$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: Nak792C3FZaC/KPsC64As8gsAdIVzGLag+PihnoLOYw= Subject key identifier: DF:13:51:61:6F:B6:A0:BB:AE:4D:22:2B:E3:33:B8:51:10:F5:E5:60 Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 64DB6EB01E1F83B280F4D6F46AAB143940055834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 02:22:09 +0000 Manifest this update: Sun 15 Nov 2026 02:17:09 +0000 Manifest next update: Mon 16 Nov 2026 03:11:09 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) 2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: nPbOLREllagTNoyVHo2B78eL0Gw3hVa3sASJJaqQKLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:db:6e:b0:1e:1f:83:b2:80:f4:d6:f4:6a:ab:14:39:40:05:58:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: Nov 15 02:17:09 2026 GMT Not After : Nov 16 03:11:09 2026 GMT Subject: CN=DF1351616FB6A0BBAE4D222BE333B85110F5E560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:79:a4:3d:a2:d7:7c:49:2a:28:c3:d9:ca: d6:ec:d6:71:71:ac:df:50:36:bf:69:9b:c4:42:a9: c8:c3:00:55:72:3c:53:9c:2e:72:43:d6:86:03:4b: c2:46:f7:3e:5d:c4:f7:53:78:3f:79:34:b0:79:2b: e0:33:af:e1:f1:7f:27:47:fb:2d:f6:f3:d6:bb:b7: 40:3c:3b:89:9d:4b:71:ec:0f:f1:07:b7:a4:0b:2b: b0:b5:ef:53:fe:fb:af:23:4f:7f:1c:e3:30:88:0b: 9c:40:69:d6:91:ff:47:c4:2e:dd:be:b9:50:69:7f: bb:7d:3c:96:60:7d:96:3c:98:01:22:3d:0d:a6:14: 8e:92:f3:90:5b:41:c7:06:49:4a:e5:e8:fa:f9:87: 09:4d:94:e7:7c:04:c4:1c:cd:da:71:a1:23:b5:66: bd:be:96:1e:07:e2:56:08:71:33:d2:c9:37:e5:fa: a3:db:4b:a7:7b:de:9d:14:39:02:c9:9a:fe:73:92: c0:c5:a8:8a:4f:ce:a8:ed:14:6a:36:d9:5a:99:ed: 1e:14:3f:86:a5:c9:0f:63:8c:a9:77:51:6d:86:a5: c9:01:85:78:58:2d:09:03:bd:41:d7:b5:7e:7a:82: dd:f5:24:dd:e5:38:50:59:4e:9a:52:74:da:50:a8: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:13:51:61:6F:B6:A0:BB:AE:4D:22:2B:E3:33:B8:51:10:F5:E5:60 X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d9:a0:95:66:71:0f:ba:73:df:30:df:79:e8:de:3c:19:ad: dc:ad:a5:6a:ea:d7:dd:8a:fe:67:d1:85:24:82:b6:5d:a0:06: 0d:6a:5f:db:43:61:17:ad:6e:4a:bf:16:4e:41:9d:0d:54:7c: 81:07:fc:80:21:3e:12:1e:c8:61:fb:9d:0a:6f:fd:79:6b:81: 6d:b2:4c:a8:fa:de:64:d7:11:34:49:72:39:0e:1f:61:51:3a: 80:9d:37:10:5e:99:26:77:a0:50:c1:98:dc:bb:df:f0:6c:f4: d2:8c:a9:57:29:9e:6e:dd:39:a5:0d:f6:68:03:e4:59:08:a6: 14:bb:c5:42:59:69:e4:31:e4:ff:ff:ed:47:8e:fe:77:86:97: de:58:95:2c:0a:cc:bd:03:bb:8e:a9:9f:4a:48:c6:9a:01:80: ad:1f:59:df:cd:45:e4:1a:9c:bb:a9:3c:c4:5f:35:30:a0:24: 59:5c:54:89:3c:64:af:77:54:c3:87:27:0e:04:3a:3f:38:23: 28:e0:e6:e9:a9:0d:81:dd:d2:3e:d8:9c:ab:e5:61:cd:36:37: 12:62:17:d0:f4:e7:5a:6a:7e:07:4d:e4:89:6c:df:57:1c:96: ed:34:0c:5f:f3:55:48:f4:aa:30:51:07:e2:67:e2:f4:05:a2: d3:ce:cd:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNtusB4fg7KA9Nb0aqsUOUAFWDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjExMTUwMjE3MDlaFw0yNjExMTYwMzExMDlaMDMxMTAvBgNV BAMTKERGMTM1MTYxNkZCNkEwQkJBRTREMjIyQkUzMzNCODUxMTBGNUU1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasnmkPaLXfEkqKMPZytbs1nFx rN9QNr9pm8RCqcjDAFVyPFOcLnJD1oYDS8JG9z5dxPdTeD95NLB5K+Azr+HxfydH +y3289a7t0A8O4mdS3HsD/EHt6QLK7C171P++68jT38c4zCIC5xAadaR/0fELt2+ uVBpf7t9PJZgfZY8mAEiPQ2mFI6S85BbQccGSUrl6Pr5hwlNlOd8BMQczdpxoSO1 Zr2+lh4H4lYIcTPSyTfl+qPbS6d73p0UOQLJmv5zksDFqIpPzqjtFGo22VqZ7R4U P4alyQ9jjKl3UW2GpckBhXhYLQkDvUHXtX56gt31JN3lOFBZTppSdNpQqNlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xNRYW+2oLuuTSIr4zO4URD15WAwHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjZoJVmcQ+6c98w33no3jwZrdytpWrq192K /mfRhSSCtl2gBg1qX9tDYRetbkq/Fk5BnQ1UfIEH/IAhPhIeyGH7nQpv/XlrgW2y TKj63mTXETRJcjkOH2FROoCdNxBemSZ3oFDBmNy73/Bs9NKMqVcpnm7dOaUN9mgD 5FkIphS7xUJZaeQx5P//7UeO/neGl95YlSwKzL0Du46pn0pIxpoBgK0fWd/NReQa nLupPMRfNTCgJFlcVIk8ZK93VMOHJw4EOj84Iyjg5umpDYHd0j7YnKvlYc02NxJi F9D051pqfgdN5Ils31cclu00DF/zVUj0qjBRB+Jn4vQFotPOzfY= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:22 2026 by rpki-client