$ rpki-client -vvvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json) Hash identifier: TjPk0Ud4EHHYHhoUoHqlaQXJ1pcLx3Lt8+TLc7b+o3w= Subject key identifier: 34:63:E2:36:D1:1F:94:DD:D8:78:EC:C1:D3:C3:E1:B7:F2:C8:DD:97 Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Certificate serial: 2420DAFB55FE12EE90A43E99D8D31B9A0969FFA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 04:11:05 +0000 Manifest this update: Tue 10 Nov 2026 04:06:05 +0000 Manifest next update: Wed 11 Nov 2026 04:48:05 +0000 Files and hashes: 1: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: wnrG+/mxlAhS60kl1uWpL+eoKvej2cpGG7s+1HeCwZw=) 2: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=) 3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:20:da:fb:55:fe:12:ee:90:a4:3e:99:d8:d3:1b:9a:09:69:ff:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Validity Not Before: Nov 10 04:06:05 2026 GMT Not After : Nov 11 04:48:05 2026 GMT Subject: CN=3463E236D11F94DDD878ECC1D3C3E1B7F2C8DD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:fd:7d:57:aa:c7:96:54:d9:90:b1:a6:13: 3c:90:46:02:9e:37:9a:71:2f:d5:08:b4:f2:42:d2: d7:81:3c:89:32:78:74:56:a8:6b:ef:22:1d:cb:15: 7e:19:7d:45:78:61:84:ae:b6:66:6e:87:b5:71:14: b6:20:22:ff:28:e7:63:4c:1e:63:68:3d:d4:ac:56: e2:6a:98:a2:f8:12:30:03:7c:ce:5c:e0:25:81:88: 50:c0:5f:49:ee:dd:87:c5:c3:7c:74:18:a4:cb:c5: 4a:fa:0e:12:f8:08:e9:af:e1:e8:36:7b:60:08:55: 95:dc:22:3b:f8:a9:44:ad:c8:c9:ef:57:9a:1a:ee: 6b:d4:ed:05:af:1a:f5:ac:42:02:b0:21:45:cf:c4: c7:d2:8a:7e:10:cb:bc:0c:32:61:19:b8:02:03:64: 8e:0a:0b:64:62:29:2a:48:04:65:12:37:de:fa:a9: d7:a3:4d:33:e2:c6:04:bf:35:b1:e9:9c:98:65:76: c7:12:d5:c0:31:be:c1:38:8b:21:8c:e2:90:af:91: c3:db:31:fc:1e:de:b5:0d:f4:42:4c:ab:e3:c7:ab: 55:c3:dc:6a:39:84:be:80:4a:90:1a:19:da:eb:87: 3d:e5:26:15:85:f7:e6:f8:12:90:3e:75:98:26:73: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:63:E2:36:D1:1F:94:DD:D8:78:EC:C1:D3:C3:E1:B7:F2:C8:DD:97 X509v3 Authority Key Identifier: keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:2a:97:5d:47:ab:18:b7:df:ed:3c:84:a3:13:36:06:90:ef: ef:ec:c5:e6:84:3d:b9:ba:67:f1:c1:3b:15:40:00:7d:a9:e9: 7c:1f:1b:5e:5b:2b:eb:39:0d:97:57:bd:b2:07:ca:80:ec:dd: a4:f0:97:0f:98:74:f9:8d:bf:5a:86:ce:33:b7:3c:12:f7:d1: b7:a1:41:74:38:a0:ec:d7:3d:be:c6:a5:31:bb:c2:ab:11:9a: 3d:01:7e:2d:90:e2:32:7a:70:b0:86:e8:ee:46:d3:e3:0d:6f: f9:24:b5:26:a0:85:f3:b5:fd:26:41:f9:55:ea:d8:1e:73:7a: 3e:b7:92:fa:10:3c:96:34:90:d7:d7:ca:95:23:f0:03:1c:56: 66:c4:72:22:46:88:ec:c5:6f:fc:b1:22:92:ab:a1:6c:4f:b7: e1:ab:8a:21:83:84:f3:7b:ad:30:5e:ef:ac:ad:61:37:36:57: 24:3f:f0:fe:95:53:41:37:e9:72:f2:13:1f:e3:be:12:ce:42: 4b:4e:5a:a9:be:f8:c7:d5:b3:15:8c:9d:36:11:75:7c:30:7e: 12:8f:bf:8f:10:84:f0:15:ce:a6:b2:35:54:3c:42:33:04:22: 75:40:0e:35:3b:f9:a0:65:3e:94:61:05:af:a5:d3:9f:6f:2d: ef:0b:74:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCDa+1X+Eu6QpD6Z2NMbmglp/6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QURE QjA2ODE4NzAeFw0yNjExMTAwNDA2MDVaFw0yNjExMTEwNDQ4MDVaMDMxMTAvBgNV BAMTKDM0NjNFMjM2RDExRjk0REREODc4RUNDMUQzQzNFMUI3RjJDOEREOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAP19V6rHllTZkLGmEzyQRgKe N5pxL9UItPJC0teBPIkyeHRWqGvvIh3LFX4ZfUV4YYSutmZuh7VxFLYgIv8o52NM HmNoPdSsVuJqmKL4EjADfM5c4CWBiFDAX0nu3YfFw3x0GKTLxUr6DhL4COmv4eg2 e2AIVZXcIjv4qUStyMnvV5oa7mvU7QWvGvWsQgKwIUXPxMfSin4Qy7wMMmEZuAID ZI4KC2RiKSpIBGUSN976qdejTTPixgS/NbHpnJhldscS1cAxvsE4iyGM4pCvkcPb Mfwe3rUN9EJMq+PHq1XD3Go5hL6ASpAaGdrrhz3lJhWF9+b4EpA+dZgmc5mzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGPiNtEflN3YeOzB08Pht/LI3ZcwHwYDVR0j BBgwFoAUnZLpPrFYDjzUD/NM+rMErdsGgYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY1ZDg4ZjEtYjljMC00ODVlLTkxNmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VC MTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QUREQjA2ODE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDkyRTkzRUIxNTgwRTNDRDQwRkYzNENGQUIzMDRBRERCMDY4 MTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0 QUREQjA2ODE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMql11Hqxi33+08hKMTNgaQ7+/sxeaEPbm6 Z/HBOxVAAH2p6XwfG15bK+s5DZdXvbIHyoDs3aTwlw+YdPmNv1qGzjO3PBL30beh QXQ4oOzXPb7GpTG7wqsRmj0Bfi2Q4jJ6cLCG6O5G0+MNb/kktSaghfO1/SZB+VXq 2B5zej63kvoQPJY0kNfXypUj8AMcVmbEciJGiOzFb/yxIpKroWxPt+GriiGDhPN7 rTBe76ytYTc2VyQ/8P6VU0E36XLyEx/jvhLOQktOWqm++MfVsxWMnTYRdXwwfhKP v48QhPAVzqayNVQ8QjMEInVADjU7+aBlPpRhBa+l059vLe8LdMY= -----END CERTIFICATE-----Generated at Tue Nov 10 19:33:00 2026 by rpki-client