:52:da:51:10:e8: d9:92:f9:bc:bb:f0:b8:54:6b:09:77:38:18:35:34:ba:b5:0c: 41:cf:9f:ca:90:4e:7d:d2:40:d8:9c:43:75:63:53:32:e9:fd: cb:1e:99:b8:09:e5:4b:7f:ab:30:f0:08:c0:07:2a:1d:a1:0f: ff:0c:12:f2:09:1c:a5:25:b9:05:5d:3b:c5:3f:69:52:a6:92: dc:89:0b:93:f4:9f:ca:b2:ec:e1:12:02:2e:3c:fc:7c:9a:84: d4:f6:df:26:82:53:d8:15:31:cd:28:9e:96:df:4d:ea:6a:d2: bd:6a:0c:23:e8:9d:e7:5b:b4:61:03:f6:a2:7c:1d:8f:2f:ff: 7b:9e:d9:06:c7:5d:41:78:c1:39:f5:7a:f6:e8:8a:ab:9c:68: 28:72:bf:75:55:6e:4d:73:a2:96:89:cc:8a:5d:ea:b7:69:b4: e0:8f:7c:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvR/QeSPHAv/HYHyljGvSr6MjlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5 QzMzNjgxNzAeFw0yNjExMDkxODAzMjFaFw0yNjExMTAxODM4MjFaMDMxMTAvBgNV BAMTKDFGMEZFNzY3OERFNEYzMTc5MjMxNjI1NDkyREM5Mzc1OEVBNDA2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbx/5IkTTaEM/H1WgoQV6fx3h tpDbvv0yZIoiyqr9VP6lz2U51fqpu60f5zp0qGLuJbXHF0FL3OglEdrNTtykiBjZ RZqylCc9fUg2PJ9RlNzCA/ICByfUsaXRy8bfzLanuGkj/7DYkCG5g+D9uj5ZOSpR 1TVP8RrTgLPwZ5+L+SRX/Rah8mcnRrLXEAH1xBLe5sPjPBXO7qcEUeiKhP4HU5ho TYRoO1aJLvrvCfHT2DNj2dxYoHFyKximQytCqWe88VRW8OEQ+h7Myr28t5XCAWaY grGk/PyZ3BLc/n4/NyjJkT6TAbPus46KRKlBU5KwQt/Dsf9iWUN9iSq7IB9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHw/nZ43k8xeSMWJUktyTdY6kBvkwHwYDVR0j BBgwFoAU4Jb+26/yrbc8c+fgmM5JS5wzaBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwOWNiYjktMWFhZC00YjFhLWJkNGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJB RkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5QzMzNjgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDk2RkVEQkFGRjJBREI3M0M3M0U3RTA5OENFNDk0QjlDMzM2 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5 NEI5QzMzNjgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABALz5hdRL1zTKAAKr0bkaxpcDR2Nu7mG+zK D6MALUuPnZtjhtiN/jz8fWea7YzKWvLhQ02MrrIZ8T5xDRZj0WlJskSjG6c1l//f 4JZNpaFE/tofuLNS2lEQ6NmS+by78LhUawl3OBg1NLq1DEHPn8qQTn3SQNicQ3Vj UzLp/csembgJ5Ut/qzDwCMAHKh2hD/8MEvIJHKUluQVdO8U/aVKmktyJC5P0n8qy 7OESAi48/HyahNT23yaCU9gVMc0onpbfTepq0r1qDCPonedbtGED9qJ8HY8v/3ue 2QbHXUF4wTn1evboiqucaChyv3VVbk1zopaJzIpd6rdptOCPfHU= -----END CERTIFICATE-----Generated at Tue Nov 10 03:44:57 2026 by rpki-client